last executing test programs: 7m49.358800933s ago: executing program 4 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dmmidi(0x0, 0xb20, 0x452243) getpid() socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000540)=@newqdisc={0x154, 0x24, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0xc, 0xf}, {0xf, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xef, 0x401, 0x3, 0x0, 0xfffffffd, 0x10, 0x4}}, {0xc, 0x2, [0x1, 0x1, 0xa1, 0x40]}}]}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xad, 0x3, 0x5, 0x2, 0x0, 0x5, 0x4}}, {0xc, 0x2, [0x1f, 0x100, 0xffff, 0x8]}}, {{0x1c, 0x1, {0x0, 0x2, 0xa, 0x8f2, 0x0, 0x2, 0x6, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0x6, 0x80, 0x0, 0xfff, 0x2, 0xc, 0x4, 0x4}}, {0xc, 0x2, [0xfff8, 0xffff, 0x6, 0x6]}}, {{0x1c, 0x1, {0xc, 0x3, 0x7, 0x1, 0x0, 0x5, 0x7f, 0x5}}, {0xe, 0x2, [0x0, 0xff98, 0xf, 0x0, 0x99]}}, {{0x1c, 0x1, {0x5c, 0x6, 0x6, 0x8, 0x1, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2e7, 0x4, 0x5, 0xfffd, 0x0]}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r3, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7m47.474982034s ago: executing program 4 (id=1683): mlockall(0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x208) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a05000000000000000000001f0000140000001000010000000000000000000000000a56b024a1ccb37f874d6959"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) unshare(0x22020600) r2 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) fsmount(r2, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x4) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0000e3ff0000000258fae05a0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f0000000300)='z', 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) iopl(0x3) 7m46.647936611s ago: executing program 4 (id=1686): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0xffffffffffffffd2, 0x10, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 7m45.764204122s ago: executing program 4 (id=1688): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000580"], 0x44}}, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x94) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) sendmmsg$sock(r1, &(0x7f0000000900)=[{{&(0x7f00000002c0)=@ll={0x11, 0x5, r7, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="d3bbf401bfae17dbef322a63109a846580d9019f6a44e4ae556dc881277d2b4693d4d7025fdd2f1dcdb554e057f09ed832a87c9ea201a0797897735656f9fedf628a2c2661fa704fb0b50dbd34281e1fa7bb", 0x52}, {&(0x7f0000000400)="027e9a07e5085e2233e31c890041c9e3a5aaca290a9f49f55beb80dcfcf2f401545b34b693353cb46322db09939ff6792ceb509aac5276cdaaaa2d02993e052d0f1afc63eca41bd17bb3be6e42fd0f91de33d3399d13b8cfb4221a8dac16e417adc2e32c27aae9f66b29b647dc1df8c5013f997a7ad1844b5186f2cc22e78a8c9798a292445086cfcc42832449d73867494d016e2e5af703b28bf247c6047cb3b70472c12b3d3313b0c3694a67984a6d131392c7d668aa6f68abe57eb8a6677407a111222172016d35c07d2b6d058ac0f3a2d0b3bdcf6fde4442fd7c02469dd6a60a5005cbf237afc3", 0xe9}, {&(0x7f0000000500)="019247ff2c88b7163415ce38c4de29474bbd066d2910dae68df40c711f6213e593d95979d3a58cc2ee946a2bde89a50074f5bdfefd918b4eef4052c2d5dfa010a5a74f6ffbc80106a60834b39159a2712358e19fffa5", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="3636f85f87ced18984548bee5d4548cadd87fd62ffbca0c4c88ccdf114929a2cf2672212661effdd177df6d0569440b5fc379a3a2cec72fe35da4089869c664bbc5d9b0959d3c2871cebc54649f5d3219cde0e78c010bce495aec93874cbe5bfea0f2a70e57a14115652769b4890a1ece837f3d64c491f18f008296b424202f04bf7f3073b1d513c8deb85c16079d8f7991e4d8d2bbcd1636881374ca858ebc42fbcffb868e04f6da580fbdfa10cb0b6987a681a03cd01954c2dffc7b23f376916b2e53b", 0xc4}, {&(0x7f0000000780)="8405ff0c10f105a6f684e2ede632439d5e81fbfa8b6fbce757251c7ad776549a2d1b5e41a2d0974360ad11498c434a501075409979fd5e2db170bc2c9d4abadc0f4e55b78a2f04b52ce4def28e3171d050248b39934c7f782be666873f2ce2614a8ff1966c3b0aed85adcf63150768735b11ce102b0c0af7639106ca3a31a5195e4ecf86920053471079bef7da0f86e2dc8380d86a621b7086e00b210b8852efefb8cf4cdcf1437f07da78bc4054fc28d7f4827a20", 0xb5}], 0x2, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0xc10}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x6dd0e6b0}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0xa8}}], 0x2, 0x40000) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @float={0xe, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x7f, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000bc0)=""/4096, 0x42, 0x1000, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xe, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x7, 0x2, 0x1, 0x2, 0x1}, @jmp={0x5, 0x1, 0xa, 0x9, 0x9, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x38}]}, &(0x7f0000000a00)='GPL\x00', 0xffe, 0xfd, &(0x7f0000000a40)=""/253, 0x41000, 0x40, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000001c00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001c40)={0x5, 0x8, 0xb, 0x58a1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001c80)=[{0x2, 0x5, 0xe, 0xc}, {0x4, 0x1, 0xe, 0x5}, {0x5, 0x1, 0xd, 0x3}], 0x10, 0x400, @void, @value}, 0x94) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 7m42.269842226s ago: executing program 4 (id=1696): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x9}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000000), 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r9, &(0x7f0000000240)='./file0/bus\x00', 0x10000882) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r4, r5, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000002c0)=[r8, r8], 0x2, r10, r6, 0x3, 0x0, 0x3, 0x800, {0x14, 0x1, 0x3, 0x65, 0x200, 0x2, 0x2, 0x5, 0x4cab, 0xe154, 0x1008, 0x1, 0xff, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 7m41.666874397s ago: executing program 4 (id=1700): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x62c2}) r3 = open(&(0x7f00000003c0)='.\x00', 0xc200, 0x10b) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r1) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000cade1b6bf762a3219a82d0410000000001080004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) read$dsp(r7, &(0x7f0000000740)=""/59, 0x3b) mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 7m41.552798148s ago: executing program 32 (id=1700): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x62c2}) r3 = open(&(0x7f00000003c0)='.\x00', 0xc200, 0x10b) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r1) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000cade1b6bf762a3219a82d0410000000001080004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) read$dsp(r7, &(0x7f0000000740)=""/59, 0x3b) mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 5m13.236517903s ago: executing program 0 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000400000030000180060002000000000006000400e5ffffff13000300"/50], 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c00", 0x2c}], 0x1}, 0x0) 5m11.826834418s ago: executing program 0 (id=2078): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 5m4.722816208s ago: executing program 0 (id=2099): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x38011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) rt_sigqueueinfo(r1, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x1, 0x1}, &(0x7f0000000340)=[{}]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r5, &(0x7f0000000080)=""/139, 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) setpgid(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r0, 0x18, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m4.645553333s ago: executing program 0 (id=2100): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = dup(r2) fanotify_mark(r3, 0x1, 0x40001059, r4, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) splice(r5, 0x0, r6, 0x0, 0xffffffe1, 0x0) sendfile(r1, r6, &(0x7f0000000500), 0x8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x20, 0x80, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c1d3}, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000100)={0x0, 0x3ff}) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 5m3.747752101s ago: executing program 0 (id=2102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000400000030000180060002000000000006000400e5ffffff13000300"/50], 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c00", 0x2c}], 0x1}, 0x0) 5m1.632570639s ago: executing program 0 (id=2109): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 4m46.304794302s ago: executing program 33 (id=2109): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 1m50.802800578s ago: executing program 1 (id=2633): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r11, 0x5, 0x0, 0x100, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m50.22130839s ago: executing program 1 (id=2638): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) semop(0x0, 0x0, 0x0) (async, rerun: 32) statx(0xffffffffffffffff, 0x0, 0x4000, 0x4, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1m49.670728426s ago: executing program 1 (id=2640): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}]}]}, 0x28}}, 0x0) 1m48.781853452s ago: executing program 1 (id=2643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000e000000200000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000002000000000000bb0000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff070000000000000000000000000000000000000000000000000a000200200000000000000048000100686d616328736861312900"/240], 0x138}, 0x1, 0xe}, 0x10) 1m48.461346731s ago: executing program 1 (id=2644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000180)='./file0/file0\x00', 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = dup(r3) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x8}) renameat2(r5, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1m47.286621409s ago: executing program 1 (id=2651): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff40000000001050001000600000a050005000a0000000900020073797a320000000005000400000000001400078008000840fffffff0080006400000000215000300686173683a69702c706f"], 0x64}, 0x1, 0x0, 0x0, 0x20008894}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x9, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x53, &(0x7f0000000440)=""/83, 0x0, 0x44, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000600)=[r4], &(0x7f0000000640)=[{0x1, 