last executing test programs: 29m21.493454048s ago: executing program 32 (id=682): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000240)=0xffffffffffffffff, 0x9, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0x8000000000000001, &(0x7f0000ff9000/0x4000)=nil, 0x7) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000000000050001000600000024000780080006400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) chdir(&(0x7f0000002340)='./bus\x00') set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) 19m11.525740543s ago: executing program 33 (id=2446): read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0c00031000"], 0xf) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x10007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0xc4282, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x80) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="8e", 0x1}], 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x12, r2, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) 16m55.781623576s ago: executing program 34 (id=2839): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) r6 = msgget$private(0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x2, 0x6000) msgrcv(r6, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r6, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x62, 0x9, 0x92, 0x8, 0x9f, 0xffffffff, &(0x7f0000019080)="193ef711cfee07aec687ccbd4c017a4c38d058f8668af43162ff8921b939d6ce666225493526cfbe8b7881dbe8867bb72a4d43a2f7cb6e8464366693b33524ac808040d7e385e70e7c61e9e64fc23c6b69e8e9071410e5183d3e3bc0d5119a38421370311fd1e576bbdeb285464d3140aa4b0c528fb6b9bc869a6e2d0671f713d678f120b6c3bfb144ccc956e19d681612ce67cad126db9d927c53814a2f41"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$kcm(r0, &(0x7f00000013c0)={&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/4093, 0xffd}, {&(0x7f0000001440)=""/256, 0x100}, {&(0x7f00000011c0)=""/240, 0xf0}], 0x3}, 0x10000) 15m4.161567045s ago: executing program 35 (id=3073): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0x1000000}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x92, &(0x7f0000000200)=""/146, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be1c2d88"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_any}]}}) utime(&(0x7f00000000c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x2000, 0x0, 0xfffffffffffffffd}) close_range(r9, 0xffffffffffffffff, 0x0) 13m13.996268269s ago: executing program 36 (id=3380): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffff50, 0x0, 0x0, {{0xfffffffffffffffe, 0xfffffffffffe, 0x2}}}, 0x28) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) unshare(0x28000600) shmctl$SHM_STAT_ANY(r1, 0xf, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0xc, 0xffffffff, 0x38416761, 0x5, 0x0, [{0x7f, 0x1}, {0xcf2d, 0x4}, {0xb, 0x7}, {0x9, 0x3}, {0x4, 0x10003}, {0x7, 0xa65e}, {0x5}, {0x6, 0x3}], 0x8, 0xd, 0x8, 0x2, 0x7}}) 13m1.066015544s ago: executing program 37 (id=3412): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000240)={{0x6, 0x0, 0x0, 0x2}, 'syz0\x00', 0x42}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000200)={0x32, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e24, 0x1, 'lc\x00', 0x0, 0x1, 0x2d}, 0x2c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) r2 = msgget$private(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000300)=""/234) 5m34.388183036s ago: executing program 38 (id=5041): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m20.181148699s ago: executing program 7 (id=5084): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}, @tfcpad={0x8, 0x16, 0x6}]}, 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m20.157108053s ago: executing program 9 (id=5085): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x154c, 0x65, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0x1504, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x69}, @TCA_ROUTE4_ACT={0x140c, 0x6, [@m_gact={0x1b4, 0x1e, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffe01, 0xe, 0x5, 0xcdc, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xfffffff7, 0x0, 0x5, 0x800}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2522, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe79, 0x6, 0x1, 0x6, 0xfffffd0f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x25b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c2, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x104c, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x8, 0x3, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1df6, 0xffffffffffffffff}}]}, {0xe9, 0x6, "e5180b511457ecdd0a33321fc147b5b68160e5cd1df0032835c9a0fb5cc2387248e9bdecb6f6970fc3c2abbfe582d0b87c9346ccbc865dbcac4daf6e3a33f5d45d93f8a61e544ef1b6018b10cbbe4acfef49afc2c0175c355d2785822d4ec36112df9a70970e4aefca17523be429503dc6642f7034e882c02c351f23f9238388562241d3e782cd8c0b4014174b5ad48c4f8b2a209d7fbff7e552a8277ed95ddaf779169aa07dfd24bac4a92e8cc9538a9d119576676f155040567c59c69575affe8d0856b5827e49287b58c518a53af8a0f6b64198015d28e41834f0f0012d7c01651ed4c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xa8, 0x16, 0x0, 0x0, {{0xf}, {0x4}, {0x77, 0x6, "27043a98f026531d82cdffae4dd352dba9cbe2e5d69cde10583aec681fded25713cbd664be485596b9f0c001c8709be58b640b953b8c8211bd096ff70186a52afb213e54038bb3b60160e7ed9bea0beceef225d7a607cb1e80e409460d84685484bfaa483148ed524e561455b98fbb5fa0791f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x10c, 0x11, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xcf, 0x6, "25b71251ae20f181cdac4254a0c14ef5bd1a70fc4ec08e9e41a286e4988066cac617b3785c0764c8d92c40f20baccfa3556d8e7f9065c7b9f0c29c2e70e62af1cfba02aef9fbd569b0c0aedbeed162c5d37e36500324a148314eb873093b3274d44d996f55dbc119900dfdd6343e359a3f19fbc03480192a6b8a43067253abef68bdea337fa83450a08d4cd4bf43c7a92f01e820e0660946f7b03e42ab603fc957b114f915f9d7894737f3e746db97899d72b71fd3d4dfe8a6f1aa65e2517571cb509cc7ca441401b932cb"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x148, 0x8, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x6, 0x8}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x10000000, 0xfffffffb, 0x837}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x6, 0x20000000, 0x7, 0x9}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc762a}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x8d, 0x6, "0045db9e0b7c14a769a9945f11a2d4fbdd69726fd39bfe7c8267199b5b7b2616d55a8413a113e9b9e5dd2927ccb183b4652e20eea725f0aa14438db45a34395b47cba76d57e54b38a2078699401730ca48de53ded832a08257a89d4413b635b16da6685f97cf6c3a199c0e5bd4a1ccdfc4e837971183f3d61e2a8ba552c222abce9d0d11b1c44de3eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xf58, 0x12, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x3, 0xc, 0x5, 0x3a1b, 0xffffff00}, 0xff, 0x9, [{0x0, 0x6, 0x10, 0x1, 0x3, 0x4}, {0x401, 0x9, 0x7ff, 0x10, 0x2, 0x4}, {0x5, 0x8, 0x7, 0x993, 0x101, 0x8}, {0x9, 0x0, 0xe88f80bb, 0x6, 0x3, 0xc5}]}, [{0x1, 0x3, 0x800, 0x9, 0x101, 0x9}, {0x2, 0x5, 0xf6a, 0xfffffffc, 0xbbbc, 0x2}, {0x8a, 0x400, 0x9, 0xd211, 0x7fffffff, 0x4}, {0x2, 0x8, 0x6e69, 0x6, 0x0, 0x8}, {0x63, 0x5, 0x4, 0x8, 0xfb8a, 0x7}, {0x1000, 0x4, 0xffffffff, 0x8, 0x7, 0xfffffffe}, {0x1, 0xc2b, 0x1ff, 0x1, 0xb, 0x8}, {0x3, 0x27, 0xb086, 0xb, 0x6, 0x2}, {0x3, 0x0, 0x8, 0x7, 0x5, 0x40000000}, {0x1, 0x6, 0x7, 0xcce2, 0x203, 0x7}, {0x1, 0x10, 0x3, 0xd55, 0xff, 0x4692ab54}, {0x6, 0x6, 0x1, 0x6, 0x4, 0x18000000}, {0x2, 0x10, 0xb, 0xd, 0xa, 0x4}, {0x1, 0x800, 0xc9, 0x1, 0x0, 0x6}, {0x2, 0x5, 0x8, 0x9, 0x1, 0x343}, {0x336, 0x9, 0x6, 0x3, 0xa, 0x7ff}, {0x1ff, 0x9, 0x2, 0x3, 0x1, 0x8}, {0x8, 0x6, 0x3dc, 0x5, 0xe, 0x7f}, {0x6, 0x4, 0x3, 0x5, 0xfffffff9, 0x71}, {0x7, 0x5, 0xb6, 0x80000000, 0x200, 0x6}, {0x5, 0x0, 0x10001, 0x6, 0x3, 0x2}, {0x5, 0x9e, 0x8, 0x1000, 0x3ff}, {0x9, 0x8, 0x9, 0x80000001, 0x46, 0x200}, {0xaa, 0x7, 0xff, 0x78040ec9, 0xc000, 0xb5}, {0x8, 0x9, 0x200, 0x5, 0xfff, 0x8}, {0x140, 0x7, 0x6, 0x7, 0x401, 0x1000}, {0x80000001, 0x401, 0xffff, 0x7fff, 0xe978, 0x78}, {0xcde, 0x10000, 0xfffffbff, 0xb0, 0x8, 0x3d}, {0xfffffffb, 0x1, 0x27a, 0x1000, 0x1, 0x1}, {0xfff, 0x6, 0x8e0, 0x7fffffff, 0x9, 0x5}, {0x6, 0x7, 0xb, 0x8, 0x0, 0x7}, {0x2, 0xffffffff, 0x496c, 0x7f, 0xa5, 0x4}, {0x4, 0x9, 0x7, 0x1, 0x8, 0x1}, {0x7fff, 0x2, 0x4, 0x2, 0x6}, {0x0, 0x800, 0x7, 0x5, 0x6, 0x3}, {0x4, 0x1000, 0x3a1, 0x1936, 0x2488, 0xbca}, {0xd3, 0x77ba, 0x8, 0x8, 0x35, 0xb}, {0xb, 0x5, 0x2, 0x8, 0x4, 0x7364}, {0x5, 0x49f4, 0xb5, 0x112c22a6, 0x2, 0x4}, {0x3, 0x5, 0x3, 0x3, 0x80000000, 0x6}, {0x0, 0x264, 0x9, 0x1, 0x9}, {0x80000001, 0x154, 0xc34, 0x853, 0xb, 0x401}, {0x900000, 0x8, 0x0, 0x7, 0x3ff, 0x8}, {0x5, 0xf, 0x1, 0xfffff783, 0x1, 0x1}, {0x97a, 0x1, 0x2, 0xb5200000, 0x2, 0xf3}, {0x5, 0xf, 0x7, 0x9b8, 0x400, 0x18000000}, {0x4, 0xd, 0xfffffff9, 0x21, 0xa, 0x4}, {0x5, 0x80000000, 0x81, 0x6, 0xb97}, {0x39, 0xffffff06, 0x200, 0x7, 0x800, 0xd97}, {0x7, 0x3, 0xc56, 0x3, 0xfffffffe, 0x56b38}, {0xe, 0x80, 0x400, 0x7, 0xfffffffc, 0xf1}, {0x5, 0x2bb, 0x2, 0x10000, 0x3, 0xb}, {0x8001, 0x7, 0x3, 0x4, 0xb, 0x4}, {0xc2bb, 0x400, 0x0, 0x0, 0x8, 0x5}, {0x3, 0x101, 0x3, 0x8, 0x40, 0xffff}, {0x58, 0x2, 0x8d9b, 0x9, 0x9, 0x10000}, {0x8001, 0x9, 0x80000000, 0xfd2, 0x0, 0x1}, {0x3, 0x9, 0x5, 0x4, 0x2, 0x200}, {0x5, 0x33dd, 0x3ff, 0xf3f1, 0xff}, {0xfffffffb, 0x8, 0x101, 0x9, 0x2, 0x8001}, {0x1, 0xc0000000, 0x5, 0x0, 0x5, 0x4}, {0x401, 0x7fffffff, 0x8000, 0xb267, 0x2, 0x6}, {0x4, 0x1, 0x6, 0x8, 0x9, 0x6}, {0x40, 0x0, 0x5, 0x81, 0x7, 0x4b}, {0xe59, 0x2f5, 0xb9, 0x100, 0x0, 0x80}, {0x1200000, 0x4, 0x4, 0x1, 0x10, 0x1d8}, {0x401, 0xffff, 0x1, 0xb, 0x0, 0x1}, {0xfffffff9, 0x601, 0x2, 0x530, 0x72f5}, {0x51, 0x7, 0x5, 0x3f9, 0x5, 0x5}, {0x8, 0x89, 0x10f, 0x2, 0x0, 0x8}, {0x2, 0x2, 0xffff8001, 0x40, 0x1, 0x9}, {0x80000001, 0x18000, 0x9, 0x1, 0x3, 0x5}, {0x1000, 0x8, 0x9, 0x1d1, 0x10000, 0x1b}, {0x2, 0x7, 0x1, 0xd, 0x8a, 0x1}, {0x10001, 0x6, 0x4, 0x18000, 0x2, 0x9d}, {0x2, 0x7, 0x7, 0x80000000, 0x2, 0x3}, {0x0, 0x682, 0x8001, 0x1, 0x0, 0x800}, {0x10001, 0xfffffff1, 0x1, 0x6, 0x3, 0x6}, {0x81, 0x3, 0x1, 0x5, 0x9, 0x80000000}, {0xc, 0x6, 0x80000000, 0x2e, 0x2, 0x6}, {0xf, 0x389, 0x3ff, 0x3, 0x0, 0xa}, {0x5, 0x4, 0x1, 0xfffffffc, 0x200, 0x4}, {0x7fff, 0x8000, 0xfffffff8, 0x5, 0x2, 0x6}, {0x7f, 0x3, 0xfffffff9, 0x6, 0x9, 0x9}, {0x81, 0x8, 0x5, 0x4, 0x70, 0x2}, {0xac3, 0x2ca6, 0x1, 0x101, 0x10, 0x9}, {0xa, 0x2, 0x1, 0x607, 0x7, 0x3}, {0x4369, 0x7ff, 0x7, 0x2, 0x7ff, 0x9}, {0x0, 0xb4, 0x2, 0x8}, {0x6, 0x1000, 0x4, 0x80, 0x3, 0x9}, {0x2, 0x6, 0xfffffffc, 0x7, 0x3, 0x7}, {0x9, 0x0, 0x6, 0x3, 0x401, 0x6}, {0x10000, 0xfff, 0x7f000000, 0x7, 0x1, 0x2ba15fc3}, {0x2, 0x0, 0x5, 0x41c8, 0x7fff}, {0xffffffff, 0x2, 0x3ea, 0x9fb, 0x101, 0x80}, {0x9, 0x2, 0x3, 0x3, 0xe, 0x7}, {0xffff, 0x2, 0x81, 0x80000000, 0x0, 0x500}, {0x4, 0x9, 0x8001, 0x6, 0x5c94, 0x4}, {0x6, 0x8000, 0x4, 0x401, 0x9, 0x5}, {0x9082, 0x5, 0x1b6, 0x1ab8, 0x8000, 0x8001}, {0xfff, 0xffffffff, 0x0, 0xfffffffb, 0x200, 0x10000}, {0x5, 0x53, 0x400040, 0xd905, 0x80000000, 0x7}, {0x7, 0x7fffffff, 0x80, 0x800, 0x9, 0xfa}, {0x0, 0x6, 0x80000000, 0x2, 0x5, 0xab37}, {0xfffffff3, 0x8, 0x7, 0x2, 0x1000, 0x80000000}, {0x400, 0x11dd, 0x5, 0x3, 0x4, 0x4}, {0x2, 0x0, 0x7f, 0xfffffffb, 0x4, 0xab}, {0x4, 0x1, 0x2, 0x0, 0x6, 0x5}, {0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x6781ad6c}, {0x5, 0x101, 0x9, 0x8000, 0x6, 0x8a0f}, {0x7, 0x1ff, 0x0, 0x65a, 0x6, 0x6}, {0x10001, 0xa, 0x6, 0x80000001, 0x3ff, 0xffffffff}, {0x5, 0xfffffffc, 0x2, 0x8, 0xcd, 0x8}, {0x1, 0x101, 0x8, 0x2, 0xffffffff, 0x8}, {0x5, 0x8000, 0xd, 0x9, 0x92, 0xea3}, {0x10, 0x18e, 0x7f, 0xfffffff8, 0x10000, 0x400}, {0x1, 0x5, 0x4494, 0x10ae4849, 0x1c9, 0x214d}, {0x0, 0x4, 0x80000001, 0x4, 0x2e, 0xc}, {0x21c9, 0x3, 0x5, 0x2, 0x101, 0x4}, {0x4, 0x2, 0x0, 0x60000000, 0xb895, 0x80a1}, {0xfffffff7, 0x5, 0x3, 0x1, 0x7ff, 0x5}, {0x9, 0x2605, 0x10000, 0x56, 0x2, 0xb187}, {0x4, 0x7, 0x6, 0x6d0, 0x0, 0x1}, {0x2, 0x6, 0x1, 0x8, 0xa, 0x8001}, {0x5, 0x7, 0x7, 0x3, 0xff, 0xa}, {0x5, 0xff, 0xe8, 0x93, 0x9, 0x2}, {0x3, 0x1, 0x8, 0x4, 0xf47, 0xfffffffa}, {0xff, 0x9, 0x4, 0x6, 0x493, 0xffffff6b}], [{0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x3}, {0x2}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1, 0xb0536fb95f30740b}, {}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x1}, {}, {0x2}, {0x5}, {}, {0x3, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x2}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}], 0x1}}]}, {0xab, 0x6, "5f1055be70cfaa480ec4338a96d178e3812026527cb274bb6e40c420b89ffee434fe0e8f765e05b53ff545f62e5de801282a4dbe358794b72d766cd0dd44e9265c8e0b0ad84f0677cbd326c23130f7b0279bac3d094cea3f7eec0b2303289d45ed2a51e665e1b090b01c13772b94302461756ec565ef7c150c730e6f1b2662db20fc63009625f934c66a6c5cf84f7c85dfc97a97ec36bfd17d37e5c304e2f5fb751b5363a843d3"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xe4, 0x6, [@m_sample={0x9c, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x6d, 0x6, "3f81bd469ecd55c3d0c66f931a90cf8a9a6c6e924d22e41113bf61112e1bef5ef9e1150463043691922858f5540850bceed091a291af3e192cb3fc9ab6d65e4d417d821b8b6ae01e4c04503209c7b330c633a1b0e489d27420f87ff60a2503cd8878afc4daa23fac2f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x11, 0x6, "ca8fd735f4c425bd44291fa867"}, {0xc}, {0xc}}}]}]}}]}, 0x154c}, 0x1, 0x0, 0x0, 0xc890}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m19.864546902s ago: executing program 7 (id=5088): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000400)={0x7, 0x5, 0xfffe, 0x5d3, 0xe, "0000063712bd1b00"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r3], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000201030000000000000000000700000a080000002004"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x4004004) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 5m19.01924657s ago: executing program 9 (id=5092): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x14, "4b721b782a17a7b6a00d923e3f7fdafda2073830"}}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) recvfrom$unix(r1, &(0x7f0000002300)=""/227, 0xe3, 0x141, &(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000a51c2200000000000000", @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x18, 0x0, 0x400, 0x1ff, 0x200002, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x96, 0x10}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, r3, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) gettid() 5m18.849142948s ago: executing program 7 (id=5094): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) (fail_nth: 3) 5m18.347232281s ago: executing program 7 (id=5096): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x105d, [{}, {0x0, 0x10000000000000}]}, 0xc9) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xeecc, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) io_uring_enter(r5, 0xe85, 0x0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x7, &(0x7f00000001c0)=[{0x9585, 0x3, 0x9, 0xffffffff}, {0x7, 0xf, 0x6, 0x4ff38e65}, {0x6, 0x0, 0xff, 0x2e}, {0x8, 0x8, 0x9a, 0x8000}, {0x6, 0x51, 0xee, 0x5}, {0x245, 0x0, 0xd, 0x101}, {0x76, 0xa6, 0x81, 0x6}]}) r9 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xff2e) ptrace(0x10, r9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x10, &(0x7f0000000140)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000600)="20d1ca10d14110e3fc2ea78a0831849dc6e0c8bc9eb653610f0378549ee6dac17b89570e18a211f6a49814e7581f81154206b764b79a9d9192054dfd377ba3ce2f881854dd7f10a87032d99a429742b4d4ee1972cef903a81d7ca36c41bad40c564ea10676f47d33d7fc1e7c9bf35a4167f9c72700467b8d663436441d5117d45b1718d2b7fc354c76a4beb421b4e539c923c8ce083ef983511cef66ffd478d86dadca271a21efca274c43e683b22beedd281776548728527f6c0b71f3ceaa2d490919307fd0710505336b196e1bf29b55a15e310a9fe1f873705eac6da5715591342b5d3d428797e6b8988083f848c9d083a6912e0007", &(0x7f0000000340)=""/102, &(0x7f0000000700)="948e4bb822970d067692967e2c85ecf2a7b57c4e057dab9159cb32c17c26f08891c13c41874c1147badfe208d9aa6b260f7f0ce15a032f4adad64f7bf7859ffbc76f67c2dbb7f22d999637523804ef1b6e00f43a0228c404a292b8be5665a9bf51edbdfa04ec7218c459e8144edceeafae6d442ec96dd8fc985dc69e87904f1eca966872da6ed365e5c039013880fe900c1eed8ffedc3ae7d977f7846b87c19ebc4188ab8377ffc5044dfcb3ab3de5fffed39b92ff8c7f29368abe506353511b9f3c97415883651be88db4166f5a37e329b62e091d5e127ff5d8b21fc451e0e77d42bb66aea0cf33c2b6", &(0x7f0000000280)="efb3e6072d78dd5ee761c79af894d9b5231d957fed38d285b7502776c3ac5ebc35e48fda126025a56d1f17df1722f870ed7ce4fd7b9c7cda5e", 0x10000, r1, 0x4}, 0x38) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r11, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) 5m18.300251476s ago: executing program 9 (id=5097): socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x1, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x60000, 0xd0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x121) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001dc0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002000)={'team0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000003340)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="174b81a6ce2939ad98b040a4bd7377d2c4cc09e1dd42b8978c926f6b033d6350bdcbf7c0b8151cc91113833fbe76d4e340b7c62f922a7c728ab3e33fda8e1dd080f8d5cd0f27cdc33b35432afaa6bcf583907b", 0x53}, {&(0x7f00000005c0)="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", 0x7f8}, {&(0x7f0000000240)='Y+', 0x2}, {0x0}, {&(0x7f0000002080)="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", 0xfa0}, {&(0x7f0000000400)="a317f32f4bffb55138e2b1e12fe7f7614f7017d7debab33f8429ddda014e1fa11774bc5fe0f32fb379157da6dfc1eb662fd58f665f9f6c51f02901facd7905704103a01c117e7b8ac0747d146cc11db210ade220f82d2e4500851cf4edab90b14b85c60ed1b6000dddc5e51072a2ff160952def401c07c3062754f27cc870787b6afb5eec1f97774343e2958d17ada1b27db17d220e78cd981dad2d82868a28271595bb13352302289be00bb7590b346b75bda9e08fe87524161703212b184809283273e40b8723ab30d5367c198c96a8b9010", 0xd3}, {0x0}, {&(0x7f00000015c0)="7dcb032ec58b55ed94fbb2b1d03f4be94e96c55a001c8b2748fb47b316403282b8452a6bd03f07dc3d39571740c417f4e555c58b43af353e9612d8279268f595e16f32fe2f4c814e8f7baaeb51477ac2012e26dbe8299cc6f9a8ea5bc6d9f24ee48dc179e9e9e480de23dfa7c8cfb9", 0x6f}], 0x8, &(0x7f0000001880)=[@ip_tos_int={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x98}}], 0x2, 0x4c000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8, 0x2, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x30}}, 0x8000) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 5m17.967931722s ago: executing program 9 (id=5099): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) linkat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) rename(0x0, &(0x7f0000000380)='./bus\x00') 5m17.456258642s ago: executing program 9 (id=5102): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) fchmod(r2, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r1) mknodat$loop(r1, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x24004020}, 0x0) 5m17.000064933s ago: executing program 7 (id=5104): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000000) 5m16.349363938s ago: executing program 9 (id=5107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 5m16.069282476s ago: executing program 39 (id=5107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 5m15.950597913s ago: executing program 7 (id=5112): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) linkat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) rename(0x0, &(0x7f0000000380)='./bus\x00') 5m15.662638936s ago: executing program 40 (id=5112): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) linkat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) rename(0x0, &(0x7f0000000380)='./bus\x00') 4m34.320695953s ago: executing program 5 (id=5288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf252300000008000200", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4c841}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2eec0a3f002800000000000037", 0xd}], 0x1}, 0x20000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 4m33.272751324s ago: executing program 5 (id=5289): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}]}, 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m32.460412622s ago: executing program 5 (id=5296): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x30d803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) shutdown(r4, 0x0) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') 4m30.696461286s ago: executing program 5 (id=5298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) (async, rerun: 64) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x21adc51, 0x0) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"/532], 0x214}], 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setns(r3, 0x24020000) (async) r5 = syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r10, &(0x7f0000001500)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@udp={0x6, 0x6, "cfde7c", 0xf99, 0x11, 0x0, @remote, @empty, {[], {0x4e22, 0x4e21, 0xf99, 0x0, @opaque="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"}}}}}, 0xfcf) r11 = syz_open_dev$mouse(&(0x7f0000001500), 0x7, 0x40001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0xee00, r9}}, './file0/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, r4, {0xee01, 0xffffffffffffffff}}, './file0/file0\x00'}) (async) r14 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000007c0)="b99e2d1a778db00aade72797d586a5d8d07bd7442b181242839fbf6ece14673680b49fecf1af58f0ba8843eb015f45049a2ad436dbcff7cbf3a830921ea7aa86a707da222eafc58852a9d025838a4c3a651845c3bfc483b40f6b1ae4793e00564c83aa349a2b3eb820a99b2654062be96e49a7af4ed01b238b07a55169f8c9507150", 