last executing test programs: 18m22.654997388s ago: executing program 1 (id=1127): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$netlink(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000011cc0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001400)="f5ce29d368f8", 0x6}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) read(r2, &(0x7f0000000140)=""/156, 0x9c) r3 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) lseek(0xffffffffffffffff, 0x7fff, 0x1) 18m20.934442087s ago: executing program 1 (id=1130): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 18m20.293122044s ago: executing program 1 (id=1132): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@deltaction={0x1a0, 0x31, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3e}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1d}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x266}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x28}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1cf1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000804}, 0x24044095) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$kcm(0x29, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10ffff) ioprio_set$uid(0x3, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x40000) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') unshare(0x2a020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 18m18.676642162s ago: executing program 1 (id=1136): socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x0, 0x5, 0x0}) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x533e, &(0x7f0000000300)={0x0, 0x2ade, 0x4, 0x2, 0x28}, &(0x7f0000000140), &(0x7f0000000240)) io_uring_enter(r4, 0x29a, 0xb19, 0x2, &(0x7f0000000380)={[0x61]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r6, 0xc0844123, &(0x7f0000000280)=0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = gettid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) tkill(r8, 0x7) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{}, {0x0, 0x0, 0xf, 0x40, 0x0, 0x0, 0x7f, 0x5}, {0x10000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {}, {0x0, 0x1}, 0xddf8ffdb, 0x0, 0x0, 0x100124, 0x0, 0x0, 0x0, [0x4]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r10, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000005c0)=0x3f) 18m16.080036143s ago: executing program 1 (id=1150): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xd}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6}]}}}]}, 0x44}}, 0x4004000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18m13.847820623s ago: executing program 1 (id=1155): ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) mmap(&(0x7f000092e000/0x2000)=nil, 0x2000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xeaa22000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d0a0000000000000009"], &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000600000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x3, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$nl_route(r4, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 18m0.11132475s ago: executing program 2 (id=1191): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x400020, &(0x7f0000000440)="0f2224f2ad66b805000f00d866baa000b0dfee660f3a173edf660f3834f60f01796dd1fec74424007e6f0000c744240200000100c744249306002000000001142466ba2000b81cf10000ef", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17m58.651430632s ago: executing program 32 (id=1155): ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) mmap(&(0x7f000092e000/0x2000)=nil, 0x2000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xeaa22000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d0a0000000000000009"], &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000600000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x3, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$nl_route(r4, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 17m58.593374739s ago: executing program 2 (id=1193): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x400400, 0x45) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x400400, 0x45) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000120005010000010000000000050019000000000028001a00ac1e0001000000000000000000000000ffffffff00000000000000000000000002"], 0x40}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) 17m57.222401214s ago: executing program 2 (id=1201): socket$qrtr(0x2a, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x0, 0x0, 0x101}}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000300)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r3, &(0x7f0000000900)=[{&(0x7f00000001c0)="ff9d4084884c53bc2e62f128f35ce84665cf4de727462f2d0593a3f8353e5a2cbf29558f5e9abdbc70954c7509f4ea22b5e343252f506c736bf400ae", 0x3c}, {&(0x7f0000000000)="987aa19a2e0c51e9ddefe01dba3369a8ecbbee78da6ebb008c", 0x19}, {&(0x7f0000000980)="48c6a0f509da456bbdbd63899c062f021961f98566bc2ee069834aaf6ff437992a2675ad9494b63a59a0689f191655bdffe2725e692f24c35a30b5888cf4878454c036a9f35212bee0472ff13434db39170946b455a7e10a132d684832a36e222952c3de13fc5a875a9dff11f3d387bd39eaa3015b29ee8b47faa4fa6f1fefcd4c59e6adaa0c13261743bf30640771735f808d299dbf23a6fd", 0x99}, {&(0x7f0000000440)="7c1b7c70a5fafda445e92db744a65dab590dacb78d7054d06617782b38655eb3e2a5b1d12e45c22fa3101f8b476e351324ab714cd57d484110985574304965817b31366a2c", 0x45}, {&(0x7f0000003900)="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", 0x10ac}, {&(0x7f0000001900)="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", 0x1000}, {0x0}], 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x9, 0x4) ptrace(0x10, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x3, 0x0, 0x0, 0x7fc000fe}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50002103, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000020409500000000000000e4f9bc9281bd5a97dd0715b8765d94edc31b4c66435fce2c156117abd00ca82b0b6d36dadb782615e3855df8ded1d5ec231dcdb8496035a6424d81d15cbe43ca59cdde6f06a28191bd4f3f5b72abf384ed3fcdce3c85bb3bc9ee53013ac4a299977dccb8fbcdc6ad7cac911bbad16b6777630dbc5915f6f36de8ba28b09a123464c2b6f1820f225dbdd7f552371ebc28ee53d5e578aa47e8d02c5a1a81e5bb37316db9b21aa7add85844aeccf353200e6616"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_open_dev$loop(&(0x7f0000000300), 0x8b9, 0x80d81) ptrace$pokeuser(0x6, 0x0, 0x4358, 0x4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRES16=r5, @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40080c0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 17m55.754636134s ago: executing program 2 (id=1206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000e27f00000100000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdir(&(0x7f0000001c80)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, &(0x7f0000000240)) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x4, 0x7a05c, 0xfffa, 0x1, 0x201be320, 0x9}}, 0x50) fsync(r5) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) 17m54.650559017s ago: executing program 2 (id=1209): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="5e0484805b03e680490336800c00cd000000000001000000438c1eb7e9a70903ae7cb1e7f1ad7c93bb0804f21d9cd464f97daa727ba9d3ad42d3ffac5297486856da64d655d18779393350d417829d5dcd6c76664d3cf695defcc0dc4cbde6aa60214af842c657bbefe82495d2c41f686a87a7d26246bc6ea5928423862c7b5f35985f466385a5fa53b7a0d3b5d7c65dffb28b39a2d9b070585eb6cb9c7a5319a79f404d8766893df4c0cfa0049f280df07fa56fd3dcc6d7f19afe435e4a4e15a813885a624fa0df01cae16f8d7ecd239122949d731e92a00d5ce469cbcade0af6f4b98ec7ffe205a762ab568bc16db18c45dfc1f470bc10dcab89b96b13b7e4082300b10497b87c4e340e9dbc152167799e7670e649019e80ba309b366f12e7b7228617ed178d84fbf5ab6b409935b8b4b26f71509622a95dcdd855c15ab512a5a98d106c0f10a7ba0c44520c1b67516f8badc9efb0b08be262333e5f0481038c577347946f8aec94b3774fdc229f6d745eaefc6e88bc993ba536fdceb60b590e49d3dc1f375928ab6e08008300", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006980)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000006980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000900)=@ethtool_wolinfo={0x5, 0x9, 0x9, "188f1fcc6959"}}) fchown(r1, r4, r5) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 17m54.481366391s ago: executing program 2 (id=1210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) 17m38.702426552s ago: executing program 33 (id=1210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) 11m32.107122436s ago: executing program 4 (id=2396): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="183c000000000000000000000000000081121000f0ffffff9500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x169282, 0x19c) write$P9_RFSYNC(r5, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000500)=""/79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 11m28.178362426s ago: executing program 4 (id=2406): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_vlan\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x4000) waitid(0x1, 0x0, 0x0, 0x60000007, 0x0) r9 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000100)='asymmetric\x00', 0x0) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\\x00', r9) 11m24.750983639s ago: executing program 4 (id=2410): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$netlink(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000011cc0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001400)="f5ce29d368f8", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=[{0x10, 0x112, 0x401}, {0x10, 0x1, 0x2}], 0x20}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ff", 0x7) read(r2, &(0x7f0000000140)=""/156, 0x9c) r3 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) lseek(0xffffffffffffffff, 0x7fff, 0x1) 11m15.777316482s ago: executing program 4 (id=2434): read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0x40, 0x0, 0x2}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xffffffffd419f114, 0x2003) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000240)={r5, 0x0, 0x0, 0x7, 0x40, 0x4, 0x7, 0xaea8, 0x0, 0x8, 0x4, 0x6b}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000300), 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x1d}) 11m11.457185721s ago: executing program 4 (id=2443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) userfaultfd(0x80801) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e060c"], 0x9) stat(0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x68040) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"740e00", 0x0, 0x8, 0x2, 0x1000000, 0x0, "00001000429ebdf2e4139d31074000", '\x00', '\x00\x00\x00N', "10004800", ["efa8ffffffff02e33f000201", "01000000000000000000bdff", "345e417e7fffff31fff200"]}) 11m6.792504725s ago: executing program 4 (id=2447): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='net/snmp6\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10m50.527048955s ago: executing program 34 (id=2447): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='net/snmp6\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 7m51.628919098s ago: executing program 6 (id=2957): symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$smackfs_load(0xffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/153, 0x99) 7m51.388399354s ago: executing program 6 (id=2959): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 7m51.198384392s ago: executing program 6 (id=2960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000d9cc4b", @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000a0001007770616e3000000008002f00000000000500290000000000"], 0x30}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@empty}}, [@migrate={0x180, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@private, @in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@loopback, @in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@private1, @in=@dev, @in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}]}]}, 0x1d0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x200000f) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) fgetxattr(r5, &(0x7f0000000740)=@known='system.sockprotoname\x00', 0x0, 0x2) umount2(0x0, 0x2) dup(r3) 7m51.02786367s ago: executing program 6 (id=2961): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000007000000008b00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200040, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x9, 0x0}, 0x8) r6 = syz_open_dev$vcsn(&(0x7f0000000740), 0x1, 0x26482) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000033750000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183200000400000000000000000000004a7908000800000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300f94b00a662da64df000c0521ca2ec0f1000000b700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', r4, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x0, 0x18, 0x8}, 0x10, r5, r6, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) 7m50.817441545s ago: executing program 6 (id=2963): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x18, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1}) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 7m49.005485067s ago: executing program 6 (id=2970): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="000086dd02000a0000008d0000006eaf8c490f9806"], 0xfce) (fail_nth: 4) 7m48.718167181s ago: executing program 35 (id=2970): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="000086dd02000a0000008d0000006eaf8c490f9806"], 0xfce) (fail_nth: 4) 12.139112471s ago: executing program 7 (id=4353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@dev, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@initdev, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000001d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000380)=@newtaction={0x1944, 0x30, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{0x534, 0x1, [@m_nat={0x180, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0xffffffffffffffff, 0x9, 0xfffffff9}, @rand_addr=0x64010102, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4005, 0x8, 0x8, 0x8be0, 0x240}, @empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x5, 0x2, 0x6, 0xd}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0x5, 0xe}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, 0x0, 0x1}}]}, {0xb5, 0x6, "4bb7acbdb2f44e58cc9758c95d17546ac3f3b279f54efe6a37101f0423cc66334ef899d9357e580ba4ff8d4761159c2c75f1f90cd171bb5455ddee910e5a51e46c0012d7cf57ff81294a23ee9f58481aab94f2618b8bd9033640010cc393f9ac855cbc3b9721c2eaa94078a01a4c1866a589aceec4da96e14c24c60894a4923bb4703984704944db99b41be7c2fddbb0997b3eee94dd74849a1759f9c363fb8429d4e2dab926ca0b68417c0a8db1d5b7e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x104, 0x14, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x522}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "c5c534eddd25d72c5ab78d1b32496019"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}]}, {0x7b, 0x6, "ad17943e86a70a9c6becc4052cf4856bb15f4ae2383975435cb878a0f695f83616322267a21c542ba2fc97ca554465e17021ca26484d0df63b40fa5f1bb707cfe7e533db589419cb319718b498ccfd46b9e8f674b967bea76a8a377802b7b49e88372c33ae4ad663850de3666513a638696a4d893c9bf0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xac, 0x9, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x18000000, 0x2, 0x7, 0x6}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x81, 0x20000000, 0x2, 0x10001}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0xe92, 0x0, 0x8c8, 0x1}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff8c, 0xc, 0x8, 0x401, 0x400}, 0xb}}]}, {0xd, 0x6, "fb00a5a059b2f5c887"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x12c, 0x1d, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0xef, 0x6, "ff1877f9ee39883f52e744baa3973248ccfbabf6d78ab894d846139325e3441f1f5492419243d181d17a562e8a6ec9ca6e094b8cb7fa0085709bd746af7dbaaca7750eee22a3e74a02d50d5abb747fed3edd746472420b655d9451dacba02366926dbcb8d473c897e9c885eb1524eb0653f9af6a5e1db180f6932553688d4931624b44574c9cd075d9356b212cd540921556a7aec9cee98b987ce55edad744fb5acad28e714ca27eab63671cb748b2efc114f393d9d1c7f1fcf3c903fad3f52e9293551f78ad57b0545c6c25551b935562c991aef8ff42fd469f692e6e6dca81e89355e23ad313b2f0093a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xd4, 0x8, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0xab, 0x6, 0x80000001, 0x80}}]}, {0x8a, 0x6, "5c1a74d5b6a6b153a6ff59462021a882803a1ff7f5d2226696a317f946d9be4adc01710dc542df28ad833711b67a55b155b1b07218630ba88f1d318b471bc14d127b4577dcd72883a7af3feac89a8403787b2dd4f86a4a4c1592a2baa309fa2816be8898d00f93416e79bcd386dec582e2e2f77c87a311ec9e083fa0157d9490a2fb99bbc264"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x13fc, 0x1, [@m_ctinfo={0xe0, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x100, 0x7, 0xffffffffffffffff, 0x4870, 0x7}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xffff}]}, {0x5c, 0x6, "81338a1ab56685b5f7aa3ad91d8fcbae7cc73b50b0a9f31b8c829d6e745536c64c87b9c7e1c55437933f796abfa998145052d2974ba770e68db44e3add9069d5107faec30b6eb2a8005e73787dc2bfff860d84e6347e48c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x19c, 0x9, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x1, 0x8, 0xcc2e}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x20000000, 0x8, 0x6}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0xb79e, 0x3, 0x5f, 0x2}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x689, 0x0, 0x4, 0xdd38}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffff, 0x3, 0xde, 0xd}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x5, 0xe, 0xffff7fff}, 0x2, r12}}]}, {0xad, 0x6, "20f4053fd1037b146cdf3fdd207e2d1834c61371178806adefd350e3e21407ea12594c9db4c1203eb28279db1869864f0da3d1b2968be1c1a8b67fd7f728cbddeb7a35d154b1d6b579ef1575cebede2088ed88189477a5e746aa0f37b7bfc34e6c77de74ed5306e5610c556edc3740f8bf5786a94e12cefa04f74b6e43f8b7b53b0522bfe12781314f3daa9ac34aa551d4f26fd96a1d9d73da6b7dbf00aabf50dee364121bea57e1c6"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_csum={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff38, 0x6, 0x2, 0x7, 0x843}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x4, 0x1, 0xc5f0}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x3, 0xf23, 0x2}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x8, 0x7, 0x5}, 0xb}}]}, {0x22, 0x6, "faaa9f88843f95d71b7e680bb777e4ddf86577fda0616460940f88313149"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x1080, 0x19, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x840}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x889, 0x8, 0x764e, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x3c, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1944}, 0x1, 0x0, 0x0, 0x4042881}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80), r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16], 0x0) dup(r1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 11.094831627s ago: executing program 5 (id=4362): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000c80)=0x9) socket$netlink(0x10, 0x3, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x9a) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="85a2fa90e20700000000000086dd6000000000180000fe8000000000000000000000000000bbff020000000000000000000000000001860090"], 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @local}, &(0x7f00000004c0)=0xc) setresgid(r6, r6, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) 9.272421607s ago: executing program 8 (id=4365): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x3, 0x80000001, 0x6, 0x0, 0x1, 0xa, 0x7fd}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f0000001080)=""/4084, 0xff4}], 0x1, 0xe836, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r9) r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r11, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000100)="62052800590500000000042f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e2473", 0x32}], 0x1}, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r13, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r14 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x84, &(0x7f0000000140)={r15, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2}, &(0x7f0000000200)=0x90) 9.203534784s ago: executing program 5 (id=4366): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$smackfs_access(0xffffffffffffffff, &(0x7f0000000300)={'/dev/cpu/#/msr\x00', 0x20, 'tracefs\x00', 0x20, 'rtb'}, 0x1d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000380)="67660f0125fe66baf80cb8e4b69a81ef45db0eb000ee660f3882332641adc4a1b96af52642d35efcc4c17c10bf0000010048b808000000000000000f23d00f21f8353000000a0f23f88f69409326360f01cf", 0x52}], 0x1, 0x23, 0x0, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000400)="666f743fe440464e3df332716db9ad69f791aeb90b1f1664abb5142f2ef50f4cae1534a00e278daac38ccbae82408d4a2b71f8e77a382827bba2adaa2867ad2c4bed605c303dd15a6e4d24b78ab50305a90d107f5c9c16d378c48e54fd2fce9632481b9831607730c69bf2eafe8c14b6db05cf4b83379758a8130457de0b9d00a33fbdf63731b9e4547c596ec3657ae74f01d6efcdc58b22b59a35d098195d40dacce679978d0a28279450022b4e12ef43a84a386c76cc01dc725c887681a6077529bd0e8c764e3a2e34a030a0489659e0", 0xd1}, {&(0x7f0000000080)="18a03f6b82316ac3104c2508c0362517c24129d2d9cd7e9de62fe7", 0x1b}, {&(0x7f0000000500)="0a68e9fe4ae156ec3f7b667b42464d31e1f9fb98993c716bd470ffddf9a5a6947c4da68863e4c90992e7e9c63b1214864ff047f82139a5b5c363e64b8c6721709e09bedc08e7fe1613c2e66ae08528ac1e698c1e013e29554aac535f11be115ed4ceeb75f9192256839657ae133820c9bb928d9df2d57c7f751a9eb5263104af9732b11f64fe4ac26680713da7dc9e0c56587ceee55a2ad19a2c9a11236e711575aee8c70b", 0xa5}, {&(0x7f00000000c0)='}', 0x1}, {&(0x7f0000001080)="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", 0x1000}], 0x5, 0x6, 0x2000000) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x14000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}, 0x1c, 0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) 8.583612073s ago: executing program 7 (id=4368): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/access\x00', 0x2, 0x0) write$smackfs_access(r1, &(0x7f0000000300)={'/dev/cpu/#/msr\x00', 0x20, 'tracefs\x00', 0x20, 'rtb'}, 0x1d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000380)="67660f0125fe66baf80cb8e4b69a81ef45db0eb000ee660f3882332641adc4a1b96af52642d35efcc4c17c10bf0000010048b808000000000000000f23d00f21f8353000000a0f23f88f69409326360f01cf", 0x52}], 0x1, 0x23, 0x0, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000400)="666f743fe440464e3df332716db9ad69f791aeb90b1f1664abb5142f2ef50f4cae1534a00e278daac38ccbae82408d4a2b71f8e77a382827bba2adaa2867ad2c4bed605c303dd15a6e4d24b78ab50305a90d107f5c9c16d378c48e54fd2fce9632481b9831607730c69bf2eafe8c14b6db05cf4b83379758a8130457de0b9d00a33fbdf63731b9e4547c596ec3657ae74f01d6efcdc58b22b59a35d098195d40dacce679978d0a28279450022b4e12ef43a84a386c76cc01dc725c887681a6077529bd0e8c764e3a2e34a030a0489659e0", 0xd1}, {&(0x7f0000000080)="18a03f6b82316ac3104c2508c0362517c24129d2d9cd7e9de62fe7", 0x1b}, {&(0x7f0000000500)="0a68e9fe4ae156ec3f7b667b42464d31e1f9fb98993c716bd470ffddf9a5a6947c4da68863e4c90992e7e9c63b1214864ff047f82139a5b5c363e64b8c6721709e09bedc08e7fe1613c2e66ae08528ac1e698c1e013e29554aac535f11be115ed4ceeb75f9192256839657ae133820c9bb928d9df2d57c7f751a9eb5263104af9732b11f64fe4ac26680713da7dc9e0c56587ceee55a2ad19a2c9a11236e711575aee8c70b", 0xa5}, {&(0x7f00000000c0)='}', 0x1}, {&(0x7f0000001080)="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", 0x1000}], 0x5, 0x6, 0x2000000) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x14000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}, 0x1c, 0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) 8.513302188s ago: executing program 8 (id=4369): io_setup(0x3ff, &(0x7f00000000c0)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80e85411, 0xfffffffffffffffe) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f00000002c0)=0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = fspick(r5, &(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getresuid(&(0x7f0000000300), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x4040c, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=user,version=9p2000.L,audit,appraise,uid=', @ANYRESDEC=r7, @ANYBLOB="2c7063723d30303030303030303030303030303030303034372c686173682c61707072616973652c6673757569643d37360037623236632d316254352d356238312d316564342d65390034366400312c6673757569643d6533340031a435362d396662362d623163382d66367a382d003562c2643137352c666f776e65723e", @ANYRESDEC=r8, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x14010, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cache_mmap}, {@directio}, {@access_any}, {@fscache}, {@fscache}, {@cache_mmap}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, ':%}],*!