0x4, 0x6}, {0x4, 0x2, 0x5, 0x2}, {0x5, 0x4, 0xf, 0xc}, {0x2, 0x3, 0x5, 0x6}, {0x2, 0x3, 0x4, 0x6}, {0x1, 0x4, 0x80000000, 0xb}, {0x3, 0x5, 0x1}, {0x5, 0x3, 0xb, 0xb}], 0x10, 0x9, @void, @value}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000840), 0x4, 0x20000) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000880)={'\x00', 0x297, 0x2, 0x80000000}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000300)={0x18, r9, 0x4, 0x8000}) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000240), &(0x7f0000000280)={'U+', 0x7}, 0x16, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getgroups(0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000180)={0x28, 0x1, r10, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) close(r5) syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) 1m31.512313348s ago: executing program 34 (id=2651): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff40000000001050001000600000a050005000a0000000900020073797a320000000005000400000000001400078008000840fffffff0080006400000000215000300686173683a69702c706f"], 0x64}, 0x1, 0x0, 0x0, 0x20008894}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x9, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x53, &(0x7f0000000440)=""/83, 0x0, 0x44, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000600)=[r4], &(0x7f0000000640)=[{0x1, 0x4, 0x6}, {0x4, 0x2, 0x5, 0x2}, {0x5, 0x4, 0xf, 0xc}, {0x2, 0x3, 0x5, 0x6}, {0x2, 0x3, 0x4, 0x6}, {0x1, 0x4, 0x80000000, 0xb}, {0x3, 0x5, 0x1}, {0x5, 0x3, 0xb, 0xb}], 0x10, 0x9, @void, @value}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000840), 0x4, 0x20000) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000880)={'\x00', 0x297, 0x2, 0x80000000}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000300)={0x18, r9, 0x4, 0x8000}) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000240), &(0x7f0000000280)={'U+', 0x7}, 0x16, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getgroups(0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000180)={0x28, 0x1, r10, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) close(r5) syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) 18.670710769s ago: executing program 3 (id=2878): close(0xffffffffffffffff) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 18.632654394s ago: executing program 7 (id=2879): socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0xae}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000220200000f8"], 0x24}}, 0x40854) 18.359847852s ago: executing program 3 (id=2882): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x20a6112, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000440)={0x1, 0x341706e4c3911171, 0x1000, 0x1, &(0x7f0000001100)='<', 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a74000/0x2000)=nil, 0x2000, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x4}, 0x1d, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl(r5, 0x4, &(0x7f0000000080)="35e537c31cd7627bc37569") r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 17.501820343s ago: executing program 7 (id=2883): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x2e020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 16.983045033s ago: executing program 7 (id=2885): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) openat$kvm(0xffffffffffffff9c, 0x0, 0x406400, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', '', [], 0xa, "9d034eea74562a785e0b081af9070e6a098d3c5a9292924bc0e1443abbb62bd2530365e94393b6f14cfaa44560e37c288c7ebc5ddfb97f56e60f4a234489ce9ac85493f148c3d2be5b7c1566a2dcfb0f352b3bfa3f026084b29b3122ab7d608b8db03015f4e07f9b8378ee801ddbe41cb87fff3d"}, 0x78) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000240)={0x8, 0x400008}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2", 0x28}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209d", 0xb5}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703fd3051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec4", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000580)}}, {{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000880)}}], 0x4, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0xdfa, 0x4) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000340)="14", 0x1, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) 16.434890957s ago: executing program 3 (id=2888): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x101) prlimit64(0x0, 0x3, &(0x7f00000001c0)={0x2, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_misc(r4, &(0x7f0000000100), 0x6) getrlimit(0x6, &(0x7f0000000240)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x1, r7}) r8 = socket(0x21, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) ioctl(r8, 0x8916, &(0x7f0000000000)) r9 = socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r9, @ANYRES16=r3, @ANYBLOB="6f7918ebba6870078f86575556540e00a2ee6452"], 0x5c}}, 0x8045) 12.215857429s ago: executing program 3 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89e0, 0x200000000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x0, 0x1, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}, 0xf62}}}, 0x3a) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800"], 0x78}}, 0x0) 11.85521851s ago: executing program 3 (id=2906): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x24008862) setresuid(0x0, 0x0, 0xee01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=@delqdisc={0x6c, 0x25, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {0x0, 0x4}, {0xe, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xea}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff551c}, @TCA_RATE={0x6, 0x5, {0x5, 0x1d}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf144}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2004c891) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x105, 0x0, &(0x7f0000000380)="5aee41dea43e63a3f7fb7f110800a1f9a4fe96bd1aa15b99e2159db94cddbe57f7196c7deaa75e0092dd69e3c35732ffedd5229b2b3df1772e889ff73146a6e1da8e92850693810268de8b28d700ee2948e58f07da0cc557b8738a17d3b820ec71d23f00187acfd39769b2d77d7cc87d2f61b4d2aa0d5605eae474133c32ecb4ff36bc7e5746a5ff4e1957572d55b162bbde90239985a26a860e8e9d34b440f848bec0ea416ca069faf75f16f8f115ecb61b13eadc86c300373dc896764cd2761ab059b2d6b4aaa0854028c9283a84e1f688c1b20856814965fda15963f52c7bb22ad791f752d5ad5dcfec74e2bcdb0ed3433a0d2fd5c45fcc8849fdfc29e7d81a2aca3309", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) syz_usbip_server_init(0x4) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) 9.751302947s ago: executing program 5 (id=2909): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$vim2m(0x0, 0x10001, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 9.614866192s ago: executing program 3 (id=2910): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) r2 = fanotify_init(0x200, 0x0) r3 = dup(0xffffffffffffffff) fanotify_mark(r2, 0x1, 0x40001059, r3, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) splice(r4, 0x0, r5, 0x0, 0xffffffe1, 0x0) sendfile(r1, r5, &(0x7f0000000500), 0x8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x20, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x6}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c1d3}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x0, 0x3ff}) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 9.565456219s ago: executing program 6 (id=2911): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x2a, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x490c80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x66, 0x6, "a856a865ed0d16094874da12124ff62724eb7144ad5a895f97ae398927c2664cd06fe986fc2a168197134fb979219f383c0dcf9ca1c18a53bc0d7e32dd6cbfceb8c134854e7ffbae2b714f14050f38d050e82a3c15c1ec5a92c4b887ed1d0f427cab"}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 8.273634442s ago: executing program 2 (id=2914): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000012009702000000000000000007"], 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) 8.253413267s ago: executing program 6 (id=2915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0x8004550f, 0x0) unshare(0x28020480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000700)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}}, 0x36) fcntl$setownex(r2, 0xf, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009f405220000000000090592"], 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000001c0)) getpid() r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x38) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xcbff9000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x30a, 0x2}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 7.742893711s ago: executing program 2 (id=2916): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2001050000004a8a"], 0x0}) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 7.083264362s ago: executing program 5 (id=2917): r0 = creat(0x0, 0x0) close(r0) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.922753922s ago: executing program 5 (id=2918): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r5, 0x2, 0x1) getdents64(r5, 0x0, 0x25) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000fbd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 6.687273902s ago: executing program 7 (id=2919): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) r2 = fanotify_init(0x200, 0x0) r3 = dup(0xffffffffffffffff) fanotify_mark(r2, 0x1, 0x40001059, r3, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) splice(r4, 0x0, r5, 0x0, 0xffffffe1, 0x0) sendfile(r1, r5, &(0x7f0000000500), 0x8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x20, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x6}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c1d3}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x0, 0x3ff}) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 5.71027722s ago: executing program 5 (id=2920): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7d}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0), 0x0) accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES32], 0x0, 0x200000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000640)='qrtr_ns_server_add\x00', 0xffffffffffffffff, 0x0, 