0x82}, {&(0x7f0000000880)="6a4d8eb8faf0630bb34963878e3cba734039781f4fe7c82f60232070d1fdc021bbb54b228636440524d6037cf51d36535ee406cbc5c880d74405e2cdefe501793b5117cafada704aa4f1343967b874e463a8eeff547b2fd8a4b0a9d3bf802f046117300c14e0f4e4874ce6e34ac2", 0x6e}, {&(0x7f0000000900)="715b17b887fa4d72f07aeb903a6cf91178b7f7e06c291fa8e4adb6c8d8e329e36f1b4581d02c87d6c9e41848accab4ca9e7cab7daecbd9fc6e15bd5a4d492ca613f02930116a35adbfffcc30814505de552a7ea96659a75cd6179066cc6d889ca31e44c3aab03ea511fe79ea336afbd5565ac399f35898b671399b2db9b41dec1c2d9a7d02fa9aa4f52afcc337e6cd0c48e749647f303da623b16003e9a16cd0356ada5e7905632241ec710c6feefa15208e2fc81a8c4f11d297a57fb4276db47f57e08b73b3f29ce2007b9052a758d929", 0xd1}, {&(0x7f0000000a00)="8d1549261520c0424ffbe615fd724a37c0d3bed1f8e95147c527af1ddc5a9dd1944ee13cb53ba5647c47999ac729e5be3f503a7de9ccf6db2526b58b8ba1c4266060092d51e3c8a11f5f2bcadba0ef482bd540163134a6591befdc67b8bd462d923d878cc16d80cde3d258c5c3af867eaeef2f437538b533edb76702c775054cd486bd2899c9ec0f1c3f000e4d72991831", 0x91}, {&(0x7f0000000ac0)="de8fb6be8144fa39a650066c5b7f36e37de27a512f5f820d17d9fa8308c26cffecf2ee3b19ab6476ddd7b6dd680459e0a99054d1fa13b6c4d73b8f79f79dd8e72dcab93b26185032588813aa84fd90af5ca605b7d02fb37ec930f94aac94ca4f671e1b4fb34f52ac6ca0007cb2c8b91d8651492340a17773fcb4311de2f60d137786714a8ebd6534a3b66c3b9acb86083480788e023867e895fbaa859ac3ae045c260da3249d034ee5e9af1b034475108166c2141179859a9157678da737a50f101fd2ada2989a7ce1a59bc9b87579324b6b9c5ecd005384", 0xd8}], 0x5, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r3, r1]}}, @rights={{0x1c, 0x1, 0x1, [r8, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee00}}}, @cred={{0x1c}}], 0xc0, 0x800}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f80)="92a20976abe9791783c2571ab0ce8e55a6d9067bd25dfbd5caf2a01e8123864417c77d", 0x23}, {&(0x7f0000000fc0)="3064739cdd96fe28c4d4b1416157b2f91246e78d6f4a200332fb4cd9ead492cb694ee39804b7f54bd27ae6da0a641bb3162166f96647f8c6eca672838e109b4b9b828c404317c9ff2e296efba38f15f10c555172f214491e4e54897b059deb7438f43976ae4a3860e80ebd6b90fc7b8559f8f466719607ee35f8372da0c09f14f10fa16649d3ea095e2c2e288cb193a74540c050c283aff65b765ede7bf79306183889a944e03f85f2320de18375d9a7274866f9f7ba6e3248c091223d07aef32de5c238082678", 0xc7}], 0x2, &(0x7f0000001100)=[@rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x30}}, {{&(0x7f0000001140)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f00000011c0)="60ec8e652df297ef4099026e8a6de8643a8eb50ea1c72ba663bb9d453acbc70cde018c16a4604999a646fe151261a45095f405c52d45e4ac69bb7e76e077f6b3341a7cacf8b5dd32bd48ad214aa9b7d4835930771ba3fdf177c8362e074755ba28ff2dcb85e9f6b4ff965b268ad2568eacbe", 0x72}, {&(0x7f0000001240)="b9683e17c278654e0ba0a9e046c72da880921db1cfe44c", 0x17}], 0x2, 0x0, 0x0, 0x20000004}}, {{&(0x7f00000012c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001340)="c5457d6e33b7", 0x6}], 0x1, &(0x7f0000001540)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r0, r6, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2, r12, r9}}}], 0x70, 0x81}}, {{&(0x7f00000015c0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001640)="a808915ae49fc9e41e8234c5ea1b61a9c184", 0x12}, {&(0x7f0000001680)="78a5c1b48ba7531790f67daa9916e95e6c6242f9ceff3924806f33dcc8acd1435d1c547232c042bc573ab5707d4b0b1033c24114ed8a4c9d9dead3c6f85859bbe1caca99be204680234b23356e7cfc53", 0x50}], 0x2, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r2, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @rights={{0x2c, 0x1, 0x1, [r1, r4, r8, r0, r0, r4, r14]}}, @rights={{0x1c, 0x1, 0x1, [r6, r0, r4]}}], 0x88, 0x44000}}], 0x5, 0x4050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01082bbd7000fedbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m30.428660243s ago: executing program 5 (id=5301): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1001) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000440)=""/178, 0xb2}, {0x0}], 0x2) r2 = syz_usb_connect$hid(0x6, 0xf, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x5, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfe, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x0, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) ioperm(0x0, 0x400, 0x20000000009) flock(0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0xf, 0x5, 0x1ff}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000300)={0x20, 0x0, 0x5, "89e3613742"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m29.50528968s ago: executing program 5 (id=5304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x5, 0x5, 0x2, '\x00', 0xffff}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xe0003, 0x0, [0x3, 0x4, 0x100000000, 0x0, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffd, 0x8000005]}) 4m28.877545943s ago: executing program 41 (id=5304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x5, 0x5, 0x2, '\x00', 0xffff}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xe0003, 0x0, [0x3, 0x4, 0x100000000, 0x0, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffd, 0x8000005]}) 3m37.125366917s ago: executing program 3 (id=5523): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 3m37.069602947s ago: executing program 3 (id=5525): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x30d803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0x8000}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) shutdown(r4, 0x0) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/stat\x00', 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) accept(r6, &(0x7f00000003c0)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) socket$nl_generic(0x10, 0x3, 0x10) 3m35.664086007s ago: executing program 3 (id=5529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000008000000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r6, &(0x7f0000000580), 0x0}, 0x20) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000003c0)="0f340f01c20f090f01d10f63c964f00fc19c6e000f9946eb0f0fa37f4cb6650f01c9f00fc04728", 0x27}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="cae8d895b8", 0x5, 0x4080, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r9, 0x0, 0x0, 0x40000, &(0x7f00000004c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) 3m33.800949548s ago: executing program 3 (id=5539): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x30d803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0x8000}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) shutdown(r4, 0x0) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/stat\x00', 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) accept(r6, &(0x7f00000003c0)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) socket$nl_generic(0x10, 0x3, 0x10) 3m31.818618238s ago: executing program 3 (id=5543): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000380)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7, 0x60, 0x10, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x22a}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x4e, 0x3d}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x64, &(0x7f0000000500)=@string={0x64, 0x3, "69ed25c9eaba85ffe7526af715bf762cd1d2e0b7cdde086f65c1613716b08577336b0c70ae2c0605056ff1a370b31bd497cca396d0436da6871967ec23f3dab262dd240e7a4cb290f1db03a639a2525d0a4d6373f0fcaedb76281a395105efde7a00"}}, {0x91, &(0x7f0000000580)=ANY=[@ANYBLOB="9103a7fad72dd3d49450e8e2f8540bf533de76fb295af39f493a60e2e956352645ec38a17a4b868984f9d0b33f3b700bfc194d72c8bca2e508974674f64919d7ff12c173b963285c0f32af801c10bd886aa9dd8e8004f4face4dbcd50bb4ca9cb6097d32a177bdc8bac1c01922ddf3a5e14771edce7f718a322b312add46a3fc5b942a39e38e54f39b888e0b7deaddb0fdd66d4fca87eaf1eefac262d150ef7eaf66efa5a6599aa335631987e02b0d3605ac94f7e15f9eb7ffe92dbbc8b61daa5f87e3f29dc17996a9cca51273f86317e32dbea82470058e1a10d10e9a830c98ec5145e8a0d389259411545cc9fd44"]}, {0xfc, &(0x7f00000001c0)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000080)=@lang_id={0xffffffffffffff7d, 0x3, 0xc0c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x419}}]}) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x600) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000063c000/0x3000)=nil, 0x3000}}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket(0x28, 0x800, 0x7) 3m27.473254677s ago: executing program 3 (id=5559): syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, r5, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r5, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000280)={0x18, r5}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r5, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000340)={0x18, r5, 0xffffffffffffffff, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000003c0)={0x18, r5}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r6, r5, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000500)={0x18, r6, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000540)={0x8, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000580)={0x18, r5}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r5}) 3m17.204729832s ago: executing program 6 (id=5589): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640), 0xc0000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000001010400000000000000000a0000001800018004000340"], 0x74}}, 0x24000014) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000680)={{0xff, 0x6}, 0x100, './file1/file0/file0/file0\x00'}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000008c0)=@attr_other={0x0, 0x2, 0x1, &(0x7f0000000880)=0xf}) syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000007c0)={0xe8ce}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@arm64={0xcc, 0x1, 0x8, '\x00', 0x7f}) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) r9 = socket(0x1d, 0x2, 0x6) setsockopt$packet_fanout(r9, 0x6a, 0x2, 0x0, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r9) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="10010000", @ANYRESOCT=r8, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x1) r10 = dup(r0) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) setresgid(0x0, 0xee00, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000240)='./file1/file0/file0/file0\x00', &(0x7f0000000300)='adfs\x00', 0x100, 0x0) 3m16.924903558s ago: executing program 6 (id=5592): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) prlimit64(r0, 0xc, &(0x7f0000000140)={0x8, 0x40089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r3}, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x860901) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340), 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000003c0)={{{0xe, 0x1}}, 0x0, 0x6, 0x0}) r6 = openat$cgroup_ro(r1, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 3m16.344637046s ago: executing program 6 (id=5597): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x30d803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='svcrdma_decode_rqst\x00', r0, 0x0, 0x8000}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) shutdown(r5, 0x0) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/stat\x00', 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) accept(r7, &(0x7f00000003c0)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) socket$nl_generic(0x10, 0x3, 0x10) 3m12.875462219s ago: executing program 6 (id=5602): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x30d803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) shutdown(r4, 0x0) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') 3m11.24842585s ago: executing program 42 (id=5559): syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, r5, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r5, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000280)={0x18, r5}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r5, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000340)={0x18, r5, 0xffffffffffffffff, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000003c0)={0x18, r5}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r6, r5, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000500)={0x18, r6, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000540)={0x8, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000580)={0x18, r5}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r5}) 3m11.089308505s ago: executing program 6 (id=5610): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}]}, 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m9.192706171s ago: executing program 6 (id=5615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x29030, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'Y}+'}}, {@uid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@uid_eq}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f00000000c0)) mmap(&(0x7f0000630000/0x3000)=nil, 0x3000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x90) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x7fffffff, 0x3, 0x2, 0xfffffffb, 0x54, "c7eded010000000000000000804000"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x4d, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000080)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020}, 0xfffffffffffffe98) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 2m52.369510734s ago: executing program 43 (id=5615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x29030, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'Y}+'}}, {@uid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@uid_eq}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f00000000c0)) mmap(&(0x7f0000630000/0x3000)=nil, 0x3000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x90) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x7fffffff, 0x3, 0x2, 0xfffffffb, 0x54, "c7eded010000000000000000804000"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x4d, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000080)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020}, 0xfffffffffffffe98) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 11.331307408s ago: executing program 2 (id=6169): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="f860", 0x2}], 0x1}}], 0x1, 0x0) 11.140822844s ago: executing program 1 (id=6171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x40000000002, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) 11.017858221s ago: executing program 2 (id=6173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x3c, r6, 0x1, 0xfffffffd, 0xfffffffd, {0x36}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) 10.269259448s ago: executing program 1 (id=6174): getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000180)=0x4) setns(r2, 0x80) r3 = memfd_secret(0x0) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0xff00) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r3, 0x21, 0x4608, @val=@target_btf_id=0xffffffffffffffff}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r5, r3, 0x2f, 0x4608, @val=@perf_event={0x7}}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sg(0x0, 0x0, 0x401) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000200)={0x8, r1}) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)='jffs2\x00', 0x2, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYBLOB="0000000000000200b708000008000000ffffb704000000000000000400001200925e85170000010000009557cacc2d1de8427f56630d82ba80e6ed11fe62f0"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 8.891920986s ago: executing program 8 (id=6179): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)) eventfd(0xfffffffc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x4}) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000180)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x5, 0x2}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 8.889754465s ago: executing program 1 (id=6180): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000844000e802c00018014000300ff02000000000000000000000000000114000400fc0100"/192], 0xd8}}, 0x20010000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) read$smackfs_access(r4, 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000700)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 8.02068416s ago: executing program 1 (id=6182): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x3, 0xfeff, 0x8, 0x4c, 0x5, 0x2, 0x0, 0x10000, 0x10, 0x4, 0x9, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="00022d0000002d2338860afe5d46dc4f17f1c679ddbcf63141f2fe95963752b43eb2e31789a1ff07000000000000d800000000"], &(0x7f00000005c0)={0x0, 0x3, 0xac, @string={0xac, 0x3, "12b1cc154b844060e467602303282b2eee898552c2a6efd5abc097bbec3b4b48f0700651c174e6ba21a329fc99e7bad4f3bff5a870dfbd59f06da3cc0439cd9f37e19cd36f64f957e528d38f3dff4f9f84138a376237b9d14bd0dcee38ba1e212dc73e38e6b38a62cb96abe4f2c79c006caeb5e8b4407275702a618ab5d720b3989dafe5068b66ce88c52766cdae4df3fe971a20a6baf958f6c4c03e6e8a91c325a1e71cdd795a0555ed"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000680)={0x40, 0xb, 0x83, "901bb97940d4d69de0bc72897839219982346225ebb36470365cca7b142f38d0a9f0cd230c8bd7e47c4112c6d8e1633d3962fcc86f8f586177f09bc9bce5cf8d9b320399dc7184a07f6e112a575211b6372936e06d84803293897c07c9d70940bc6813cffeead9ab079e6761ce1a50665f9dc714864ed1b924387129388ad211f3b6e6"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x81, 0x3, "6cdc93"}, &(0x7f0000000800)={0x20, 0x82, 0x1, "17"}, &(0x7f0000000840)={0x20, 0x83, 0x3, "4795e3"}, &(0x7f0000000880)={0x20, 0x84, 0x2, 'R6'}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "2fcefa"}}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000980), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r5, 0x0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x0, 0x31, 0x87, {0x87, 0xb, "bfc472cd0d81b68c5ee90f415972259dc58f16a9d9ba27f2653ef321d8364bb751c8ff5448a7c87bd286a285c016707ba0ed75272d78b695ccf4d6997f9717f5b2d2be998858ec4b41bd6147421e4d5b1443eff0323366b5a8b0e1ae5452537c474f790b7a4def9d421a6c2d86b5ccde275d52d120de167330e6cf8f09cb81ac706db2147c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000180)={0x0, 0x22, 0x1a, {[@main=@item_012={0x2, 0x0, 0xb, "d90c"}, @global=@item_4={0x3, 0x1, 0x9, "4ad940ce"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_012={0x1, 0x0, 0xa, ')'}, @global=@item_012={0x2, 0x1, 0x0, "196a"}, @local=@item_4={0x3, 0x2, 0x2, "9dc7d583"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_4={0x3, 0x0, 0xa, "80b83239"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x56}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x11, 0x5c, "a68b075e53aaba70b48560349c5651fcaa56b51a014ac0e31f1fd18462fca1b9c31b2b8d3bad9e412e8c7a56c591b91030e0736ecec6edad6cf9fb189136cbdab1d9f5fde15ea70fc76c0ddcbb15026f66d064c7e9f03fea0e9045f3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000380)={0x20, 0x1, 0x20, "1dbf2a01c6df155dae9f1b8dca63df24af61f1debaa829ee735344af45e212ea"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x1}}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001114010029bd70000000000008000100000000000800030000f7ff0008004a000000000008004b0013"], 0x30}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 7.782272305s ago: executing program 4 (id=6185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 7.028632664s ago: executing program 0 (id=6186): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000020000000000610f573cf16bbfbf562c00c702c1e4ff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="c5deb316", 0x4) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/207, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) r8 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8a402, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x20000015) 6.729736891s ago: executing program 4 (id=6187): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0xc5, 0x4}) 5.940529291s ago: executing program 0 (id=6188): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff000000}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.937704407s ago: executing program 8 (id=6189): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x30d803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='svcrdma_decode_rqst\x00', r0, 0x0, 0x8000}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) shutdown(r5, 0x0) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/stat\x00', 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) accept(r7, &(0x7f00000003c0)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) socket$nl_generic(0x10, 0x3, 0x10) 5.573839432s ago: executing program 2 (id=6190): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fd23291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.180883453s ago: executing program 0 (id=6191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x2000000, 0xe, 0x31, &(0x7f0000000600)="c19e69514019c5bc000000000000", 0x0, 0xc69c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000000d20000000000010000004c1712ce2e5679fe554658086ca35dc9f927b5446405daa46c019e39b9dba1ff9c17b338cd7753ddb7b74bef28c6960bb880ef9315c71d7ad5ff9fe1cbbe2c29a408f31739b8a7c632f0701e12fe5ae55804c1e95233691e4bfd794afeeb4101f1d184fdc0d68394a90fd7c6a6fd3b8b7c55aadc20168396dbf1384f3056c6afe59667fc97cc1ada002a62bce2b6101e13f60f9c582340d1ae6e63bc3c230b3a310a042d2c1c2526c15800"/201], 0x14}}, 0x0) r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r6, 0x408, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000180)=0x1e) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r5, &(0x7f00003e8000/0x1000)=nil, 0x4000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xea, 0x8001, 0xc4a, 0x8}, &(0x7f00000001c0)=0x14) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)={0x149842}, 0x68) syz_open_dev$tty20(0xc, 0x4, 0x0) 5.129605929s ago: executing program 2 (id=6192): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000844000e802c00018014000300ff02000000000000000000000000000114000400fc0100"/192], 0xd8}}, 0x20010000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) read$smackfs_access(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000700)) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {0x2, 0xd}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730200000008008e0001000000480ee0a1ca70443c06e03cec4cae1a42"], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 4.522410937s ago: executing program 8 (id=6193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.567051768s ago: executing program 2 (id=6194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0xaac, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x85, {0x85, 0xe81ef1d73062b24e, "b1a748d93825b36b92281a38e5b5c5ea3f0cd43a9e356ecd16bffbccbe40f0c285816ceb9f86b4220d4c78606442cce8ec1e7730dd58446cbc8ad7e6b40468c9fcb2737322630240a68051c6b03fa978755445e854e8c0ac53fb5b84273a8b4b207ce0c70824f449d5a5379d1d1e94515d8feb733e00"/131}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080001400000000108000240000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) mlockall(0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3.400533029s ago: executing program 0 (id=6195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x30}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xaf64, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000800)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 3.20066749s ago: executing program 0 (id=6196): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r2) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') llistxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 2.98472442s ago: executing program 0 (id=6197): syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904"], 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201008202000040c41e0b9371fd48d5585cd45ab3fc23942505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0103000000fd0000000406ab9aff07290905810300020000040904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r2) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) ptrace(0x10, r2) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlink(0x0, 0x0, 0x0) 2.877250129s ago: executing program 4 (id=6198): userfaultfd(0x80801) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/power/sync_on_suspend', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') open(&(0x7f0000000240)='./file0\x00', 0x20040, 0x6) 2.712928439s ago: executing program 8 (id=6199): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x600, 0xb000}, 0x4) 2.637274867s ago: executing program 8 (id=6200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x3c, r6, 0x1, 0xfffffffd, 0xfffffffd, {0x36}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) 2.496196459s ago: executing program 1 (id=6201): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000083c000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x90, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x4, 0x3, "eee652"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0xc, 0x9, {0x7, 0x25, 0x1, 0x81, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xfc}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0xd9, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x77, 0x6, 0x1, {0x7, 0x25, 0x1, 0x81, 0x8c, 0x8}}}}}}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008aec1, &(0x7f0000000080)=""/8) 1.579483784s ago: executing program 4 (id=6202): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000844000e802c00018014000300ff02000000000000000000000000000114000400fc0100"/192], 0xd8}}, 0x20010000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000700)) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {0x2, 0xd}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730200000008008e0001000000480ee0a1ca70443c06e03cec4cae1a42"], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 828.332333ms ago: executing program 4 (id=6203): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@noop]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, &(0x7f00000000c0)="6917d0de3e10b3d3eed2989047fa219023d1673b34c9e731e9fc2b3cf3bcb84a41c1712557c42ebffe873844cc5d2f215f7e8fb1247a9d97fbca31f18dbd4439983ac6590d2b3268f02220f4119a1d7f43eb5fb77c0a92c99fc6a5c200cbc2f001956e1b0b6da14152412deb4b1a63f15a2f21414cbcf43d7d39d9e65fe4bc6a1a211cf3d7b103c4e69b834b2b27febdb49cd32cf71dad36da15e040907020dfaae7052b007c480db6aa40402a1f42ed9b9259ffc97d64ed62fb05d32d3175e864f48031b87e4489712f92036b3e4f6e3af600333c8cca246471f0", 0xdb, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000300)="ee56da10fadb7943d64e65fbd4067e60ee883e427b01611e1eb746257bf24402b053b28bbbc6135f4f13653572c55de76c7dfccb28a61e997f1147ce2275032dfcf70a7c67cc1bf51328826020a9b2fd8f7150c5a06a07c11cbcaf933e7fff8815279286860ab6184959fce7112740ead3756ecd654a93e9842b3560eff8e633632e39ec4af47bf3a089fdfc4a2a835821a7ec2dfd1ef1f3c1750f4025a76ec983d3055df0") r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x6}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000002ac0)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c0000001800000003000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x9, 0x0, &(0x7f0000000280)="9c1685716cc9e4ddd5", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r2, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x9, 0x6, 0x0, @void, @value}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002180)=""/4121, 0x1019}], 0x1}, 0xfffffff9}], 0x1, 0x12001, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000040)=@dstopts={0xff}, 0x8) sendto$inet6(r7, &(0x7f0000000140)="7669b66f", 0x4, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 352.914826ms ago: executing program 2 (id=6204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 344.060177ms ago: executing program 8 (id=6205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x2000000, 0xe, 0x31, &(0x7f0000000600)="c19e69514019c5bc000000000000", 0x0, 0xc69c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000000d20000000000010000004c1712ce2e5679fe554658086ca35dc9f927b5446405daa46c019e39b9dba1ff9c17b338cd7753ddb7b74bef28c6960bb880ef9315c71d7ad5ff9fe1cbbe2c29a408f31739b8a7c632f0701e12fe5ae55804c1e95233691e4bfd794afeeb4101f1d184fdc0d68394a90fd7c6a6fd3b8b7c55aadc20168396dbf1384f3056c6afe59667fc97cc1ada002a62bce2b6101e13f60f9c582340d1ae6e63bc3c230b3a310a042d2c1c2526c15800"/201], 0x14}}, 0x0) r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r6, 0x408, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000180)=0x1e) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r5, &(0x7f00003e8000/0x1000)=nil, 0x4000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xea, 0x8001, 0xc4a, 0x8}, &(0x7f00000001c0)=0x14) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)={0x149842}, 0x68) syz_open_dev$tty20(0xc, 0x4, 0x0) 39.81652ms ago: executing program 1 (id=6206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x30}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xaf64, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000800)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=6207): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) clock_gettime(0x7, &(0x7f0000000000)) unshare(0x62040200) kernel console output (not intermixed with test programs): access beyond end of device [ 1919.443487][T26187] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1919.570066][T26171] Node 1 active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1919.600609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.845151][T26171] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1919.881018][T26171] lowmem_reserve[]: 0 2492 2493 0 0 [ 1919.886488][T26171] Node 0 DMA32 free:1130868kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1448kB inactive_anon:35064kB active_file:102332kB inactive_file:155464kB unevictable:1544kB writepending:576kB present:3129332kB managed:2552744kB mlocked:8kB bounce:0kB free_pcp:10244kB local_pcp:3404kB free_cma:0kB [ 1919.995942][T26171] lowmem_reserve[]: 0 0 0 0 0 [ 1920.145914][T26171] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:788kB inactive_file:52kB unevictable:0kB writepending:4kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1920.173123][T16072] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1920.227879][T26171] lowmem_reserve[]: 0 0 0 0 0 [ 1920.232788][T26171] Node 1 Normal free:3908848kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1920.267829][T26171] lowmem_reserve[]: 0 0 0 0 0 [ 1920.272616][T26171] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1920.284919][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1920.285920][T26171] Node 0 [ 1920.292448][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1920.303318][T26171] DMA32: 15*4kB (UM) 643*8kB (UM) 59*16kB (UME) 24*32kB (ME) 126*64kB (ME) 60*128kB (UME) 39*256kB (UM) 23*512kB (ME) 14*1024kB (UM) 8*2048kB (UME) 257*4096kB (UM) = 1127812kB [ 1920.321538][T26171] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1920.338706][T26197] fuse: Unknown parameter '0x0000000000000004' [ 1920.341871][T26171] Node 1 [ 1920.345535][T26199] fuse: Bad value for 'fd' [ 1920.358896][ T29] audit: type=1800 audit(1737442177.490:443): pid=26199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.5747" name="/" dev="9p" ino=2 res=0 errno=0 [ 1920.388359][T26171] Normal: 222*4kB (UE) 63*8kB (UME) 42*16kB (UE) 167*32kB (UME) 72*64kB (UME) 26*128kB (UME) 13*256kB (UME) 10*512kB (UM) 4*1024kB (UME) 7*2048kB (UME) 944*4096kB (UM) = 3908848kB [ 1920.437621][T26171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1920.488481][T26171] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1920.551900][T26171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1920.637558][T26171] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1920.749222][T26207] FAULT_INJECTION: forcing a failure. [ 1920.749222][T26207] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.772707][T26171] 73940 total pagecache pages [ 1920.779626][T26171] 0 pages in swap cache [ 1920.783838][T26171] Free swap = 124384kB [ 1920.808437][T26207] CPU: 1 UID: 0 PID: 26207 Comm: syz.4.5752 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1920.818885][T26207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1920.828957][T26207] Call Trace: [ 1920.832248][T26207] [ 1920.835198][T26207] dump_stack_lvl+0x241/0x360 [ 1920.839900][T26207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1920.845117][T26207] ? __pfx__printk+0x10/0x10 [ 1920.849725][T26207] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1920.855285][T26207] ? __pfx___might_resched+0x10/0x10 [ 1920.860586][T26207] should_fail_ex+0x3b0/0x4e0 [ 1920.865291][T26207] should_failslab+0xac/0x100 [ 1920.869982][T26207] ? io_submit_one+0x154/0x18a0 [ 1920.872972][T26171] Total swap = 124996kB [ 1920.874832][T26207] kmem_cache_alloc_noprof+0x70/0x380 [ 1920.874863][T26207] io_submit_one+0x154/0x18a0 [ 1920.889058][T26207] ? __pfx_io_submit_one+0x10/0x10 [ 1920.894174][T26207] ? __might_fault+0xaa/0x120 [ 1920.898848][T26207] ? __pfx_lock_release+0x10/0x10 [ 1920.903871][T26207] ? __might_fault+0xaa/0x120 [ 1920.908570][T26207] ? __might_fault+0xc6/0x120 [ 1920.913263][T26207] __se_sys_io_submit+0x171/0x2e0 [ 1920.918303][T26207] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1920.923854][T26207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1920.929851][T26207] ? do_syscall_64+0x100/0x230 [ 1920.934620][T26207] ? do_syscall_64+0xb6/0x230 [ 1920.939298][T26207] do_syscall_64+0xf3/0x230 [ 1920.943803][T26207] ? clear_bhb_loop+0x35/0x90 [ 1920.948485][T26207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.954381][T26207] RIP: 0033:0x7fcdcbf85d29 [ 1920.958790][T26207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1920.978392][T26207] RSP: 002b:00007fcdcce9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1920.986894][T26207] RAX: ffffffffffffffda RBX: 00007fcdcc175fa0 RCX: 00007fcdcbf85d29 [ 1920.994893][T26207] RDX: 0000000020000bc0 RSI: 0000000000000006 RDI: 00007fcdcce7e000 [ 1921.002861][T26207] RBP: 00007fcdcce9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.010824][T26207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.018789][T26207] R13: 0000000000000000 R14: 00007fcdcc175fa0 R15: 00007ffee1b41588 [ 1921.026765][T26207] [ 1921.029900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.056626][T26171] 2097051 pages RAM [ 1921.163918][T26171] 0 pages HighMem/MovableOnly [ 1921.170942][T26171] 427013 pages reserved [ 1921.201088][T26171] 0 pages cma reserved [ 1921.396502][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1922.267873][T26223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5756'. [ 1922.508542][ C1] net_ratelimit: 1 callbacks suppressed [ 1922.508562][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1922.521389][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1923.118695][T26235] fuse: Unknown parameter '0x0000000000000006' [ 1923.153105][T17479] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1923.179155][ T29] audit: type=1800 audit(1737442180.128:444): pid=26237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5761" name="/" dev="9p" ino=2 res=0 errno=0 [ 1923.360703][T17479] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1923.382313][T17479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.395779][T17479] usb 5-1: Product: syz [ 1923.399971][T17479] usb 5-1: Manufacturer: syz [ 1923.426389][T17479] usb 5-1: SerialNumber: syz [ 1923.476324][T17479] usb 5-1: config 0 descriptor?? [ 1923.620157][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1923.627395][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1924.602370][T17479] usb 5-1: ignoring: probably an ADSL modem [ 1924.732192][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1924.739443][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1925.614317][T26256] binder: 26255:26256 ioctl 4018620d 0 returned -22 [ 1925.750539][T26258] binder: 26255:26258 ioctl c0306201 0 returned -14 [ 1925.795985][T17479] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1925.805221][T17479] usb 5-1: USB disconnect, device number 94 [ 1925.843785][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1925.851026][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1925.859492][T25920] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1925.877459][T26260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1926.025687][T25920] usb 2-1: Using ep0 maxpacket: 32 [ 1926.056418][T25920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1926.080380][T25920] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1926.093494][T25920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.101990][T25920] usb 2-1: Product: syz [ 1926.106515][T25920] usb 2-1: Manufacturer: syz [ 1926.111562][T25920] usb 2-1: SerialNumber: syz [ 1926.123339][T25920] usb 2-1: config 0 descriptor?? [ 1926.139081][T26252] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1926.238064][T25920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1926.536101][T25920] usb 2-1: USB disconnect, device number 96 [ 1926.955797][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1926.963050][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1927.396873][T26272] 9pnet_fd: Insufficient options for proto=fd [ 1928.067496][ C1] net_ratelimit: 1 callbacks suppressed [ 1928.067519][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1928.080370][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1929.018111][T26298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1929.120304][T26299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1929.129657][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1929.179732][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1929.186912][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1930.014393][T26307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1930.025079][T26307] xt_connbytes: Forcing CT accounting to be enabled [ 1930.032902][T26307] Cannot find add_set index 0 as target [ 1930.291055][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1930.298330][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1931.317124][T26320] 9pnet_fd: Insufficient options for proto=fd [ 1931.403154][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1931.404183][ T29] audit: type=1326 audit(1737442187.826:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1931.410381][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1932.260044][ T29] audit: type=1326 audit(1737442187.826:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1932.290160][ T29] audit: type=1326 audit(1737442187.985:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1932.311617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1932.380780][ T29] audit: type=1326 audit(1737442188.004:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1932.402322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1932.434107][T26326] FAULT_INJECTION: forcing a failure. [ 1932.434107][T26326] name failslab, interval 1, probability 0, space 0, times 0 [ 1932.461375][T26326] CPU: 1 UID: 0 PID: 26326 Comm: syz.4.5788 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1932.471816][T26326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1932.481886][T26326] Call Trace: [ 1932.485178][T26326] [ 1932.488122][T26326] dump_stack_lvl+0x241/0x360 [ 1932.492824][T26326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1932.498048][T26326] ? __pfx__printk+0x10/0x10 [ 1932.502662][T26326] ? __kmalloc_cache_noprof+0x48/0x390 [ 1932.508151][T26326] ? __pfx___might_resched+0x10/0x10 [ 1932.513454][T26326] should_fail_ex+0x3b0/0x4e0 [ 1932.518159][T26326] should_failslab+0xac/0x100 [ 1932.522854][T26326] __kmalloc_cache_noprof+0x70/0x390 [ 1932.526217][ T29] audit: type=1326 audit(1737442188.004:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1932.528137][T26326] ? __add_metainfo+0x77/0x340 [ 1932.554407][T26326] __add_metainfo+0x77/0x340 [ 1932.558999][T26326] populate_metalist+0x15c/0x220 [ 1932.563935][T26326] tcf_ife_init+0xa46/0xfd0 [ 1932.568440][T26326] ? __pfx_tcf_ife_init+0x10/0x10 [ 1932.573471][T26326] ? __asan_memcpy+0x40/0x70 [ 1932.578060][T26326] ? __pfx_tcf_ife_init+0x10/0x10 [ 1932.583078][T26326] tcf_action_init_1+0x5d7/0x890 [ 1932.588012][T26326] ? nla_strscpy+0x100/0x180 [ 1932.592610][T26326] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1932.598062][T26326] ? _raw_read_unlock+0x28/0x50 [ 1932.602905][T26326] ? tc_action_load_ops+0x26d/0x590 [ 1932.608107][T26326] ? __pfx_lock_release+0x10/0x10 [ 1932.613130][T26326] ? __nla_parse+0x40/0x60 [ 1932.617547][T26326] tcf_action_init+0x2e8/0xae0 [ 1932.622320][T26326] ? 0xffffffffa0003b40 [ 1932.626474][T26326] ? __pfx_tcf_action_init+0x10/0x10 [ 1932.631768][T26326] ? __pfx_stack_trace_save+0x10/0x10 [ 1932.637159][T26326] ? cap_capable+0x1b4/0x250 [ 1932.641746][T26326] ? __lock_acquire+0x1397/0x2100 [ 1932.646765][T26326] ? cap_capable+0x1b4/0x250 [ 1932.651355][T26326] ? safesetid_security_capable+0xb2/0x1d0 [ 1932.657163][T26326] tc_ctl_action+0x47d/0xcf0 [ 1932.661758][T26326] ? __pfx_tc_ctl_action+0x10/0x10 [ 1932.666909][T26326] ? __pfx_tc_ctl_action+0x10/0x10 [ 1932.672017][T26326] rtnetlink_rcv_msg+0x73f/0xcf0 [ 1932.676945][T26326] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1932.682050][T26326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1932.687505][T26326] ? ref_tracker_free+0x643/0x7e0 [ 1932.692532][T26326] netlink_rcv_skb+0x1e3/0x430 [ 1932.697297][T26326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1932.702749][T26326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1932.708060][T26326] ? netlink_deliver_tap+0x2e/0x1b0 [ 1932.713266][T26326] netlink_unicast+0x7f6/0x990 [ 1932.718035][T26326] ? __pfx_netlink_unicast+0x10/0x10 [ 1932.723314][T26326] ? __virt_addr_valid+0x45f/0x530 [ 1932.728421][T26326] ? __phys_addr_symbol+0x2f/0x70 [ 1932.733443][T26326] ? __check_object_size+0x47a/0x730 [ 1932.738733][T26326] netlink_sendmsg+0x8e4/0xcb0 [ 1932.743508][T26326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1932.748803][T26326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1932.754088][T26326] __sock_sendmsg+0x221/0x270 [ 1932.758763][T26326] ____sys_sendmsg+0x52a/0x7e0 [ 1932.763532][T26326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1932.768817][T26326] ? __fget_files+0x2a/0x410 [ 1932.773408][T26326] ? __fget_files+0x2a/0x410 [ 1932.778005][T26326] __sys_sendmsg+0x269/0x350 [ 1932.782595][T26326] ? __pfx_lock_release+0x10/0x10 [ 1932.787635][T26326] ? __pfx___sys_sendmsg+0x10/0x10 [ 1932.792769][T26326] ? __pfx_vfs_write+0x10/0x10 [ 1932.797551][T26326] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1932.803875][T26326] ? do_syscall_64+0x100/0x230 [ 1932.808639][T26326] ? do_syscall_64+0xb6/0x230 [ 1932.813347][T26326] do_syscall_64+0xf3/0x230 [ 1932.817859][T26326] ? clear_bhb_loop+0x35/0x90 [ 1932.822538][T26326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.828429][T26326] RIP: 0033:0x7fcdcbf85d29 [ 1932.832836][T26326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1932.852434][T26326] RSP: 002b:00007fcdcce9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1932.860846][T26326] RAX: ffffffffffffffda RBX: 00007fcdcc175fa0 RCX: 00007fcdcbf85d29 [ 1932.868813][T26326] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1932.876779][T26326] RBP: 00007fcdcce9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1932.884744][T26326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1932.892707][T26326] R13: 0000000000000000 R14: 00007fcdcc175fa0 R15: 00007ffee1b41588 [ 1932.900688][T26326] [ 1932.903721][ C1] vkms_vblank_simulate: vblank timer overrun [ 1932.910087][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1932.917340][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1932.925294][ T29] audit: type=1326 audit(1737442188.060:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1932.985024][ T29] audit: type=1326 audit(1737442188.060:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1933.027505][ T29] audit: type=1326 audit(1737442188.060:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26314 comm="syz.1.