{H'}}, {@loose}], [{@uid_lt={'uid<', r4}}, {@euid_eq={'euid', 0x3d, r8}}, {@permit_directio}, {@measure}, {@uid_lt={'uid<', 0xee01}}]}}) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315559, 0x140, 0x0, 0x0, @stepwise}) 8.409335697s ago: executing program 7 (id=4372): syz_open_dev$amidi(&(0x7f0000001480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000070100f821200100000000325b38", @ANYRES32=0x0, @ANYBLOB="020000000080000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffde1, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, 0x0, 0x20008840) 8.173299449s ago: executing program 5 (id=4373): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x32314742}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800400028004000780040001"], 0xe8}, 0x1, 0x0, 0x0, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000110001000000009d9aed2a20fb6a7d6cdb058f00070000009a27af898f4ab4562e8b3ac50c079159544f60390a21864f66dcc5465a395e83ee663cc9ea2d2790be7732a4a782596510e716c30fce7e3f7e5abae6b5d397646a75490e481b0a72515d30a497613251bd6644699bc34a5e6b416d27ad61cfbc1b5465dbd8016a3fd0f7d792c7cff9c7b569bc27e0", @ANYRESHEX=r3, @ANYBLOB="00000000000000001c001a8018000580"], 0x3c}}, 0x4800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000400)='ns\x00') readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 8.172704944s ago: executing program 3 (id=4374): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04230500c9"], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000000000070000000014000100fe"], 0x30}}, 0x800) 7.181739729s ago: executing program 8 (id=4375): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}}, 0x20000010) ioctl$SIOCSIFHWADDR(r0, 0x8946, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') writev(r5, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x627b, &(0x7f00000002c0)={0x0, 0x4ccb, 0x4, 0x0, 0x113, 0x0, r5}, &(0x7f00000000c0), &(0x7f00000003c0)) 6.603946034s ago: executing program 7 (id=4376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r5, 0x8208200) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r6, 0x0) 6.258945122s ago: executing program 3 (id=4378): r0 = socket(0x11, 0xa, 0x8) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000140), 0x10, &(0x7f0000000080)={0x0}, 0x140, 0x0, 0x0, 0x40}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x4, 0x0, 0x6, 0x2, 0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 4.68408709s ago: executing program 8 (id=4379): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x22, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x6) ioctl$I2C_SMBUS(r1, 0x720, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) 4.603415245s ago: executing program 7 (id=4380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@dev, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@initdev, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000001d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000380)=@newtaction={0x1944, 0x30, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{0x534, 0x1, [@m_nat={0x180, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0xffffffffffffffff, 0x9, 0xfffffff9}, @rand_addr=0x64010102, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4005, 0x8, 0x8, 0x8be0, 0x240}, @empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x5, 0x2, 0x6, 0xd}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0x5, 0xe}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, 0x0, 0x1}}]}, {0xb5, 0x6, "4bb7acbdb2f44e58cc9758c95d17546ac3f3b279f54efe6a37101f0423cc66334ef899d9357e580ba4ff8d4761159c2c75f1f90cd171bb5455ddee910e5a51e46c0012d7cf57ff81294a23ee9f58481aab94f2618b8bd9033640010cc393f9ac855cbc3b9721c2eaa94078a01a4c1866a589aceec4da96e14c24c60894a4923bb4703984704944db99b41be7c2fddbb0997b3eee94dd74849a1759f9c363fb8429d4e2dab926ca0b68417c0a8db1d5b7e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x104, 0x14, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x522}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "c5c534eddd25d72c5ab78d1b32496019"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}]}, {0x7b, 0x6, "ad17943e86a70a9c6becc4052cf4856bb15f4ae2383975435cb878a0f695f83616322267a21c542ba2fc97ca554465e17021ca26484d0df63b40fa5f1bb707cfe7e533db589419cb319718b498ccfd46b9e8f674b967bea76a8a377802b7b49e88372c33ae4ad663850de3666513a638696a4d893c9bf0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xac, 0x9, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x18000000, 0x2, 0x7, 0x6}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x81, 0x20000000, 0x2, 0x10001}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0xe92, 0x0, 0x8c8, 0x1}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff8c, 0xc, 0x8, 0x401, 0x400}, 0xb}}]}, {0xd, 0x6, "fb00a5a059b2f5c887"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x12c, 0x1d, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0xef, 0x6, "ff1877f9ee39883f52e744baa3973248ccfbabf6d78ab894d846139325e3441f1f5492419243d181d17a562e8a6ec9ca6e094b8cb7fa0085709bd746af7dbaaca7750eee22a3e74a02d50d5abb747fed3edd746472420b655d9451dacba02366926dbcb8d473c897e9c885eb1524eb0653f9af6a5e1db180f6932553688d4931624b44574c9cd075d9356b212cd540921556a7aec9cee98b987ce55edad744fb5acad28e714ca27eab63671cb748b2efc114f393d9d1c7f1fcf3c903fad3f52e9293551f78ad57b0545c6c25551b935562c991aef8ff42fd469f692e6e6dca81e89355e23ad313b2f0093a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xd4, 0x8, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0xab, 0x6, 0x80000001, 0x80}}]}, {0x8a, 0x6, "5c1a74d5b6a6b153a6ff59462021a882803a1ff7f5d2226696a317f946d9be4adc01710dc542df28ad833711b67a55b155b1b07218630ba88f1d318b471bc14d127b4577dcd72883a7af3feac89a8403787b2dd4f86a4a4c1592a2baa309fa2816be8898d00f93416e79bcd386dec582e2e2f77c87a311ec9e083fa0157d9490a2fb99bbc264"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x13fc, 0x1, [@m_ctinfo={0xe0, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x100, 0x7, 0xffffffffffffffff, 0x4870, 0x7}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xffff}]}, {0x5c, 0x6, "81338a1ab56685b5f7aa3ad91d8fcbae7cc73b50b0a9f31b8c829d6e745536c64c87b9c7e1c55437933f796abfa998145052d2974ba770e68db44e3add9069d5107faec30b6eb2a8005e73787dc2bfff860d84e6347e48c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x19c, 0x9, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x1, 0x8, 0xcc2e}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x20000000, 0x8, 0x6}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0xb79e, 0x3, 0x5f, 0x2}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x689, 0x0, 0x4, 0xdd38}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffff, 0x3, 0xde, 0xd}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x5, 0xe, 0xffff7fff}, 0x2, r12}}]}, {0xad, 0x6, "20f4053fd1037b146cdf3fdd207e2d1834c61371178806adefd350e3e21407ea12594c9db4c1203eb28279db1869864f0da3d1b2968be1c1a8b67fd7f728cbddeb7a35d154b1d6b579ef1575cebede2088ed88189477a5e746aa0f37b7bfc34e6c77de74ed5306e5610c556edc3740f8bf5786a94e12cefa04f74b6e43f8b7b53b0522bfe12781314f3daa9ac34aa551d4f26fd96a1d9d73da6b7dbf00aabf50dee364121bea57e1c6"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_csum={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff38, 0x6, 0x2, 0x7, 0x843}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x4, 0x1, 0xc5f0}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x3, 0xf23, 0x2}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x8, 0x7, 0x5}, 0xb}}]}, {0x22, 0x6, "faaa9f88843f95d71b7e680bb777e4ddf86577fda0616460940f88313149"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x1080, 0x19, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x840}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x889, 0x8, 0x764e, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x3c, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1944}, 0x1, 0x0, 0x0, 0x4042881}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80), r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16], 0x0) dup(r1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 4.549043422s ago: executing program 5 (id=4381): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/access\x00', 0x2, 0x0) write$smackfs_access(r1, &(0x7f0000000300)={'/dev/cpu/#/msr\x00', 0x20, 'tracefs\x00', 0x20, 'rtb'}, 0x1d) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000380)="67660f0125fe66baf80cb8e4b69a81ef45db0eb000ee660f3882332641adc4a1b96af52642d35efcc4c17c10bf0000010048b808000000000000000f23d00f21f8353000000a0f23f88f69409326360f01cf", 0x52}], 0x1, 0x23, 0x0, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000400)="666f743fe440464e3df332716db9ad69f791aeb90b1f1664abb5142f2ef50f4cae1534a00e278daac38ccbae82408d4a2b71f8e77a382827bba2adaa2867ad2c4bed605c303dd15a6e4d24b78ab50305a90d107f5c9c16d378c48e54fd2fce9632481b9831607730c69bf2eafe8c14b6db05cf4b83379758a8130457de0b9d00a33fbdf63731b9e4547c596ec3657ae74f01d6efcdc58b22b59a35d098195d40dacce679978d0a28279450022b4e12ef43a84a386c76cc01dc725c887681a6077529bd0e8c764e3a2e34a030a0489659e0", 0xd1}, {&(0x7f0000000080)="18a03f6b82316ac3104c2508c0362517c24129d2d9cd7e9de62fe7", 0x1b}, {&(0x7f0000000500)="0a68e9fe4ae156ec3f7b667b42464d31e1f9fb98993c716bd470ffddf9a5a6947c4da68863e4c90992e7e9c63b1214864ff047f82139a5b5c363e64b8c6721709e09bedc08e7fe1613c2e66ae08528ac1e698c1e013e29554aac535f11be115ed4ceeb75f9192256839657ae133820c9bb928d9df2d57c7f751a9eb5263104af9732b11f64fe4ac26680713da7dc9e0c56587ceee55a2ad19a2c9a11236e711575aee8c70b", 0xa5}, {&(0x7f00000000c0)='}', 0x1}, {&(0x7f0000001080)="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", 0x1000}], 0x5, 0x6, 0x2000000) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x14000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}, 0x1c, 0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 4.494208028s ago: executing program 3 (id=4382): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/access\x00', 0x2, 0x0) write$smackfs_access(r0, &(0x7f0000000300)={'/dev/cpu/#/msr\x00', 0x20, 'tracefs\x00', 0x20, 'rtb'}, 0x1d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000380)="67660f0125fe66baf80cb8e4b69a81ef45db0eb000ee660f3882332641adc4a1b96af52642d35efcc4c17c10bf0000010048b808000000000000000f23d00f21f8353000000a0f23f88f69409326360f01cf", 0x52}], 0x1, 0x23, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000400)="666f743fe440464e3df332716db9ad69f791aeb90b1f1664abb5142f2ef50f4cae1534a00e278daac38ccbae82408d4a2b71f8e77a382827bba2adaa2867ad2c4bed605c303dd15a6e4d24b78ab50305a90d107f5c9c16d378c48e54fd2fce9632481b9831607730c69bf2eafe8c14b6db05cf4b83379758a8130457de0b9d00a33fbdf63731b9e4547c596ec3657ae74f01d6efcdc58b22b59a35d098195d40dacce679978d0a28279450022b4e12ef43a84a386c76cc01dc725c887681a6077529bd0e8c764e3a2e34a030a0489659e0", 0xd1}, {&(0x7f0000000080)="18a03f6b82316ac3104c2508c0362517c24129d2d9cd7e9de62fe7", 0x1b}, {&(0x7f0000000500)="0a68e9fe4ae156ec3f7b667b42464d31e1f9fb98993c716bd470ffddf9a5a6947c4da68863e4c90992e7e9c63b1214864ff047f82139a5b5c363e64b8c6721709e09bedc08e7fe1613c2e66ae08528ac1e698c1e013e29554aac535f11be115ed4ceeb75f9192256839657ae133820c9bb928d9df2d57c7f751a9eb5263104af9732b11f64fe4ac26680713da7dc9e0c56587ceee55a2ad19a2c9a11236e711575aee8c70b", 0xa5}, {&(0x7f00000000c0)='}', 0x1}, {&(0x7f0000001080)="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", 0x1000}], 0x5, 0x6, 0x2000000) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x14000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}, 0x1c, 0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) 3.805947607s ago: executing program 3 (id=4384): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11e, 0x1, 0x0, 0x20000000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0xf3, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x1, 0x86, 0xfb, "e2bb6bd7934027c95aab2174137c6a5413af64de80d532db1725cef8ceda9fdca08a7f0006039e63286e5d31f829de711ea7d96be7380812aef652f4bde304dd4ed4c9121389cb366b316aba4eda535e975de35e47e5d39caffe64514366a5f6f19eaa789e0d0b6183d3c914c1ce8639e82f11ce4811324ec00126723f1d8c98cdf4e92ac0d053fb081db99699ae8f14181da5ad8b4f970b35557f3fc2e3a26fb4954843813442facc45dee5cf2b7d192a02f6ba8317720d12572173fb494534a83a4ef9af15ed064b4af5f6092277c799c68ede689f760a4218de1ec24588d4a612"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) listen(r2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}]}}) mprotect(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x1000000) syz_usb_connect$uac1(0x0, 0x94, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582", @ANYBLOB="eb2e48"], 0x0) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000002040)="054b", 0x2}, {&(0x7f0000000240)="b90f72b929486c86692be88bcab3a4a031ac55426c1a2d7e022fa781a9ea9b24552adb0f4cc36b2305b84bd628a37c82a0a7d6334c694d5975019e2409ef046d136719e1acf49a0069c50181c3d200840910a2658831ac9a807723a1e4a36dfba7f227e531cf6b97565d06b799d88621303f5df136a0eb8aec3197bf86ba0fc060dcfaf0aa0eefa81192bbc8e2e2", 0x8e}, {&(0x7f0000000140)="e8061dfca6801cb9daced91c3b6d9e2e4cb0e2e635161961d8ef3de301cfb2f26eeece529b3e3e19f5ccac9d9c5052987df9bbb74fb13e5136808760ea1402e30cc779f43c79c6a9277ea3af814e7d90b9f59eb2766c16593b3ef5dc0a85749b7eaa4b09f1747db9dbf563c12f146132c6abe899793fef5a5b4fc277491c188a88a075aa45e52044d29c9b86e6e7171985c1648b0826c9563c2da1018e21cfd29c7a074991bd80029fa1c4b37d7726dba19b3771e169285700c90b9c", 0xbc}], 0x4) 3.298097615s ago: executing program 5 (id=4385): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$KVM_GET_MSRS(r1, 0xc0189436, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000002000000ffffff7f0300005c06a502d3", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000002000000010000000f00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x688000, 0x0) sendmmsg$inet6(r5, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 3.161383491s ago: executing program 0 (id=4386): io_setup(0x3ff, &(0x7f00000000c0)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80e85411, 0xfffffffffffffffe) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f00000002c0)=0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = fspick(r5, &(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getresuid(&(0x7f0000000300), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x4040c, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=user,version=9p2000.L,audit,appraise,uid=', @ANYRESDEC=r7, @ANYBLOB="2c7063723d30303030303030303030303030303030303034372c686173682c61707072616973652c6673757569643d37360037623236632d316254352d356238312d316564342d65390034366400312c6673757569643d6533340031a435362d396662362d623163382d66367a382d003562c2643137352c666f776e65723e", @ANYRESDEC=r8, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x14010, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cache_mmap}, {@directio}, {@access_any}, {@fscache}, {@fscache}, {@cache_mmap}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, ':%}],*!{H'}}, {@loose}], [{@uid_lt={'uid<', r4}}, {@euid_eq={'euid', 0x3d, r8}}, {@permit_directio}, {@measure}, {@uid_lt={'uid<', 0xee01}}]}}) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315559, 0x140, 0x0, 0x0, @stepwise}) 2.990427s ago: executing program 0 (id=4387): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x8006, @ipv4={'\x00', '\xff\xff', @empty}, 0x5c5}, 0x1c) 2.894081757s ago: executing program 0 (id=4388): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04230500c9"], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000000000070000000014000100fe"], 0x30}}, 0x800) 2.682960852s ago: executing program 8 (id=4389): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)=0xf) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r2, r3) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000240)) ioprio_get$uid(0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f00000001c0), 0x4, 0x40482) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000280)={0x1, 0x0, [{0x80000001, 0x7ff, 0x2, [0x6, 0x9, 0x7f, 0x401, 0xd5, 0x6d2, 0x0, 0xfffffffd]}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) prctl$PR_SET_PTRACER(0x59616d61, r0) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) 2.654583086s ago: executing program 3 (id=4390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8208200) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r5, 0x0) 2.597273834s ago: executing program 0 (id=4391): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x2, "0d9a5c6fd40df16bd36cda0f2c2c1947c14fb01950dcf95c3200"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x3, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}, 0x40008100) ptrace(0x10, r7) rt_sigqueueinfo(r7, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x0, 0x1, 0x1}, &(0x7f0000000340)=[{}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)='\x9f\xa9\r\x14F\xe3\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\xdc\x18\xdb9\x8du\xed`%\xeeZG\xe0%\x14J\xe7\xcf\x92Ya\xa2e\xe1a:\xaaZ\xe17\x8b\x9e`YA\x94l\a\x18\x1d\xdc\xf2\xde'}, 