0x800004}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e24, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000680), 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @rand_addr, 0x3}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='host1x_cdma_push_gather\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) 4.744570109s ago: executing program 5 (id=2921): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x231, &(0x7f0000001040)={{0x12, 0x1, 0x300, 0x7e, 0xb1, 0xd4, 0x8, 0x19d2, 0x1018, 0x6522, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21f, 0x1, 0x31, 0xfc, 0x80, 0x10, [{{0x9, 0x4, 0xf7, 0x5, 0x5, 0xff, 0xff, 0xff, 0x5, [], [{{0x9, 0x5, 0x2, 0x7, 0x3ff, 0x8, 0x9, 0xfc, [@generic={0xa, 0x21, "c173724071056ff8"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x91, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xb}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x3, 0x7, 0x81, [@generic={0x18, 0x6, "a5bd43ba686ec84890802fee6521760ff102781820ef"}, @generic={0x60, 0x9, "cf852503b509ec31fa40705477fbd54184d3e7fe9e12d38b2ae7f083273477b14e6131b2bbbba0a2957a84e6a802dacfc8ace99246a8c801f3c1480314407679acd591641c493c9454a41898116cc451dc1e78adb62ba1bdb5da7d221f8d"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xa, 0x1, 0x9, [@generic={0xc7, 0x5, "85d3332aa73132eb37335611c5dbff47c3387bbd4a736b7c3ad6ae7e4fd66e929f8da5b758bb3a010688bff37188491daec0b3b29efdf81e4317a438bdaa81933b69bdc461bf680349efaaea1d45e80500d5d79aec23a1ac995e59175e1851240739e00f2dfd1dc31f62eda6ea47880d079a810e1a0106cc00588b9f091053f12a68f94a585bd925b553a986fa6b4e90e9a4b185d133d4afa353be40b05a495056c93fa34a91a24d8c971c6e998be5c451234d38fc902f6c3749e094387cb75534bea58ff2"}, @generic={0x89, 0x23, "feb30c2162a421d4d69e552f759aefde91966b99b91421b77fed027e5e685f20e13cf99252da7714453239c8c26b349cf75b720279254f459b60a4128fb222e2ee922cbb74724b443b25578f0c54402c672470ff8ef64692b5c905cdf3ecbe37ecd9a6cd8a306e438ea1c16b71a0ff17888828c123319db2c232ce22725e129b5e69418fc86655"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x5, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x110, 0x1, 0x5d, 0x0, 0x10, 0x1}, 0x5, &(0x7f00000012c0)={0x5, 0xf, 0x5}, 0x5, [{0x8c, &(0x7f0000001300)=@string={0x8c, 0x3, "d59031c9ff2ec827e55e9da1648413d9c08a061dc98a40e8c679d986cd3e05331a690e6707a16b5877fdb878cefa5af3c6463736beb0e2bfacc6f2e32dbc18cd38322418ae0e05d0dec683ed96c41f166952985827f442a9d5f301869cd7d12f9e2a440e9617b6daacbdae6b6d0f6bbf085c95c0cd17468e21ed16a4f3995b9a67bd1f91bb87d990c96f"}}, {0x79, &(0x7f0000001580)=@string={0x79, 0x3, "a5ca2f7e46f9a2a9230961cd2de72a007ff24673ca706b31f37541eafb632ff414ab68cbb522cf74c044b7b5ff7cd537e0fa6a154ac6a8040729677f7115c6123bb4eb1c8109a73758d0885882de4d4b1d2e40818f198a0874ff7079de990aa9b6dce3a9eae2e2b4733185c49df00e706c32923ca2b996"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x419}}, {0x42, &(0x7f0000001440)=@string={0x42, 0x3, "1279b7326a3d34dd4d579939115907b1c9b5eeba112d8c0fa6733b1db1b1978b107d2a372fef14c3f20d861d0d6a0e9acdbbf4e2bc11e39ba3f2b9fe1af1d4c4"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x44d}}]}) syz_emit_vhci(&(0x7f0000001640)=ANY=[@ANYBLOB="04fbfdf5fca1d552e903eb3ef50d"], 0xf8) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "0706a9", 0x1400, 0x11, 0x0, @private1, @remote, [@dstopts], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000001600)=@arm64) 4.558893354s ago: executing program 6 (id=2922): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x11, 0xb, 0x0, &(0x7f00000004c0)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c80980000000000000160000000000000000000200", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b81af000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acee8c67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x6, "1a2fa0399a35a22116e827dcc3fda582f8d5a242c1dd3a497faa71ee90e213d3", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000010000000731199000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.535912575s ago: executing program 2 (id=2923): r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000d000000ff00000000000000009500000000000000", @ANYRESHEX=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000100037042dbd7000ffa2de11ba000000", @ANYRES32=0x0, @ANYBLOB="8b04040008e200001800128008000100736974000c0002800500090004000000"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000800)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/228, 0xe4}], 0x1, &(0x7f00000002c0)=""/30, 0x1e}, 0x1}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000ac0)=""/200, 0xc8}], 0x2, &(0x7f0000000bc0)=""/159, 0x9f}, 0x6}, {{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000740)=""/52, 0x34}, {&(0x7f0000000900)=""/121, 0x79}, {&(0x7f0000000c80)=""/202, 0xca}, {&(0x7f0000000d80)=""/107, 0x6b}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x7, &(0x7f0000000780)=""/27, 0x1b}, 0xe6}, {{&(0x7f0000000e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/84, 0x54}], 0x1, &(0x7f0000000fc0)=""/176, 0xb0}, 0x4}, {{&(0x7f0000001080)=@x25={0x9, @remote}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000001100)=""/26, 0x1a}, {&(0x7f0000001140)=""/77, 0x4d}, {&(0x7f00000011c0)=""/112, 0x70}, {&(0x7f0000001240)=""/189, 0xbd}], 0x5}, 0x7}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000005480)=""/85, 0x55}, {&(0x7f0000001380)=""/35, 0x23}], 0x2}, 0x93}, {{&(0x7f0000005540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000065c0)=[{&(0x7f00000055c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x7, 0x2122, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r8}) 4.461060548s ago: executing program 6 (id=2924): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x2a, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x490c80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x66, 0x6, "a856a865ed0d16094874da12124ff62724eb7144ad5a895f97ae398927c2664cd06fe986fc2a168197134fb979219f383c0dcf9ca1c18a53bc0d7e32dd6cbfceb8c134854e7ffbae2b714f14050f38d050e82a3c15c1ec5a92c4b887ed1d0f427cab"}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 3.468054686s ago: executing program 6 (id=2925): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000540)={0x70, "8aaef385b5b343bccfaa3033d0d0cf0d4a64d17a8a9716c2cc9dd4092d80a15eb549c3a78bc1a0da58cd21d762452fa568a495cc899c613c0e7ba793298f1eb17044602abb1d42ea7bebd0020fe78151642b1c3866e97d6c18227a1a13185245236a0f0806eae6dda7ee35119ceccdc1a238bf38ff50260ff1662863a2e3e1d3"}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000003880)=@userptr={0x804, 0xa, 0x4, 0x0, 0x8, {0x77359400}, {0x6, 0xc, 0xcb, 0xe, 0xf8, 0x10, "a003dbb9"}, 0x5, 0x2, {0x0}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_io_uring_setup(0x3ac6, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37b}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x76, &(0x7f0000000440)=@string={0x76, 0x3, "6952e8a50c332e8c94377a75769b4a0e71228490ccb66dd04b286322931176f6df0d9a5275c3dacd03777a8d096fcba210316ef2129e00c586822f6801d648fa8285529191e988e019a15a2565b4e810dabc5491d323e348d616579f1f45719820fb5ef740e6b533037a760573433cde6cdbdade"}}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r9], 0x20}}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) getpeername$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000001) 3.225567879s ago: executing program 2 (id=2926): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$vim2m(0x0, 0x10001, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 2.001882169s ago: executing program 5 (id=2927): userfaultfd(0x801) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffe1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x20, 0x80, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c1d3}, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000100)={0x0, 0x3ff}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 1.589906942s ago: executing program 7 (id=2928): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40187014, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x630}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f000000af00), 0x634}}, 0x0) recvmmsg(r6, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000003300)=""/4088, 0xff8}], 0x2}}], 0x1, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000100)="03", 0x1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x1ff, @loopback, 0x1, 0x2}, 0x80, 0x0}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000000240)={0xc48, 0x280, 0x800, 0x280, 0x3ff, 0x80000000, 0x4, 0x1, {0x3, 0xfe25}, {0x34, 0xb}, {0xfffffffb, 0x9, 0x1}, {0x7, 0x4, 0x1}, 0x1, 0x100, 0x7, 0xdc46, 0x0, 0x9, 0x5, 0x80000001, 0xff, 0x1, 0x5, 0x9, 0x1e, 0x2, 0x0, 0x5}) (async) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000080000000000000000000f1af75ddf1a86e28f0ca810000000000000000000000000070d761ac3d6b0056212f7534b167ac7772e6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000010095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.386410174s ago: executing program 2 (id=2929): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0xffffffffffffffd2, 0x10, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 1.247070142s ago: executing program 7 (id=2930): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x21}}], 0x48}, 0x0) 604.801293ms ago: executing program 2 (id=2931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f00000022c0)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) r4 = syz_usb_connect(0x0, 0x1a2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b6a57e4086005b0bc5e10102030109029001020000000009040000020e0100000a2401000000020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed230743f2538ca7bba727dfe7c00b90d0bc7f2da5"], 0x0) syz_usb_control_io$uac1(r4, &(0x7f00000008c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, 0x0, 0x0) listen(r6, 0x0) inotify_init1(0x80800) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000001680)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000280)="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", 0xfd8}, {&(0x7f0000001280)="595bcfb79f280acd5fb7b08901b53d", 0xf}, {&(0x7f0000001340)="992c680dcebd5fa871ab44f58c03152713706f66582980", 0x17}, {&(0x7f00000016c0)="6947d95893ec0ba7f5d274f1b5c4695fde92a66639e5adfc652ac8553b5c79bc75110b890f0e382422b7d988015cc888f3f20c8d", 0x34}], 0x4}}], 0x1, 