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3845585d29 code=0x7ffc0000 [ 1934.054494][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1934.061655][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1934.334953][T26335] kvm: kvm [26334]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1934.344214][T26348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1934.476698][T26349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1934.480006][T26335] kvm: kvm [26334]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1934.486043][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1934.920472][T14931] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1935.165994][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1935.168637][T26357] 9pnet_fd: Insufficient options for proto=fd [ 1935.173231][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1935.209264][T14931] usb 9-1: config 0 has no interfaces? [ 1935.371282][T14931] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1935.477976][T14931] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1935.550804][T14931] usb 9-1: Manufacturer: syz [ 1935.565809][T26355] dccp_close: ABORT with 15584 bytes unread [ 1935.584042][T14931] usb 9-1: config 0 descriptor?? [ 1935.698082][ T29] audit: type=1326 audit(1737442191.839:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26358 comm="syz.4.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcbf85d29 code=0x7ffc0000 [ 1935.729735][T16072] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 1935.773852][ T29] audit: type=1326 audit(1737442191.839:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26358 comm="syz.4.5801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcbf85d29 code=0x7ffc0000 [ 1935.824324][T17479] usb 9-1: USB disconnect, device number 57 [ 1936.278834][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1936.286018][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1936.810809][T26353] ALSA: seq fatal error: cannot create timer (-19) [ 1937.389669][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1937.396862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1938.325364][T26400] 9pnet_fd: Insufficient options for proto=fd [ 1938.502196][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1938.843585][ T5906] usb 9-1: new low-speed USB device number 58 using dummy_hcd [ 1939.018780][T26408] binder: BINDER_SET_CONTEXT_MGR already set [ 1939.024996][T26408] binder: 26403:26408 ioctl 4018620d 200001c0 returned -16 [ 1939.037936][ T5906] usb 9-1: config 0 has an invalid interface number: 152 but max is 0 [ 1939.046423][ T5906] usb 9-1: config 0 has no interface number 0 [ 1939.072012][ T5906] usb 9-1: config 0 interface 152 has no altsetting 0 [ 1939.111426][ T5906] usb 9-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=a7.04 [ 1939.121521][ T9842] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1939.162613][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.195623][ T5906] usb 9-1: config 0 descriptor?? [ 1939.283549][ T9842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.296980][ T9842] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1939.316002][ T9842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.335468][ T9842] usb 5-1: Product: syz [ 1939.339657][ T9842] usb 5-1: Manufacturer: syz [ 1939.344276][ T9842] usb 5-1: SerialNumber: syz [ 1939.613351][ C1] net_ratelimit: 2 callbacks suppressed [ 1939.613374][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1939.626176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1939.849039][T26420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.857661][T26420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.359896][ T5906] usb 9-1: string descriptor 0 read error: -71 [ 1940.383909][ T5906] usb 9-1: NDI device with a latency value of 1 [ 1940.725527][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1940.732669][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1941.007424][ T5906] ftdi_sio 9-1:0.152: FTDI USB Serial Device converter detected [ 1941.034785][ T5906] ftdi_sio ttyUSB0: unknown device type: 0xa704 [ 1941.045249][ T5906] usb 9-1: USB disconnect, device number 58 [ 1941.092729][ T5906] ftdi_sio 9-1:0.152: device disconnected [ 1941.146713][ T9842] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1941.181855][ T9842] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1941.369095][ T9842] cdc_ncm 5-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1941.580973][ T9842] usb 5-1: USB disconnect, device number 95 [ 1941.836942][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1941.844157][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1942.055618][ T9842] cdc_ncm 5-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1942.170168][T26453] fuse: Unknown parameter '0x0000000000000006' [ 1942.662375][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1942.662533][ T29] audit: type=1800 audit(1737442198.331:480): pid=26456 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.5827" name="/" dev="9p" ino=2 res=0 errno=0 [ 1942.754140][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5828'. [ 1942.949104][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1942.956279][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1943.253623][T26458] bridge0: entered promiscuous mode [ 1943.277674][T26458] macvtap2: entered promiscuous mode [ 1943.290414][T26458] macvtap2: entered allmulticast mode [ 1943.310699][T26458] bridge0: entered allmulticast mode [ 1943.549008][T26466] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5831'. [ 1944.060586][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1944.067720][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1944.291628][T26464] bridge0: left allmulticast mode [ 1944.306804][T26464] bridge0: left promiscuous mode [ 1944.729191][T26478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1944.788717][T26478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.176003][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1945.183226][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1945.332887][ T5870] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1945.503916][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 1945.524963][ T5870] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 1945.550581][ T5870] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 511 [ 1945.597741][ T5870] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1945.628621][ T5870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1945.714448][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.861577][T26506] fuse: Unknown parameter 'fd0x0000000000000006' [ 1945.921456][ T5870] usb 3-1: Product: ㏫￾簌戶鑨꠻矖ꖫᒇ䡈ᥥ摰憒ﴹと爏⧐순ㄦ簵羐晦槝撆썛骮샯햔焒蟀 [ 1945.937659][ T29] audit: type=1800 audit(1737442201.418:481): pid=26506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.5842" name="/" dev="9p" ino=2 res=0 errno=0 [ 1945.957071][ T5870] usb 3-1: Manufacturer: 鷭雒ꨌ䗁唃嬪葡ၹ°౻筦雱傊쟖墌퐫廦⿶歕㦒䏠流ऴ䯫伌闘봟谨든᭐⬦雁ͮ䲎仭ᐏ꤅策㽾胒僵Ꙇ뺒往Ჷ䄀샀㐍厒阮ᅯ렵棊㝖ঞ⇹攻₿㋝Ｗ뷖檎䤧妎쑷ꪺ砺⑻얞䔕얏酋嵠젪킏㣕䠝萜뫟Ｃ⫝̸ᔘ툻̮烙캴ၵ烤ᾇ⟍봭㰪ࣴ [ 1945.993466][ T5870] usb 3-1: SerialNumber: ❔疨曤헣၉怜貖꼅ꝣᘘ췄Ʉ磤뢐⋵嗯귤蛺毭捶擅릓Τ풌ꥌ繹籫瀠筐짻ꆒ顉⤞숑겘料䶸桧ᚺ谰쁹䚧퍃ꖒфޒ猭⊭ꈷ晙聑̅怟驎菰◁뱮궜璻ࠅ쮃巫䜠䇇㑍ⷰ㺎皯㑜䶹歺꩐Ẹ垱줣륶झ띎위忍ᵨ篝⁨거捈᤽葨Ɠ팟阂䆩瀳柵ϼ銡쨕혭⍩｣鮕쀾蔑謹旋﯆筵屐䞨 [ 1946.284237][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1946.291471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1946.509216][T26485] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1946.516494][T26485] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1947.246631][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1947.396628][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1947.403832][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1947.505786][T26485] bond_slave_0: entered promiscuous mode [ 1947.512176][T26485] bond_slave_1: entered promiscuous mode [ 1947.537422][T26485] macvtap1: entered promiscuous mode [ 1947.542900][T26485] bond0: entered promiscuous mode [ 1947.747064][T26485] macvtap1: entered allmulticast mode [ 1948.065717][T26485] bond0: entered allmulticast mode [ 1948.091708][T26485] bond_slave_0: entered allmulticast mode [ 1948.144397][T26485] bond_slave_1: entered allmulticast mode [ 1948.185278][T26485] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1948.203845][ T29] audit: type=1326 audit(1737442203.522:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26523 comm="syz.8.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23f85d29 code=0x7ffc0000 [ 1948.507914][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1948.508670][ T5870] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1948.515083][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1948.538472][ T5870] usb 3-1: USB disconnect, device number 57 [ 1948.548592][ T29] audit: type=1326 audit(1737442203.522:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26523 comm="syz.8.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d23f85d29 code=0x7ffc0000 [ 1948.669947][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5852'. [ 1948.700042][T26538] bridge0: entered promiscuous mode [ 1948.721953][T26538] macvtap1: entered promiscuous mode [ 1948.739025][T26538] macvtap1: entered allmulticast mode [ 1948.754260][T26542] FAULT_INJECTION: forcing a failure. [ 1948.754260][T26542] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.784795][T26538] bridge0: entered allmulticast mode [ 1948.800383][T26542] CPU: 0 UID: 0 PID: 26542 Comm: syz.0.5852 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1948.810845][T26542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1948.820896][T26542] Call Trace: [ 1948.824168][T26542] [ 1948.827095][T26542] dump_stack_lvl+0x241/0x360 [ 1948.831783][T26542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1948.836978][T26542] ? __pfx__printk+0x10/0x10 [ 1948.841573][T26542] should_fail_ex+0x3b0/0x4e0 [ 1948.846253][T26542] should_failslab+0xac/0x100 [ 1948.850928][T26542] ? skb_clone+0x20c/0x390 [ 1948.855337][T26542] kmem_cache_alloc_noprof+0x70/0x380 [ 1948.860714][T26542] skb_clone+0x20c/0x390 [ 1948.864965][T26542] __netlink_deliver_tap+0x3cc/0x7f0 [ 1948.870256][T26542] ? netlink_deliver_tap+0x2e/0x1b0 [ 1948.875451][T26542] netlink_deliver_tap+0x19d/0x1b0 [ 1948.880561][T26542] netlink_unicast+0x7c4/0x990 [ 1948.885330][T26542] ? __pfx_netlink_unicast+0x10/0x10 [ 1948.890608][T26542] ? __virt_addr_valid+0x45f/0x530 [ 1948.895717][T26542] ? __phys_addr_symbol+0x2f/0x70 [ 1948.900736][T26542] ? __check_object_size+0x47a/0x730 [ 1948.906026][T26542] netlink_sendmsg+0x8e4/0xcb0 [ 1948.910796][T26542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1948.916088][T26542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1948.921372][T26542] __sock_sendmsg+0x221/0x270 [ 1948.926045][T26542] ____sys_sendmsg+0x52a/0x7e0 [ 1948.930812][T26542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1948.936096][T26542] ? __fget_files+0x2a/0x410 [ 1948.940683][T26542] ? __fget_files+0x2a/0x410 [ 1948.945275][T26542] __sys_sendmsg+0x269/0x350 [ 1948.949869][T26542] ? __pfx_lock_release+0x10/0x10 [ 1948.954890][T26542] ? __pfx___sys_sendmsg+0x10/0x10 [ 1948.960008][T26542] ? __pfx_vfs_write+0x10/0x10 [ 1948.964803][T26542] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1948.971141][T26542] ? do_syscall_64+0x100/0x230 [ 1948.975908][T26542] ? do_syscall_64+0xb6/0x230 [ 1948.980586][T26542] do_syscall_64+0xf3/0x230 [ 1948.985086][T26542] ? clear_bhb_loop+0x35/0x90 [ 1948.989762][T26542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.995649][T26542] RIP: 0033:0x7f5734785d29 [ 1949.000058][T26542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1949.019664][T26542] RSP: 002b:00007f57354de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.028077][T26542] RAX: ffffffffffffffda RBX: 00007f5734976080 RCX: 00007f5734785d29 [ 1949.036043][T26542] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000b [ 1949.044008][T26542] RBP: 00007f57354de090 R08: 0000000000000000 R09: 0000000000000000 [ 1949.051973][T26542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1949.059942][T26542] R13: 0000000000000001 R14: 00007f5734976080 R15: 00007fff24972058 [ 1949.067924][T26542] [ 1949.114699][T26542] bridge0: left allmulticast mode [ 1949.122586][T26542] bridge0: left promiscuous mode [ 1949.230789][ T9842] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1949.384601][ T9842] usb 2-1: device descriptor read/64, error -71 [ 1949.620183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1949.627395][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1949.867013][ T9842] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1950.015390][ T9842] usb 2-1: device descriptor read/64, error -71 [ 1950.254784][ T9842] usb usb2-port1: attempt power cycle [ 1950.731527][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1950.738756][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1950.762705][T26567] 9pnet_fd: Insufficient options for proto=fd [ 1950.854925][ T9842] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1950.917681][ T9842] usb 2-1: device descriptor read/8, error -71 [ 1951.372134][ T9842] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1951.719806][ T9842] usb 2-1: device descriptor read/8, error -71 [ 1951.844062][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1951.848323][T26578] pim6reg: entered allmulticast mode [ 1951.851270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1952.015784][ T9842] usb usb2-port1: unable to enumerate USB device [ 1952.403663][T26570] 9pnet_fd: Insufficient options for proto=fd [ 1952.634751][T26584] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5866'. [ 1952.955218][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1952.962456][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1953.968921][T26599] netlink: 'syz.8.5868': attribute type 21 has an invalid length. [ 1953.976818][T26599] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5868'. [ 1953.986127][T26599] netlink: 'syz.8.5868': attribute type 5 has an invalid length. [ 1953.993910][T26599] netlink: 'syz.8.5868': attribute type 6 has an invalid length. [ 1954.001638][T26599] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5868'. [ 1954.016876][T26599] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5868'. [ 1954.067974][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1954.075151][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1954.915926][T26604] binder: BINDER_SET_CONTEXT_MGR already set [ 1954.922850][T26604] binder: 26600:26604 ioctl 4018620d 20000040 returned -16 [ 1955.178849][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1955.186094][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1955.572958][T26614] FAULT_INJECTION: forcing a failure. [ 1955.572958][T26614] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.596035][T26614] CPU: 0 UID: 0 PID: 26614 Comm: syz.1.5877 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1955.606478][T26614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1955.616549][T26614] Call Trace: [ 1955.619844][T26614] [ 1955.622785][T26614] dump_stack_lvl+0x241/0x360 [ 1955.627490][T26614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1955.632708][T26614] ? __pfx__printk+0x10/0x10 [ 1955.637330][T26614] should_fail_ex+0x3b0/0x4e0 [ 1955.642031][T26614] should_failslab+0xac/0x100 [ 1955.646730][T26614] ? skb_clone+0x20c/0x390 [ 1955.651162][T26614] kmem_cache_alloc_noprof+0x70/0x380 [ 1955.656554][T26614] skb_clone+0x20c/0x390 [ 1955.660818][T26614] __netlink_deliver_tap+0x3cc/0x7f0 [ 1955.666140][T26614] ? netlink_deliver_tap+0x2e/0x1b0 [ 1955.671359][T26614] netlink_deliver_tap+0x19d/0x1b0 [ 1955.676491][T26614] netlink_unicast+0x7c4/0x990 [ 1955.681280][T26614] ? __pfx_netlink_unicast+0x10/0x10 [ 1955.686584][T26614] ? __virt_addr_valid+0x45f/0x530 [ 1955.691713][T26614] ? __phys_addr_symbol+0x2f/0x70 [ 1955.696749][T26614] ? __check_object_size+0x47a/0x730 [ 1955.702060][T26614] netlink_sendmsg+0x8e4/0xcb0 [ 1955.706858][T26614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1955.712176][T26614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1955.717480][T26614] __sock_sendmsg+0x221/0x270 [ 1955.722176][T26614] ____sys_sendmsg+0x52a/0x7e0 [ 1955.726967][T26614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1955.732270][T26614] ? __fget_files+0x2a/0x410 [ 1955.736879][T26614] ? __fget_files+0x2a/0x410 [ 1955.741489][T26614] __sys_sendmsg+0x269/0x350 [ 1955.746097][T26614] ? __pfx_lock_release+0x10/0x10 [ 1955.751137][T26614] ? __pfx___sys_sendmsg+0x10/0x10 [ 1955.756281][T26614] ? __pfx_vfs_write+0x10/0x10 [ 1955.761092][T26614] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1955.767438][T26614] ? do_syscall_64+0x100/0x230 [ 1955.772226][T26614] ? do_syscall_64+0xb6/0x230 [ 1955.776920][T26614] do_syscall_64+0xf3/0x230 [ 1955.781439][T26614] ? clear_bhb_loop+0x35/0x90 [ 1955.786133][T26614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.792043][T26614] RIP: 0033:0x7f3845585d29 [ 1955.796468][T26614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1955.816084][T26614] RSP: 002b:00007f384638b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1955.824519][T26614] RAX: ffffffffffffffda RBX: 00007f3845775fa0 RCX: 00007f3845585d29 [ 1955.828441][T25920] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1955.832487][T26614] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 1955.832504][T26614] RBP: 00007f384638b090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.832516][T26614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.832527][T26614] R13: 0000000000000000 R14: 00007f3845775fa0 R15: 00007ffc7f16c378 [ 1955.832554][T26614] [ 1956.014122][T26622] fuse: Unknown parameter 'fd0x0000000000000006' [ 1956.028278][ T29] audit: type=1800 audit(1737442210.856:484): pid=26622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.5879" name="/" dev="9p" ino=2 res=0 errno=0 [ 1956.054427][T25920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.068488][T25920] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1956.078481][T25920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.087180][T25920] usb 9-1: Product: syz [ 1956.091827][T25920] usb 9-1: Manufacturer: syz [ 1956.096451][T25920] usb 9-1: SerialNumber: syz [ 1956.104134][T25920] usb 9-1: config 0 descriptor?? [ 1956.112222][T25920] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1956.291192][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1956.298407][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1956.346662][T25920] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1956.823391][T26636] ceph: No mds server is up or the cluster is laggy [ 1956.864851][T25920] usb 9-1: USB disconnect, device number 59 [ 1957.266299][T26643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5885'. [ 1957.402545][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1957.409868][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1958.171556][T26654] FAULT_INJECTION: forcing a failure. [ 1958.171556][T26654] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.184524][T26654] CPU: 1 UID: 0 PID: 26654 Comm: syz.4.5889 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1958.194959][T26654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1958.205011][T26654] Call Trace: [ 1958.208279][T26654] [ 1958.211200][T26654] dump_stack_lvl+0x241/0x360 [ 1958.215869][T26654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1958.221074][T26654] ? __pfx__printk+0x10/0x10 [ 1958.225700][T26654] should_fail_ex+0x3b0/0x4e0 [ 1958.230391][T26654] should_failslab+0xac/0x100 [ 1958.235058][T26654] ? skb_clone+0x20c/0x390 [ 1958.239461][T26654] kmem_cache_alloc_noprof+0x70/0x380 [ 1958.244823][T26654] skb_clone+0x20c/0x390 [ 1958.249073][T26654] __netlink_deliver_tap+0x3cc/0x7f0 [ 1958.254381][T26654] ? netlink_deliver_tap+0x2e/0x1b0 [ 1958.259572][T26654] netlink_deliver_tap+0x19d/0x1b0 [ 1958.264681][T26654] netlink_unicast+0x7c4/0x990 [ 1958.269434][T26654] ? irqentry_exit+0x63/0x90 [ 1958.274019][T26654] ? __pfx_netlink_unicast+0x10/0x10 [ 1958.279295][T26654] ? netlink_sendmsg+0x755/0xcb0 [ 1958.284228][T26654] netlink_sendmsg+0x8e4/0xcb0 [ 1958.288989][T26654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1958.294271][T26654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1958.299544][T26654] __sock_sendmsg+0x221/0x270 [ 1958.304220][T26654] ____sys_sendmsg+0x52a/0x7e0 [ 1958.308998][T26654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1958.314291][T26654] ? __fget_files+0x2a/0x410 [ 1958.318872][T26654] ? __fget_files+0x2a/0x410 [ 1958.323463][T26654] __sys_sendmsg+0x269/0x350 [ 1958.328061][T26654] ? __pfx___sys_sendmsg+0x10/0x10 [ 1958.333186][T26654] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1958.339514][T26654] do_syscall_64+0xf3/0x230 [ 1958.344006][T26654] ? clear_bhb_loop+0x35/0x90 [ 1958.348674][T26654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.354072][T14931] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1958.354546][T26654] RIP: 