0x30) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000b40)={{r0}, "a68215c504c258412619f5670cc283fd9b450734839ea998b77af74bee841fef3c33fce368bf9a2515b9256952c861a06a7c74dec5272edd1eec7308fefc890a00e66fc39f384ac6b453e7917cee28d1ba0fe6cae9662276581b17651fdc4ce57c3991a03512a1c72b861befecf4e5aba567ffa873d42b9c60aa45014eb130e4d90641a85595e9bae17771d1c13546405953ea75478b40568dd88e2d8c632e52d2943d86d339cebb89ace045ccf4d41ad9808d1a93bca7d5e3ea519dbae5128e77c26f11fa27f7bca7dae3c3759c45de2dca47e7d73939793db6973a39c9dfd2a6ebe9da73f7b1340b2e9dce4165d5ae5734201fc52834029b74692a1a6849d822ad8d0749648c31941737548a47b1a31e39e9ae4cc5a08c061f2a7c186c6ad08869bf8669d455324c6898b14f7d06221e67b47806c9ba1bfe16b7d9b599296f32c9125207464b27e066f2c1838d5c5810bdc9878690fd9fe226405cda152a02be69d789e9319a8161b1c27c515490d0b7dce5eac03841eb735576c2e47676cd0bb4dc6e66b6f7cd6a693ca83f1e5517c6832e6d1e97af2837d1015a2c5590d592fe13266fa44cda9d28e0a14e1f2bd3ff4b0cf408fde8f4d42ed7cc71ce3a469a8fc1b4d4b919cba1aebdf795d75cac3934dff2addf724c2df4abe41a832e6383e3191f1c16f59933414fc48c2cac6756b787305a0413bad0dc7b05a61b5cbb7750d3c9baec9e9be6901a592b7b97a7b28d0c35ea1d2fd914fec967c1cb0eb29c1b08cdf0a6ced731f4db86718432027f24f37c766f978626919fbafc59ed56d15e63d19a4a77070c4617c4f6fc70836f1fa4d64ed68b36391c60e44cffa503db2682ce49dfd224b8d78d4c1e5d12c647c59d5b2792c952fc58fcb0017144cd04b4c04daa5b5e56a599bfc98b4517e14a7f93a296959316badd713ba4c92955fe3647cda6695d647b1e637e4854264be479c9fc8d911aa5f5b48dff7e9a04a70d91eb4206aac5147af01ec3c15679dfad9937348800567a75e6af0ca8c6bc36b37bdd3587969953c39ec56d1a60c388b76d5860aa5d6c8372c26edc27ba7e7ffc943d5b6929bf9d67b02148fa7b35353b056b678662c28186372dd53e3d090e69229e065ce2d9d6b4f8c13e0307aa3c7ce403e0072a1f0b8dc92e14505057d9ee69ff667427a3a3b4c460e11fd107458af17d28f9ce4d127b7670312c3fd49331fd27ee3bda071f4d7170eb2cfea3c43cc4d5cf93e96bd844e353a6b9892e9a30064b072f7cc416bb94094c2e08936235b82cc71764765d6d5c737463b4b54aab5cd29ae8e2bc747dac9ef4c801213a13c8bdcd5da4083f8bbb7b3d937356e5b4bc02b22e27137b56b830df540e6abc84f37cac7a47953869f1b2023a382484948a089eeb80cdc0e3b28fef2bfdde82bae1e9fccc37bfd124c5f9f1c2aa365687ca94c804f73709ac5364bdfb528e7ecb09884659511e94cb3f7d931634c1d0c5fdb93f219f2d6330442ec3ad9bea434349144be6ce2f07ca5fdddcc2326b2d1f960320f6fdc4534ddd8dba41fdb8ad9075995a6b87e2747f30c907fc7b8c7e955ebb3815986a34a396cf9bacc3e687203d32120b6ab41c1d16d832b73ab03fe04592c57561c09dcd2069c52aec8baebf2482c276c603eba85a4e05a51c5e65c1988ac7118e6c83a385206971d338256a4f3320707318f690de90ebf46e05fc60959606ac2fc8c1171808999ba6399daa52172a45f77a0fd35369325098dc6f7144412607d99e3ad128bb3d4852196f04272d9e337f97889d54ed33b85453ddb801ae8f652a9c3bf087434246e9f51bcf50c7225a1f9c2dbe3952e25700fa9c10b64b8ef01f669984e9023ee990146f69fd32423f771aa34ae050d78969d19dbf207e9be27f21f3a690cdf73d85bb229b78f6ae7d62813616bcb9b475bf7cb442ced103842b244a24a178c38232b1c88300c5419ad719f06bd06b0dd9b6d250aabe448ff5e5416814df55dc3961762d23e3259af0956d4e66fb35ba1581c57917be8bf7ea1a6ab7af083c6ed7ad61e8573ec084955fa1e7f913b64ca846666922913e6ffb7893656701c9bde9983242c1366529f018080da46bbec222ca406aa4f65946a7090e35a3dda0973ae4fb11289e0b588b7d360b97459d1ef2fd9cc4ccd7c21681f0f314343c49b635da8f66a576ce0c336e6a27f66bc5d7b59dcea9d7d203f54a6d9af3e5ee19a7f1c2bd7e908c62c6d58657cf8b37ec3d770e15a8fa719b1dc30d37fd55d9cf7cd568ec8c7ea81d4bd3a15146b89f818fa173db42ed3040fba5b46c2d897a79b407043e47bdca142b55a2c0f089a2348ef8430276c53d3fe6e1c83b4a349a9319a8c3f9159abe0a2a5d24ec0cc8f1bb180fa48f96c327031c97b4e8ba2bf4b676b7ce2f55efb019f67ecc8eeae7780f39e9642cf6461277d51c0093447ec9af63108fce87a755a44ad9af94b17c403381f79ad7128754fcda8bb0b6d52d0e30e9aeae78008e27b8d00daaf5b690f1e346b39949bca9b2651de7f701da90b8ae0ef22b220714fff8328999e683f2c5273e243ad7f0fc3b7c7b3bfc30813fff04617def3a78fceffc48edc47c6e474e216a40cd312ec2d2b26a9f73c129f74675348f917e19cf2710cf9c5b95d551430d88d12845a58d2d3883766fdc41cefce1c879968eab92b4529a1a42e12a66dc5dd1b401a14efe0959044abb3b45d98ce11e1e0cb36c73f7807f5dfb6b852b85721d827a61b936195aecaa7f17929c95e8f89dcac62b0ebad5817f18ebff77e5a92c3634827123c1b39d22a317b28b603c916b9b2cb0f70c5412ad36f0ff14ead68819e2e07846ece4992f1b18a991d21c6de36dc7faf6adeeec6ff8ff1dd162c8466a732890bf191ea2ea7862a4bfcd5fbaf31581a0fb6a37fa7d88dffbee4705575559944598536ef3ab1dff4e85bc8211d6577c982661656c944409d4edfec1272bbe59df6f5536a352fbf91f4be7e55b4e3cde5accce2b3ee8d67f586e956568322c564af1923d92bf8f70ca129bf94262608feb1b5c396cf2e096d3ac94d396654740667d95a99c08b536c71980844e93728031db61d02e8aa28ac77cc5ca582d33b4aede0f14438c95f8c15ffb0247866e06e06154652d8efbc6cf311e258a6c790db35c4fb67b35eb457479f099b030747c403c38ec093fe293a154c0ee35d56e12f1ed36f235dae881259aa8037f4c13f87a36501642bd1b27e09a4dea2c1172048b21fac986a058b32b1188d880149ac91740d8109d6f7862491dce06491f1f0bc8b3733f53fa11cc5dc49daa15e623e03c9a3d9e48a340cf7c8eb93d7aabad6904ed223cf01d4a1937e21ee770d5a4bee7072726444e47b28a112e2d99f498f9880d31eb1235e9b110101da3579355336a4ae9c4c72ca613628f3ad91d7d3a508c2798d775692262d6d3b0f55085a0c03d5579de966184237d153aeac41bc5a042038ecb70a24bcc820df2fa59e9ab4d84d6efdeb19f216a4a046c83d370cc14940d9ad7db9d6a3c94cb13e69e21fa24a068aeead0bd1716ac51d6c14eb2d2c37b4a953c36c47b276d2d36df0d4189da86e86db55031466eacab0cc685faadcc2f93913dc1c1d5aec475834688f6d89e1245f77b489f8b572a10bbb40eb4970cedd8f4753241862beea95a6072e54bcf02d40785ec8aeb10e1479b26c4f7c79c26287fd6cd64bbe9604fab2621e873a860b1db0face91d68eb99ab6452e3fe347d0125ca10bcb0eb715771e920ae7639f5f2442c689b14e59f571674f9b0289accbeb9dd70e52bf4991f124bb074fad277ed8c056cb972f750d494d8210edf7f2f938b1d30925ba46f64fb963800fa206c112eccb34722a43b17735b2c863ff53e1614819e410feb7ce6fdafe634ffb72ff04706c9bc333ee8289faa4be66261a135114bf286f3de302dd52555c032039fdc1ac4c7d84e42a433f78e0d40f637b895fdb141e52a07cda7ad534df4018d2e83f8becbbd88a5dfe29b0eb202048cfa62fc72b134e500d11baa6ce58331d84825c5fdb515d42880af988f35e1f73dbd39c73d5fd50b11ab8a4a1b73d8f042d3773fc194e98c9c84ad3ad73894ecfeca5a7a62b0049d487a73722b79edad15755512c339891efa08405ebb0840ba3fed68319827796872a93d022b5b1d916535095c0180b0b4a882535d8df65edefebf9a2a7d22b6d3aad96ebc05aec6cdc68657b9d06b7744e5b69e91958bd1f9822d9efc41019df832b558bbcaee82baaa3f27dbdcad4454727bb6c01b2d20858bdfc7c8bc6feb1e0a11991eef30eba79fb61b13a7ac77aa71f46b179a401a6175072da88a6713a4d150962d5177b98e7a0da874ae516350740c3a2b81c31909959bc95ad45b36f91c71f3c93930ad26a4f4a94dcc30c84a9252a8dcf81eb747ac23dd62fbc1313c4255b68fa5d0bfbb7d252bef186ea643b8bcb751d01520a51fd564b401836997501108f3c3ce1032ff44c2d5c2023c5cc858352881df11f99aee6acb4504c0b50da462a0d0a05410bd14f4ed1e22128a49b94564c72322b9b78db5e02a663c9915f82d7a7e756a063faf9ba9d667401fbe4385d30fe9acfa4ac8ac21ca8c1b62b63d2888b244020aee7471ca65dc1682988acbccb47b171d8768f9044bc1d938ee918e01709027f3fc796bcd3476e2e26edfa6723ffe0f6bd7324238443a071c19d5f001509b3b3ace8636f95bd189b8dfe8c3f15ad8b7afcc91212912ef604ecc5b09e911b5c3d13885e3d024908f74e245109d1420920ec8da05f4405224a77abf28cd31b951bbe6883da12ad41074e1754d449ce6c7f6741323dd31fd98ae105f690b9ec516aed4a3ce2280be0b0e7732ad16a6c5d29d2c61403586f6e73c2ee302a10d0411e942bfb367815ad9e835bc3cf2d6b19891cdf7dc324df42e2435d40460d79f13648c2fcd767414f2d81dc23205b2126168d1992afe59db04889932b6b04cfc96c270a0da6f5b54ab166bf69be490f3fe42f857a609f1de44892cd58cf727d20c7c5290c5fa85fb7681bb41ee1bf8ce6f25b396a3e9f0eb498cbcdd9bab2006cbd5f22eec13a4bb7eedd3b867858d2195bd686c8377fbf9cabc6d37a38ee0dc9261eff46cfdd65744d2ca831b2516323b4fb0004d9f3f10af99857c6300cd00c732c5e3eeada0b7fd959be5d6c20e4c1ac6c21431c8083d78e1c478a39fbc567442041c87d12e944d0dba4a8aebcfb7ceab4a9dfda27eb6b7287f6bfbe74653eb7691d5af0d654f41798fd6bffbbfc54bbd0d1f21af29b2971b3eec4ce2c3956d15b7f9e6f4a0f337e6e0ed25d576f845333af1e4cefadeac42ea25b6f5d3c34460ad936fed009538cce1ce5a37905ef530b0da6c1f731b09b9bace976b84e503bc56ec44c52c04698e43713a531a498cc40a0771ef61c2958b7ae9bc6d9062d5aed54f3f7a50300a07d041b0aa94cd00169d9e50b69fc01e342afb4019c98f2c8432d936e853127b624639035809f7f919cae8f9b8bfb090326458858cb53d2637c81ccd811622f21d782befa3fedc6b9e64081b32e7a8d4166a8ce7265d4987e84df80e8c9a92f558ca886afd77730541d3254699c08fe31a68c3349ca0938807312d6d22320d2a9a6d90081007d962b35097caef608af6bc38b7a3f1b5118032464ac14b833a2678918c31e8c88a8ce228dad618f239a148454af9c39b8ca619d60813648c06ec2375973c5cbba66171c2edc9f5e4e8d266afe46f683ba14838f06442ed794d043f75f6"}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000180)) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r8], 0x44) 1.560883085s ago: executing program 5 (id=4392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007ebff08870000000000000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x82, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 1.282742329s ago: executing program 3 (id=4393): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x40201) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/235}, {&(0x7f0000000300)=""/86}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "31171e44b2b50e8f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0xfd, 0x0, 0x0, "ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e8338397d6abc25347799ac708b65efffdb10e1376a4f6d4ab9949126160165e8ba5eb7c19e9795658578feb8f3cce47f43a42919c288f7d5430ffc022613991686ef6a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce8cabe52e849ba044253654222f07959e7cdcfcb27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa0e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd2d6abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa9", 0x2, "c900c08ac1d7b60600"}}]}, 0x14c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120173dd2c60c1795837000080435d32cb6b726157620102030109021b000200000000090455000035bb45e293fcee7437b6bbe2000904590000d56eb700"], 0x0) 917.451184ms ago: executing program 0 (id=4394): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x200000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000200)="01000000006bb45a2a630b00c1457020f7cb2f290997daf8be61ebcda4d1a9c57669953942522b8e34de6c003926c62d8e92d884591c0000000cadd5b2f3b6746a6c9a0ceafd126c", 0x48, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) 767.100307ms ago: executing program 8 (id=4395): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x8, 0xffeffe01, 0x3, 0xbf80, 0x6, "f20a8d58fbc7d35d0c8736ce0da464b18730ae"}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x0) (fail_nth: 1) fcntl$getflags(r5, 0x401) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x73f90401a4ce04d2, 0x0}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_getnetconf={0x1c, 0x52, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x2}]}, 0x1c}}, 0x4000000) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) 765.696868ms ago: executing program 7 (id=4396): r0 = fsopen(&(0x7f0000000080)='ocfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0, 0x60}, {&(0x7f0000000640)="25b2b3cb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000740)={&(0x7f0000000300)={{@my=0x0, 0x7fffffff}, {@host, 0x60a8}, 0x400, "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"}, 0x418, 0xffff}) socket(0x40000000015, 0x5, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4397): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="183c000000000000000000000000000081121000f0ffffff9500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x169282, 0x19c) write$P9_RFSYNC(r4, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) kernel console output (not intermixed with test programs): .977:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19481 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7fc00000 [ 1305.634857][T19522] FAULT_INJECTION: forcing a failure. [ 1305.634857][T19522] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.659313][T19522] CPU: 0 UID: 0 PID: 19522 Comm: syz.7.3754 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1305.669973][T19522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1305.680053][T19522] Call Trace: [ 1305.683359][T19522] [ 1305.686317][T19522] dump_stack_lvl+0x241/0x360 [ 1305.691012][T19522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1305.696246][T19522] ? __pfx__printk+0x10/0x10 [ 1305.700982][T19522] should_fail_ex+0x3b0/0x4e0 [ 1305.705668][T19522] should_failslab+0xac/0x100 [ 1305.710347][T19522] ? skb_clone+0x20c/0x390 [ 1305.714816][T19522] kmem_cache_alloc_noprof+0x70/0x380 [ 1305.720200][T19522] skb_clone+0x20c/0x390 [ 1305.724441][T19522] __netlink_deliver_tap+0x3cc/0x7f0 [ 1305.729734][T19522] ? netlink_deliver_tap+0x2e/0x1b0 [ 1305.735104][T19522] netlink_deliver_tap+0x19d/0x1b0 [ 1305.740220][T19522] netlink_unicast+0x7c4/0x990 [ 1305.744993][T19522] ? __pfx_netlink_unicast+0x10/0x10 [ 1305.750299][T19522] ? __virt_addr_valid+0x183/0x530 [ 1305.755405][T19522] ? __check_object_size+0x48e/0x900 [ 1305.760684][T19522] netlink_sendmsg+0x8e4/0xcb0 [ 1305.765463][T19522] ? mark_lock+0x9a/0x360 [ 1305.769795][T19522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.775105][T19522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.780383][T19522] __sock_sendmsg+0x221/0x270 [ 1305.785148][T19522] sock_write_iter+0x2d7/0x3f0 [ 1305.789916][T19522] ? __pfx_sock_write_iter+0x10/0x10 [ 1305.795232][T19522] do_iter_readv_writev+0x600/0x880 [ 1305.800436][T19522] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1305.806159][T19522] ? bpf_lsm_file_permission+0x9/0x10 [ 1305.811534][T19522] ? security_file_permission+0x74/0x280 [ 1305.817165][T19522] ? rw_verify_area+0x1c3/0x6f0 [ 1305.822032][T19522] vfs_writev+0x376/0xba0 [ 1305.826363][T19522] ? __pfx_lock_acquire+0x10/0x10 [ 1305.831383][T19522] ? __pfx_vfs_writev+0x10/0x10 [ 1305.836245][T19522] ? __pfx_vfs_write+0x10/0x10 [ 1305.841012][T19522] ? __fget_files+0x2a/0x410 [ 1305.845598][T19522] ? __fget_files+0x395/0x410 [ 1305.850264][T19522] ? __fget_files+0x2a/0x410 [ 1305.854853][T19522] do_writev+0x1b6/0x360 [ 1305.859098][T19522] ? __pfx_do_writev+0x10/0x10 [ 1305.863857][T19522] ? do_syscall_64+0x100/0x230 [ 1305.868618][T19522] ? do_syscall_64+0xb6/0x230 [ 1305.873289][T19522] do_syscall_64+0xf3/0x230 [ 1305.877784][T19522] ? clear_bhb_loop+0x35/0x90 [ 1305.882461][T19522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.888344][T19522] RIP: 0033:0x7f420ad80809 [ 1305.892753][T19522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.912552][T19522] RSP: 002b:00007f420bb3d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1305.920963][T19522] RAX: ffffffffffffffda RBX: 00007f420af46080 RCX: 00007f420ad80809 [ 1305.928933][T19522] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 1305.936900][T19522] RBP: 00007f420bb3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.944870][T19522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.952835][T19522] R13: 0000000000000000 R14: 00007f420af46080 R15: 00007ffc901cf768 [ 1305.960816][T19522] [ 1306.005583][ C1] Unknown status report in ack skb [ 1306.021286][T19524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.030286][T19524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.030574][ T5919] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22 [ 1307.109191][T16352] usb 9-1: USB disconnect, device number 16 [ 1307.998886][T19538] netlink: 'syz.0.3760': attribute type 30 has an invalid length. [ 1308.022347][T19538] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1311.159997][T19570] netlink: 'syz.8.3768': attribute type 30 has an invalid length. [ 1311.173389][T19572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3769'. [ 1311.183479][T19572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3769'. [ 1311.193149][T19572] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3769'. [ 1311.203103][T19570] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1311.531723][ T25] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1311.852897][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1311.937603][T19583] FAULT_INJECTION: forcing a failure. [ 1311.937603][T19583] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.049936][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.3.3772 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1312.060410][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1312.070463][T19583] Call Trace: [ 1312.073738][T19583] [ 1312.076666][T19583] dump_stack_lvl+0x241/0x360 [ 1312.081362][T19583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1312.086736][T19583] ? __pfx__printk+0x10/0x10 [ 1312.091328][T19583] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1312.096891][T19583] ? __pfx___might_resched+0x10/0x10 [ 1312.102183][T19583] should_fail_ex+0x3b0/0x4e0 [ 1312.106858][T19583] should_failslab+0xac/0x100 [ 1312.111539][T19583] ? alloc_empty_file+0x9e/0x1d0 [ 1312.116470][T19583] kmem_cache_alloc_noprof+0x70/0x380 [ 1312.121836][T19583] ? preempt_schedule_thunk+0x1a/0x30 [ 1312.127205][T19583] alloc_empty_file+0x9e/0x1d0 [ 1312.131971][T19583] alloc_file_pseudo+0x1da/0x290 [ 1312.136909][T19583] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1312.142374][T19583] ? preempt_schedule_thunk+0x1a/0x30 [ 1312.147739][T19583] sock_alloc_file+0xb8/0x280 [ 1312.152417][T19583] do_accept+0x36f/0x6d0 [ 1312.156658][T19583] ? __pfx_do_accept+0x10/0x10 [ 1312.161432][T19583] __sys_accept4+0x11f/0x1d0 [ 1312.166013][T19583] ? lockdep_hardirqs_on+0x99/0x150 [ 1312.171208][T19583] ? __pfx___sys_accept4+0x10/0x10 [ 1312.176324][T19583] __x64_sys_accept4+0x9a/0xb0 [ 1312.181093][T19583] do_syscall_64+0xf3/0x230 [ 1312.185599][T19583] ? clear_bhb_loop+0x35/0x90 [ 1312.190273][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.196210][T19583] RIP: 0033:0x7f0411380809 [ 1312.200635][T19583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.220335][T19583] RSP: 002b:00007f0412168058 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1312.228749][T19583] RAX: ffffffffffffffda RBX: 00007f0411546080 RCX: 00007f0411380809 [ 1312.236715][T19583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1312.244694][T19583] RBP: 00007f04121680a0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.252658][T19583] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1312.260620][T19583] R13: 0000000000000000 R14: 00007f0411546080 R15: 00007fff1360c568 [ 1312.268598][T19583] [ 1312.276824][ T25] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1312.287174][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.297181][ T25] usb 9-1: config 0 descriptor?? [ 1312.519707][ T25] ath6kl: Failed to submit usb control message: -71 [ 1312.528235][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 1312.535895][ T25] ath6kl: Unable to send get target info: -71 [ 1312.570845][ T25] ath6kl: Failed to init ath6kl core: -71 [ 1312.578286][ T25] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1312.793316][ T25] usb 9-1: USB disconnect, device number 17 [ 1312.934348][T19601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.012463][T19601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.028029][T19612] netlink: 'syz.5.3780': attribute type 4 has an invalid length. [ 1315.125925][T19616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.136422][T19616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.166261][T19616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.177466][T19616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.270313][T19632] fuse: Unknown parameter '1844674407370955161500000000000000000000' [ 1318.359298][T19640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.383920][T19640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.692236][T19657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.440781][T19657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.668051][T19667] FAULT_INJECTION: forcing a failure. [ 1320.668051][T19667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.694608][T19667] CPU: 1 UID: 0 PID: 19667 Comm: syz.8.3796 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1320.705088][T19667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1320.715176][T19667] Call Trace: [ 1320.718466][T19667] [ 1320.721398][T19667] dump_stack_lvl+0x241/0x360 [ 1320.726082][T19667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.731275][T19667] ? __pfx__printk+0x10/0x10 [ 1320.735872][T19667] ? __pfx_lock_release+0x10/0x10 [ 1320.740912][T19667] should_fail_ex+0x3b0/0x4e0 [ 1320.745586][T19667] _copy_from_iter+0x21f/0x1e70 [ 1320.750432][T19667] ? __virt_addr_valid+0x183/0x530 [ 1320.755545][T19667] ? __pfx_lock_release+0x10/0x10 [ 1320.760598][T19667] ? __alloc_skb+0x28f/0x440 [ 1320.765199][T19667] ? __pfx__copy_from_iter+0x10/0x10 [ 1320.770489][T19667] ? __virt_addr_valid+0x183/0x530 [ 1320.775600][T19667] ? __virt_addr_valid+0x183/0x530 [ 1320.780709][T19667] ? __virt_addr_valid+0x45f/0x530 [ 1320.785828][T19667] ? __check_object_size+0x48e/0x900 [ 1320.791115][T19667] netlink_sendmsg+0x73d/0xcb0 [ 1320.796011][T19667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1320.801306][T19667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1320.806582][T19667] __sock_sendmsg+0x221/0x270 [ 1320.811262][T19667] ____sys_sendmsg+0x52a/0x7e0 [ 1320.816028][T19667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1320.821309][T19667] ? __fget_files+0x2a/0x410 [ 1320.825894][T19667] ? __fget_files+0x2a/0x410 [ 1320.830480][T19667] __sys_sendmsg+0x269/0x350 [ 1320.835066][T19667] ? __pfx_lock_release+0x10/0x10 [ 1320.840088][T19667] ? __pfx___sys_sendmsg+0x10/0x10 [ 1320.845202][T19667] ? __pfx_vfs_write+0x10/0x10 [ 1320.849977][T19667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1320.856304][T19667] ? do_syscall_64+0x100/0x230 [ 1320.861058][T19667] ? do_syscall_64+0xb6/0x230 [ 1320.865731][T19667] do_syscall_64+0xf3/0x230 [ 1320.870228][T19667] ? clear_bhb_loop+0x35/0x90 [ 1320.874918][T19667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.880894][T19667] RIP: 0033:0x7fad63380809 [ 1320.885310][T19667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.904913][T19667] RSP: 002b:00007fad6416e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.913334][T19667] RAX: ffffffffffffffda RBX: 00007fad63546080 RCX: 00007fad63380809 [ 1320.921299][T19667] RDX: 0000000000008810 RSI: 0000000020001400 RDI: 0000000000000003 [ 1320.929349][T19667] RBP: 00007fad6416e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1320.937322][T19667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.945290][T19667] R13: 0000000000000000 R14: 00007fad63546080 R15: 00007ffce48f6118 [ 1320.953266][T19667] [ 1321.923123][T19670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1323.222076][T19675] FAULT_INJECTION: forcing a failure. [ 1323.222076][T19675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.290235][T19675] CPU: 0 UID: 0 PID: 19675 Comm: syz.3.3798 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1323.300721][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1323.310800][T19675] Call Trace: [ 1323.314093][T19675] [ 1323.317054][T19675] dump_stack_lvl+0x241/0x360 [ 1323.321765][T19675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1323.326978][T19675] ? __pfx__printk+0x10/0x10 [ 1323.331597][T19675] ? __pfx_lock_release+0x10/0x10 [ 1323.336662][T19675] should_fail_ex+0x3b0/0x4e0 [ 1323.341376][T19675] _copy_from_iter+0x21f/0x1e70 [ 1323.346254][T19675] ? __virt_addr_valid+0x183/0x530 [ 1323.351397][T19675] ? __pfx_lock_release+0x10/0x10 [ 1323.356453][T19675] ? __alloc_skb+0x28f/0x440 [ 1323.361052][T19675] ? __pfx__copy_from_iter+0x10/0x10 [ 1323.366341][T19675] ? __virt_addr_valid+0x183/0x530 [ 1323.371462][T19675] ? __virt_addr_valid+0x183/0x530 [ 1323.376566][T19675] ? __virt_addr_valid+0x45f/0x530 [ 