0x4810) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x93, @mcast2, 0x6}], 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 0s ago: executing program 6 (id=2932): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) r3 = io_uring_setup(0x3e76, &(0x7f0000000000)) dup2(r2, r3) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r4, 0xfffffffffffffc01, 0x0) tee(r0, r4, 0x60000000000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x18}) fallocate(r5, 0x41, 0xfffffffffffffffc, 0x3fe) socket$nl_netfilter(0x10, 0x3, 0xc) openat2(r5, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x800, 0x18, 0x2c}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0xff7d}, 0x1, 0x0, 0x0, 0x4004880}, 0x24040810) kernel console output (not intermixed with test programs): ruct sctp_assoc_value instead [ 982.430671][T10659] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 982.442428][T10659] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 982.480789][ T7743] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 983.326866][ T5840] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 983.424721][T15922] FAULT_INJECTION: forcing a failure. [ 983.424721][T15922] name failslab, interval 1, probability 0, space 0, times 0 [ 983.488389][T15922] CPU: 0 UID: 0 PID: 15922 Comm: syz.5.2587 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 983.499194][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 983.509241][T15922] Call Trace: [ 983.512510][T15922] [ 983.515444][T15922] dump_stack_lvl+0x241/0x360 [ 983.520113][T15922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.525302][T15922] ? __pfx__printk+0x10/0x10 [ 983.529880][T15922] ? ref_tracker_alloc+0x332/0x490 [ 983.534981][T15922] should_fail_ex+0x3b0/0x4e0 [ 983.539654][T15922] ? skb_clone+0x20c/0x390 [ 983.544074][T15922] should_failslab+0xac/0x100 [ 983.548748][T15922] ? skb_clone+0x20c/0x390 [ 983.553157][T15922] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 983.558518][T15922] skb_clone+0x20c/0x390 [ 983.562747][T15922] __netlink_deliver_tap+0x3cc/0x7c0 [ 983.568026][T15922] ? netlink_deliver_tap+0x2e/0x1b0 [ 983.573207][T15922] netlink_deliver_tap+0x19d/0x1b0 [ 983.578302][T15922] netlink_unicast+0x7c4/0x990 [ 983.583066][T15922] ? __pfx_netlink_unicast+0x10/0x10 [ 983.588329][T15922] ? __virt_addr_valid+0x183/0x530 [ 983.593431][T15922] ? __check_object_size+0x48e/0x900 [ 983.598719][T15922] netlink_sendmsg+0x8e4/0xcb0 [ 983.603475][T15922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.608750][T15922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.614039][T15922] __sock_sendmsg+0x221/0x270 [ 983.618702][T15922] ____sys_sendmsg+0x52a/0x7e0 [ 983.623454][T15922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.628729][T15922] __sys_sendmsg+0x292/0x380 [ 983.633320][T15922] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.638425][T15922] ? __pfx_vfs_write+0x10/0x10 [ 983.643224][T15922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 983.649576][T15922] ? do_syscall_64+0x100/0x230 [ 983.654367][T15922] ? do_syscall_64+0xb6/0x230 [ 983.659069][T15922] do_syscall_64+0xf3/0x230 [ 983.663591][T15922] ? clear_bhb_loop+0x35/0x90 [ 983.668287][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.674207][T15922] RIP: 0033:0x7f59e857e719 [ 983.678641][T15922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.698280][T15922] RSP: 002b:00007f59e929d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.706727][T15922] RAX: ffffffffffffffda RBX: 00007f59e8735f80 RCX: 00007f59e857e719 [ 983.714719][T15922] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 983.722707][T15922] RBP: 00007f59e929d090 R08: 0000000000000000 R09: 0000000000000000 [ 983.730698][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.738683][T15922] R13: 0000000000000000 R14: 00007f59e8735f80 R15: 00007ffc10cfaa08 [ 983.746698][T15922] [ 984.634827][T15928] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2589'. [ 985.819157][ T29] kauditd_printk_skb: 6236 callbacks suppressed [ 985.819178][ T29] audit: type=1400 audit(1731485754.911:530938): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.68 dest=49576 netif=eth0 [ 985.884266][ T29] audit: type=1400 audit(1731485755.061:530939): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15932 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 985.911216][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.917733][T13201] audit: audit_lost=271498 audit_rate_limit=0 audit_backlog_limit=64 [ 985.930743][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.937568][ T5185] audit: audit_lost=271499 audit_rate_limit=0 audit_backlog_limit=64 [ 985.956482][ T5185] audit: backlog limit exceeded [ 985.966166][T13201] audit: backlog limit exceeded [ 985.977204][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.983899][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 986.785405][T15938] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 986.793346][T15938] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2592'. [ 987.928266][T15950] program syz.1.2595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.012169][T15950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2595'. [ 988.040280][T15949] cgroup: fork rejected by pids controller in /syz5 [ 988.203523][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 988.348803][ T5840] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 989.357908][ T4733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.032301][T16078] sp0: Synchronizing with TNC [ 990.087384][T16078] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 990.113416][T16078] PKCS7: Only support pkcs7_signedData type [ 990.137584][T16081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2605'. [ 990.170224][T16081] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2605'. [ 990.369387][ T4733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.422059][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 990.433514][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 990.451297][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 990.495171][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 990.505761][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 990.521262][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 990.556061][ T4733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.737536][ T4733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.821516][ T29] kauditd_printk_skb: 14329 callbacks suppressed [ 990.821532][ T29] audit: type=1400 audit(1731485760.000:536941): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 990.825720][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.837472][ T29] audit: type=1400 audit(1731485760.000:536942): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 990.873224][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 990.882158][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.888689][ T5825] audit: audit_lost=274287 audit_rate_limit=0 audit_backlog_limit=64 [ 990.897427][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.904019][ C1] audit: audit_lost=274288 audit_rate_limit=0 audit_backlog_limit=64 [ 990.904861][T16088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.912121][ C1] audit: backlog limit exceeded [ 990.912605][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.954015][T16082] lo speed is unknown, defaulting to 1000 [ 991.085628][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 991.093632][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 991.122471][ T9] usb 3-1: config 0 has no interface number 0 [ 991.151424][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 991.193304][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 991.203555][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 991.215637][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 991.225705][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.233949][ T9] usb 3-1: Product: syz [ 991.238783][ T9] usb 3-1: Manufacturer: syz [ 991.246571][ T9] usb 3-1: SerialNumber: syz [ 991.253958][ T9] usb 3-1: config 0 descriptor?? [ 991.259989][T16088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 991.267659][T16088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 991.348536][ T4733] bridge_slave_1: left allmulticast mode [ 991.369124][ T4733] bridge_slave_1: left promiscuous mode [ 991.409767][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.458874][ T4733] bridge_slave_0: left allmulticast mode [ 991.476544][ T4733] bridge_slave_0: left promiscuous mode [ 991.495479][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.507044][T16088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 991.551512][T16088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 992.552863][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 992.601551][ T5836] Bluetooth: hci1: command tx timeout [ 993.325823][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.332599][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.965996][ T7214] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 993.992735][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 994.067553][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 994.229094][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 994.355717][ T9] usb 3-1: USB disconnect, device number 73 [ 994.683019][ T5836] Bluetooth: hci1: command tx timeout [ 994.703826][ T4733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.717992][ T4733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.728951][ T4733] bond0 (unregistering): Released all slaves [ 994.812131][ T8] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 994.882717][ T4733] tipc: Disabling bearer [ 994.895526][ T4733] tipc: Left network mode [ 994.992371][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 995.019038][ T8] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 995.041827][ T8] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 995.050473][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 995.076495][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 995.086443][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 995.096438][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 