0033:0x7fcdcbf85d29 [ 1958.366497][T26654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1958.386101][T26654] RSP: 002b:00007fcdcce7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1958.394509][T26654] RAX: ffffffffffffffda RBX: 00007fcdcc176080 RCX: 00007fcdcbf85d29 [ 1958.402475][T26654] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007 [ 1958.410440][T26654] RBP: 00007fcdcce7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1958.418403][T26654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.426373][T26654] R13: 0000000000000000 R14: 00007fcdcc176080 R15: 00007ffee1b41588 [ 1958.434353][T26654] [ 1958.437403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1958.514657][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1958.521788][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1959.083765][T14931] usb 3-1: Using ep0 maxpacket: 8 [ 1959.090387][T14931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1959.129606][T14931] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1959.138852][T14931] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1959.147941][T14931] usb 3-1: Product: syz [ 1959.153046][T14931] usb 3-1: Manufacturer: syz [ 1959.166486][T14931] usb 3-1: SerialNumber: syz [ 1959.612687][T14931] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1959.621493][T14931] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1959.626176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1959.636330][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1959.650557][T26672] x_tables: unsorted underflow at hook 1 [ 1960.738549][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1960.745706][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1961.839260][ T5906] usb 3-1: USB disconnect, device number 58 [ 1961.849920][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1961.857122][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1961.936868][T26690] FAULT_INJECTION: forcing a failure. [ 1961.936868][T26690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.993933][T26690] CPU: 0 UID: 0 PID: 26690 Comm: syz.2.5898 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1962.004385][T26690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1962.014432][T26690] Call Trace: [ 1962.017700][T26690] [ 1962.020628][T26690] dump_stack_lvl+0x241/0x360 [ 1962.025310][T26690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1962.030509][T26690] ? __pfx__printk+0x10/0x10 [ 1962.035096][T26690] ? __pfx_lock_release+0x10/0x10 [ 1962.040120][T26690] should_fail_ex+0x3b0/0x4e0 [ 1962.044803][T26690] _copy_from_user+0x2d/0xb0 [ 1962.049393][T26690] __sys_bpf+0x1a4/0x810 [ 1962.053633][T26690] ? __pfx___sys_bpf+0x10/0x10 [ 1962.058418][T26690] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1962.064406][T26690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1962.070734][T26690] ? do_syscall_64+0x100/0x230 [ 1962.075501][T26690] __x64_sys_bpf+0x7c/0x90 [ 1962.079922][T26690] do_syscall_64+0xf3/0x230 [ 1962.084429][T26690] ? clear_bhb_loop+0x35/0x90 [ 1962.089117][T26690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.095010][T26690] RIP: 0033:0x7fad2bf85d29 [ 1962.099422][T26690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1962.119035][T26690] RSP: 002b:00007fad2cd43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1962.127468][T26690] RAX: ffffffffffffffda RBX: 00007fad2c175fa0 RCX: 00007fad2bf85d29 [ 1962.135439][T26690] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000005 [ 1962.143407][T26690] RBP: 00007fad2cd43090 R08: 0000000000000000 R09: 0000000000000000 [ 1962.151387][T26690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1962.159352][T26690] R13: 0000000000000001 R14: 00007fad2c175fa0 R15: 00007ffcd98611f8 [ 1962.167332][T26690] [ 1962.962521][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1962.962637][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1963.235043][ T29] audit: type=1326 audit(1737442217.413:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1963.292397][ T29] audit: type=1326 audit(1737442217.413:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1963.313965][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.371000][ T29] audit: type=1326 audit(1737442217.525:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1963.394801][ T29] audit: type=1326 audit(1737442217.525:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1963.536584][T26706] erofs (device erofs): cannot read erofs superblock [ 1963.578041][ T29] audit: type=1326 audit(1737442217.553:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1964.073447][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1964.080699][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1964.324694][ T29] audit: type=1326 audit(1737442217.553:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1964.348608][ T29] audit: type=1326 audit(1737442217.553:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1964.542114][ T29] audit: type=1326 audit(1737442217.553:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1964.573195][ T29] audit: type=1326 audit(1737442217.553:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1964.605690][ T29] audit: type=1326 audit(1737442217.553:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26696 comm="syz.0.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 1965.185900][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1965.193090][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1966.297119][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1966.304309][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1966.448292][T26732] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5911'. [ 1966.547966][T26733] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5911'. [ 1966.557605][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5911'. [ 1967.409248][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1967.416391][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1967.843897][T26742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1967.972184][T26744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1967.981484][T26744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1968.520735][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1968.523176][T26750] binder: BINDER_SET_CONTEXT_MGR already set [ 1968.527957][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1968.533846][T26750] binder: 26746:26750 ioctl 4018620d 20000040 returned -16 [ 1969.547433][ T5870] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1969.633140][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1969.640319][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1969.944736][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1969.949353][ T5870] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1969.967684][ T5870] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=69.70 [ 1969.969812][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.970093][ T5870] usb 2-1: Product: syz [ 1969.970113][ T5870] usb 2-1: Manufacturer: syz [ 1969.970140][ T5870] usb 2-1: SerialNumber: syz [ 1969.991584][ T5870] usb 2-1: config 0 descriptor?? [ 1969.999452][ T5870] HFC-S_USB 2-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 1970.093497][T26771] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5923'. [ 1970.195768][T26773] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5923'. [ 1970.205212][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5923'. [ 1970.695871][T14957] usb 2-1: USB disconnect, device number 101 [ 1970.744380][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1970.751606][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1971.856691][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1971.861605][T26783] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1971.863905][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1971.872556][T26783] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1971.889850][T26783] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1971.899385][T26783] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1971.931062][T26783] geneve2: entered promiscuous mode [ 1971.936539][T26783] geneve2: entered allmulticast mode [ 1972.968043][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1972.975253][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1974.080387][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1974.087712][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1974.328523][T26804] binder: BINDER_SET_CONTEXT_MGR already set [ 1974.334695][T26804] binder: 26796:26804 ioctl 4018620d 20000040 returned -16 [ 1974.857481][T26811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1974.869452][T26811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.925305][T26810] tipc: Enabling of bearer rejected, failed to enable media [ 1974.935776][T26810] tipc: Enabling of bearer rejected, already enabled [ 1975.146715][T26817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.163261][T26817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.191679][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1975.198882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1975.242310][T26814] fuse: Unknown parameter '0x0000000000000004' [ 1975.509175][T26811] input: syz0 as /devices/virtual/input/input67 [ 1976.304074][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1976.311261][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1976.656625][T26838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1977.415315][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1977.422605][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1977.431346][ T5909] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1977.693825][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 1977.716036][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1977.812456][ T5909] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1977.837956][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.848758][ T5909] usb 3-1: Product: syz [ 1977.863188][ T5909] usb 3-1: Manufacturer: syz [ 1977.890502][ T5909] usb 3-1: SerialNumber: syz [ 1977.907820][ T5909] usb 3-1: config 0 descriptor?? [ 1977.931768][ T5909] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 1978.250019][T26842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1978.270254][T26842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1978.278789][T26858] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5945'. [ 1978.391299][T26862] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5945'. [ 1978.400712][T26862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5945'. [ 1978.411931][T26863] FAULT_INJECTION: forcing a failure. [ 1978.411931][T26863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1978.527662][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1978.534865][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1978.540025][T26863] CPU: 0 UID: 0 PID: 26863 Comm: syz.4.5947 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1978.552302][T26863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1978.562363][T26863] Call Trace: [ 1978.565639][T26863] [ 1978.568562][T26863] dump_stack_lvl+0x241/0x360 [ 1978.573248][T26863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1978.578445][T26863] ? __pfx__printk+0x10/0x10 [ 1978.583038][T26863] ? snprintf+0xda/0x120 [ 1978.587280][T26863] should_fail_ex+0x3b0/0x4e0 [ 1978.591961][T26863] _copy_to_user+0x31/0xb0 [ 1978.596381][T26863] simple_read_from_buffer+0xca/0x150 [ 1978.601756][T26863] proc_fail_nth_read+0x1e9/0x250 [ 1978.606787][T26863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1978.612335][T26863] ? rw_verify_area+0x55e/0x6f0 [ 1978.617187][T26863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1978.622735][T26863] vfs_read+0x1fc/0xb70 [ 1978.626892][T26863] ? __pfx___mutex_lock+0x10/0x10 [ 1978.631917][T26863] ? __pfx_vfs_read+0x10/0x10 [ 1978.636597][T26863] ? __fget_files+0x2a/0x410 [ 1978.641185][T26863] ? __fget_files+0x395/0x410 [ 1978.645854][T26863] ? __fget_files+0x2a/0x410 [ 1978.650444][T26863] ksys_read+0x18f/0x2b0 [ 1978.654684][T26863] ? __pfx_ksys_read+0x10/0x10 [ 1978.659446][T26863] ? do_syscall_64+0x100/0x230 [ 1978.664211][T26863] ? do_syscall_64+0xb6/0x230 [ 1978.668890][T26863] do_syscall_64+0xf3/0x230 [ 1978.673393][T26863] ? clear_bhb_loop+0x35/0x90 [ 1978.678071][T26863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.683961][T26863] RIP: 0033:0x7fcdcbf8473c [ 1978.688373][T26863] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1978.707979][T26863] RSP: 002b:00007fcdcce7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1978.716403][T26863] RAX: ffffffffffffffda RBX: 00007fcdcc176080 RCX: 00007fcdcbf8473c [ 1978.724381][T26863] RDX: 000000000000000f RSI: 00007fcdcce7e0a0 RDI: 0000000000000004 [ 1978.732353][T26863] RBP: 00007fcdcce7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.740317][T26863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.748289][T26863] R13: 0000000000000001 R14: 00007fcdcc176080 R15: 00007ffee1b41588 [ 1978.756272][T26863] [ 1979.247121][ T5909] usb 3-1: USB disconnect, device number 60 [ 1979.553523][T14957] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1979.638938][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1979.646187][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1979.727064][T14957] usb 9-1: Using ep0 maxpacket: 32 [ 1979.735127][ T5909] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1979.740040][T14957] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.764471][T14957] usb 9-1: config 0 has no interfaces? [ 1979.782448][T14957] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1979.792333][T26878] FAULT_INJECTION: forcing a failure. [ 1979.792333][T26878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1979.805577][T14957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.813745][T14957] usb 9-1: Product: syz [ 1979.825547][T14957] usb 9-1: Manufacturer: syz [ 1979.830553][T26878] CPU: 0 UID: 0 PID: 26878 Comm: syz.2.5952 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 1979.840985][T26878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1979.851063][T26878] Call Trace: [ 1979.854354][T26878] [ 1979.857300][T26878] dump_stack_lvl+0x241/0x360 [ 1979.862001][T26878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1979.867222][T26878] ? __pfx__printk+0x10/0x10 [ 1979.871829][T26878] ? __pfx_lock_release+0x10/0x10 [ 1979.876882][T26878] should_fail_ex+0x3b0/0x4e0 [ 1979.881583][T26878] _copy_from_iter+0x1e9/0x1c20 [ 1979.886453][T26878] ? __virt_addr_valid+0x183/0x530 [ 1979.891592][T26878] ? __alloc_skb+0x28f/0x440 [ 1979.896201][T26878] ? __pfx__copy_from_iter+0x10/0x10 [ 1979.901502][T26878] ? __virt_addr_valid+0x183/0x530 [ 1979.906628][T26878] ? __virt_addr_valid+0x183/0x530 [ 1979.911750][T26878] ? __virt_addr_valid+0x45f/0x530 [ 1979.916872][T26878] ? __phys_addr_symbol+0x2f/0x70 [ 1979.921918][T26878] ? __check_object_size+0x47a/0x730 [ 1979.927227][T26878] netlink_sendmsg+0x73d/0xcb0 [ 1979.932024][T26878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.937336][T26878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.942643][T26878] __sock_sendmsg+0x221/0x270 [ 1979.947344][T26878] ____sys_sendmsg+0x52a/0x7e0 [ 1979.952142][T26878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1979.957447][T26878] ? __fget_files+0x2a/0x410 [ 1979.962058][T26878] ? __fget_files+0x2a/0x410 [ 1979.966667][T26878] __sys_sendmsg+0x269/0x350 [ 1979.970463][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1979.971260][T26878] ? __pfx_lock_release+0x10/0x10 [ 1979.981316][T26878] ? __pfx___sys_sendmsg+0x10/0x10 [ 1979.986462][T26878] ? __pfx_vfs_write+0x10/0x10 [ 1979.991267][T26878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1979.997612][T26878] ? do_syscall_64+0x100/0x230 [ 1980.002398][T26878] ? do_syscall_64+0xb6/0x230 [ 1980.007096][T26878] do_syscall_64+0xf3/0x230 [ 1980.011614][T26878] ? clear_bhb_loop+0x35/0x90 [ 1980.016316][T26878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.022225][T26878] RIP: 0033:0x7fad2bf85d29 [ 1980.026652][T26878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1980.046273][T26878] RSP: 002b:00007fad2cd43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1980.054702][T26878] RAX: ffffffffffffffda RBX: 00007fad2c175fa0 RCX: 00007fad2bf85d29 [ 1980.062688][T26878] RDX: 0000000004000002 RSI: 0000000020000400 RDI: 0000000000000003 [ 1980.070703][T26878] RBP: 00007fad2cd43090 R08: 0000000000000000 R09: 0000000000000000 [ 1980.078686][T26878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1980.086666][T26878] R13: 0000000000000000 R14: 00007fad2c175fa0 R15: 00007ffcd98611f8 [ 1980.094660][T26878] [ 1980.100141][T14957] usb 9-1: SerialNumber: syz [ 1980.111125][T14957] usb 9-1: config 0 descriptor?? [ 1980.189639][ T5909] usb 2-1: config 255 has an invalid interface number: 222 but max is 0 [ 1980.198216][ T5909] usb 2-1: config 255 has no interface number 0 [ 1980.205073][ T5909] usb 2-1: config 255 interface 222 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1980.226220][ T5909] usb 2-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=4d.b4 [ 1980.271709][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.307867][ T5909] usb 2-1: Product: syz [ 1980.312171][ T5909] usb 2-1: Manufacturer: syz [ 1980.334462][T26883] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1980.342188][T26883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1980.461803][ T5909] usb 2-1: SerialNumber: syz [ 1980.751413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1980.758695][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1980.798805][ T5909] HFC-S_USB 2-1:255.222: probe with driver HFC-S_USB failed with error -5 [ 1980.965146][ T5909] usb 2-1: USB disconnect, device number 102 [ 1980.973503][T26884] block nbd8: NBD_DISCONNECT [ 1981.862604][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1981.869856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1982.096807][ T5909] usb 9-1: USB disconnect, device number 60 [ 1982.134515][T26891] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1984.086251][ C1] net_ratelimit: 2 callbacks suppressed [ 1984.086272][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1984.099012][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1984.358565][T26910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5960'. [ 1984.879384][T26910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5960'. [ 1984.888460][T26910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5960'. [ 1985.166440][T26916] 9pnet_fd: Insufficient options for proto=fd [ 1985.198619][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1985.205750][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1985.217854][T26919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1985.338082][T26920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1985.347398][T26920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1986.309892][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1986.317051][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1986.474819][T26928] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5965'. [ 1987.422057][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1987.429169][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1987.854012][T26944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5969'. [ 1987.994894][T26950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5969'. [ 1988.004209][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5969'. [ 1988.533553][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1988.540860][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1989.011796][ T9842] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1989.204962][ T9842] usb 2-1: not running at top speed; connect to a high speed hub [ 1989.282590][ T9842] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1989.489348][ T9842] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1989.498848][ T9842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.507153][ T9842] usb 2-1: Product: syz [ 1989.511506][ T9842] usb 2-1: Manufacturer: syz [ 1989.516283][ T9842] usb 2-1: SerialNumber: syz [ 1989.534782][ T9842] usb 2-1: bad CDC descriptors [ 1989.646024][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1989.653226][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1989.760520][T26957] __nla_validate_parse: 1 callbacks suppressed [ 1989.760550][T26957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5971'. [ 1989.776120][T26957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5971'. [ 1990.173114][ T5906] usb 2-1: USB disconnect, device number 103 [ 1990.394531][T26966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1990.485811][T26967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1990.495203][T26967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1990.757201][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1990.764422][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1991.502078][T26979] 9pnet_fd: Insufficient options for proto=fd [ 1991.869650][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1991.876869][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1992.980812][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1992.987953][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1993.846945][T17477] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1994.092944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1994.100117][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1994.851692][T26998] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5985'. [ 