1323.381680][T19675] ? __check_object_size+0x48e/0x900 [ 1323.386966][T19675] netlink_sendmsg+0x73d/0xcb0 [ 1323.391732][T19675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1323.397045][T19675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1323.402340][T19675] __sock_sendmsg+0x221/0x270 [ 1323.407035][T19675] ____sys_sendmsg+0x52a/0x7e0 [ 1323.411815][T19675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1323.417094][T19675] ? __fget_files+0x2a/0x410 [ 1323.421683][T19675] ? __fget_files+0x2a/0x410 [ 1323.426278][T19675] __sys_sendmsg+0x269/0x350 [ 1323.430861][T19675] ? __pfx_lock_release+0x10/0x10 [ 1323.435887][T19675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1323.441001][T19675] ? __pfx_vfs_write+0x10/0x10 [ 1323.445877][T19675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1323.452202][T19675] ? do_syscall_64+0x100/0x230 [ 1323.456964][T19675] ? do_syscall_64+0xb6/0x230 [ 1323.461640][T19675] do_syscall_64+0xf3/0x230 [ 1323.466140][T19675] ? clear_bhb_loop+0x35/0x90 [ 1323.470817][T19675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.476713][T19675] RIP: 0033:0x7f0411380809 [ 1323.481127][T19675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1323.500819][T19675] RSP: 002b:00007f0412189058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.509228][T19675] RAX: ffffffffffffffda RBX: 00007f0411545fa0 RCX: 00007f0411380809 [ 1323.517195][T19675] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1323.525158][T19675] RBP: 00007f04121890a0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.533211][T19675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.541182][T19675] R13: 0000000000000000 R14: 00007f0411545fa0 R15: 00007fff1360c568 [ 1323.549161][T19675] [ 1323.914031][T19697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3802'. [ 1326.631929][T19711] FAULT_INJECTION: forcing a failure. [ 1326.631929][T19711] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.645543][T19711] CPU: 1 UID: 0 PID: 19711 Comm: syz.5.3807 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1326.655974][T19711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1326.666037][T19711] Call Trace: [ 1326.669339][T19711] [ 1326.672287][T19711] dump_stack_lvl+0x241/0x360 [ 1326.676995][T19711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1326.682224][T19711] ? __pfx__printk+0x10/0x10 [ 1326.686852][T19711] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1326.692868][T19711] ? __pfx___might_resched+0x10/0x10 [ 1326.698183][T19711] ? tcp_established_options+0x3c1/0x800 [ 1326.703850][T19711] should_fail_ex+0x3b0/0x4e0 [ 1326.708554][T19711] should_failslab+0xac/0x100 [ 1326.713247][T19711] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1326.719088][T19711] ? __alloc_skb+0x1c3/0x440 [ 1326.723712][T19711] ? tcp_current_mss+0x29b/0x4d0 [ 1326.728689][T19711] __alloc_skb+0x1c3/0x440 [ 1326.733150][T19711] ? __pfx___alloc_skb+0x10/0x10 [ 1326.738125][T19711] tcp_stream_alloc_skb+0x3d/0x310 [ 1326.743271][T19711] tcp_sendmsg_locked+0xd96/0x4f30 [ 1326.748418][T19711] ? mark_lock+0x9a/0x360 [ 1326.752812][T19711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1326.758828][T19711] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1326.764406][T19711] ? tcp_sendmsg+0x22/0x50 [ 1326.768854][T19711] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1326.774095][T19711] tcp_sendmsg+0x30/0x50 [ 1326.778368][T19711] __sock_sendmsg+0x1a6/0x270 [ 1326.783083][T19711] __sys_sendto+0x363/0x4c0 [ 1326.787620][T19711] ? __pfx___sys_sendto+0x10/0x10 [ 1326.788537][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1326.788553][ T29] audit: type=1326 audit(1732804476.577:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1326.792643][T19711] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1326.792681][T19711] ? __fget_files+0x2a/0x410 [ 1326.792711][T19711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1326.792734][T19711] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1326.792759][T19711] __x64_sys_sendto+0xde/0x100 [ 1326.792783][T19711] do_syscall_64+0xf3/0x230 [ 1326.792802][T19711] ? clear_bhb_loop+0x35/0x90 [ 1326.820346][ T29] audit: type=1326 audit(1732804476.577:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1326.820436][T19711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.842658][ T29] audit: type=1326 audit(1732804476.597:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1326.842911][T19711] RIP: 0033:0x7fed12d80809 [ 1326.859450][ T29] audit: type=1326 audit(1732804476.597:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1326.878413][T19711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.878436][T19711] RSP: 002b:00007fed13b27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1326.878459][T19711] RAX: ffffffffffffffda RBX: 00007fed12f46160 RCX: 00007fed12d80809 [ 1326.878476][T19711] RDX: 00000000000109e8 RSI: 00000000200004c0 RDI: 000000000000000a [ 1326.878489][T19711] RBP: 00007fed13b270a0 R08: 0000000000000000 R09: 0000000000000006 [ 1326.878500][T19711] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 1326.878519][T19711] R13: 0000000000000000 R14: 00007fed12f46160 R15: 00007fffba435e58 [ 1326.878546][T19711] [ 1327.008976][ T29] audit: type=1326 audit(1732804476.597:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1327.278654][ T29] audit: type=1326 audit(1732804476.597:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1327.629464][ T29] audit: type=1326 audit(1732804476.597:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1327.828599][ T29] audit: type=1326 audit(1732804476.597:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f931c37f170 code=0x7ffc0000 [ 1328.003734][ T29] audit: type=1326 audit(1732804476.597:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f931c37f170 code=0x7ffc0000 [ 1328.028716][ T29] audit: type=1326 audit(1732804476.597:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.0.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1328.271754][T16397] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1328.510164][T16397] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1328.637593][T16397] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.699652][T16397] usb 9-1: config 0 has no interface number 0 [ 1328.743478][T16397] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1328.764517][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1328.909225][T16397] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1328.947162][T19745] macvtap4: entered promiscuous mode [ 1329.701741][T19745] macvtap4: entered allmulticast mode [ 1329.776211][T16397] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1329.782471][T19745] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1329.865055][T16397] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.999315][T16397] usb 9-1: Product: syz [ 1330.066577][T16397] usb 9-1: Manufacturer: syz [ 1330.109141][T16397] usb 9-1: SerialNumber: syz [ 1330.212609][T16397] usb 9-1: config 0 descriptor?? [ 1331.305229][T15068] usb 9-1: USB disconnect, device number 18 [ 1331.408644][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3824'. [ 1331.907043][T19772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1335.795585][T19824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3838'. [ 1336.741747][T16057] Bluetooth: hci1: command 0x0405 tx timeout [ 1339.180210][T19851] netlink: 'syz.0.3846': attribute type 4 has an invalid length. [ 1339.189217][T19848] netlink: 'syz.0.3846': attribute type 4 has an invalid length. [ 1339.236545][T19848] netlink: 'syz.0.3846': attribute type 4 has an invalid length. [ 1339.239995][T19847] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3844'. [ 1339.264270][T19847] Device name cannot be null; rc = [-22] [ 1340.373878][T19860] fuse: Unknown parameter 'fd1844674407370955161500000000000000000000' [ 1343.018333][T19887] macvlan2: entered promiscuous mode [ 1343.047985][T19887] team_slave_0: entered promiscuous mode [ 1343.054370][T19887] team_slave_1: entered promiscuous mode [ 1343.087094][T19887] team0: entered promiscuous mode [ 1343.093577][T19887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1343.140484][T19887] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1343.162314][T19885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1344.426736][T19904] fuse: Unknown parameter 'fd1844674407370955161500000000000000000000' [ 1348.677817][T19941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.698699][T19941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.831346][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 1348.873025][T19950] bond_slave_0: entered promiscuous mode [ 1348.879329][T19950] bond_slave_1: entered promiscuous mode [ 1348.888488][T19950] macvtap4: entered promiscuous mode [ 1348.894990][T19950] bond0: entered promiscuous mode [ 1348.901095][T19950] macvtap4: entered allmulticast mode [ 1348.907464][T19950] bond0: entered allmulticast mode [ 1348.915796][T19950] bond_slave_0: entered allmulticast mode [ 1348.923539][T19950] bond_slave_1: entered allmulticast mode [ 1348.929364][T19950] macvlan2: entered allmulticast mode [ 1348.935120][T19950] team0: entered allmulticast mode [ 1348.940685][T19950] team_slave_0: entered allmulticast mode [ 1348.947364][T19950] team_slave_1: entered allmulticast mode [ 1349.125169][T19950] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1349.234630][T19948] bond0: left allmulticast mode [ 1349.291849][T19948] bond_slave_0: left allmulticast mode [ 1349.365633][T19948] bond_slave_1: left allmulticast mode [ 1349.428317][T19948] macvlan2: left allmulticast mode [ 1349.492937][T19948] team0: left allmulticast mode [ 1349.606697][T19948] team_slave_0: left allmulticast mode [ 1349.631502][T19948] team_slave_1: left allmulticast mode [ 1349.637473][T19948] bond0: left promiscuous mode [ 1349.656837][T19948] bond_slave_0: left promiscuous mode [ 1349.663152][T19948] bond_slave_1: left promiscuous mode [ 1349.948484][T19959] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1350.207942][T19963] fuse: Unknown parameter 'fd1844674407370955161500000000000000000000' [ 1352.019002][T19977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1352.142324][T19983] FAULT_INJECTION: forcing a failure. [ 1352.142324][T19983] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.191660][T19983] CPU: 0 UID: 0 PID: 19983 Comm: syz.7.3883 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1352.202151][T19983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1352.212232][T19983] Call Trace: [ 1352.215530][T19983] [ 1352.218497][T19983] dump_stack_lvl+0x241/0x360 [ 1352.223197][T19983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1352.228402][T19983] ? __pfx__printk+0x10/0x10 [ 1352.233001][T19983] should_fail_ex+0x3b0/0x4e0 [ 1352.237676][T19983] should_failslab+0xac/0x100 [ 1352.242357][T19983] ? skb_clone+0x20c/0x390 [ 1352.246771][T19983] kmem_cache_alloc_noprof+0x70/0x380 [ 1352.252149][T19983] skb_clone+0x20c/0x390 [ 1352.256395][T19983] __netlink_deliver_tap+0x3cc/0x7f0 [ 1352.261706][T19983] ? netlink_deliver_tap+0x2e/0x1b0 [ 1352.266896][T19983] netlink_deliver_tap+0x19d/0x1b0 [ 1352.272003][T19983] netlink_unicast+0x7c4/0x990 [ 1352.276772][T19983] ? __pfx_netlink_unicast+0x10/0x10 [ 1352.282059][T19983] ? __virt_addr_valid+0x183/0x530 [ 1352.287167][T19983] ? __check_object_size+0x48e/0x900 [ 1352.292447][T19983] netlink_sendmsg+0x8e4/0xcb0 [ 1352.297208][T19983] ? mark_lock+0x9a/0x360 [ 1352.301568][T19983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.306887][T19983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.312184][T19983] __sock_sendmsg+0x221/0x270 [ 1352.316871][T19983] sock_write_iter+0x2d7/0x3f0 [ 1352.321651][T19983] ? __pfx_sock_write_iter+0x10/0x10 [ 1352.326968][T19983] do_iter_readv_writev+0x600/0x880 [ 1352.332185][T19983] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1352.337915][T19983] ? bpf_lsm_file_permission+0x9/0x10 [ 1352.343284][T19983] ? security_file_permission+0x74/0x280 [ 1352.348915][T19983] ? rw_verify_area+0x1c3/0x6f0 [ 1352.353764][T19983] vfs_writev+0x376/0xba0 [ 1352.358103][T19983] ? __pfx_lock_acquire+0x10/0x10 [ 1352.363121][T19983] ? __pfx_vfs_writev+0x10/0x10 [ 1352.367978][T19983] ? __pfx_vfs_write+0x10/0x10 [ 1352.372757][T19983] ? __fget_files+0x2a/0x410 [ 1352.377363][T19983] ? __fget_files+0x395/0x410 [ 1352.382034][T19983] ? __fget_files+0x2a/0x410 [ 1352.386626][T19983] do_writev+0x1b6/0x360 [ 1352.390870][T19983] ? __pfx_do_writev+0x10/0x10 [ 1352.395654][T19983] ? do_syscall_64+0x100/0x230 [ 1352.400640][T19983] ? do_syscall_64+0xb6/0x230 [ 1352.405327][T19983] do_syscall_64+0xf3/0x230 [ 1352.409832][T19983] ? clear_bhb_loop+0x35/0x90 [ 1352.414541][T19983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.420449][T19983] RIP: 0033:0x7f420ad80809 [ 1352.424870][T19983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.444484][T19983] RSP: 002b:00007f420bb3d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1352.452904][T19983] RAX: ffffffffffffffda RBX: 00007f420af46080 RCX: 00007f420ad80809 [ 1352.460882][T19983] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 1352.468848][T19983] RBP: 00007f420bb3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.476819][T19983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.484786][T19983] R13: 0000000000000000 R14: 00007f420af46080 R15: 00007ffc901cf768 [ 1352.492775][T19983] [ 1352.495917][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.443354][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1353.454935][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1353.463952][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1353.474705][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1353.482378][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1353.492152][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1354.667816][T19988] chnl_net:caif_netlink_parms(): no params data found [ 1355.202085][ T5848] Bluetooth: hci1: command 0x0405 tx timeout [ 1355.550583][T19988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.597765][T19988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.608189][T19988] bridge_slave_0: entered allmulticast mode [ 1355.622583][T19988] bridge_slave_0: entered promiscuous mode [ 1355.638676][T19988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.651599][T19988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.658910][T19988] bridge_slave_1: entered allmulticast mode [ 1355.681575][T19988] bridge_slave_1: entered promiscuous mode [ 1355.687902][T16057] Bluetooth: hci3: command tx timeout [ 1355.748596][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1355.922307][T20022] macvtap5: entered promiscuous mode [ 1355.932755][T20022] macvtap5: entered allmulticast mode [ 1355.962086][T20022] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1356.715834][T19988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.778293][T19988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.876004][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3894'. [ 1357.422563][T19988] team0: Port device team_slave_0 added [ 1357.495437][T20033] macvtap4: entered promiscuous mode [ 1357.515104][T20033] macvtap4: entered allmulticast mode [ 1357.536828][T20033] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1357.602481][T19988] team0: Port device team_slave_1 added [ 1357.801511][T16057] Bluetooth: hci3: command tx timeout [ 1358.238622][T19988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.368184][T19988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.452177][T19988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.510730][T19988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.530595][T19988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.640812][T19988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.672713][T19988] hsr_slave_0: entered promiscuous mode [ 1359.712265][T19988] hsr_slave_1: entered promiscuous mode [ 1359.789991][T19988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.799948][T19988] Cannot create hsr debugfs directory [ 1359.842133][T16057] Bluetooth: hci3: command tx timeout [ 1360.026903][T16397] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1360.333844][T16397] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1360.410783][T16397] usb 9-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 1360.430591][T16397] usb 9-1: Product: syz [ 1360.439341][T16397] usb 9-1: Manufacturer: syz [ 1360.448821][T16397] usb 9-1: SerialNumber: syz [ 1360.462151][T16397] usb 9-1: config 0 descriptor?? [ 1360.476235][T16397] ch341 9-1:0.0: ch341-uart converter detected [ 1360.684244][T19988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.709643][T20074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3906'. [ 1360.827164][T20075] ubi: mtd0 is already attached to ubi0 [ 1360.972297][T20062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.098405][T20062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.102833][T19988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.494312][T20077] 9pnet_fd: Insufficient options for proto=fd [ 1361.558708][T19988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.713123][T19988] team0: Port device netdevsim0 removed [ 1361.726866][T19988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.931847][T16057] Bluetooth: hci3: command tx timeout [ 1362.004329][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.040963][T19988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1362.098249][T19988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1362.132975][T19988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1362.177907][T19988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1363.241777][T16397] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 1363.284703][T16397] usb 9-1: USB disconnect, device number 19 [ 1363.313306][T16397] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1363.322784][T16397] ch341 9-1:0.0: device disconnected [ 1363.457943][T19988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.475685][T19988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.530527][T16958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.537808][T16958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.567808][T16958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.575048][T16958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.168271][T20110] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3915'. [ 1364.310175][T20115] netlink: 'syz.3.3915': attribute type 30 has an invalid length. [ 1364.379414][T20116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.393239][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1364.393258][ T29] audit: type=1326 audit(1732804770.185:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.421113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.422165][T20115] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1364.446960][T20116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.455625][ T29] audit: type=1326 audit(1732804770.185:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.479351][ T29] audit: type=1326 audit(1732804770.215:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.507055][ T29] audit: type=1326 audit(1732804770.225:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.536521][ T29] audit: type=1326 audit(1732804770.225:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.558567][ T29] audit: type=1326 audit(1732804770.225:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.581273][ T29] audit: type=1326 audit(1732804770.225:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.602942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.625977][T19988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.638735][ T29] audit: type=1326 audit(1732804770.225:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420ad80809 code=0x7ffc0000 [ 1364.668912][ T29] audit: type=1326 audit(1732804770.225:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f420ad7f170 code=0x7ffc0000 [ 1364.724314][ T29] audit: type=1326 audit(1732804770.225:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20117 comm="syz.7.