995.106524][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 995.116944][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 995.130304][ T8] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 995.139715][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.152417][ T8] usb 4-1: config 0 descriptor?? [ 995.169759][T16141] siw: device registration error -23 [ 995.189376][T16082] chnl_net:caif_netlink_parms(): no params data found [ 995.437903][T16082] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.466775][T16082] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.479987][T16082] bridge_slave_0: entered allmulticast mode [ 995.486645][ T8] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 995.489132][T16082] bridge_slave_0: entered promiscuous mode [ 995.545516][ T4733] hsr_slave_0: left promiscuous mode [ 995.557167][ T4733] hsr_slave_1: left promiscuous mode [ 995.577439][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.609847][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.631371][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.639293][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.740804][ T4733] veth1_macvtap: left promiscuous mode [ 995.749177][ T4733] veth0_macvtap: left promiscuous mode [ 995.757331][ T4733] veth1_vlan: left promiscuous mode [ 995.765094][ T4733] veth0_vlan: left promiscuous mode [ 995.831747][ T29] kauditd_printk_skb: 14986 callbacks suppressed [ 995.831763][ T29] audit: type=1400 audit(1731485765.020:545425): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5203 comm="udevd" name="block" dev="sysfs" ino=12958 [ 995.860764][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 995.870796][T16158] audit: audit_backlog=65 > audit_backlog_limit=64 [ 995.877755][ T5203] audit: audit_lost=276485 audit_rate_limit=0 audit_backlog_limit=64 [ 995.888167][T16158] audit: audit_lost=276486 audit_rate_limit=0 audit_backlog_limit=64 [ 995.897559][ T5203] audit: backlog limit exceeded [ 995.902904][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 995.909556][ T29] audit: type=1400 audit(1731485765.030:545426): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=16137 comm="syz.3.2618" path="/dev/ppp" dev="devtmpfs" ino=709 [ 995.929766][ T5203] audit: audit_lost=276487 audit_rate_limit=0 audit_backlog_limit=64 [ 995.938474][T16158] audit: backlog limit exceeded [ 996.769799][ T5836] Bluetooth: hci1: command tx timeout [ 997.865375][ T5911] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 997.880526][ T81] Bluetooth: hci3: Frame reassembly failed (-84) [ 998.852204][T11604] Bluetooth: hci1: command tx timeout [ 998.993148][ T4733] team0 (unregistering): Port device team_slave_1 removed [ 999.088234][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 999.109105][ T4733] team0 (unregistering): Port device team_slave_0 removed [ 999.750918][T16082] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.758687][T16082] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.766832][T16082] bridge_slave_1: entered allmulticast mode [ 999.774731][T16082] bridge_slave_1: entered promiscuous mode [ 999.781620][T16138] netlink: 'syz.3.2618': attribute type 10 has an invalid length. [ 999.823547][T16138] team0: Port device wlan1 added [ 999.829807][T16168] netlink: 'syz.6.2625': attribute type 4 has an invalid length. [ 999.884114][ T5836] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 999.937077][T16156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.952835][T16190] netlink: 'syz.2.2631': attribute type 3 has an invalid length. [ 999.960617][T16190] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2631'. [ 1000.001492][ T8] usb 4-1: USB disconnect, device number 74 [ 1000.023403][T16082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.060233][ T8] usblp0: removed [ 1000.087595][T16082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.294531][T16082] team0: Port device team_slave_0 added [ 1000.330022][T16082] team0: Port device team_slave_1 added [ 1000.373668][T16196] siw: device registration error -23 [ 1000.508290][T16082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.531324][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.643042][T16082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.741239][T16082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.762633][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.842933][ T29] kauditd_printk_skb: 15012 callbacks suppressed [ 1000.842950][ T29] audit: type=1400 audit(1731485770.019:553398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13564 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1000.866798][T16215] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1000.870459][T13323] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1000.874329][T16215] audit: audit_lost=278849 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.882776][ T5185] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1000.888860][T16215] audit: backlog limit exceeded [ 1000.900406][T16215] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1000.900788][T13323] audit: audit_lost=278850 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.906947][T16215] audit: audit_lost=278851 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.906963][T16215] audit: backlog limit exceeded [ 1000.944303][T16082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.092890][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1001.262523][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1001.272189][ T9] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 1001.281628][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.316197][T16082] hsr_slave_0: entered promiscuous mode [ 1001.351571][T16082] hsr_slave_1: entered promiscuous mode [ 1001.365948][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1001.381463][T16082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.550359][T16082] Cannot create hsr debugfs directory [ 1002.081262][ T9] usb 3-1: config 1 has no interface number 0 [ 1002.088178][ T9] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.099348][ T9] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.238650][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1002.249490][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.257618][ T9] usb 3-1: Product: syz [ 1002.261842][ T9] usb 3-1: Manufacturer: syz [ 1002.266527][ T9] usb 3-1: SerialNumber: syz [ 1002.275716][ T9] cdc_wdm 3-1:1.128: skipping garbage [ 1002.283400][ T9] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 1002.300301][ T9] cdc_wdm 3-1:1.128: Unknown control protocol [ 1002.620050][ T9] usb 3-1: USB disconnect, device number 74 [ 1003.250529][T16082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1003.321670][T16082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1003.414865][T16082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1003.443814][T16082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1003.742510][T16280] FAULT_INJECTION: forcing a failure. [ 1003.742510][T16280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.757041][T10659] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1003.803320][T16280] CPU: 1 UID: 0 PID: 16280 Comm: syz.2.2650 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1003.814135][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1003.824201][T16280] Call Trace: [ 1003.827481][T16280] [ 1003.830411][T16280] dump_stack_lvl+0x241/0x360 [ 1003.835096][T16280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1003.840291][T16280] ? __pfx__printk+0x10/0x10 [ 1003.844885][T16280] ? snprintf+0xda/0x120 [ 1003.849131][T16280] should_fail_ex+0x3b0/0x4e0 [ 1003.853809][T16280] _copy_to_user+0x31/0xb0 [ 1003.858222][T16280] simple_read_from_buffer+0xca/0x150 [ 1003.863600][T16280] proc_fail_nth_read+0x1e9/0x250 [ 1003.868625][T16280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1003.874174][T16280] ? rw_verify_area+0x55e/0x6f0 [ 1003.879022][T16280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1003.884569][T16280] vfs_read+0x1fc/0xb70 [ 1003.888730][T16280] ? fdget_pos+0x24e/0x320 [ 1003.893150][T16280] ? __pfx_vfs_read+0x10/0x10 [ 1003.897827][T16280] ? __fget_files+0x3f3/0x470 [ 1003.902507][T16280] ? fdget_pos+0x24e/0x320 [ 1003.906926][T16280] ksys_read+0x183/0x2b0 [ 1003.911169][T16280] ? __pfx_ksys_read+0x10/0x10 [ 1003.915931][T16280] ? do_syscall_64+0x100/0x230 [ 1003.920707][T16280] ? do_syscall_64+0xb6/0x230 [ 1003.925391][T16280] do_syscall_64+0xf3/0x230 [ 1003.929897][T16280] ? clear_bhb_loop+0x35/0x90 [ 1003.934576][T16280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.940468][T16280] RIP: 0033:0x7fdd5577d15c [ 1003.944879][T16280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1003.964483][T16280] RSP: 002b:00007fdd565fb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1003.972898][T16280] RAX: ffffffffffffffda RBX: 00007fdd55935f80 RCX: 00007fdd5577d15c [ 1003.980865][T16280] RDX: 000000000000000f RSI: 00007fdd565fb0a0 RDI: 0000000000000004 [ 1003.988833][T16280] RBP: 00007fdd565fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.996799][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.004766][T16280] R13: 0000000000000000 R14: 00007fdd55935f80 R15: 00007ffe241db418 [ 1004.012744][T16280] [ 1004.064090][T16082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.081763][T16082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.115532][T16082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1004.126502][T16082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1004.152062][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.159259][T12359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.168165][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.175334][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.203160][ T5911] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1004.213926][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1004.222905][T10659] usb 4-1: Using ep0 maxpacket: 16 [ 1004.248837][T10659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.269478][T10659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.306730][T10659] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1004.321843][T10659] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1004.347624][T10659] usb 