1994.860761][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5985'. [ 1994.971331][T17477] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1995.087990][T17477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.121716][T17477] usb 5-1: Product: syz [ 1995.138345][T17477] usb 5-1: Manufacturer: syz [ 1995.161951][T17477] usb 5-1: SerialNumber: syz [ 1995.190238][T17477] usb 5-1: config 0 descriptor?? [ 1995.204480][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1995.211692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1995.437924][T17477] usb 5-1: ignoring: probably an ADSL modem [ 1995.568017][ T5906] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1995.660648][T27012] Smack: duplicate mount options [ 1995.759209][ T5906] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1995.781699][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.808325][ T5906] usb 2-1: config 0 descriptor?? [ 1995.821045][ T5906] cp210x 2-1:0.0: cp210x converter detected [ 1995.899151][T17477] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1996.316875][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1996.324009][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1996.367220][T17477] usb 5-1: USB disconnect, device number 96 [ 1996.406345][T27018] 9pnet_fd: Insufficient options for proto=fd [ 1996.580021][ T5906] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1997.411770][T27043] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5998'. [ 1997.428116][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1997.435295][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1997.506143][T27045] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5998'. [ 1997.516010][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5998'. [ 1998.382662][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1998.382680][ T29] audit: type=1400 audit(1737442250.479:508): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=27008 comm="syz.1.5988" name="77" dev="tmpfs" ino=416 [ 1998.443105][ T5909] usb 2-1: USB disconnect, device number 104 [ 1998.477261][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1998.506757][ T5909] cp210x 2-1:0.0: device disconnected [ 1998.540563][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1998.547685][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1999.181423][ T5870] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1999.366418][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 1999.389938][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1999.429443][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1999.456860][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1999.487558][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1999.523383][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1999.533426][ T5870] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1999.572797][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.651777][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1999.658969][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1999.764524][ T5870] usb 3-1: config 0 descriptor?? [ 1999.910075][T27063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2000.354724][T27072] 9pnet_fd: Insufficient options for proto=fd [ 2000.730527][T27070] kvm: kvm [27069]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb370 [ 2000.764119][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2000.771278][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2000.805461][T27070] kvm: kvm [27069]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc83e [ 2000.832931][T27077] FAULT_INJECTION: forcing a failure. [ 2000.832931][T27077] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.871640][T27077] CPU: 1 UID: 0 PID: 27077 Comm: syz.0.6005 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 2000.882084][T27077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2000.892152][T27077] Call Trace: [ 2000.895444][T27077] [ 2000.898391][T27077] dump_stack_lvl+0x241/0x360 [ 2000.903099][T27077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2000.908319][T27077] ? __pfx__printk+0x10/0x10 [ 2000.912934][T27077] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 2000.919453][T27077] ? __pfx___might_resched+0x10/0x10 [ 2000.924758][T27077] should_fail_ex+0x3b0/0x4e0 [ 2000.929460][T27077] should_failslab+0xac/0x100 [ 2000.934156][T27077] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 2000.940510][T27077] ? __request_module+0x2d5/0x640 [ 2000.945566][T27077] kstrdup+0x39/0xb0 [ 2000.949482][T27077] __request_module+0x2d5/0x640 [ 2000.954362][T27077] ? __mutex_unlock_slowpath+0x21e/0x790 [ 2000.960017][T27077] ? __pfx___request_module+0x10/0x10 [ 2000.965421][T27077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2000.971427][T27077] ? synchronize_rcu+0x11b/0x360 [ 2000.976398][T27077] ? nft_pernet+0x23/0x240 [ 2000.980842][T27077] nf_tables_abort+0x869f/0x8910 [ 2000.985800][T27077] ? nf_tables_newset+0x25b6/0x2ee0 [ 2000.991034][T27077] ? __pfx_nf_tables_abort+0x10/0x10 [ 2000.996342][T27077] ? __pfx_lock_release+0x10/0x10 [ 2001.001393][T27077] ? __nla_parse+0x40/0x60 [ 2001.005836][T27077] nfnetlink_rcv+0x179d/0x2ab0 [ 2001.010649][T27077] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2001.015819][T27077] ? netlink_deliver_tap+0x2e/0x1b0 [ 2001.021034][T27077] ? skb_clone+0x240/0x390 [ 2001.025473][T27077] ? __pfx_lock_release+0x10/0x10 [ 2001.030540][T27077] ? netlink_deliver_tap+0x2e/0x1b0 [ 2001.035768][T27077] netlink_unicast+0x7f6/0x990 [ 2001.040558][T27077] ? __pfx_netlink_unicast+0x10/0x10 [ 2001.045866][T27077] ? __virt_addr_valid+0x45f/0x530 [ 2001.050994][T27077] ? __phys_addr_symbol+0x2f/0x70 [ 2001.056032][T27077] ? __check_object_size+0x47a/0x730 [ 2001.061344][T27077] netlink_sendmsg+0x8e4/0xcb0 [ 2001.066150][T27077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2001.071465][T27077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2001.076771][T27077] __sock_sendmsg+0x221/0x270 [ 2001.081469][T27077] ____sys_sendmsg+0x52a/0x7e0 [ 2001.086267][T27077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2001.091574][T27077] ? __fget_files+0x2a/0x410 [ 2001.096191][T27077] ? __fget_files+0x2a/0x410 [ 2001.100812][T27077] __sys_sendmsg+0x269/0x350 [ 2001.105430][T27077] ? __pfx_lock_release+0x10/0x10 [ 2001.110487][T27077] ? __pfx___sys_sendmsg+0x10/0x10 [ 2001.115638][T27077] ? __pfx_vfs_write+0x10/0x10 [ 2001.120447][T27077] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2001.126802][T27077] ? do_syscall_64+0x100/0x230 [ 2001.131586][T27077] ? do_syscall_64+0xb6/0x230 [ 2001.136286][T27077] do_syscall_64+0xf3/0x230 [ 2001.140807][T27077] ? clear_bhb_loop+0x35/0x90 [ 2001.145510][T27077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.151422][T27077] RIP: 0033:0x7f5734785d29 [ 2001.155859][T27077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2001.175486][T27077] RSP: 002b:00007f57354ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.183918][T27077] RAX: ffffffffffffffda RBX: 00007f5734975fa0 RCX: 00007f5734785d29 [ 2001.191904][T27077] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2001.199893][T27077] RBP: 00007f57354ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2001.207876][T27077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2001.215858][T27077] R13: 0000000000000000 R14: 00007f5734975fa0 R15: 00007fff24972058 [ 2001.223859][T27077] [ 2001.227030][ C1] vkms_vblank_simulate: vblank timer overrun [ 2001.418873][T14957] usb 3-1: USB disconnect, device number 61 [ 2001.424942][T16072] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 2001.875402][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2001.882524][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2002.864263][T14957] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2002.987877][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2002.995096][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2003.203398][T27107] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6013'. [ 2003.267438][T14957] usb 3-1: Using ep0 maxpacket: 32 [ 2003.282015][T14957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2003.303604][T14957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2003.328702][T14957] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2003.356126][T14957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.565311][T14957] usb 3-1: config 0 descriptor?? [ 2004.033344][T14957] savu 0003:1E7D:2D5A.003F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 2004.060030][T27109] 9pnet_fd: Insufficient options for proto=fd [ 2004.099079][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2004.100860][ T29] audit: type=1326 audit(1737442255.830:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27117 comm="syz.0.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 2004.106403][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2004.205312][ T29] audit: type=1326 audit(1737442255.867:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27117 comm="syz.0.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 2004.462831][T14957] usb 3-1: USB disconnect, device number 62 [ 2004.641801][ T29] audit: type=1326 audit(1737442255.867:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27117 comm="syz.0.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 2004.709193][ T29] audit: type=1326 audit(1737442255.867:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27117 comm="syz.0.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 2004.766502][ T29] audit: type=1326 audit(1737442255.867:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27117 comm="syz.0.6016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5734785d29 code=0x7ffc0000 [ 2004.802861][T27125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6018'. [ 2004.916030][T27126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6018'. [ 2004.925527][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6018'. [ 2005.211389][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2005.218616][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2006.322733][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2006.329966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2006.552485][T27135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6022'. [ 2006.731067][T27138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6022'. [ 2006.740264][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6022'. [ 2007.435035][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2007.442236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2008.546390][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2008.553650][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2008.840225][T27152] 9pnet_fd: Insufficient options for proto=fd [ 2009.049422][T17479] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2009.416736][T14957] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2009.525459][T17479] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2009.544381][T17479] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.560964][T17479] usb 9-1: config 0 descriptor?? [ 2009.574757][T17479] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2009.596616][T27168] kvm: kvm [27167]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1e5e [ 2009.605701][T14957] usb 5-1: Using ep0 maxpacket: 32 [ 2009.612536][T14957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2009.632559][T14957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2009.643138][T27168] kvm_intel: kvm [27167]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0xef2a [ 2009.652474][T14957] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2009.658728][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2009.662311][T27168] kvm: kvm [27167]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x9bca [ 2009.668761][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2009.684785][T14957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.696403][T14957] usb 5-1: config 0 descriptor?? [ 2009.707984][T27168] kvm_intel: kvm [27167]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x2b76 [ 2010.190684][T14957] savu 0003:1E7D:2D5A.0040: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 2010.396100][T17479] gspca_spca508: reg_read err -110 [ 2010.404140][T17479] gspca_spca508: reg_read err -32 [ 2010.412204][T17479] gspca_spca508: reg_read err -32 [ 2010.429473][T17479] gspca_spca508: reg_read err -32 [ 2010.434916][T17479] gspca_spca508: reg write: error -32 [ 2010.440882][T17479] spca508 9-1:0.0: probe with driver spca508 failed with error -32 [ 2010.454829][T17479] usb 5-1: USB disconnect, device number 97 [ 2010.770077][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2010.777314][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2011.882149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2011.889319][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2011.947789][T27187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6037'. [ 2012.029046][T27189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6037'. [ 2012.038347][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'. [ 2012.719401][T15015] usb 9-1: USB disconnect, device number 61 [ 2012.993673][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2013.000866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2013.418874][T27196] 9pnet_fd: Insufficient options for proto=fd [ 2013.866362][T27210] fuse: Unknown parameter '+UBSb7|2?H^ۥKtH.kWfK';'J魼 ަI@U-U18446744073709551615' [ 2014.107195][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2014.114356][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2015.217320][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2015.224521][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2016.197435][T27235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6051'. [ 2016.210998][T27235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6051'. [ 2016.220030][T27235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'. [ 2016.331171][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2016.338421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2017.323354][T17479] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2017.440975][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2017.448229][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2017.612095][T17479] usb 5-1: Using ep0 maxpacket: 16 [ 2017.636088][T17479] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2017.669094][T17479] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2017.725923][T17479] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2017.750955][T17479] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 2017.783084][T17479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.997982][T17479] usb 5-1: config 0 descriptor?? [ 2018.553307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2018.560536][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2018.996766][T17479] wacom 0003:056A:00E3.0041: unknown main item tag 0x0 [ 2019.080450][T17479] wacom 0003:056A:00E3.0041: unknown main item tag 0x0 [ 2019.148308][T17479] wacom 0003:056A:00E3.0041: unknown main item tag 0x0 [ 2019.244097][T17479] wacom 0003:056A:00E3.0041: unknown main item tag 0x0 [ 2019.333390][T17479] wacom 0003:056A:00E3.0041: unknown main item tag 0x0 [ 2019.410019][T17479] wacom 0003:056A:00E3.0041: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.4-1/input0 [ 2019.469269][T27241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6053'. [ 2019.664620][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2019.671838][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2020.776915][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2020.784126][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2021.296199][T27275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6064'. [ 2021.313127][T27275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6064'. [ 2021.322256][T27275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6064'. [ 2021.700092][T27289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6070'. [ 2021.784023][T27290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6070'. [ 2021.793254][T27290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6070'. [ 2021.815662][T17479] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2021.888265][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2021.895469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2022.323654][T17479] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 2022.340630][T17479] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2022.390934][T17479] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2022.439363][T17479] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2022.462066][T17479] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.473494][T14957] usb 5-1: USB disconnect, device number 98 [ 2022.477157][T17479] usb 9-1: config 0 descriptor?? [ 2022.496786][T27294] netlink: 'syz.0.6071': attribute type 21 has an invalid length. [ 2022.509079][T17479] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2022.518120][T27294] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6071'. [ 2022.527477][T27294] netlink: 'syz.0.6071': attribute type 5 has an invalid length. [ 2022.536512][T27294] netlink: 'syz.0.6071': attribute type 6 has an invalid length. [ 2022.545006][T27294] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6071'. [ 2023.000698][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2023.007915][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2024.111956][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2024.119153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2025.224397][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2025.231564][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2025.287789][ T46] usb 9-1: USB disconnect, device number 62 [ 2025.313975][T27322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6079'. [ 2025.329263][T27322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6079'. [ 2025.338679][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6079'. [ 2025.715480][T25920] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2025.790306][ T46] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2025.961557][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 2025.980583][T25920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.004539][T27342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6085'. [ 2026.015019][ T46] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.029700][T25920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2026.058947][ T46] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2026.072660][T25920] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2026.093292][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.103934][T25920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.119079][ T46] usb 9-1: Product: syz [ 2026.125361][T25920] usb 5-1: config 0 descriptor?? [ 2026.132347][ T46] usb 9-1: Manufacturer: syz [ 2026.144045][ T46] usb 9-1: SerialNumber: syz [ 2026.166111][ T46] usb 9-1: config 0 descriptor?? [ 2026.183776][ T46] iowarrior 9-1:0.0: no interrupt-in endpoint found [ 2026.335777][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2026.343132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2026.407289][T27327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.435929][T27327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.589301][T25920] hid-steam 0003:28DE:1142.0042: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 2027.448105][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2027.455327][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2027.680153][T25920] hid-steam 0003:28DE:1142.0042: Steam wireless receiver connected [ 2028.264135][ T5870] usb 9-1: USB disconnect, device number 63 [ 2028.559211][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2028.566393][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2028.736742][T25920] hid-steam 0003:28DE:1142.0042: No HID_FEATURE_REPORT submitted - nothing to read [ 2029.274356][T25920] hid-steam 0003:28DE:1142.0043: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 2029.596425][T17477] usb 5-1: reset high-speed USB device number 99 using dummy_hcd [ 2029.671660][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2029.678894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2030.139126][T16072] Bluetooth: hci6: command 0x0406 tx timeout [ 2030.782871][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2030.790046][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2031.215373][T25920] usb 5-1: USB disconnect, device number 99 [ 2031.254919][T25920] hid-steam 0003:28DE:1142.0042: Steam wireless receiver disconnected [ 2031.344029][T27380] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 2031.350592][T27380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2031.386684][T27380] vhci_hcd vhci_hcd.0: Device attached [ 2031.392405][ T5870] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2031.431706][T27381] usbip_core: unknown command [ 2031.457018][T27381] vhci_hcd: unknown pdu 1811939328 [ 2031.462231][T27381] usbip_core: unknown command [ 2031.487469][ T11] vhci_hcd: stop threads [ 2031.502840][ T11] vhci_hcd: release socket [ 2031.507296][ T11] vhci_hcd: disconnect device [ 2031.575300][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 2031.588258][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.604989][T27371] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2031.608940][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.633595][ T5870] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2031.645209][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.663604][ T5870] usb 3-1: config 0 descriptor?? [ 2031.861910][T27393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6099'. [ 2031.871394][T27393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6099'. [ 2031.895297][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2031.902453][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2032.055185][T24296] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2032.117928][ T5870] savu 0003:1E7D:2D5A.0044: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 2032.240171][T24296] usb 5-1: Using ep0 maxpacket: 8 [ 2032.253248][T24296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.270788][T24296] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2032.290146][T24296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.300138][T24296] usb 5-1: Product: syz [ 2032.602929][T24296] usb 5-1: Manufacturer: syz [ 2032.607705][T24296] usb 5-1: SerialNumber: syz [ 2032.623572][T24296] usb 5-1: config 0 descriptor?? [ 2032.697733][T24296] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 2032.936255][T27390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2032.953832][T27390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.962528][T24296] usb 3-1: USB disconnect, device number 63 [ 2033.006508][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2033.013724][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2033.068124][ T1330] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.106518][ T1330] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.114124][T27399] 9pnet_fd: Insufficient options for proto=fd [ 2033.155433][T16072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2033.170141][T16072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2033.183188][T16072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2033.207611][T16072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2033.225080][T16072] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2033.232667][T16072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2033.253368][ T1330] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.259215][T24296] usb 5-1: USB disconnect, device number 100 [ 2033.274234][ T1330] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.380680][ T1330] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.392529][ T1330] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.484911][ T1330] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.504251][ T1330] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.602964][T27408] chnl_net:caif_netlink_parms(): no params data found [ 2034.002115][T27427] i2c i2c-0: Invalid block write size 34 [ 2034.010348][T27408] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.054124][T27408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.074672][T27408] bridge_slave_0: entered allmulticast mode [ 2034.105762][T27408] bridge_slave_0: entered promiscuous mode [ 2034.118958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2034.126141][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2034.148386][T27408] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.178545][T27408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.207623][T27408] bridge_slave_1: entered allmulticast mode [ 2034.229393][T27408] bridge_slave_1: entered promiscuous mode [ 2034.460976][T25981] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2034.590823][T27408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2034.716605][T27432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6108'. [ 2034.739356][T27432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6108'. [ 2034.748350][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6108'. [ 2034.813183][T27433] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6106'. [ 2034.822342][T27433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6106'. [ 2035.230158][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2035.237441][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2035.498762][T25981] Bluetooth: hci0: command tx timeout [ 2036.111268][T27444] overlayfs: failed to resolve './file1': -2 [ 2036.202618][T27446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6112'. [ 2036.342420][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2036.349612][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2036.391192][T27448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6112'. [ 2036.400293][T27448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6112'. [ 2036.705729][T25981] Bluetooth: hci4: command 0x0c1a tx timeout [ 2037.114304][ T1330] bond0 (unregistering): Released all slaves [ 2037.138220][T27408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2037.210184][T27439] tipc: Enabling of bearer rejected, already enabled [ 2037.388621][T27443] tipc: Enabled bearer , priority 0 [ 2037.453827][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2037.461024][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2037.510952][ T1330] tipc: Disabling bearer [ 2037.567577][ T1330] tipc: Disabling bearer [ 2037.633156][ T1330] tipc: Left network mode [ 2037.710401][T25981] Bluetooth: hci0: command tx timeout [ 2037.754938][T27408] team0: Port device team_slave_0 added [ 2038.109159][T27408] team0: Port device team_slave_1 added [ 2038.147801][T27459] bridge0: port 3(vlan2) entered blocking state [ 2038.154555][T27459] bridge0: port 3(vlan2) entered disabled state [ 2038.162063][T27459] vlan2: entered allmulticast mode [ 2038.220004][T27459] vlan2: left allmulticast mode [ 2038.565904][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2038.573119][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2038.639038][T27408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2038.689701][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2038.715664][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.768711][T27408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2038.861773][T27408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2038.873454][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2038.929227][T27408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2038.986566][T27472] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6118'. [ 2039.143271][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6118'. [ 2039.178012][T27469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6117'. [ 2039.677440][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2039.684644][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2039.933992][T25981] Bluetooth: hci0: command tx timeout [ 2040.282393][T27479] netlink: 'syz.2.6120': attribute type 8 has an invalid length. [ 2040.327969][ T1330] hsr_slave_0: left promiscuous mode [ 2040.338460][ T1330] hsr_slave_1: left promiscuous mode [ 2040.500602][ T29] audit: type=1800 audit(1737442289.850:514): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.6121" name="/" dev="9p" ino=2 res=0 errno=0 [ 2040.537958][ T1330] veth1_macvtap: left promiscuous mode [ 2040.558099][ T1330] veth0_macvtap: left promiscuous mode [ 2040.564118][ T1330] veth1_vlan: left promiscuous mode [ 2040.569901][ T1330] veth0_vlan: left promiscuous mode [ 2040.789551][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2040.796870][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2041.438836][ T1330] pim6reg (unregistering): left allmulticast mode [ 2041.447460][T27487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6123'. [ 2041.594723][T27488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6123'. [ 2041.603943][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6123'. [ 2041.901049][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2041.908230][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2042.157704][T25981] Bluetooth: hci0: command tx timeout [ 2043.013225][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2043.020451][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2043.431805][T27408] hsr_slave_0: entered promiscuous mode [ 2043.462254][T27408] hsr_slave_1: entered promiscuous mode [ 2043.479029][T27408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2043.497473][T27408] Cannot create hsr debugfs directory [ 2043.552350][T27495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6125'. [ 2043.619478][T27496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6125'. [ 2043.629940][T27496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6125'. [ 2043.666519][T27491] tipc: Enabled bearer , priority 10 [ 2043.674040][T27493] tipc: Enabling of bearer rejected, already enabled [ 2043.901044][T27499] FAULT_INJECTION: forcing a failure. [ 2043.901044][T27499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2043.974450][T27499] CPU: 0 UID: 0 PID: 27499 Comm: syz.1.6128 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 2043.984911][T27499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2043.994981][T27499] Call Trace: [ 2043.998277][T27499] [ 2044.001222][T27499] dump_stack_lvl+0x241/0x360 [ 2044.005928][T27499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2044.011157][T27499] ? __pfx__printk+0x10/0x10 [ 2044.015773][T27499] ? __pfx_lock_release+0x10/0x10 [ 2044.021036][T27499] should_fail_ex+0x3b0/0x4e0 [ 2044.025746][T27499] _copy_from_user+0x2d/0xb0 [ 2044.030358][T27499] kvm_arch_dev_ioctl+0x25a/0xbb0 [ 2044.035441][T27499] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 2044.041016][T27499] ? tomoyo_path_number_perm+0x6f9/0x860 [ 2044.046671][T27499] ? __lock_acquire+0x1397/0x2100 [ 2044.051717][T27499] ? tomoyo_path_number_perm+0x206/0x860 [ 2044.057381][T27499] ? smack_log+0x123/0x540 [ 2044.061821][T27499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2044.067830][T27499] ? __pfx_smack_log+0x10/0x10 [ 2044.072612][T27499] ? smk_access+0x4ab/0x4e0 [ 2044.077143][T27499] kvm_dev_ioctl+0x5cb/0x2460 [ 2044.081839][T27499] ? smk_tskacc+0x300/0x370 [ 2044.086371][T27499] ? smack_file_ioctl+0x2f7/0x3a0 [ 2044.091417][T27499] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2044.096816][T27499] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2044.101952][T27499] ? __fget_files+0x2a/0x410 [ 2044.106574][T27499] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2044.111708][T27499] __se_sys_ioctl+0xf5/0x170 [ 2044.116324][T27499] do_syscall_64+0xf3/0x230 [ 2044.120862][T27499] ? clear_bhb_loop+0x35/0x90 [ 2044.124773][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2044.125545][T27499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.132709][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2044.138420][T27499] RIP: 0033:0x7f3845585d29 [ 2044.138441][T27499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2044.138455][T27499] RSP: 002b:00007f384638b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2044.177905][T27499] RAX: ffffffffffffffda RBX: 00007f3845775fa0 RCX: 00007f3845585d29 [ 2044.185890][T27499] RDX: 0000000020000000 RSI: 00000000c008aec1 RDI: 0000000000000003 [ 2044.193876][T27499] RBP: 00007f384638b090 R08: 0000000000000000 R09: 0000000000000000 [ 2044.201864][T27499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2044.209847][T27499] R13: 0000000000000000 R14: 00007f3845775fa0 R15: 00007ffc7f16c378 [ 2044.217859][T27499] [ 2044.987425][ T29] audit: type=1800 audit(1737442293.994:515): pid=27509 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.6127" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2045.168871][T27510] tipc: Enabling of bearer rejected, already enabled [ 2045.179541][T27510] tipc: Enabling of bearer rejected, already enabled [ 2045.237522][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2045.244705][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2045.300511][T27408] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2045.312781][T27408] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2045.324296][T27408] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2045.339666][T27408] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2045.450114][T27408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2045.485000][T27408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2045.507884][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 2045.515084][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2045.563145][T24157] bridge0: port 2(bridge_slave_1) entered blocking state [ 2045.570375][T24157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2045.842023][T27408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2046.348361][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2046.355507][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2046.938978][T27540] tipc: Enabling of bearer rejected, already enabled [ 2046.948758][T27540] tipc: Enabled bearer , priority 0 [ 2047.383636][T27408] veth0_vlan: entered promiscuous mode [ 2047.413240][T27408] veth1_vlan: entered promiscuous mode [ 2047.460521][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2047.467760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2047.489759][T27408] veth0_macvtap: entered promiscuous mode [ 2047.510446][T27408] veth1_macvtap: entered promiscuous mode [ 2047.544346][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.655913][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.666224][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.676695][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.686666][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.697167][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.707110][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.726313][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.738053][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.748497][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.759877][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2047.939817][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.953271][T27408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2047.971185][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.572129][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2048.579360][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2048.836414][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.847744][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.858287][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.868494][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.878998][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.889070][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.899992][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.909905][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.921551][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.931521][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.946441][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2049.006315][T27408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2049.088905][T27408] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.126510][T27408] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.145175][T27408] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.175925][T27408] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.439550][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.562176][T27565] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2049.570193][T27565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2049.579189][T27565] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2049.587001][T27565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2049.684144][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2049.689803][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.691322][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2049.888787][T27568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6143'. [ 2050.307537][T27573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6143'. [ 2050.316978][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6143'. [ 2050.541431][T27564] netlink: 'syz.0.6142': attribute type 3 has an invalid length. [ 2050.712127][T27564] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2050.727713][T27564] kvm: pic: level sensitive irq not supported [ 2050.727787][T27564] kvm: pic: non byte read [ 2050.739060][T27564] kvm: pic: level sensitive irq not supported [ 2050.739124][T27564] kvm: pic: non byte read [ 2050.753180][T27564] kvm: pic: level sensitive irq not supported [ 2050.753244][T27564] kvm: pic: non byte read [ 2050.770531][T14593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2050.772318][T27564] kvm: pic: level sensitive irq not supported [ 2050.788381][T14593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2050.790125][T27564] kvm: pic: non byte read [ 2050.802184][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2050.802351][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2051.907800][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2051.915088][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2052.331106][T27601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6151'. [ 2052.399793][ T29] audit: type=1800 audit(1737442300.991:516): pid=27597 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.6144" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2052.762889][T27607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6151'. [ 2052.778132][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6151'. [ 2053.029137][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2053.036393][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2054.131469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2054.138674][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2054.791417][T27631] FAULT_INJECTION: forcing a failure. [ 2054.791417][T27631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.804694][T27631] CPU: 0 UID: 0 PID: 27631 Comm: syz.8.6160 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 2054.815124][T27631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2054.825189][T27631] Call Trace: [ 2054.828467][T27631] [ 2054.831392][T27631] dump_stack_lvl+0x241/0x360 [ 2054.836070][T27631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2054.841265][T27631] ? __pfx__printk+0x10/0x10 [ 2054.845861][T27631] ? snprintf+0xda/0x120 [ 2054.850098][T27631] should_fail_ex+0x3b0/0x4e0 [ 2054.854777][T27631] _copy_to_user+0x31/0xb0 [ 2054.859189][T27631] simple_read_from_buffer+0xca/0x150 [ 2054.864560][T27631] proc_fail_nth_read+0x1e9/0x250 [ 2054.869585][T27631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2054.875131][T27631] ? rw_verify_area+0x55e/0x6f0 [ 2054.879979][T27631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2054.885524][T27631] vfs_read+0x1fc/0xb70 [ 2054.889679][T27631] ? __pfx___mutex_lock+0x10/0x10 [ 2054.894699][T27631] ? __pfx_vfs_read+0x10/0x10 [ 2054.899371][T27631] ? __fget_files+0x2a/0x410 [ 2054.903956][T27631] ? __fget_files+0x395/0x410 [ 2054.908624][T27631] ? __fget_files+0x2a/0x410 [ 2054.913213][T27631] ksys_read+0x18f/0x2b0 [ 2054.917455][T27631] ? __pfx_ksys_read+0x10/0x10 [ 2054.922215][T27631] ? __secure_computing+0x125/0x370 [ 2054.927419][T27631] do_syscall_64+0xf3/0x230 [ 2054.931916][T27631] ? clear_bhb_loop+0x35/0x90 [ 2054.936594][T27631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2054.942490][T27631] RIP: 0033:0x7f2bb3d8473c [ 2054.946900][T27631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2054.966499][T27631] RSP: 002b:00007f2bb4c72030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2054.974906][T27631] RAX: ffffffffffffffda RBX: 00007f2bb3f75fa0 RCX: 00007f2bb3d8473c [ 2054.982872][T27631] RDX: 000000000000000f RSI: 00007f2bb4c720a0 RDI: 0000000000000004 [ 2054.990842][T27631] RBP: 00007f2bb4c72090 R08: 0000000000000000 R09: 0000000000000000 [ 2054.998807][T27631] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 2055.006774][T27631] R13: 0000000000000000 R14: 00007f2bb3f75fa0 R15: 00007ffe933bc818 [ 2055.014773][T27631] [ 2055.093393][T14957] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2055.242972][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2055.250221][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2055.264746][T14957] usb 5-1: Using ep0 maxpacket: 32 [ 2055.340676][T14957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2055.360476][T14957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2055.375328][T14957] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2055.424425][T14957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.518161][T14957] usb 5-1: config 0 descriptor?? [ 2055.557572][T14957] hub 5-1:0.0: USB hub found [ 2055.771317][T27627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.119683][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2056.149837][T27627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.181799][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2056.201508][T27627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.214810][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2056.229881][T27627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.249089][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2056.272831][T27627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.293757][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2056.355130][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2056.362309][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2056.598768][T14957] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2056.624767][T14957] usbhid 5-1:0.0: can't add hid device: -71 [ 2056.640239][T14957] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2057.064286][T27656] netlink: 'syz.4.6167': attribute type 39 has an invalid length. [ 2057.466603][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2057.472383][T14957] usb 5-1: USB disconnect, device number 101 [ 2057.473821][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2058.133299][T27667] tipc: Started in network mode [ 2058.140086][T27667] tipc: Node identity 7f000001, cluster identity 4711 [ 2058.158202][T27667] tipc: Enabled bearer , priority 10 [ 2058.176308][T27667] tipc: Enabled bearer , priority 0 [ 2058.578971][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2058.586174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2059.411420][T14957] tipc: Node number set to 2130706433 [ 2059.639717][T27677] No source specified [ 2059.682536][T27677] overlayfs: overlapping lowerdir path [ 2059.690267][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2059.697460][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2059.843874][T27685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6177'. [ 2059.983591][ T29] audit: type=1800 audit(1737442308.053:517): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.6173" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2060.186814][T27692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6180'. [ 2060.282216][T27693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6180'. [ 2060.292224][T27693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6180'. [ 2060.321519][T14957] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2060.556971][T14957] usb 9-1: Using ep0 maxpacket: 32 [ 2060.646289][T14957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2060.690322][T14957] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2060.802725][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2060.809924][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2060.823576][T14957] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2060.832640][T14957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.842618][T14957] usb 9-1: config 0 descriptor?? [ 2060.977483][T27695] binder: BINDER_SET_CONTEXT_MGR already set [ 2060.983491][T27695] binder: 27694:27695 ioctl 4018620d 20000040 returned -16 [ 2061.251106][T17479] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2061.521473][T17479] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.632248][T14957] savu 0003:1E7D:2D5A.