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f420ad7f170 code=0x7ffc0000 [ 1364.930711][T20126] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3918'. [ 1364.942371][T20126] Device name cannot be null; rc = [-22] [ 1365.119327][T19988] veth0_vlan: entered promiscuous mode [ 1365.143803][T19988] veth1_vlan: entered promiscuous mode [ 1365.186767][T19988] veth0_macvtap: entered promiscuous mode [ 1365.197266][T19988] veth1_macvtap: entered promiscuous mode [ 1365.216835][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.228977][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.238959][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.250354][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.260342][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.271060][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.289336][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.302270][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.340181][T19988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.379139][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.407369][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.431062][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.538995][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.567132][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.610395][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.682529][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.695252][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.705684][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.716685][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.728104][T19988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.904939][T19988] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.913805][T19988] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.941288][T19988] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.968326][T19988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.725234][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.911555][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.029773][ T7108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.071945][ T7108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.152596][T20153] FAULT_INJECTION: forcing a failure. [ 1368.152596][T20153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1368.182870][T20153] CPU: 1 UID: 0 PID: 20153 Comm: syz.8.3925 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1368.193356][T20153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1368.203443][T20153] Call Trace: [ 1368.206751][T20153] [ 1368.209699][T20153] dump_stack_lvl+0x241/0x360 [ 1368.214410][T20153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1368.219638][T20153] ? __pfx__printk+0x10/0x10 [ 1368.224254][T20153] ? __lock_acquire+0x1397/0x2100 [ 1368.229290][T20153] should_fail_ex+0x3b0/0x4e0 [ 1368.233966][T20153] prepare_alloc_pages+0x1da/0x5b0 [ 1368.239085][T20153] __alloc_pages_noprof+0x16f/0x710 [ 1368.244289][T20153] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1368.250011][T20153] ? __pfx_validate_chain+0x10/0x10 [ 1368.255213][T20153] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1368.260665][T20153] ? is_bpf_text_address+0x285/0x2a0 [ 1368.265951][T20153] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1368.271928][T20153] ? unwind_get_return_address+0x4d/0x90 [ 1368.277561][T20153] ? arch_stack_walk+0xfd/0x150 [ 1368.282406][T20153] ? alloc_pages_noprof+0xef/0x170 [ 1368.287512][T20153] pte_alloc_one+0x8f/0x610 [ 1368.292023][T20153] ? __pfx_pte_alloc_one+0x10/0x10 [ 1368.297141][T20153] ? mark_lock+0x9a/0x360 [ 1368.301478][T20153] ? __lock_acquire+0x1397/0x2100 [ 1368.306514][T20153] __pte_alloc+0x79/0x3c0 [ 1368.310845][T20153] ? __pfx___pte_alloc+0x10/0x10 [ 1368.315794][T20153] handle_pte_fault+0x510e/0x68a0 [ 1368.320835][T20153] ? __pfx_handle_pte_fault+0x10/0x10 [ 1368.326215][T20153] ? __pfx_lock_acquire+0x10/0x10 [ 1368.331234][T20153] ? __pmd_alloc+0x54c/0x670 [ 1368.335820][T20153] ? __pfx_lock_release+0x10/0x10 [ 1368.340839][T20153] ? do_raw_spin_lock+0x14f/0x370 [ 1368.345867][T20153] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1368.351068][T20153] ? _raw_spin_unlock+0x28/0x50 [ 1368.355916][T20153] ? __pmd_alloc+0x54c/0x670 [ 1368.360504][T20153] ? __pfx___pmd_alloc+0x10/0x10 [ 1368.365445][T20153] handle_mm_fault+0x1053/0x1ad0 [ 1368.370408][T20153] ? __pfx_handle_mm_fault+0x10/0x10 [ 1368.375699][T20153] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1368.382113][T20153] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1368.387393][T20153] exc_page_fault+0x2b9/0x8c0 [ 1368.392074][T20153] asm_exc_page_fault+0x26/0x30 [ 1368.396924][T20153] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 1368.402732][T20153] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 1368.422433][T20153] RSP: 0018:ffffc90004787bd0 EFLAGS: 00050202 [ 1368.428504][T20153] RAX: 0000000000000001 RBX: 0000000020000000 RCX: 0000000000000004 [ 1368.436479][T20153] RDX: 0000000000000001 RSI: 0000000020000000 RDI: ffffc90004787c60 [ 1368.444446][T20153] RBP: ffffc90004787d70 R08: 0000000000000003 R09: fffff520008f0f8c [ 1368.452411][T20153] R10: dffffc0000000000 R11: fffff520008f0f8c R12: 0000000020000000 [ 1368.460395][T20153] R13: dffffc0000000000 R14: ffffc90004787c60 R15: 0000000000000004 [ 1368.468374][T20153] _copy_from_user+0x7f/0xc0 [ 1368.472971][T20153] rds_setsockopt+0x418/0x13f0 [ 1368.477739][T20153] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1368.483481][T20153] ? __pfx_rds_setsockopt+0x10/0x10 [ 1368.488684][T20153] ? sb_end_write+0xe9/0x1c0 [ 1368.493275][T20153] ? vfs_write+0x730/0xd30 [ 1368.497694][T20153] ? do_sys_openat2+0x17a/0x1d0 [ 1368.502552][T20153] ? __pfx_vfs_write+0x10/0x10 [ 1368.507314][T20153] ? do_sys_openat2+0x17a/0x1d0 [ 1368.512171][T20153] ? __pfx_rds_setsockopt+0x10/0x10 [ 1368.517365][T20153] do_sock_setsockopt+0x3af/0x720 [ 1368.522387][T20153] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1368.527931][T20153] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1368.533912][T20153] __x64_sys_setsockopt+0x1ee/0x280 [ 1368.539110][T20153] do_syscall_64+0xf3/0x230 [ 1368.543616][T20153] ? clear_bhb_loop+0x35/0x90 [ 1368.548290][T20153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.554178][T20153] RIP: 0033:0x7fad63380809 [ 1368.558615][T20153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.578236][T20153] RSP: 002b:00007fad6418f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1368.586676][T20153] RAX: ffffffffffffffda RBX: 00007fad63545fa0 RCX: 00007fad63380809 [ 1368.594657][T20153] RDX: 000000000000000a RSI: 0000000000000114 RDI: 0000000000000003 [ 1368.602635][T20153] RBP: 00007fad6418f0a0 R08: 0000000000000004 R09: 0000000000000000 [ 1368.610605][T20153] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.618583][T20153] R13: 0000000000000000 R14: 00007fad63545fa0 R15: 00007ffce48f6118 [ 1368.626569][T20153] [ 1368.780445][T20164] loop6: detected capacity change from 0 to 1 [ 1368.795342][T20164] Dev loop6: unable to read RDB block 1 [ 1368.801258][T20164] loop6: unable to read partition table [ 1368.808527][T20164] loop6: partition table beyond EOD, truncated [ 1368.815116][T20164] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1368.815116][T20164] ) failed (rc=-5) [ 1369.081457][T15068] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1369.433471][T15068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.484041][T15068] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1369.501517][T15068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.533175][T15068] usb 6-1: config 0 descriptor?? [ 1369.679251][T20180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.731767][T20180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.019417][T20189] delete_channel: no stack [ 1370.025118][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 1370.025137][ T29] audit: type=1326 audit(1732804775.765:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.073979][ T29] audit: type=1326 audit(1732804775.765:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.105857][ T29] audit: type=1326 audit(1732804775.775:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.143562][ T29] audit: type=1326 audit(1732804775.775:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.195592][T20190] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3934'. [ 1370.288100][T20191] ubi: mtd0 is already attached to ubi0 [ 1370.290683][ T29] audit: type=1326 audit(1732804775.775:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.392018][T16931] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1370.586057][ T29] audit: type=1326 audit(1732804775.775:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.629119][T16931] usb 9-1: device descriptor read/64, error -71 [ 1370.715435][ T29] audit: type=1326 audit(1732804775.775:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.906840][ T29] audit: type=1326 audit(1732804775.775:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931c380809 code=0x7ffc0000 [ 1370.983746][ T29] audit: type=1326 audit(1732804775.775:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f931c37f170 code=0x7ffc0000 [ 1371.005820][T16931] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1371.076885][ T29] audit: type=1326 audit(1732804775.775:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20185 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f931c37f170 code=0x7ffc0000 [ 1371.161741][T16931] usb 9-1: device descriptor read/64, error -71 [ 1371.303587][T16931] usb usb9-port1: attempt power cycle [ 1371.675186][T16931] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1371.942210][T16931] usb 9-1: device descriptor read/8, error -71 [ 1371.981747][T15068] usbhid 6-1:0.0: can't add hid device: -71 [ 1371.987972][T15068] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1372.016668][T15068] usb 6-1: USB disconnect, device number 10 [ 1372.301695][T16931] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1372.338469][T16931] usb 9-1: device descriptor read/8, error -71 [ 1372.503545][T16931] usb usb9-port1: unable to enumerate USB device [ 1373.131554][T15068] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1373.291572][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 1373.303471][T15068] usb 6-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 1373.335087][T15068] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 1373.347780][T15068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.363692][T15068] usb 6-1: Product: syz [ 1373.368746][T15068] usb 6-1: Manufacturer: syz [ 1373.380736][T15068] usb 6-1: SerialNumber: syz [ 1373.725876][T15068] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input19 [ 1373.958233][ T5201] bcm5974 6-1:1.0: could not read from device [ 1373.958502][T16931] usb 6-1: USB disconnect, device number 11 [ 1373.991996][ T5201] bcm5974 6-1:1.0: could not read from device [ 1374.166183][T20236] FAULT_INJECTION: forcing a failure. [ 1374.166183][T20236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.179744][T20236] CPU: 0 UID: 0 PID: 20236 Comm: syz.8.3949 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1374.190202][T20236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1374.200278][T20236] Call Trace: [ 1374.203569][T20236] [ 1374.206531][T20236] dump_stack_lvl+0x241/0x360 [ 1374.211254][T20236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1374.216508][T20236] ? __pfx__printk+0x10/0x10 [ 1374.221098][T20236] ? __pfx_lock_release+0x10/0x10 [ 1374.226122][T20236] should_fail_ex+0x3b0/0x4e0 [ 1374.230804][T20236] strncpy_from_user+0x36/0x270 [ 1374.235699][T20236] path_setxattrat+0x23e/0x510 [ 1374.240510][T20236] ? __pfx_path_setxattrat+0x10/0x10 [ 1374.245820][T20236] ? vfs_write+0x730/0xd30 [ 1374.250302][T20236] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1374.256318][T20236] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1374.262681][T20236] __x64_sys_lsetxattr+0xbf/0xe0 [ 1374.267659][T20236] do_syscall_64+0xf3/0x230 [ 1374.272195][T20236] ? clear_bhb_loop+0x35/0x90 [ 1374.272523][T20239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3950'. [ 1374.276896][T20236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.276928][T20236] RIP: 0033:0x7fad63380809 [ 1374.276947][T20236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.315961][T20236] RSP: 002b:00007fad6418f058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1374.324378][T20236] RAX: ffffffffffffffda RBX: 00007fad63545fa0 RCX: 00007fad63380809 [ 1374.332346][T20236] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 1374.340318][T20236] RBP: 00007fad6418f0a0 R08: 0000000000000002 R09: 0000000000000000 [ 1374.348286][T20236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.356250][T20236] R13: 0000000000000000 R14: 00007fad63545fa0 R15: 00007ffce48f6118 [ 1374.364227][T20236] [ 1374.375990][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 1374.390680][T20239] bond_slave_0: entered promiscuous mode [ 1374.396467][T20239] bond_slave_1: entered promiscuous mode [ 1374.404109][T20239] macvtap5: entered promiscuous mode [ 1374.409431][T20239] bond0: entered promiscuous mode [ 1374.415240][T20239] macvtap5: entered allmulticast mode [ 1374.420633][T20239] bond0: entered allmulticast mode [ 1374.425797][T20239] bond_slave_0: entered allmulticast mode [ 1374.431688][T20239] bond_slave_1: entered allmulticast mode [ 1374.438565][T20239] macvlan2: entered allmulticast mode [ 1374.444126][T20239] team0: entered allmulticast mode [ 1374.449424][T20239] team_slave_0: entered allmulticast mode [ 1374.455248][T20239] team_slave_1: entered allmulticast mode [ 1374.462266][T20239] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1374.472207][T20238] bond0: left allmulticast mode [ 1374.477122][T20238] bond_slave_0: left allmulticast mode [ 1374.483946][T20238] bond_slave_1: left allmulticast mode [ 1374.489465][T20238] macvlan2: left allmulticast mode [ 1374.494891][T20238] team0: left allmulticast mode [ 1374.499783][T20238] team_slave_0: left allmulticast mode [ 1374.505595][T20238] team_slave_1: left allmulticast mode [ 1374.511150][T20238] bond0: left promiscuous mode [ 1374.518263][T20238] bond_slave_0: left promiscuous mode [ 1374.523762][T20238] bond_slave_1: left promiscuous mode [ 1374.857143][T20254] syz.5.3954 (20254) used greatest stack depth: 16880 bytes left [ 1375.425327][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 1375.425371][ T29] audit: type=1326 audit(1732804781.215:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.3.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0411380809 code=0x7ffc0000 [ 1375.931444][ T29] audit: type=1326 audit(1732804781.255:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20233 comm="syz.3.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0411380809 code=0x7ffc0000 [ 1376.031327][T20274] loop6: detected capacity change from 0 to 1 [ 1376.040788][T20274] Dev loop6: unable to read RDB block 1 [ 1376.046998][T20274] loop6: unable to read partition table [ 1376.052942][T20274] loop6: partition table beyond EOD, truncated [ 1376.059578][T20274] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1376.059578][T20274] ) failed (rc=-5) [ 1376.078819][ T29] audit: type=1326 audit(1732804781.865:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20273 comm="syz.7.3959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f420ad80809 code=0x0 [ 1376.207286][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1376.406697][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1376.766189][T20280] macvtap6: entered promiscuous mode [ 1376.887748][T20280] macvtap6: entered allmulticast mode [ 1377.044286][T20280] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 1379.501724][T16931] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1379.582847][T20345] FAULT_INJECTION: forcing a failure. [ 1379.582847][T20345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.607337][T20345] CPU: 1 UID: 0 PID: 20345 Comm: syz.3.3977 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1379.617807][T20345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1379.627900][T20345] Call Trace: [ 1379.631172][T20345] [ 1379.634099][T20345] dump_stack_lvl+0x241/0x360 [ 1379.638769][T20345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1379.643959][T20345] ? __pfx__printk+0x10/0x10 [ 1379.648537][T20345] ? __pfx_lock_release+0x10/0x10 [ 1379.653552][T20345] should_fail_ex+0x3b0/0x4e0 [ 1379.658242][T20345] _copy_from_iter+0x21f/0x1e70 [ 1379.663115][T20345] ? __virt_addr_valid+0x183/0x530 [ 1379.668244][T20345] ? __pfx_lock_release+0x10/0x10 [ 1379.673255][T20345] ? __alloc_skb+0x28f/0x440 [ 1379.677831][T20345] ? __pfx__copy_from_iter+0x10/0x10 [ 1379.683119][T20345] ? __virt_addr_valid+0x183/0x530 [ 1379.688245][T20345] ? __virt_addr_valid+0x183/0x530 [ 1379.693341][T20345] ? __virt_addr_valid+0x45f/0x530 [ 1379.698442][T20345] ? __check_object_size+0x48e/0x900 [ 1379.703742][T20345] netlink_sendmsg+0x73d/0xcb0 [ 1379.708509][T20345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1379.713783][T20345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1379.719049][T20345] __sock_sendmsg+0x221/0x270 [ 1379.723716][T20345] ____sys_sendmsg+0x52a/0x7e0 [ 1379.728472][T20345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1379.733757][T20345] ? __fget_files+0x2a/0x410 [ 1379.738363][T20345] ? __fget_files+0x2a/0x410 [ 1379.742973][T20345] __sys_sendmsg+0x269/0x350 [ 1379.747551][T20345] ? __pfx_lock_release+0x10/0x10 [ 1379.752562][T20345] ? __pfx___sys_sendmsg+0x10/0x10 [ 1379.757663][T20345] ? __pfx_vfs_write+0x10/0x10 [ 1379.762430][T20345] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1379.768778][T20345] ? do_syscall_64+0x100/0x230 [ 1379.774222][T20345] ? do_syscall_64+0xb6/0x230 [ 1379.778894][T20345] do_syscall_64+0xf3/0x230 [ 1379.783388][T20345] ? clear_bhb_loop+0x35/0x90 [ 1379.788070][T20345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.793979][T20345] RIP: 0033:0x7f0411380809 [ 1379.798386][T20345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.817994][T20345] RSP: 002b:00007f0412189058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1379.826394][T20345] RAX: ffffffffffffffda RBX: 00007f0411545fa0 RCX: 00007f0411380809 [ 1379.834351][T20345] RDX: 0000000000008810 RSI: 0000000020001400 RDI: 0000000000000003 [ 1379.842324][T20345] RBP: 00007f04121890a0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.850305][T20345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.858353][T20345] R13: 0000000000000000 R14: 00007f0411545fa0 R15: 00007fff1360c568 [ 1379.866326][T20345] [ 1379.922684][T16931] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1379.933811][T16931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.946150][T16931] usb 6-1: Product: syz [ 1379.951180][T16931] usb 6-1: Manufacturer: syz [ 1379.956459][T16931] usb 6-1: SerialNumber: syz [ 1379.967689][T16931] usb 6-1: config 0 descriptor?? [ 1380.194885][T16397] usb 6-1: USB disconnect, device number 12 [ 1382.026327][T14740] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1382.357941][T20385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1382.669351][T14740] usb 6-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 1382.702975][T14740] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 1382.723697][T14740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.751127][T14740] usb 6-1: Product: syz [ 1382.761523][T14740] usb 6-1: Manufacturer: syz [ 1382.770942][T14740] usb 6-1: SerialNumber: syz [ 1382.788883][T14740] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input20 [ 1383.882667][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.904586][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.965061][T16397] usb 6-1: USB disconnect, device number 13 [ 1383.971169][ T5201] bcm5974 6-1:1.0: could not read from device [ 1384.343651][T20415] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1384.578268][T20424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.587262][T20424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.600455][T20424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.610882][T20424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.164753][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 1387.681511][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 1387.828784][ T51] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1388.115709][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 1388.122035][ T51] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 1388.139228][ T51] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1388.146938][ T51] usb 6-1: can't read configurations, error -61 [ 1388.293252][ T51] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1389.033684][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 1389.057547][ T51] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 1389.073076][ T51] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1389.088143][ T51] usb 6-1: can't read configurations, error -61 [ 1389.098064][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1389.146970][ T51] usb usb6-port1: attempt power cycle [ 1389.265403][T20470] ubi: mtd0 is already attached to ubi0 [ 1389.595006][ T51] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1389.635900][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 1389.683218][T16057] Bluetooth: hci1: command 0x0405 tx timeout [ 1389.750317][ T51] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 1390.149991][ T51] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1390.168653][ T51] usb 6-1: can't read configurations, error -71 [ 1391.997923][T20494] Cannot find add_set index 0 as target [ 1392.519197][T20507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1393.644326][T20518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4027'. [ 1393.765094][T20520] ubi: mtd0 is already attached to ubi0 [ 1395.747407][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1396.283395][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4037'. [ 1396.971128][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4040'. [ 1396.992847][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4038'. [ 1397.091477][T20563] ubi: mtd0 is already attached to ubi0 [ 1397.670189][T20565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1401.945830][T20610] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1401.952410][T20610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1402.005398][T20610] vhci_hcd vhci_hcd.0: Device attached [ 1402.244100][ T25] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1405.245788][T20616] vhci_hcd: connection reset by peer [ 1405.247677][T20638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1405.278532][ T52] vhci_hcd: stop threads [ 1405.321219][ T52] vhci_hcd: release socket [ 1405.459673][ T52] vhci_hcd: disconnect device [ 1407.381491][ T25] vhci_hcd: vhci_device speed not set [ 