4-1: Product: syz [ 1004.351852][T10659] usb 4-1: Manufacturer: syz [ 1004.370322][ T5911] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1004.401292][T10659] usb 4-1: config 0 descriptor?? [ 1004.407723][ T5911] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1004.437691][ T5911] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1004.449906][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.462833][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1004.489081][T16277] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1004.512619][ T5911] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1004.622977][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1004.647641][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1004.673976][ T8] usb 3-1: config 0 has no interface number 0 [ 1004.719380][ T8] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1004.755407][T16082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.764709][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.814116][ T9129] usb 7-1: USB disconnect, device number 9 [ 1004.853779][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1004.863909][ T8] usb 3-1: Product: syz [ 1004.886001][ T8] usb 3-1: Manufacturer: syz [ 1004.934181][ T8] usb 3-1: SerialNumber: syz [ 1004.962335][ T8] usb 3-1: config 0 descriptor?? [ 1004.990839][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1005.007037][T10659] usbhid 4-1:0.0: can't add hid device: -71 [ 1005.036092][T10659] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1005.089956][T10659] usb 4-1: USB disconnect, device number 75 [ 1005.148953][T13210] udevd[13210]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.855403][ T29] kauditd_printk_skb: 38241 callbacks suppressed [ 1005.855974][ T29] audit: type=1400 audit(1731485775.038:570558): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16304 comm="modprobe" name="/" dev="sda1" ino=2 [ 1005.864689][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.881893][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.900448][T16304] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1005.900679][T16307] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1005.908638][T13201] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1005.931368][ T5185] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1005.972585][T16305] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1005.977545][T16304] audit: audit_lost=286003 audit_rate_limit=0 audit_backlog_limit=64 [ 1005.982610][ T8] gspca_spca1528: reg_w err -110 [ 1005.993029][ T5185] audit: audit_lost=286004 audit_rate_limit=0 audit_backlog_limit=64 [ 1006.023530][ T8] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1006.771898][T16082] veth0_vlan: entered promiscuous mode [ 1006.950330][T16082] veth1_vlan: entered promiscuous mode [ 1007.172855][T16082] veth0_macvtap: entered promiscuous mode [ 1007.234312][T16082] veth1_macvtap: entered promiscuous mode [ 1007.301886][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.339778][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.373181][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.402201][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.443525][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.473225][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.503429][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.542160][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.574471][T16082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.617997][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.663188][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.793350][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.810647][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.863472][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.883000][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.913456][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.332594][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.446028][T16082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.620178][T16082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.663319][T16082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.699609][T16082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.717204][T16082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.317054][ T6423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.333749][T12359] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1009.578971][ T6423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.741543][T11604] Bluetooth: hci2: unexpected event for opcode 0x200c [ 1009.830516][T15103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.841715][T15103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.863757][ T5825] audit_log_start: 117135 callbacks suppressed [ 1010.863803][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.876714][ T5825] audit: audit_lost=319262 audit_rate_limit=0 audit_backlog_limit=64 [ 1010.885859][ T5825] audit: backlog limit exceeded [ 1010.890762][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.897607][ T5825] audit: audit_lost=319263 audit_rate_limit=0 audit_backlog_limit=64 [ 1010.905786][ T5825] audit: backlog limit exceeded [ 1010.910678][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.917413][ T5825] audit: audit_lost=319264 audit_rate_limit=0 audit_backlog_limit=64 [ 1010.926252][ T5825] audit: backlog limit exceeded [ 1010.927519][T16369] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.974712][ T4733] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1011.022773][T16376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1011.260178][T10659] usb 3-1: USB disconnect, device number 75 [ 1011.286185][T16389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.344212][T16378] Invalid logical block size (1) [ 1013.283899][ T5880] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1013.451287][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1013.944514][ T5880] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1013.952569][ T5880] usb 3-1: config 0 has no interface number 0 [ 1013.990758][ T5880] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1013.999959][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.011343][ T5880] usb 3-1: Product: syz [ 1014.037223][ T5880] usb 3-1: Manufacturer: syz [ 1014.099420][ T5880] usb 3-1: SerialNumber: syz [ 1014.135847][ T5880] usb 3-1: config 0 descriptor?? [ 1014.163534][ T5880] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1014.371312][ T5108] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1015.874250][ T29] kauditd_printk_skb: 159456 callbacks suppressed [ 1015.874269][ T29] audit: type=1400 audit(1731485785.037:599460): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5825 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1015.874403][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1015.881767][T16441] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1015.900398][ T5825] audit: audit_lost=369343 audit_rate_limit=0 audit_backlog_limit=64 [ 1015.900419][ T5825] audit: backlog limit exceeded [ 1015.900515][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1015.900530][ T5825] audit: audit_lost=369344 audit_rate_limit=0 audit_backlog_limit=64 [ 1015.900545][ T5825] audit: backlog limit exceeded [ 1015.900559][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1015.900571][ T5825] audit: audit_lost=369345 audit_rate_limit=0 audit_backlog_limit=64 [ 1016.156731][T16443] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2680'. [ 1016.365853][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1016.376352][ T5880] gspca_spca1528: reg_r err -71 [ 1016.381424][ T5880] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1017.111931][ T5880] usb 3-1: USB disconnect, device number 76 [ 1018.903677][T16474] siw: device registration error -23 [ 1019.567531][ T5108] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1020.550716][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1020.562478][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1020.571974][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1020.580003][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1020.593438][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1020.601001][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1020.660634][T16492] lo speed is unknown, defaulting to 1000 [ 1020.901842][ T29] kauditd_printk_skb: 58367 callbacks suppressed [ 1020.901854][ T29] audit: type=1400 audit(1731485790.077:606591): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5185 comm="syslogd" name="/" dev="sda1" ino=2 [ 1020.938120][T16501] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1020.946967][T16498] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1020.953593][T16501] audit: audit_lost=386568 audit_rate_limit=0 audit_backlog_limit=64 [ 1020.962078][T16498] audit: audit_lost=386569 audit_rate_limit=0 audit_backlog_limit=64 [ 1020.969529][T13564] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1020.975106][T13323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1020.977175][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1020.983147][ T29] audit: type=1400 audit(1731485790.077:606592): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5185 comm="syslogd" name="var" dev="sda1" ino=1906 [ 1020.999997][T13201] audit: audit_lost=386570 audit_rate_limit=0 audit_backlog_limit=64 [ 1021.362540][T11388] bond0: (slave syz_tun): Releasing backup interface [ 1021.985918][T15103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.116688][T16515] netlink: 'syz.3.2695': attribute type 29 has an invalid length. [ 1022.126333][ T6426] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1022.172367][ T969] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1022.288947][T15103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.335049][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 1022.358853][ T969] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1022.394623][ T969] usb 3-1: config 0 has no interface number 0 [ 1022.424738][T16517] netlink: 'syz.3.2695': attribute type 29 has an