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 2061.700325][T27705] tipc: Enabling of bearer rejected, already enabled [ 2061.710896][T27705] tipc: Enabling of bearer rejected, already enabled [ 2061.713398][T17479] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2061.856328][T17479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.875651][T17479] usb 2-1: Product: syz [ 2061.879920][T17479] usb 2-1: Manufacturer: syz [ 2061.887426][T14957] usb 9-1: USB disconnect, device number 64 [ 2061.889415][T17479] usb 2-1: SerialNumber: syz [ 2061.913888][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2061.921078][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2062.252448][T27709] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2062.260438][T27709] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2062.274728][T27709] bridge0: port 3(erspan0) entered blocking state [ 2062.281470][T27709] bridge0: port 3(erspan0) entered disabled state [ 2062.288724][T27709] erspan0: entered allmulticast mode [ 2062.298485][T27709] erspan0: entered promiscuous mode [ 2062.305109][T27709] bridge0: port 3(erspan0) entered blocking state [ 2062.311628][T27709] bridge0: port 3(erspan0) entered forwarding state [ 2063.026102][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2063.033353][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2063.304450][T14957] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 2063.510555][T27697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.580841][T27697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.597905][T14957] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 2063.623400][T14957] usb 5-1: config 0 has no interface number 0 [ 2063.798698][T27720] 9pnet_fd: Insufficient options for proto=fd [ 2064.137655][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2064.144797][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2064.250196][T27717] dccp_close: ABORT with 15584 bytes unread [ 2064.262596][T14957] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2064.298142][T14957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.317480][T14957] usb 5-1: Product: syz [ 2064.319324][T17479] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2064.323847][T14957] usb 5-1: Manufacturer: syz [ 2064.328060][T17479] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 2064.328083][T17479] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2064.375985][T27724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6192'. [ 2064.639257][T27725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6192'. [ 2064.648841][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6192'. [ 2065.103846][T14957] usb 5-1: SerialNumber: syz [ 2065.110460][T14957] usb 5-1: config 0 descriptor?? [ 2065.163252][ T29] audit: type=1800 audit(1737442312.936:518): pid=27726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.6191" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2065.249782][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2065.257028][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2065.344062][T14957] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 2065.458331][T17479] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 2065.470443][T17479] cdc_ncm 2-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2065.487358][T17479] usb 2-1: USB disconnect, device number 105 [ 2065.494595][T17479] cdc_ncm 2-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 2065.514405][T14957] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 2065.548851][T14957] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 2065.570214][T14957] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 2065.638457][T27737] binder: BINDER_SET_CONTEXT_MGR already set [ 2065.644446][T27737] binder: 27736:27737 ioctl 4018620d 20000040 returned -16 [ 2065.682177][T14957] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2065.736783][T14957] usb 5-1: USB disconnect, device number 102 [ 2065.765284][T14957] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2065.770754][T27739] fuse: Unknown parameter 'user_i00000000000000000000' [ 2065.791323][T14957] keyspan 5-1:0.133: device disconnected [ 2065.806836][T17480] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2065.992873][T17480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.006678][T17480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.025930][T17480] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2066.037483][T17480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.052788][T17480] usb 3-1: config 0 descriptor?? [ 2066.361335][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2066.494716][T17480] hid-steam 0003:28DE:1142.0046: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 2066.585660][T17480] hid-steam 0003:28DE:1142.0046: Steam wireless receiver connected [ 2066.593611][T17480] hid-steam 0003:28DE:1142.0046: No HID_FEATURE_REPORT submitted - nothing to read [ 2066.609595][T17480] hid-steam 0003:28DE:1142.0047: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 2066.756802][ T5870] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2067.201022][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 2067.243994][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2067.270164][ T5870] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2067.287559][ T5870] usb 2-1: config 1 has no interface number 1 [ 2067.305334][ T5870] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 2067.330244][T17479] usb 3-1: USB disconnect, device number 64 [ 2067.350494][ T5870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2067.351212][T17479] hid-steam 0003:28DE:1142.0046: Steam wireless receiver disconnected [ 2067.374713][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.392640][T27757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6202'. [ 2067.408815][ T5870] usb 2-1: Product: syz [ 2067.413101][ T5870] usb 2-1: Manufacturer: syz [ 2067.430136][ T5870] usb 2-1: SerialNumber: syz [ 2067.473479][ C1] net_ratelimit: 1 callbacks suppressed [ 2067.473494][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2067.486289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2067.520135][T27758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6202'. [ 2067.529852][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6202'. [ 2067.981665][ T5870] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 2067.996228][ T5870] usb 2-1: 2:1 : sample bitwidth 217 in over sample bytes 4 [ 2068.011096][ T5870] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2068.017351][ T5870] usb 2-1: 2:1 : invalid channels 0 [ 2068.053035][ T5870] usb 2-1: USB disconnect, device number 106 [ 2068.584981][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2068.592211][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2068.980025][T27771] tipc: Started in network mode [ 2068.985104][T27771] tipc: Node identity 7f000001, cluster identity 4711 [ 2068.992429][T27771] tipc: Enabled bearer , priority 10 [ 2069.002463][T27771] tipc: Enabled bearer , priority 0 [ 2069.016136][ T30] INFO: task syz.6.5615:25766 blocked for more than 143 seconds. [ 2069.025227][ T30] Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 2069.035717][T27773] binder: BINDER_SET_CONTEXT_MGR already set [ 2069.041707][T27773] binder: 27772:27773 ioctl 4018620d 20000040 returned -16 [ 2069.064623][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2069.090274][ T30] task:syz.6.5615 state:D stack:22880 pid:25766 tgid:25757 ppid:24764 flags:0x00004004 [ 2069.118504][ T30] Call Trace: [ 2069.124256][ T30] [ 2069.135069][ T30] __schedule+0x17fb/0x4be0 [ 2069.144093][ T30] ? __pfx___schedule+0x10/0x10 [ 2069.151367][ T30] ? __pfx_lock_release+0x10/0x10 [ 2069.156626][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2069.163031][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2069.170223][ T30] ? schedule+0x90/0x320 [ 2069.179133][ T30] schedule+0x14b/0x320 [ 2069.192363][ T30] schedule_preempt_disabled+0x13/0x30 [ 2069.198337][ T30] __mutex_lock+0x7e7/0xee0 [ 2069.206980][ T30] ? __mutex_lock+0x5ef/0xee0 [ 2069.211761][ T30] ? nfsd_nl_listener_get_doit+0x115/0x5e0 [ 2069.217974][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2069.223086][ T30] ? __asan_memset+0x23/0x50 [ 2069.227844][ T30] nfsd_nl_listener_get_doit+0x115/0x5e0 [ 2069.233698][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 2069.238526][ T30] ? genl_family_rcv_msg_attrs_parse+0x140/0x290 [ 2069.245078][ T30] genl_rcv_msg+0xb14/0xec0 [ 2069.249756][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2069.254887][ T30] ? mark_lock+0x9a/0x360 [ 2069.262834][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2069.272598][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2069.284876][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 2069.300411][ T30] netlink_rcv_skb+0x1e3/0x430 [ 2069.308786][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2069.320716][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2069.333200][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 2069.342124][ T30] genl_rcv+0x28/0x40 [ 2069.349694][ T30] netlink_unicast+0x7f6/0x990 [ 2069.362511][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 2069.373533][ T30] ? __virt_addr_valid+0x45f/0x530 [ 2069.386524][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 2069.395247][ T30] ? __check_object_size+0x47a/0x730 [ 2069.403043][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 2069.410361][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2069.419116][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2069.428986][ T30] __sock_sendmsg+0x221/0x270 [ 2069.438268][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 2069.449325][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2069.459657][ T30] ? __fget_files+0x2a/0x410 [ 2069.471310][ T30] ? __fget_files+0x2a/0x410 [ 2069.480502][ T30] __sys_sendmsg+0x269/0x350 [ 2069.491970][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 2069.607891][ T30] do_syscall_64+0xf3/0x230 [ 2069.612736][ T30] ? clear_bhb_loop+0x35/0x90 [ 2069.617453][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.632468][ T30] RIP: 0033:0x7f6803785d29 [ 2069.636917][ T30] RSP: 002b:00007f6804537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2069.645683][ T30] RAX: ffffffffffffffda RBX: 00007f6803976240 RCX: 00007f6803785d29 [ 2069.653685][ T30] RDX: 0000000000000014 RSI: 0000000020000180 RDI: 0000000000000009 [ 2069.661894][ T30] RBP: 00007f6803801b08 R08: 0000000000000000 R09: 0000000000000000 [ 2069.669973][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2069.680880][ T30] R13: 0000000000000000 R14: 00007f6803976240 R15: 00007ffc2c3505b8 [ 2069.688966][ T30] [ 2069.697164][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2069.704336][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 2069.721625][ T30] [ 2069.721625][ T30] Showing all locks held in the system: [ 2069.741747][ T30] 1 lock held by ksoftirqd/0/16: [ 2069.746705][ T30] #0: ffff8880b863e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 2069.770312][ T30] 1 lock held by khungtaskd/30: [ 2069.775309][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 2069.785472][ T30] 2 locks held by getty/5573: [ 2069.790167][ T30] #0: ffff888035e2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2069.801586][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 2069.811806][ T30] 5 locks held by kworker/u8:12/16878: [ 2069.822678][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 2069.843202][ T30] #1: ffffc9000c16fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 2069.855001][ T30] #2: ffffffff8fc9ba10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 2069.873308][ T30] #3: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x6af/0xd50 [ 2069.884533][ T30] #4: ffffffff8e93d2b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 2069.899850][ T30] 2 locks held by syz.3.5559/25584: [ 2069.905071][ T30] #0: ffffffff8fd0afb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2069.922365][ T30] #1: ffffffff8ec03a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 2069.932800][ T30] 2 locks held by syz.6.5615/25766: [ 2069.938244][ T30] #0: ffffffff8fd0afb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2069.946582][ T30] #1: ffffffff8ec03a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x115/0x5e0 [ 2069.957327][ T30] 2 locks held by syz.4.6203/27761: [ 2069.962807][ T30] [ 2069.965209][ T30] ============================================= [ 2069.965209][ T30] [ 2069.973640][ T30] NMI backtrace for cpu 1 [ 2069.977976][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 2069.988137][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2069.998205][ T30] Call Trace: [ 2070.001499][ T30] [ 2070.004446][ T30] dump_stack_lvl+0x241/0x360 [ 2070.009150][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2070.014371][ T30] ? __pfx__printk+0x10/0x10 [ 2070.018995][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2070.023960][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2070.029442][ T30] ? _printk+0xd5/0x120 [ 2070.033613][ T30] ? __pfx__printk+0x10/0x10 [ 2070.038222][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2070.043088][ T30] ? __pfx__printk+0x10/0x10 [ 2070.047698][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2070.052738][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2070.058744][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2070.064752][ T30] watchdog+0xff6/0x1040 [ 2070.069011][ T30] ? watchdog+0x1ea/0x1040 [ 2070.073449][ T30] ? __pfx_watchdog+0x10/0x10 [ 2070.078150][ T30] kthread+0x2f0/0x390 [ 2070.082239][ T30] ? __pfx_watchdog+0x10/0x10 [ 2070.082611][T15015] tipc: Node number set to 2130706433 [ 2070.086914][ T30] ? __pfx_kthread+0x10/0x10 [ 2070.096860][ T30] ret_from_fork+0x4b/0x80 [ 2070.101269][ T30] ? __pfx_kthread+0x10/0x10 [ 2070.105853][ T30] ret_from_fork_asm+0x1a/0x30 [ 2070.110623][ T30] [ 2070.113684][ C1] vkms_vblank_simulate: vblank timer overrun [ 2070.120321][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2070.125804][ C0] NMI backtrace for cpu 0 [ 2070.125817][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 2070.125834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2070.125844][ C0] Workqueue: bat_events batadv_nc_worker (events_unbound) [ 2070.125872][ C0] RIP: 0010:kasan_check_range+0x86/0x290 [ 2070.125896][ C0] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc [ 2070.125909][ C0] RSP: 0018:ffffc90000117b30 EFLAGS: 00000046 [ 2070.125921][ C0] RAX: 0000000000000001 RBX: 1ffff11029aef62f RCX: ffffffff8bbdd41e [ 2070.125933][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88814d77b178 [ 2070.125943][ C0] RBP: ffffffffffffffff R08: ffff88814d77b178 R09: 1ffff11029aef62f [ 2070.125954][ C0] R10: dffffc0000000000 R11: ffffed1029aef62f R12: 0000000000000020 [ 2070.125965][ C0] R13: 0000000000000000 R14: dffffc0000000001 R15: ffffed1029aef630 [ 2070.125976][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2070.125989][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2070.126000][ C0] CR2: 00007fad2c147ab8 CR3: 000000003c26e000 CR4: 00000000003526f0 [ 2070.126013][ C0] DR0: 0000000000000003 DR1: 0000000000000004 DR2: 0000000100000000 [ 2070.126023][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2070.126033][ C0] Call Trace: [ 2070.126039][ C0] [ 2070.126046][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2070.126068][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2070.126086][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2070.126107][ C0] ? nmi_handle+0x2a/0x5a0 [ 2070.126130][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2070.126150][ C0] ? nmi_handle+0x14f/0x5a0 [ 2070.126165][ C0] ? nmi_handle+0x2a/0x5a0 [ 2070.126182][ C0] ? kasan_check_range+0x86/0x290 [ 2070.126202][ C0] ? default_do_nmi+0x63/0x160 [ 2070.126223][ C0] ? exc_nmi+0x123/0x1f0 [ 2070.126242][ C0] ? end_repeat_nmi+0xf/0x53 [ 2070.126263][ C0] ? read_word_at_a_time+0xe/0x20 [ 2070.126282][ C0] ? kasan_check_range+0x86/0x290 [ 2070.126303][ C0] ? kasan_check_range+0x86/0x290 [ 2070.126324][ C0] ? kasan_check_range+0x86/0x290 [ 2070.126345][ C0] [ 2070.126351][ C0] [ 2070.126358][ C0] read_word_at_a_time+0xe/0x20 [ 2070.126376][ C0] sized_strscpy+0x9a/0x2b0 [ 2070.126395][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2070.126414][ C0] process_scheduled_works+0x610/0x1840 [ 2070.126448][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2070.126473][ C0] ? assign_work+0x364/0x3d0 [ 2070.126502][ C0] worker_thread+0x870/0xd30 [ 2070.126522][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2070.126539][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2070.126552][ C0] kthread+0x2f0/0x390 [ 2070.126568][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2070.126582][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.126598][ C0] ret_from_fork+0x4b/0x80 [ 2070.126612][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.126628][ C0] ret_from_fork_asm+0x1a/0x30 [ 2070.126655][ C0] [ 2070.126957][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2070.436131][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 2070.446272][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2070.456317][ T30] Call Trace: [ 2070.459584][ T30] [ 2070.462506][ T30] dump_stack_lvl+0x241/0x360 [ 2070.467183][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2070.472372][ T30] ? __pfx__printk+0x10/0x10 [ 2070.476953][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2070.482928][ T30] ? vscnprintf+0x5d/0x90 [ 2070.487259][ T30] panic+0x349/0x880 [ 2070.491158][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2070.497306][ T30] ? __pfx_panic+0x10/0x10 [ 2070.501713][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2070.507079][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2070.512618][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2070.517978][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2070.524131][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2070.530280][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2070.536431][ T30] watchdog+0x1035/0x1040 [ 2070.540758][ T30] ? watchdog+0x1ea/0x1040 [ 2070.545166][ T30] ? __pfx_watchdog+0x10/0x10 [ 2070.549832][ T30] kthread+0x2f0/0x390 [ 2070.553895][ T30] ? __pfx_watchdog+0x10/0x10 [ 2070.558561][ T30] ? __pfx_kthread+0x10/0x10 [ 2070.563148][ T30] ret_from_fork+0x4b/0x80 [ 2070.567566][ T30] ? __pfx_kthread+0x10/0x10 [ 2070.572144][ T30] ret_from_fork_asm+0x1a/0x30 [ 2070.576917][ T30] [ 2070.580171][ T30] Kernel Offset: disabled [ 2070.584483][ T30] Rebooting in 86400 seconds..