1410.132603][T20684] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4075'. [ 1410.229157][T20684] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4075'. [ 1410.551198][T20687] 9pnet_fd: Insufficient options for proto=fd [ 1411.451307][T20694] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.460828][T20694] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.469688][T20694] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.478566][T20694] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.570550][T20694] vxlan0: entered promiscuous mode [ 1411.597129][T20694] vxlan0: entered allmulticast mode [ 1411.650619][T20694] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1411.659719][T20694] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1411.668755][T20694] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1411.677779][T20694] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1412.691621][ T5919] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1412.981458][ T5919] usb 9-1: Using ep0 maxpacket: 32 [ 1412.991486][ T5919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.020753][ T5919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.063711][ T5919] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1413.099857][ T5919] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1413.121492][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.133039][ T5919] usb 9-1: config 0 descriptor?? [ 1413.141596][T20708] blktrace: Concurrent blktraces are not allowed on sg0 [ 1413.983468][ T5919] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.002E/input/input21 [ 1414.143778][ T5919] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.002E/input/input22 [ 1414.223203][ T5919] kye 0003:0458:5011.002E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 1414.498476][T20720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4083'. [ 1414.913858][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4083'. [ 1414.940965][ T51] usb 9-1: USB disconnect, device number 24 [ 1415.016063][T20717] bond_slave_0: entered promiscuous mode [ 1415.021855][T20717] bond_slave_1: entered promiscuous mode [ 1415.214815][T20717] macvtap6: entered promiscuous mode [ 1415.231454][T20717] bond0: entered promiscuous mode [ 1415.273315][T20717] macvtap6: entered allmulticast mode [ 1415.278894][T20717] bond0: entered allmulticast mode [ 1415.328255][T20717] bond_slave_0: entered allmulticast mode [ 1415.905946][T20717] bond_slave_1: entered allmulticast mode [ 1415.921553][T20717] macvlan2: entered allmulticast mode [ 1415.936060][T20717] team0: entered allmulticast mode [ 1415.960372][T20717] team_slave_0: entered allmulticast mode [ 1415.972123][T20717] team_slave_1: entered allmulticast mode [ 1415.987270][T20717] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 1416.448533][T20720] bond0: left allmulticast mode [ 1416.453675][T20720] bond_slave_0: left allmulticast mode [ 1416.471100][T20720] bond_slave_1: left allmulticast mode [ 1416.491858][T20720] macvlan2: left allmulticast mode [ 1416.514148][T20720] team0: left allmulticast mode [ 1416.519775][T20720] team_slave_0: left allmulticast mode [ 1416.535604][T20720] team_slave_1: left allmulticast mode [ 1416.541312][T20720] bond0: left promiscuous mode [ 1416.559237][T20720] bond_slave_0: left promiscuous mode [ 1416.564785][T20720] bond_slave_1: left promiscuous mode [ 1416.805250][T20742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1416.828276][T20742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1416.921246][T20752] netlink: 'syz.3.4091': attribute type 30 has an invalid length. [ 1416.972592][T20751] veth0_vlan: left promiscuous mode [ 1416.979342][T20751] veth0_vlan: entered promiscuous mode [ 1416.996727][T20742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.005974][T20743] input: syz1 as /devices/virtual/input/input23 [ 1417.013296][T20752] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1417.042101][T20742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.242677][T20772] nftables ruleset with unbound set [ 1418.678929][T20770] blktrace: Concurrent blktraces are not allowed on sg0 [ 1420.292187][T20796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.332965][T20796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.378741][T20801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1420.554670][T20802] ubi: mtd0 is already attached to ubi0 [ 1420.575409][T14740] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1420.931572][T14740] usb 9-1: device descriptor read/64, error -71 [ 1421.273095][T20806] blktrace: Concurrent blktraces are not allowed on sg0 [ 1422.025081][T14740] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1422.171525][T14740] usb 9-1: device descriptor read/64, error -71 [ 1422.229069][T15068] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1422.245597][T15068] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1422.408056][T14740] usb usb9-port1: attempt power cycle [ 1423.302063][T16057] Bluetooth: hci3: command 0x0405 tx timeout [ 1423.492933][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.562395][T14740] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1424.288421][T14740] usb 9-1: device not accepting address 27, error -71 [ 1424.381580][ T29] audit: type=1326 audit(1732804830.165:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1424.436316][ T29] audit: type=1326 audit(1732804830.165:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1424.483851][ T29] audit: type=1326 audit(1732804830.165:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1424.533679][ T29] audit: type=1326 audit(1732804830.165:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1424.556821][ T29] audit: type=1326 audit(1732804830.165:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1425.356546][ T29] audit: type=1326 audit(1732804830.165:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1425.464523][ T29] audit: type=1326 audit(1732804830.165:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1425.720590][ T29] audit: type=1326 audit(1732804830.165:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055580809 code=0x7ffc0000 [ 1425.949940][ T29] audit: type=1326 audit(1732804830.165:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305557f170 code=0x7ffc0000 [ 1426.044176][T20848] blktrace: Concurrent blktraces are not allowed on sg0 [ 1426.230604][ T29] audit: type=1326 audit(1732804830.165:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20830 comm="syz.5.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305557f170 code=0x7ffc0000 [ 1426.324626][T20852] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1426.741255][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 1429.635422][T20892] blktrace: Concurrent blktraces are not allowed on sg0 [ 1431.077522][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4139'. [ 1432.852712][T20930] FAULT_INJECTION: forcing a failure. [ 1432.852712][T20930] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.951237][T20930] CPU: 1 UID: 0 PID: 20930 Comm: syz.0.4145 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1432.961732][T20930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1432.971821][T20930] Call Trace: [ 1432.975132][T20930] [ 1432.978092][T20930] dump_stack_lvl+0x241/0x360 [ 1432.982805][T20930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1432.988034][T20930] ? __pfx__printk+0x10/0x10 [ 1432.992667][T20930] ? __kmalloc_cache_noprof+0x48/0x390 [ 1432.998166][T20930] ? __pfx___might_resched+0x10/0x10 [ 1433.003500][T20930] should_fail_ex+0x3b0/0x4e0 [ 1433.008204][T20930] should_failslab+0xac/0x100 [ 1433.012891][T20930] __kmalloc_cache_noprof+0x70/0x390 [ 1433.018192][T20930] ? ipv6_flowlabel_opt+0x10c5/0x29b0 [ 1433.023584][T20930] ipv6_flowlabel_opt+0x10c5/0x29b0 [ 1433.028812][T20930] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1433.034369][T20930] ? mark_lock+0x9a/0x360 [ 1433.038702][T20930] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1433.044791][T20930] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1433.051120][T20930] ? __local_bh_enable_ip+0x168/0x200 [ 1433.056493][T20930] ? lockdep_hardirqs_on+0x99/0x150 [ 1433.061692][T20930] ? __local_bh_enable_ip+0x168/0x200 [ 1433.067063][T20930] ? do_ipv6_setsockopt+0xbf7/0x3640 [ 1433.072373][T20930] do_ipv6_setsockopt+0xe8b/0x3640 [ 1433.077514][T20930] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1433.083068][T20930] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1433.089050][T20930] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1433.095388][T20930] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1433.100586][T20930] ? finish_task_switch+0x1e5/0x870 [ 1433.105781][T20930] ? lockdep_hardirqs_on+0x99/0x150 [ 1433.110993][T20930] ? finish_task_switch+0x1e5/0x870 [ 1433.116207][T20930] ? __schedule+0x1803/0x4be0 [ 1433.120892][T20930] ? mark_lock+0x9a/0x360 [ 1433.125235][T20930] ? __lock_acquire+0x1397/0x2100 [ 1433.130266][T20930] ipv6_setsockopt+0x5d/0x170 [ 1433.134946][T20930] rawv6_setsockopt+0x327/0x740 [ 1433.139791][T20930] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1433.145180][T20930] ? __pfx_lock_acquire+0x10/0x10 [ 1433.150219][T20930] ? sock_common_setsockopt+0x37/0xc0 [ 1433.155608][T20930] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1433.161508][T20930] do_sock_setsockopt+0x3af/0x720 [ 1433.166532][T20930] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1433.172075][T20930] ? __fget_files+0x395/0x410 [ 1433.176751][T20930] ? __fget_files+0x2a/0x410 [ 1433.181347][T20930] __x64_sys_setsockopt+0x1ee/0x280 [ 1433.186552][T20930] do_syscall_64+0xf3/0x230 [ 1433.191049][T20930] ? clear_bhb_loop+0x35/0x90 [ 1433.195724][T20930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.201628][T20930] RIP: 0033:0x7f931c380809 [ 1433.206062][T20930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.225689][T20930] RSP: 002b:00007f931d24c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1433.234115][T20930] RAX: ffffffffffffffda RBX: 00007f931c545fa0 RCX: 00007f931c380809 [ 1433.242085][T20930] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1433.250051][T20930] RBP: 00007f931d24c0a0 R08: 0000000000000020 R09: 0000000000000000 [ 1433.258018][T20930] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1433.265983][T20930] R13: 0000000000000000 R14: 00007f931c545fa0 R15: 00007ffc74c9cbc8 [ 1433.273986][T20930] [ 1435.196466][T20935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4149'. [ 1435.596479][T20950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1435.618760][T20950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1435.664886][T20951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1435.786408][T20952] blktrace: Concurrent blktraces are not allowed on sg0 [ 1438.788993][T20970] Cannot find set identified by id 0 to match [ 1439.328684][T20968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4157'. [ 1440.135414][T20968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4157'. [ 1440.432313][T20976] netlink: 'syz.5.4157': attribute type 30 has an invalid length. [ 1440.754834][T20976] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1441.357496][T20996] blktrace: Concurrent blktraces are not allowed on sg0 [ 1442.071452][ T51] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1444.424841][T21017] FAULT_INJECTION: forcing a failure. [ 1444.424841][T21017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.568209][T21022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.580544][T21022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.280773][T21017] CPU: 0 UID: 0 PID: 21017 Comm: syz.3.4171 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1445.291255][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1445.301341][T21017] Call Trace: [ 1445.304644][T21017] [ 1445.307594][T21017] dump_stack_lvl+0x241/0x360 [ 1445.312301][T21017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1445.317520][T21017] ? __pfx__printk+0x10/0x10 [ 1445.322144][T21017] ? snprintf+0xda/0x120 [ 1445.326404][T21017] should_fail_ex+0x3b0/0x4e0 [ 1445.331071][T21017] _copy_to_user+0x31/0xb0 [ 1445.335561][T21017] simple_read_from_buffer+0xca/0x150 [ 1445.340945][T21017] proc_fail_nth_read+0x1e9/0x250 [ 1445.345967][T21017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1445.351505][T21017] ? rw_verify_area+0x55e/0x6f0 [ 1445.356343][T21017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1445.361877][T21017] vfs_read+0x1fc/0xb70 [ 1445.366048][T21017] ? __pfx___mutex_lock+0x10/0x10 [ 1445.371109][T21017] ? __pfx_vfs_read+0x10/0x10 [ 1445.375790][T21017] ? __fget_files+0x2a/0x410 [ 1445.380368][T21017] ? __fget_files+0x395/0x410 [ 1445.385040][T21017] ? __fget_files+0x2a/0x410 [ 1445.389630][T21017] ksys_read+0x18f/0x2b0 [ 1445.394146][T21017] ? __pfx_ksys_read+0x10/0x10 [ 1445.398906][T21017] ? do_syscall_64+0x100/0x230 [ 1445.403683][T21017] ? do_syscall_64+0xb6/0x230 [ 1445.408351][T21017] do_syscall_64+0xf3/0x230 [ 1445.412841][T21017] ? clear_bhb_loop+0x35/0x90 [ 1445.417501][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.423380][T21017] RIP: 0033:0x7f041137f21c [ 1445.427781][T21017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1445.447462][T21017] RSP: 002b:00007f0412189050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1445.455863][T21017] RAX: ffffffffffffffda RBX: 00007f0411545fa0 RCX: 00007f041137f21c [ 1445.463836][T21017] RDX: 000000000000000f RSI: 00007f04121890b0 RDI: 0000000000000005 [ 1445.471792][T21017] RBP: 00007f04121890a0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.479760][T21017] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1445.487734][T21017] R13: 0000000000000000 R14: 00007f0411545fa0 R15: 00007fff1360c568 [ 1445.495727][T21017] [ 1445.498866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.461542][T21040] blktrace: Concurrent blktraces are not allowed on sg0 [ 1448.601152][T21067] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 1448.914393][T21072] FAULT_INJECTION: forcing a failure. [ 1448.914393][T21072] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.952948][T21072] CPU: 0 UID: 0 PID: 21072 Comm: syz.7.4185 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1448.963434][T21072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1448.973533][T21072] Call Trace: [ 1448.976833][T21072] [ 1448.979789][T21072] dump_stack_lvl+0x241/0x360 [ 1448.984546][T21072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1448.989799][T21072] ? __pfx__printk+0x10/0x10 [ 1448.994423][T21072] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1449.000434][T21072] ? __pfx___might_resched+0x10/0x10 [ 1449.005762][T21072] should_fail_ex+0x3b0/0x4e0 [ 1449.010466][T21072] should_failslab+0xac/0x100 [ 1449.015180][T21072] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1449.021016][T21072] ? __alloc_skb+0x1c3/0x440 [ 1449.025635][T21072] __alloc_skb+0x1c3/0x440 [ 1449.030091][T21072] ? __pfx___alloc_skb+0x10/0x10 [ 1449.035055][T21072] ? smack_socket_getpeersec_dgram+0x210/0x410 [ 1449.041255][T21072] netlink_sendmsg+0x638/0xcb0 [ 1449.046060][T21072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1449.051371][T21072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1449.056704][T21072] __sock_sendmsg+0x221/0x270 [ 1449.061409][T21072] ____sys_sendmsg+0x52a/0x7e0 [ 1449.066197][T21072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1449.071534][T21072] ? __fget_files+0x2a/0x410 [ 1449.076157][T21072] ? __fget_files+0x2a/0x410 [ 1449.080885][T21072] __sys_sendmsg+0x269/0x350 [ 1449.085506][T21072] ? __pfx_lock_release+0x10/0x10 [ 1449.090563][T21072] ? __pfx___sys_sendmsg+0x10/0x10 [ 1449.095709][T21072] ? __pfx_vfs_write+0x10/0x10 [ 1449.100511][T21072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1449.106853][T21072] ? do_syscall_64+0x100/0x230 [ 1449.111644][T21072] ? do_syscall_64+0xb6/0x230 [ 1449.116437][T21072] do_syscall_64+0xf3/0x230 [ 1449.120957][T21072] ? clear_bhb_loop+0x35/0x90 [ 1449.125656][T21072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.131595][T21072] RIP: 0033:0x7f420ad80809 [ 1449.135999][T21072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1449.155613][T21072] RSP: 002b:00007f420bb5e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1449.164039][T21072] RAX: ffffffffffffffda RBX: 00007f420af45fa0 RCX: 00007f420ad80809 [ 1449.172009][T21072] RDX: 0000000000008010 RSI: 0000000020000680 RDI: 0000000000000004 [ 1449.179990][T21072] RBP: 00007f420bb5e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1449.187986][T21072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.195972][T21072] R13: 0000000000000000 R14: 00007f420af45fa0 R15: 00007ffc901cf768 [ 1449.203964][T21072] [ 1449.381480][T14740] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1449.831536][T14740] usb 9-1: Using ep0 maxpacket: 32 [ 1449.838052][T14740] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.880619][T14740] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.909236][T14740] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1449.916100][T14740] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1449.926200][T14740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.943624][T14740] usb 9-1: config 0 descriptor?? [ 1451.520269][T14740] kye 0003:0458:5012.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1451.537602][T14740] kye 0003:0458:5012.0030: hidraw0: USB HID v0.00 Device [HID 0458:5012] on usb-dummy_hcd.8-1/input0 [ 1451.559378][T21091] usb usb8: usbfs: process 21091 (syz.0.4189) did not claim interface 0 before use [ 1451.576204][T14740] kye 0003:0458:5012.0030: tablet-enabling feature report not found [ 1451.621487][T14740] kye 0003:0458:5012.0030: tablet enabling failed [ 1452.540596][T21102] blktrace: Concurrent blktraces are not allowed on sg0 [ 1452.914577][ T25] usb 9-1: USB disconnect, device number 29 [ 1452.982498][T21100] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 1455.886198][T21144] blktrace: Concurrent blktraces are not allowed on sg0 [ 1455.901787][T16057] Bluetooth: hci3: command 0x0405 tx timeout [ 1456.247151][T16352] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1456.267235][T16352] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1456.501592][ T5919] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1460.773825][T21189] FAULT_INJECTION: forcing a failure. [ 1460.773825][T21189] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.800133][T21189] CPU: 0 UID: 0 PID: 21189 Comm: syz.3.4216 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1460.810621][T21189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1460.820707][T21189] Call Trace: [ 1460.824013][T21189] [ 1460.826964][T21189] dump_stack_lvl+0x241/0x360 [ 1460.831673][T21189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1460.836894][T21189] ? __pfx__printk+0x10/0x10 [ 1460.841514][T21189] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1460.846915][T21189] ? __pfx___might_resched+0x10/0x10 [ 1460.852237][T21189] should_fail_ex+0x3b0/0x4e0 [ 1460.856950][T21189] should_failslab+0xac/0x100 [ 1460.861658][T21189] __kmalloc_node_noprof+0xe1/0x4d0 [ 1460.866883][T21189] ? crypto_create_tfm_node+0x88/0x3d0 [ 1460.872379][T21189] crypto_create_tfm_node+0x88/0x3d0 [ 1460.877704][T21189] crypto_alloc_tfm_node+0x161/0x360 [ 1460.883021][T21189] esp6_init_state+0x611/0x10b0 [ 1460.887896][T21189] ? __pfx_esp6_init_state+0x10/0x10 [ 1460.893181][T21189] ? __xfrm_init_state+0x708/0xea0 [ 1460.898310][T21189] ? __pfx_lock_release+0x10/0x10 [ 1460.903353][T21189] __xfrm_init_state+0x9db/0xea0 [ 1460.908327][T21189] xfrm_add_sa+0x2c6e/0x3d70 [ 1460.912952][T21189] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1460.917923][T21189] ? __nla_parse+0x40/0x60 [ 1460.922371][T21189] xfrm_user_rcv_msg+0x890/0xb90 [ 1460.927337][T21189] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1460.932817][T21189] ? __mutex_trylock_common+0x183/0x2e0 [ 1460.938350][T21189] ? __pfx___might_resched+0x10/0x10 [ 1460.943637][T21189] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1460.949535][T21189] netlink_rcv_skb+0x1e3/0x430 [ 1460.954289][T21189] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1460.959744][T21189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1460.965035][T21189] xfrm_netlink_rcv+0x79/0x90 [ 1460.969697][T21189] netlink_unicast+0x7f6/0x990 [ 1460.974456][T21189] ? __pfx_netlink_unicast+0x10/0x10 [ 1460.979728][T21189] ? __virt_addr_valid+0x183/0x530 [ 1460.984831][T21189] ? __check_object_size+0x48e/0x900 [ 1460.990104][T21189] netlink_sendmsg+0x8e4/0xcb0 [ 1460.994873][T21189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.000156][T21189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.005440][T21189] __sock_sendmsg+0x221/0x270 [ 1461.010109][T21189] ____sys_sendmsg+0x52a/0x7e0 [ 1461.014864][T21189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1461.020134][T21189] ? __fget_files+0x2a/0x410 [ 1461.024721][T21189] ? __fget_files+0x2a/0x410 [ 1461.029303][T21189] __sys_sendmsg+0x269/0x350 [ 1461.033879][T21189] ? __pfx_lock_release+0x10/0x10 [ 1461.038891][T21189] ? __pfx___sys_sendmsg+0x10/0x10 [ 1461.044004][T21189] ? __pfx_vfs_write+0x10/0x10 [ 1461.048791][T21189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1461.055189][T21189] ? do_syscall_64+0x100/0x230 [ 1461.059970][T21189] ? do_syscall_64+0xb6/0x230 [ 1461.064642][T21189] do_syscall_64+0xf3/0x230 [ 1461.069152][T21189] ? clear_bhb_loop+0x35/0x90 [ 1461.073849][T21189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.079731][T21189] RIP: 0033:0x7f0411380809 [ 1461.084135][T21189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1461.103738][T21189] RSP: 002b:00007f0412189058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1461.112139][T21189] RAX: ffffffffffffffda RBX: 00007f0411545fa0 RCX: 00007f0411380809 [ 1461.120149][T21189] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1461.128124][T21189] RBP: 00007f04121890a0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.136138][T21189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.144249][T21189] R13: 0000000000000000 R14: 00007f0411545fa0 R15: 00007fff1360c568 [ 1461.152231][T21189] [ 1461.351721][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1461.911437][ T5919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1461.932302][ T5919] usb 6-1: no configurations [ 1461.936958][ T5919] usb 6-1: can't read configurations, error -22 [ 1462.120521][T21208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1462.138974][ T5919] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1462.162099][T21208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1462.854651][ T5919] usb 6-1: device descriptor read/64, error -32 [ 1463.058149][T21212] netlink: 'syz.0.4224': attribute type 30 has an invalid length. [ 1463.151721][T21212] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1463.222691][ T5919] usb usb6-port1: attempt power cycle [ 1463.806464][ T5919] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1463.844368][ T5919] usb 6-1: device descriptor read/8, error -32 [ 1464.121728][ T5919] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1464.181953][ T5919] usb 6-1: device descriptor read/8, error -32 [ 1464.325391][ T5919] usb usb6-port1: unable to enumerate USB device [ 1465.199107][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4235'. [ 1465.252880][T21249] macvtap5: entered promiscuous mode [ 1465.258407][T21249] macvtap5: entered allmulticast mode [ 1465.314391][T21249] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1465.625086][T21256] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1467.610519][T21276] blktrace: Concurrent blktraces are not allowed on sg0 [ 1467.754004][T21280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.764268][T21280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.775076][T21280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.858956][T21281] syz.5.4244: attempt to access beyond end of device [ 1467.858956][T21281] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1467.873122][T21281] SQUASHFS error: Failed to read block 0x0: -5 [ 1467.879631][T21281] unable to read squashfs_super_block [ 1468.522391][T21280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.800231][T21288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.838679][T21288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.885306][T21288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.962004][T21288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.098108][T21294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1469.792531][T16352] IPVS: starting estimator thread 0... [ 1470.169934][T21298] IPVS: using max 19 ests per chain, 45600 per kthread [ 1470.803879][T21317] FAULT_INJECTION: forcing a failure. [ 1470.803879][T21317] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.816618][T21317] CPU: 1 UID: 0 PID: 21317 Comm: syz.0.4255 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1470.827048][T21317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1470.837125][T21317] Call Trace: [ 1470.840416][T21317] [ 1470.843361][T21317] dump_stack_lvl+0x241/0x360 [ 1470.848059][T21317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1470.853269][T21317] ? __pfx__printk+0x10/0x10 [ 1470.857883][T21317] ? fs_reclaim_acquire+0x93/0x130 [ 1470.863012][T21317] ? __pfx___might_resched+0x10/0x10 [ 1470.868316][T21317] ? dynamic_dname+0x141/0x1b0 [ 1470.873102][T21317] should_fail_ex+0x3b0/0x4e0 [ 1470.877812][T21317] should_failslab+0xac/0x100 [ 1470.882505][T21317] __kmalloc_noprof+0xdd/0x4c0 [ 1470.887281][T21317] ? tomoyo_encode+0x26f/0x540 [ 1470.892064][T21317] tomoyo_encode+0x26f/0x540 [ 1470.896678][T21317] ? __pfx_sockfs_dname+0x10/0x10 [ 1470.901725][T21317] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1470.907388][T21317] tomoyo_path_number_perm+0x236/0x860 [ 1470.912861][T21317] ? __lock_acquire+0x1397/0x2100 [ 1470.917898][T21317] ? tomoyo_path_number_perm+0x206/0x860 [ 1470.923546][T21317] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1470.929577][T21317] ? __fget_files+0x2a/0x410 [ 1470.934187][T21317] ? __fget_files+0x2a/0x410 [ 1470.938799][T21317] security_file_ioctl+0xc6/0x2a0 [ 1470.943846][T21317] __se_sys_ioctl+0x46/0x170 [ 1470.948457][T21317] do_syscall_64+0xf3/0x230 [ 1470.952976][T21317] ? clear_bhb_loop+0x35/0x90 [ 1470.957667][T21317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.963592][T21317] RIP: 0033:0x7f931c380809 [ 1470.968048][T21317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.987680][T21317] RSP: 002b:00007f931d20a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.996128][T21317] RAX: ffffffffffffffda RBX: 00007f931c546160 RCX: 00007f931c380809 [ 1471.004124][T21317] RDX: 00000000200005c0 RSI: 00000000000089f1 RDI: 000000000000000a [ 1471.012116][T21317] RBP: 00007f931d20a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.020124][T21317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.028147][T21317] R13: 0000000000000000 R14: 00007f931c546160 R15: 00007ffc74c9cbc8 [ 1471.036163][T21317] [ 1471.040823][T21317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1471.531741][T21320] blktrace: Concurrent blktraces are not allowed on sg0 [ 1473.144145][T21338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.200018][T21338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.261548][T21338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.270163][T21338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.283683][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4263'. [ 1473.362333][T21341] bond_slave_0: entered promiscuous mode [ 1473.368189][T21341] bond_slave_1: entered promiscuous mode [ 1473.423735][T21341] macvtap7: entered promiscuous mode [ 1473.439532][T21341] bond0: entered promiscuous mode [ 1473.465701][T21341] macvtap7: entered allmulticast mode [ 1473.481442][T21341] bond0: entered allmulticast mode [ 1473.494839][T21341] bond_slave_0: entered allmulticast mode [ 1473.501528][T21341] bond_slave_1: entered allmulticast mode [ 1473.511580][T21341] macvlan2: entered allmulticast mode [ 1473.524320][T21341] team0: entered allmulticast mode [ 1473.534509][T21341] team_slave_0: entered allmulticast mode [ 1473.544672][T21341] team_slave_1: entered allmulticast mode [ 1473.588342][T21341] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 1474.115843][T21347] cgroup: Invalid name [ 1474.228207][T21354] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4265'. [ 1474.303653][T21354] FAULT_INJECTION: forcing a failure. [ 1474.303653][T21354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.384881][T21354] CPU: 0 UID: 0 PID: 21354 Comm: syz.5.4265 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1474.395370][T21354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1474.405456][T21354] Call Trace: [ 1474.408753][T21354] [ 1474.411712][T21354] dump_stack_lvl+0x241/0x360 [ 1474.416428][T21354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1474.421657][T21354] ? __pfx__printk+0x10/0x10 [ 1474.426284][T21354] ? __pfx_lock_release+0x10/0x10 [ 1474.431346][T21354] should_fail_ex+0x3b0/0x4e0 [ 1474.436064][T21354] _copy_from_iter+0x21f/0x1e70 [ 1474.440946][T21354] ? __virt_addr_valid+0x183/0x530 [ 1474.446086][T21354] ? skb_set_owner_w+0x246/0x380 [ 1474.451051][T21354] ? __pfx_lock_release+0x10/0x10 [ 1474.456110][T21354] ? __pfx__copy_from_iter+0x10/0x10 [ 1474.461515][T21354] ? __virt_addr_valid+0x183/0x530 [ 1474.466650][T21354] ? __virt_addr_valid+0x183/0x530 [ 1474.471759][T21354] ? __virt_addr_valid+0x45f/0x530 [ 1474.476874][T21354] ? __phys_addr_symbol+0x2f/0x70 [ 1474.481905][T21354] ? __check_object_size+0x48e/0x900 [ 1474.487196][T21354] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1474.493018][T21354] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 1474.498764][T21354] ? skb_put+0x114/0x1f0 [ 1474.503011][T21354] tun_get_user+0xebd/0x4890 [ 1474.507624][T21354] ? __lock_acquire+0x1397/0x2100 [ 1474.512647][T21354] ? __pfx_tun_get_user+0x10/0x10 [ 1474.517824][T21354] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1474.523280][T21354] ? tun_get+0x1e/0x2f0 [ 1474.527517][T21354] ? __pfx_lock_release+0x10/0x10 [ 1474.532547][T21354] ? tun_get+0x1e/0x2f0 [ 1474.536699][T21354] ? tun_get+0x27d/0x2f0 [ 1474.540937][T21354] tun_chr_write_iter+0x10d/0x1f0 [ 1474.545960][T21354] vfs_write+0xaeb/0xd30 [ 1474.550254][T21354] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1474.555797][T21354] ? __pfx_vfs_write+0x10/0x10 [ 1474.560570][T21354] ? __fget_files+0x2a/0x410 [ 1474.565182][T21354] ? __fget_files+0x2a/0x410 [ 1474.569774][T21354] ksys_write+0x18f/0x2b0 [ 1474.574103][T21354] ? __pfx_ksys_write+0x10/0x10 [ 1474.578952][T21354] ? do_syscall_64+0x100/0x230 [ 1474.583726][T21354] ? do_syscall_64+0xb6/0x230 [ 1474.588399][T21354] do_syscall_64+0xf3/0x230 [ 1474.592903][T21354] ? clear_bhb_loop+0x35/0x90 [ 1474.597577][T21354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.603462][T21354] RIP: 0033:0x7f3055580809 [ 1474.607869][T21354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1474.627470][T21354] RSP: 002b:00007f3056356058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1474.635895][T21354] RAX: ffffffffffffffda RBX: 00007f3055745fa0 RCX: 00007f3055580809 [ 1474.643863][T21354] RDX: 0000000000000062 RSI: 0000000020000740 RDI: 0000000000000003 [ 1474.651842][T21354] RBP: 00007f30563560a0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.659809][T21354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.667773][T21354] R13: 0000000000000000 R14: 00007f3055745fa0 R15: 00007ffc59208a68 [ 1474.675749][T21354] [ 1474.959071][T21366] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4270'. [ 1474.982125][T21366] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4270'. [ 1475.051921][T21367] blktrace: Concurrent blktraces are not allowed on sg0 [ 1475.663683][T21369] netlink: 'syz.8.4270': attribute type 30 has an invalid length. [ 1475.724664][T21369] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1475.829862][T21377] FAULT_INJECTION: forcing a failure. [ 1475.829862][T21377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.883078][T21377] CPU: 1 UID: 0 PID: 21377 Comm: syz.5.4271 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1475.893559][T21377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1475.903067][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4274'. [ 1475.903622][T21377] Call Trace: [ 1475.915759][T21377] [ 1475.918700][T21377] dump_stack_lvl+0x241/0x360 [ 1475.923405][T21377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1475.928628][T21377] ? __pfx__printk+0x10/0x10 [ 1475.933255][T21377] ? snprintf+0xda/0x120 [ 1475.937531][T21377] should_fail_ex+0x3b0/0x4e0 [ 1475.942246][T21377] _copy_to_user+0x31/0xb0 [ 1475.946694][T21377] simple_read_from_buffer+0xca/0x150 [ 1475.952099][T21377] proc_fail_nth_read+0x1e9/0x250 [ 1475.957153][T21377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1475.962729][T21377] ? rw_verify_area+0x55e/0x6f0 [ 1475.967604][T21377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1475.973174][T21377] vfs_read+0x1fc/0xb70 [ 1475.977360][T21377] ? __pfx___mutex_lock+0x10/0x10 [ 1475.982401][T21377] ? __pfx_vfs_read+0x10/0x10 [ 1475.987096][T21377] ? __se_sys_fsconfig+0xd74/0xf60 [ 1475.992241][T21377] ? __fget_files+0x2a/0x410 [ 1475.996859][T21377] ? __fget_files+0x395/0x410 [ 1475.999656][T21379] macvtap7: entered promiscuous mode [ 1476.001537][T21377] ? __fget_files+0x2a/0x410 [ 1476.001580][T21377] ksys_read+0x18f/0x2b0 [ 1476.001607][T21377] ? __pfx_ksys_read+0x10/0x10 [ 1476.001630][T21377] ? do_syscall_64+0x100/0x230 [ 1476.001653][T21377] ? do_syscall_64+0xb6/0x230 [ 1476.010207][T21379] macvtap7: entered allmulticast mode [ 1476.011487][T21377] do_syscall_64+0xf3/0x230 [ 1476.011514][T21377] ? clear_bhb_loop+0x35/0x90 [ 1476.011539][T21377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.020750][T21379] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 1476.025280][T21377] RIP: 0033:0x7f305557f21c [ 1476.025312][T21377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1476.025328][T21377] RSP: 002b:00007f3056356050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1476.025350][T21377] RAX: ffffffffffffffda RBX: 00007f3055745fa0 RCX: 00007f305557f21c [ 1476.025365][T21377] RDX: 000000000000000f RSI: 00007f30563560b0 RDI: 0000000000000004 [ 1476.042231][T14740] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1476.044566][T21377] RBP: 00007f30563560a0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.044590][T21377] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1476.044602][T21377] R13: 0000000000000000 R14: 00007f3055745fa0 R15: 00007ffc59208a68 [ 1476.044633][T21377] [ 1476.225817][T14740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1476.237522][T14740] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1476.261381][T14740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.282303][T14740] usb 9-1: config 0 descriptor?? [ 1476.493776][T14740] ath6kl: Failed to submit usb control message: -71 [ 1476.500694][T14740] ath6kl: unable to send the bmi data to the device: -71 [ 1476.508566][T14740] ath6kl: Unable to send get target info: -71 [ 1476.541361][T14740] ath6kl: Failed to init ath6kl core: -71 [ 1476.548010][T14740] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1476.601484][T14740] usb 9-1: USB disconnect, device number 30 [ 1476.721612][T16057] Bluetooth: hci3: command 0x0405 tx timeout [ 1477.686834][T21403] program syz.5.4281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1477.763158][T21403] sctp: [Deprecated]: syz.5.4281 (pid 21403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1477.763158][T21403] Use struct sctp_sack_info instead [ 1478.517122][T21406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.526101][T21406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.568127][T21407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.575292][T21407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.584130][T21407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.591213][T21407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.070647][T21411] blktrace: Concurrent blktraces are not allowed on sg0 [ 1480.844099][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1480.896056][T21431] macvtap8: entered promiscuous mode [ 1480.928199][T21431] macvtap8: entered allmulticast mode [ 1480.946684][T21431] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 1482.611825][ T51] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1482.864942][ T51] usb 9-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 1483.056208][ T51] usb 9-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 1483.123454][ T51] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.131809][ T51] usb 9-1: Product: syz [ 1483.135998][ T51] usb 9-1: Manufacturer: syz [ 1483.140620][ T51] usb 9-1: SerialNumber: syz [ 1483.156775][ T51] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input24 [ 1483.252941][T21456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.288260][T21456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.405624][T21458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4296'. [ 1483.421973][T21458] overlay: Bad value for 'xino' [ 1483.440516][T21459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.463314][T21459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.477088][ T5201] bcm5974 9-1:1.0: could not read from device [ 1483.488955][ T51] usb 9-1: USB disconnect, device number 31 [ 1483.749736][T21469] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4301'. [ 1483.769184][T21469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4301'. [ 1484.473872][T16057] Bluetooth: hci3: command 0x0405 tx timeout [ 1484.884792][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.148559][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4303'. [ 1486.414162][T21486] macvtap8: entered promiscuous mode [ 1486.486328][T21486] macvtap8: entered allmulticast mode [ 1486.505696][T21486] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 1486.527747][T21492] FAULT_INJECTION: forcing a failure. [ 1486.527747][T21492] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.803653][T21492] CPU: 0 UID: 0 PID: 21492 Comm: syz.3.4308 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1486.814133][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1486.824209][T21492] Call Trace: [ 1486.827497][T21492] [ 1486.830426][T21492] dump_stack_lvl+0x241/0x360 [ 1486.835106][T21492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1486.840295][T21492] ? __pfx__printk+0x10/0x10 [ 1486.844887][T21492] ? __kmalloc_noprof+0xb5/0x4c0 [ 1486.849817][T21492] ? __pfx___might_resched+0x10/0x10 [ 1486.855104][T21492] should_fail_ex+0x3b0/0x4e0 [ 1486.859779][T21492] should_failslab+0xac/0x100 [ 1486.864482][T21492] __kmalloc_noprof+0xdd/0x4c0 [ 1486.869238][T21492] ? security_sk_alloc+0x53/0x360 [ 1486.874353][T21492] security_sk_alloc+0x53/0x360 [ 1486.879201][T21492] sk_prot_alloc+0xfa/0x210 [ 1486.883699][T21492] ? sk_alloc+0x26/0x370 [ 1486.887935][T21492] sk_alloc+0x38/0x370 [ 1486.891996][T21492] ? bpf_test_init+0x15a/0x180 [ 1486.896753][T21492] ? bpf_ctx_init+0x162/0x1b0 [ 1486.901431][T21492] bpf_prog_test_run_skb+0x3ab/0x1820 [ 1486.906808][T21492] ? __pfx_lock_release+0x10/0x10 [ 1486.911830][T21492] ? __pfx___might_resched+0x10/0x10 [ 1486.917117][T21492] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1486.922912][T21492] ? __fget_files+0x2a/0x410 [ 1486.927672][T21492] ? fput+0x21b/0x290 [ 1486.931672][T21492] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1486.937471][T21492] bpf_prog_test_run+0x2e4/0x360 [ 1486.942406][T21492] __sys_bpf+0x48d/0x810 [ 1486.946640][T21492] ? __pfx___sys_bpf+0x10/0x10 [ 1486.951415][T21492] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1486.957396][T21492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1486.963741][T21492] ? do_syscall_64+0x100/0x230 [ 1486.968537][T21492] __x64_sys_bpf+0x7c/0x90 [ 1486.972971][T21492] do_syscall_64+0xf3/0x230 [ 1486.977481][T21492] ? clear_bhb_loop+0x35/0x90 [ 1486.982162][T21492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.988052][T21492] RIP: 0033:0x7f0411380809 [ 1486.992467][T21492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.012072][T21492] RSP: 002b:00007f0412189058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1487.020495][T21492] RAX: ffffffffffffffda RBX: 00007f0411545fa0 RCX: 00007f0411380809 [ 1487.028653][T21492] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 1487.036631][T21492] RBP: 00007f04121890a0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.044607][T21492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.052575][T21492] R13: 0000000000000000 R14: 00007f0411545fa0 R15: 00007fff1360c568 [ 1487.060555][T21492] [ 1487.063607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.547105][T21500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.554297][T21500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.569409][T21500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.576605][T21500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.881652][T16057] Bluetooth: hci3: command 0x0405 tx timeout [ 1489.122176][T21535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.144670][T21535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.337942][T21536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.345174][T21536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.358623][T21536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.365811][T21536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.995581][T21541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4321'. [ 1490.071576][T21541] bond_slave_0: entered promiscuous mode [ 1490.077370][T21541] bond_slave_1: entered promiscuous mode [ 1490.142075][T21541] macvtap1: entered promiscuous mode [ 1490.147445][T21541] bond0: entered promiscuous mode [ 1490.191837][T21541] macvtap1: entered allmulticast mode [ 1490.211772][T21541] bond0: entered allmulticast mode [ 1490.220058][T21541] bond_slave_0: entered allmulticast mode [ 1490.244127][T21541] bond_slave_1: entered allmulticast mode [ 1490.265039][T21541] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1490.308944][T21542] bond0: left allmulticast mode [ 1490.321607][ T5919] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1490.329240][T21542] bond_slave_0: left allmulticast mode [ 1490.341464][T21542] bond_slave_1: left allmulticast mode [ 1490.350659][ T5919] hid-generic 0000:0000:0000.0032: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1490.371907][T21542] bond0: left promiscuous mode [ 1490.381949][T21542] bond_slave_0: left promiscuous mode [ 1490.387452][T21542] bond_slave_1: left promiscuous mode [ 1490.641717][T14740] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1490.940616][T21554] FAULT_INJECTION: forcing a failure. [ 1490.940616][T21554] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.990172][T21554] CPU: 1 UID: 0 PID: 21554 Comm: syz.5.4326 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1491.000657][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1491.010742][T21554] Call Trace: [ 1491.014040][T21554] [ 1491.016986][T21554] dump_stack_lvl+0x241/0x360 [ 1491.021685][T21554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1491.026900][T21554] ? __pfx__printk+0x10/0x10 [ 1491.031514][T21554] should_fail_ex+0x3b0/0x4e0 [ 1491.036212][T21554] should_failslab+0xac/0x100 [ 1491.040913][T21554] ? skb_clone+0x20c/0x390 [ 1491.045358][T21554] kmem_cache_alloc_noprof+0x70/0x380 [ 1491.050751][T21554] skb_clone+0x20c/0x390 [ 1491.055017][T21554] __netlink_deliver_tap+0x3cc/0x7f0 [ 1491.060332][T21554] ? netlink_deliver_tap+0x2e/0x1b0 [ 1491.065547][T21554] netlink_deliver_tap+0x19d/0x1b0 [ 1491.070690][T21554] netlink_unicast+0x7c4/0x990 [ 1491.075487][T21554] ? __pfx_netlink_unicast+0x10/0x10 [ 1491.080792][T21554] ? __virt_addr_valid+0x183/0x530 [ 1491.085925][T21554] ? __check_object_size+0x48e/0x900 [ 1491.091231][T21554] netlink_sendmsg+0x8e4/0xcb0 [ 1491.096028][T21554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.101340][T21554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.106636][T21554] __sock_sendmsg+0x221/0x270 [ 1491.111342][T21554] ____sys_sendmsg+0x52a/0x7e0 [ 1491.116198][T21554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1491.121503][T21554] ? __fget_files+0x2a/0x410 [ 1491.126126][T21554] ? __fget_files+0x2a/0x410 [ 1491.130746][T21554] __sys_sendmsg+0x269/0x350 [ 1491.135359][T21554] ? __pfx_lock_release+0x10/0x10 [ 1491.140403][T21554] ? __pfx___sys_sendmsg+0x10/0x10 [ 1491.145550][T21554] ? __pfx_vfs_write+0x10/0x10 [ 1491.150368][T21554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1491.156721][T21554] ? do_syscall_64+0x100/0x230 [ 1491.161511][T21554] ? do_syscall_64+0xb6/0x230 [ 1491.166204][T21554] do_syscall_64+0xf3/0x230 [ 1491.170721][T21554] ? clear_bhb_loop+0x35/0x90 [ 1491.175428][T21554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.181350][T21554] RIP: 0033:0x7f3055580809 [ 1491.185785][T21554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1491.205515][T21554] RSP: 002b:00007f3056356058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.213985][T21554] RAX: ffffffffffffffda RBX: 00007f3055745fa0 RCX: 00007f3055580809 [ 1491.221982][T21554] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1491.229973][T21554] RBP: 00007f30563560a0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.237966][T21554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.245966][T21554] R13: 0000000000000000 R14: 00007f3055745fa0 R15: 00007ffc59208a68 [ 1491.253983][T21554] [ 1491.386492][T14740] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1491.411486][T14740] usb 9-1: no configurations [ 1491.416146][T14740] usb 9-1: can't read configurations, error -22 [ 1491.561671][T21561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4328'. [ 1491.660706][T21566] loop5: detected capacity change from 0 to 7 [ 1491.669738][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.678245][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.687037][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.695472][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.703921][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.712488][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.721294][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.729629][T21566] ldm_validate_partition_table(): Disk read failed. [ 1491.736757][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.747937][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.756263][T21566] Buffer I/O error on dev loop5, logical block 0, async page read [ 1491.764660][T21566] Dev loop5: unable to read RDB block 0 [ 1491.771177][T21566] loop5: unable to read partition table [ 1491.777511][T21566] loop5: partition table beyond EOD, truncated [ 1491.783897][T21566] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1491.783897][T21566] ) failed (rc=-5) [ 1492.725710][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1492.739528][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1492.750896][T21575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1492.827323][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4334'. [ 1493.011434][T14740] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1493.148156][T21581] macvtap6: entered promiscuous mode [ 1493.168951][T14740] usb 9-1: config 5 has an invalid interface number: 123 but max is 0 [ 1493.188032][T21581] macvtap6: entered allmulticast mode [ 1493.190138][T14740] usb 9-1: config 5 has no interface number 0 [ 1493.218869][T14740] usb 9-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1493.223188][T21581] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 1493.286150][T14740] usb 9-1: config 5 interface 123 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1493.312355][T14740] usb 9-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1493.368185][T14740] usb 9-1: config 5 interface 123 has no altsetting 0 [ 1493.400750][T14740] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1493.423988][T14740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.434173][T14740] usb 9-1: Product: syz [ 1493.470894][T14740] usb 9-1: Manufacturer: syz [ 1493.495692][T14740] usb 9-1: SerialNumber: syz [ 1493.541648][T21596] FAULT_INJECTION: forcing a failure. [ 1493.541648][T21596] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.623489][T21596] CPU: 0 UID: 0 PID: 21596 Comm: syz.5.4338 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1493.633980][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1493.644067][T21596] Call Trace: [ 1493.647368][T21596] [ 1493.650315][T21596] dump_stack_lvl+0x241/0x360 [ 1493.655023][T21596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.660251][T21596] ? __pfx__printk+0x10/0x10 [ 1493.664888][T21596] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1493.670287][T21596] ? __pfx___might_resched+0x10/0x10 [ 1493.675603][T21596] ? rcu_is_watching+0x15/0xb0 [ 1493.680402][T21596] should_fail_ex+0x3b0/0x4e0 [ 1493.685106][T21596] should_failslab+0xac/0x100 [ 1493.689812][T21596] __kmalloc_node_noprof+0xe1/0x4d0 [ 1493.695041][T21596] ? __kvmalloc_node_noprof+0x72/0x190 [ 1493.700527][T21596] __kvmalloc_node_noprof+0x72/0x190 [ 1493.705903][T21596] nf_hook_entries_grow+0x288/0x720 [ 1493.711148][T21596] __nf_register_net_hook+0x278/0x8d0 [ 1493.716555][T21596] nf_register_net_hook+0xb0/0x190 [ 1493.721691][T21596] nf_register_net_hooks+0x41/0x1a0 [ 1493.727015][T21596] ip_vs_register_hooks+0xc6/0x140 [ 1493.732160][T21596] ip_vs_add_service+0x2b7/0x12d0 [ 1493.737192][T21596] ? __ip_vs_service_find+0x3c8/0x460 [ 1493.742569][T21596] do_ip_vs_set_ctl+0xcf4/0x13d0 [ 1493.747509][T21596] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1493.752878][T21596] ? __mutex_lock+0x37f/0xee0 [ 1493.757644][T21596] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1493.763271][T21596] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1493.769256][T21596] nf_setsockopt+0x295/0x2c0 [ 1493.773871][T21596] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1493.779762][T21596] do_sock_setsockopt+0x3af/0x720 [ 1493.784790][T21596] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1493.790335][T21596] ? __fget_files+0x395/0x410 [ 1493.795008][T21596] ? __fget_files+0x2a/0x410 [ 1493.799596][T21596] __x64_sys_setsockopt+0x1ee/0x280 [ 1493.804795][T21596] do_syscall_64+0xf3/0x230 [ 1493.809299][T21596] ? clear_bhb_loop+0x35/0x90 [ 1493.813974][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.819859][T21596] RIP: 0033:0x7f3055580809 [ 1493.824277][T21596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1493.843886][T21596] RSP: 002b:00007f3056356058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1493.852297][T21596] RAX: ffffffffffffffda RBX: 00007f3055745fa0 RCX: 00007f3055580809 [ 1493.860262][T21596] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 1493.868229][T21596] RBP: 00007f30563560a0 R08: 000000000000002c R09: 0000000000000000 [ 1493.876201][T21596] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1493.884197][T21596] R13: 0000000000000000 R14: 00007f3055745fa0 R15: 00007ffc59208a68 [ 1493.892177][T21596] [ 1494.007868][T14740] ni6501 9-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1494.154603][ T51] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1494.177433][T21602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.221749][ T51] hid-generic 0000:0000:0000.0033: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1494.231715][T21602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.260560][T14740] usb 9-1: USB disconnect, device number 34 [ 1496.457538][T21621] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1496.651417][T21621] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1496.663778][T21622] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1497.652530][T21635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'. [ 1498.650547][T21651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4353'. [ 1498.673973][T21651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4353'. [ 1498.720458][ T25] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1498.760827][ T25] hid-generic 0000:0000:0000.0034: hidraw2: HID v0.00 Device [syz1] on syz0 [ 1498.765443][T21654] netlink: 'syz.7.4353': attribute type 30 has an invalid length. [ 1498.793039][T21654] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1499.550927][T21675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1499.569737][T21675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1499.583529][T21675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1500.153168][T21685] netlink: 'syz.5.4362': attribute type 21 has an invalid length. [ 1500.162106][T21685] netlink: 'syz.5.4362': attribute type 1 has an invalid length. [ 1500.670165][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'. [ 1501.289702][T21686] macvtap9: entered promiscuous mode [ 1501.318262][T21686] macvtap9: entered allmulticast mode [ 1501.336962][T21686] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 1502.470046][T21709] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1504.055956][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4373'. [ 1504.097943][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4373'. [ 1504.346508][T21721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4373'. [ 1506.095306][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 1506.129552][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4380'. [ 1506.140143][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4380'. [ 1506.172962][T21734] macvtap9: entered promiscuous mode [ 1506.179605][T21734] macvtap9: entered allmulticast mode [ 1506.212081][T21734] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 1506.712219][T21743] netlink: 'syz.7.4380': attribute type 30 has an invalid length. [ 1506.757763][T21743] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1507.362918][T21755] 9pnet_fd: Insufficient options for proto=fd [ 1507.372960][T21755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.405556][T21755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.604262][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 1510.072767][T21795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.081531][T21795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.817120][T21800] FAULT_INJECTION: forcing a failure. [ 1510.817120][T21800] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.829842][T21800] CPU: 1 UID: 0 PID: 21800 Comm: syz.8.4395 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1510.840284][T21800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1510.850448][T21800] Call Trace: [ 1510.853742][T21800] [ 1510.856682][T21800] dump_stack_lvl+0x241/0x360 [ 1510.861394][T21800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1510.866608][T21800] ? __pfx__printk+0x10/0x10 [ 1510.871222][T21800] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1510.876783][T21800] ? __pfx___might_resched+0x10/0x10 [ 1510.882100][T21800] should_fail_ex+0x3b0/0x4e0 [ 1510.886798][T21800] should_failslab+0xac/0x100 [ 1510.891491][T21800] ? fcntl_setlease+0xfd/0x540 [ 1510.896274][T21800] kmem_cache_alloc_noprof+0x70/0x380 [ 1510.901674][T21800] ? rcu_read_lock_any_held+0xb7/0x160 [ 1510.907156][T21800] fcntl_setlease+0xfd/0x540 [ 1510.911765][T21800] ? __pfx_fcntl_setlease+0x10/0x10 [ 1510.916980][T21800] ? sb_end_write+0xe9/0x1c0 [ 1510.921589][T21800] ? vfs_write+0x730/0xd30 [ 1510.926042][T21800] do_fcntl+0x72d/0x1b00 [ 1510.930314][T21800] ? smack_file_fcntl+0x14e/0x360 [ 1510.935356][T21800] ? __pfx_do_fcntl+0x10/0x10 [ 1510.940042][T21800] ? __pfx_smack_file_fcntl+0x10/0x10 [ 1510.945416][T21800] ? tomoyo_file_fcntl+0x7d/0x200 [ 1510.950445][T21800] __se_sys_fcntl+0xd2/0x1e0 [ 1510.955036][T21800] do_syscall_64+0xf3/0x230 [ 1510.959536][T21800] ? clear_bhb_loop+0x35/0x90 [ 1510.964229][T21800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.970165][T21800] RIP: 0033:0x7fad63380809 [ 1510.974589][T21800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1510.994210][T21800] RSP: 002b:00007fad6418f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1511.002628][T21800] RAX: ffffffffffffffda RBX: 00007fad63545fa0 RCX: 00007fad63380809 [ 1511.010629][T21800] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000006 [ 1511.018594][T21800] RBP: 00007fad6418f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.026562][T21800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.034523][T21800] R13: 0000000000000000 R14: 00007fad63545fa0 R15: 00007ffce48f6118 [ 1511.042505][T21800] [ 1615.941279][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1615.948282][ C1] rcu: (detected by 1, t=10502 jiffies, g=94805, q=127 ncpus=2) [ 1615.956007][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10490 (4295098674-4295088184), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1615.969488][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g94805 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1615.980726][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1615.990711][ C1] rcu: RCU grace-period kthread stack dump: [ 1615.996601][ C1] task:rcu_preempt state:R running task stack:25848 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1616.008738][ C1] Call Trace: [ 1616.012123][ C1] [ 1616.015071][ C1] __schedule+0x17fb/0x4be0 [ 1616.019627][ C1] ? __pfx___schedule+0x10/0x10 [ 1616.024497][ C1] ? __pfx_lock_release+0x10/0x10 [ 1616.029540][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1616.035903][ C1] ? schedule+0x90/0x320 [ 1616.040166][ C1] schedule+0x14b/0x320 [ 1616.044339][ C1] schedule_timeout+0x15a/0x290 [ 1616.049201][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1616.054589][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1616.059893][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1616.065459][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1616.070321][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1616.075547][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1616.081450][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1616.086758][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1616.091364][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1616.096575][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1616.102488][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1616.107531][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1616.112741][ C1] kthread+0x2f0/0x390 [ 1616.116821][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1616.122030][ C1] ? __pfx_kthread+0x10/0x10 [ 1616.126629][ C1] ret_from_fork+0x4b/0x80 [ 1616.131056][ C1] ? __pfx_kthread+0x10/0x10 [ 1616.135660][ C1] ret_from_fork_asm+0x1a/0x30 [ 1616.140450][ C1] [ 1616.143475][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1616.149813][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1616.155044][ C0] NMI backtrace for cpu 0 [ 1616.155059][ C0] CPU: 0 UID: 0 PID: 21789 Comm: syz.3.4393 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 1616.155078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1616.155088][ C0] RIP: 0010:timerqueue_add+0x15/0x290 [ 1616.155109][ C0] Code: 84 fc ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f7 <49> 89 fc 48 bb 00 00 00 00 00 fc ff df e8 c9 58 d2 f5 4c 89 fd 48 [ 1616.155123][ C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000086 [ 1616.155138][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000001 [ 1616.155149][ C0] RDX: 0000000000010000 RSI: ffff8880222bb340 RDI: ffff8880b862c9d0 [ 1616.155161][ C0] RBP: ffff8880b862c8c4 R08: ffffffff81837480 R09: 1ffffffff203a606 [ 1616.155172][ C0] R10: dffffc0000000000 R11: fffffbfff203a607 R12: dffffc0000000000 [ 1616.155185][ C0] R13: ffff8880b862c9d0 R14: ffff8880222bb340 R15: ffff8880222bb340 [ 1616.155197][ C0] FS: 000055556d3e5500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1616.155212][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1616.155224][ C0] CR2: 000000110c394601 CR3: 0000000079aca000 CR4: 00000000003526f0 [ 1616.155238][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1616.155248][ C0] DR3: 0000000000000016 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1616.155259][ C0] Call Trace: [ 1616.155266][ C0] [ 1616.155275][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1616.155314][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1616.155354][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1616.155393][ C0] ? nmi_handle+0x2a/0x5a0 [ 1616.155446][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1616.155491][ C0] ? nmi_handle+0x14f/0x5a0 [ 1616.155528][ C0] ? nmi_handle+0x2a/0x5a0 [ 1616.155567][ C0] ? timerqueue_add+0x15/0x290 [ 1616.155603][ C0] ? default_do_nmi+0x63/0x160 [ 1616.155645][ C0] ? exc_nmi+0x123/0x1f0 [ 1616.155671][ C0] ? end_repeat_nmi+0xf/0x53 [ 1616.155690][ C0] ? enqueue_hrtimer+0x140/0x3c0 [ 1616.155710][ C0] ? timerqueue_add+0x15/0x290 [ 1616.155726][ C0] ? timerqueue_add+0x15/0x290 [ 1616.155743][ C0] ? timerqueue_add+0x15/0x290 [ 1616.155759][ C0] [ 1616.155765][ C0] [ 1616.155771][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1616.155794][ C0] enqueue_hrtimer+0x1b2/0x3c0 [ 1616.155814][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 1616.155841][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1616.155858][ C0] ? sched_clock+0x4a/0x70 [ 1616.155878][ C0] ? read_tsc+0x9/0x20 [ 1616.155895][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1616.155915][ C0] hrtimer_interrupt+0x403/0xa40 [ 1616.155945][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1616.155963][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1616.155984][ C0] [ 1616.155989][ C0] [ 1616.155996][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1616.156013][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1616.156031][ C0] Code: c9 50 e8 79 07 0c 00 48 83 c4 08 4c 89 f7 e8 9d 39 00 00 0f 1f 44 00 00 4c 89 f7 e8 70 2f 6f 0a e8 2b 9a 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1616.156045][ C0] RSP: 0018:ffffc9000c087968 EFLAGS: 00000286 [ 1616.156059][ C0] RAX: 0b692daed91f5c00 RBX: ffff88801d2d3c00 RCX: ffffffff9a3f7903 [ 1616.156071][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad980 RDI: ffffffff8c6083a0 [ 1616.156084][ C0] RBP: ffffc9000c0879b0 R08: ffffffff901d3037 R09: 1ffffffff203a606 [ 1616.156096][ C0] R10: dffffc0000000000 R11: fffffbfff203a607 R12: 1ffff110170c7eac [ 1616.156109][ C0] R13: dffffc0000000000 R14: ffff8880b863e740 R15: ffff8880b863f560 [ 1616.156129][ C0] ? finish_task_switch+0x1e5/0x870 [ 1616.156150][ C0] __schedule+0x1803/0x4be0 [ 1616.156181][ C0] ? __pfx___schedule+0x10/0x10 [ 1616.156203][ C0] ? __pfx_lock_release+0x10/0x10 [ 1616.156220][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1616.156242][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1616.156262][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1616.156283][ C0] ? schedule+0x90/0x320 [ 1616.156302][ C0] schedule+0x14b/0x320 [ 1616.156323][ C0] do_nanosleep+0x197/0x600 [ 1616.156343][ C0] ? do_nanosleep+0x80/0x600 [ 1616.156362][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1616.156381][ C0] ? __asan_memset+0x23/0x50 [ 1616.156400][ C0] ? __hrtimer_init+0x170/0x250 [ 1616.156420][ C0] hrtimer_nanosleep+0x1ec/0x410 [ 1616.156439][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1616.156459][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1616.156478][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1616.156495][ C0] ? lock_vma_under_rcu+0x602/0x790 [ 1616.156518][ C0] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 1616.156537][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1616.156555][ C0] ? do_syscall_64+0x100/0x230 [ 1616.156572][ C0] ? do_syscall_64+0xb6/0x230 [ 1616.156588][ C0] do_syscall_64+0xf3/0x230 [ 1616.156604][ C0] ? clear_bhb_loop+0x35/0x90 [ 1616.156622][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.156638][ C0] RIP: 0033:0x7f04113b28e5 [ 1616.156658][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 d6 57 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 2f 58 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1616.156672][ C0] RSP: 002b:00007fff1360c660 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1616.156688][ C0] RAX: ffffffffffffffda RBX: 00007f0411545fa0 RCX: 00007f04113b28e5 [ 1616.156700][ C0] RDX: 00007fff1360c6a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1616.156711][ C0] RBP: 00007f0411547ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 1616.156722][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000017165a [ 1616.156733][ C0] R13: 00007f0411546240 R14: 0000000000000bea R15: ffffffffffffffff [ 1616.156752][ C0]