invalid length. [ 1022.449239][ T969] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1022.749208][ T5836] Bluetooth: hci3: command tx timeout [ 1023.142143][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.155003][ T969] usb 3-1: Product: syz [ 1023.163891][ T969] usb 3-1: Manufacturer: syz [ 1023.169196][ T969] usb 3-1: SerialNumber: syz [ 1023.177302][ T969] usb 3-1: config 0 descriptor?? [ 1023.188279][ T969] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1023.237392][T15103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.360480][T16492] chnl_net:caif_netlink_parms(): no params data found [ 1023.549889][T15103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.977195][T16492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.997664][T16492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.032189][T16492] bridge_slave_0: entered allmulticast mode [ 1024.064517][T16492] bridge_slave_0: entered promiscuous mode [ 1024.140325][T16492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.153683][T16492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.162066][T16492] bridge_slave_1: entered allmulticast mode [ 1024.171334][T16492] bridge_slave_1: entered promiscuous mode [ 1024.358384][T16492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.391720][T16492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.616940][T15103] bridge_slave_0: left allmulticast mode [ 1024.631697][T15103] bridge_slave_0: left promiscuous mode [ 1024.652059][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.698250][T15103] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1024.765355][T11604] Bluetooth: hci3: command tx timeout [ 1025.343611][T12359] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1025.849100][T15103] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1025.906103][ T29] kauditd_printk_skb: 12029 callbacks suppressed [ 1025.906120][ T29] audit: type=1400 audit(1731485795.086:612735): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16556 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1025.986143][ T29] audit: type=1400 audit(1731485795.166:612736): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16556 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1026.065531][T10659] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1026.074095][ T29] audit: type=1400 audit(1731485795.246:612737): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=16556 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1026.118731][ T29] audit: type=1400 audit(1731485795.266:612738): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16556 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1026.129510][T11604] Bluetooth: hci5: command 0x0405 tx timeout [ 1026.197574][ T969] gspca_spca1528: reg_r err -110 [ 1026.202631][ T969] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1026.209682][ T29] audit: type=1400 audit(1731485795.266:612739): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16556 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1026.264783][T10659] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.265448][ T29] audit: type=1400 audit(1731485795.336:612740): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16556 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1026.275073][T10659] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1026.303805][T10659] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1026.312957][T10659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.324981][T10659] usb 6-1: config 0 descriptor?? [ 1026.325367][ T29] audit: type=1400 audit(1731485795.366:612741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5203 comm="udevd" name="/" dev="sda1" ino=2 [ 1026.330776][T16557] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1026.355656][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1026.362285][T16557] audit: audit_lost=388537 audit_rate_limit=0 audit_backlog_limit=64 [ 1026.832601][T15103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.844149][T15103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.848675][ T5836] Bluetooth: hci3: command tx timeout [ 1026.864518][T15103] bond0 (unregistering): Released all slaves [ 1027.006255][T16492] team0: Port device team_slave_0 added [ 1027.018439][T16492] team0: Port device team_slave_1 added [ 1027.701668][ T5911] usb 3-1: USB disconnect, device number 78 [ 1027.984865][ T7214] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1028.361287][T16492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.383874][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.528217][T16492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.623092][T16492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.919306][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.998446][ T5836] Bluetooth: hci3: command tx timeout [ 1029.238807][T16492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.528992][T15103] : left promiscuous mode [ 1029.565793][ T25] usb 6-1: USB disconnect, device number 19 [ 1029.877156][T15103] tipc: Disabling bearer [ 1029.882559][T15103] tipc: Left network mode [ 1029.990344][T16492] hsr_slave_0: entered promiscuous mode [ 1030.011851][T15103] IPVS: stopping master sync thread 7984 ... [ 1030.042328][T16492] hsr_slave_1: entered promiscuous mode [ 1030.091721][T16607] siw: device registration error -23 [ 1030.131972][T16492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.159371][T16492] Cannot create hsr debugfs directory [ 1030.185978][T10659] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1030.286113][ T5911] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1030.361987][T10659] usb 4-1: Using ep0 maxpacket: 16 [ 1030.375179][T10659] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1030.413251][T10659] usb 4-1: config 0 has no interface number 0 [ 1030.431912][T10659] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1030.463512][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1030.477671][T10659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.514427][T10659] usb 4-1: Product: syz [ 1030.514566][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.529786][T10659] usb 4-1: Manufacturer: syz [ 1030.534886][T10659] usb 4-1: SerialNumber: syz [ 1030.539923][ T5911] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 9 [ 1030.551975][T10659] usb 4-1: config 0 descriptor?? [ 1030.559318][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1030.573384][T10659] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1030.579824][ T5911] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1030.596089][ T5911] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1030.605287][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.613494][ T5911] usb 3-1: Product: syz [ 1030.617894][ T5911] usb 3-1: Manufacturer: syz [ 1030.622588][ T5911] usb 3-1: SerialNumber: syz [ 1030.649513][ T5911] usb 3-1: config 0 descriptor?? [ 1030.655654][T16604] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1030.664276][ T5911] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1030.928726][ T29] kauditd_printk_skb: 18951 callbacks suppressed [ 1030.928744][ T29] audit: type=1400 audit(1731485800.105:617622): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16619 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 1031.012286][T16619] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1031.039823][ T29] audit: type=1400 audit(1731485800.105:617623): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16619 comm="dhcpcd-run-hook" name="bin" dev="sda1" ino=12 [ 1031.040402][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1031.070164][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1031.079253][ T29] audit: type=1400 audit(1731485800.105:617624): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16619 comm="dhcpcd-run-hook" name="rm" dev="sda1" ino=82 [ 1031.085070][T13201] audit: audit_lost=393258 audit_rate_limit=0 audit_backlog_limit=64 [ 1031.099491][ T6426] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1031.112058][T16619] audit: audit_lost=393259 audit_rate_limit=0 audit_backlog_limit=64 [ 1031.116915][ T29] audit: type=1400 audit(1731485800.105:617625): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16619 comm="dhcpcd-run-hook" path="/bin/rm" dev="sda1" ino=82 [ 1031.206198][T16621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1031.356179][T16622] syz.6.2717: attempt to access beyond end of device [ 1031.356179][T16622] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1031.370330][T16622] (syz.6.2717,16622,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 1031.378204][T16622] (syz.6.2717,16622,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1031.385745][T16622] (syz.6.2717,16622,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1031.394648][T16622] (syz.6.2717,16622,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 1031.548238][T10659] gspca_spca1528: reg_w err -110 [ 1031.738321][T10659] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 1031.963465][ T969] usb 3-1: USB disconnect, device number 79 [ 1032.029299][T16492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1032.065871][T16492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1032.153364][T16492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1032.186931][T16492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1033.718371][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1033.811226][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.837356][T15103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.862402][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.894842][T15103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.005283][T15103] veth1_macvtap: left promiscuous mode [ 1034.026039][T15103] veth0_macvtap: left promiscuous mode [ 1034.046110][T15103] veth1_vlan: left promiscuous mode [ 1034.066304][T15103] veth0_vlan: left promiscuous mode [ 1034.306832][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1034.469368][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.482730][ T25] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1034.518620][ T25] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1034.550715][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.598049][T16668] siw: device registration error -23 [ 1034.604859][ T25] usb 6-1: config 0 descriptor?? [ 1035.181084][ T25] usb 4-1: USB disconnect, device number 76 [ 1036.635725][ T29] kauditd_printk_skb: 16951 callbacks suppressed [ 1036.635747][ T29] audit: type=1400 audit(1731485804.955:625503): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=16650 comm="syz.5.2724" saddr=10.128.0.169 src=30008 daddr=10.128.0.68 dest=49576 netif=eth0 [ 1036.659705][T16680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1036.671435][T16680] audit: audit_lost=396332 audit_rate_limit=0 audit_backlog_limit=64 [ 1036.674907][ T4733] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1036.679588][T16680] audit: backlog limit exceeded [ 1036.691958][T16680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1036.779441][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1036.786040][ C1] audit: audit_lost=396333 audit_rate_limit=0 audit_backlog_limit=64 [ 1036.794212][ C1] audit: backlog limit exceeded [ 1036.985022][T16684] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1036.991765][T16684] audit: audit_lost=396334 audit_rate_limit=0 audit_backlog_limit=64 [ 1037.380576][ T25] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1037.752778][T16688] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 1037.765242][T16688] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1038.308838][ T25] usb 7-1: device descriptor read/all, error -71 [ 1038.330482][T15103] team0 (unregistering): Port device team_slave_1 removed [ 1038.446211][ T5880] usb 6-1: USB disconnect, device number 20 [ 1038.553814][T15103] team0 (unregistering): Port device team_slave_0 removed [ 1038.582722][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2732'. [ 1038.860249][T16699] fuse: Bad value for 'fd' [ 1038.865771][T16699] 9pnet_fd: Insufficient options for proto=fd [ 1039.122424][T16704] siw: device registration error -23 [ 1039.273082][ T9129] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1039.431827][T12359] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1039.583978][ T9129] usb 6-1: Using ep0 maxpacket: 8 [ 1039.609710][ T9129] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1039.689288][ T9129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1039.746952][ T9129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1039.763589][ T9129] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.776825][ T9129] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1039.790745][ T9129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.943184][T10659] lo speed is unknown, defaulting to 1000 [ 1039.953633][T16492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.986344][T16492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.029787][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.037065][ T7214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.109018][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.116185][ T7214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.155388][ T9129] usb 6-1: usb_control_msg returned -32 [ 1040.161202][ T9129] usbtmc 6-1:16.0: can't read capabilities [ 1040.176843][ T969] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1040.411471][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 1040.444505][T16492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1040.470080][ T969] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1040.479068][ T969] usb 7-1: config 0 has no interface number 0 [ 1040.614476][ T969] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1040.859429][T16492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1040.900687][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.167258][ T9] usb 6-1: USB disconnect, device number 21 [ 1041.236651][ T969] usb 7-1: Product: syz [ 1041.253279][ T969] usb 7-1: Manufacturer: syz [ 1041.293702][T16728] overlayfs: missing 'lowerdir' [ 1041.310010][T16721] netlink: 'syz.3.2740': attribute type 10 has an invalid length. [ 1041.354160][ T969] usb 7-1: SerialNumber: syz [ 1041.361475][ T969] usb 7-1: config 0 descriptor?? [ 1041.369909][ T969] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1041.389694][T16721] ipvlan1: entered promiscuous mode [ 1041.452155][T16721] batman_adv: batadv0: Adding interface: ipvlan1 [ 1041.506657][T16721] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.588334][T16721] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 1041.645422][ T29] kauditd_printk_skb: 11665 callbacks suppressed [ 1041.645440][ T29] audit: type=1400 audit(1731485810.794:631268): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5203 comm="udevd" name="devices" dev="sysfs" ino=4 [ 1041.676432][T16736] audit: backlog limit exceeded [ 1041.684866][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1041.691800][ T5497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1041.698490][T16736] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1041.705115][ T5497] audit: audit_lost=398303 audit_rate_limit=0 audit_backlog_limit=64 [ 1041.717233][ T5203] audit: audit_lost=398304 audit_rate_limit=0 audit_backlog_limit=64 [ 1041.725342][ T5203] audit: backlog limit exceeded [ 1041.732010][T16736] audit: audit_lost=398305 audit_rate_limit=0 audit_backlog_limit=64 [ 1041.747296][ T5497] audit: backlog limit exceeded [ 1042.023673][T16742] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1042.052416][T16742] overlayfs: missing 'lowerdir' [ 1042.282869][T16492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.466733][T16756] lo speed is unknown, defaulting to 1000 [ 1042.473495][T16756] lo speed is unknown, defaulting to 1000 [ 1042.523145][T16756] lo speed is unknown, defaulting to 1000 [ 1042.616233][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1042.718251][T16760] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2745'. [ 1042.779491][T16756] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1043.034961][T16756] lo speed is unknown, defaulting to 1000 [ 1043.066812][T16756] lo speed is unknown, defaulting to 1000 [ 1043.091922][T16756] lo speed is unknown, defaulting to 1000 [ 1043.132347][T16756] lo speed is unknown, defaulting to 1000 [ 1043.149630][T16756] lo speed is unknown, defaulting to 1000 [ 1043.399511][T16771] pimreg: entered allmulticast mode [ 1043.992884][ T969] gspca_spca1528: reg_r err -71 [ 1043.999566][ T969] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1044.032533][ T969] usb 7-1: USB disconnect, device number 12 [ 1044.076028][T16771] pimreg: left allmulticast mode [ 1044.140045][T16771] siw: device registration error -23 [ 1044.439541][T16492] veth0_vlan: entered promiscuous mode [ 1045.344001][ T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1045.466232][T16492] veth1_vlan: entered promiscuous mode [ 1045.494891][T16492] veth0_macvtap: entered promiscuous mode [ 1045.504463][T16492] veth1_macvtap: entered promiscuous mode [ 1045.519581][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.530215][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.540236][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.550774][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.560721][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.571359][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.581288][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.591812][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.603380][T16492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.616855][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.627452][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.637372][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.647959][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.660202][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.670785][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.681133][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.691658][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.703102][T16492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.714026][T16492] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.722872][T16492] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.731691][T16492] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.740488][T16492] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.545201][T16809] siw: device registration error -23 [ 1047.675174][ T29] kauditd_printk_skb: 21641 callbacks suppressed [ 1047.675191][ T29] audit: type=1400 audit(1731485815.833:638980): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=16810 comm="syz.6.2756" opid=16810 ocomm="syz.6.2756" [ 1047.683583][T14014] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1047.705867][ T29] audit: type=1400 audit(1731485815.843:638981): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16810 comm="syz.6.2756" name="newroot" dev="tmpfs" ino=2 [ 1047.709204][T16492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1047.726704][ T29] audit: type=1400 audit(1731485815.843:638982): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16810 comm="syz.6.2756" name="/" dev="proc" ino=1 [ 1047.733345][T14014] audit: audit_lost=402976 audit_rate_limit=0 audit_backlog_limit=64 [ 1047.752448][ T29] audit: type=1400 audit(1731485815.843:638983): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16810 comm="syz.6.2756" name="/" dev="proc" ino=1 [ 1047.760708][T16492] audit: audit_lost=402977 audit_rate_limit=0 audit_backlog_limit=64 [ 1047.760730][T16492] audit: backlog limit exceeded [ 1047.761041][T16492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1047.782837][ T7743] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1047.918181][ T7743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.931896][ T7743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.067184][T15103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.080025][T15103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.186632][T16831] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2758'. [ 1048.222856][T16833] pimreg: entered allmulticast mode [ 1048.688497][T16835] pimreg: left allmulticast mode [ 1049.268850][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1049.460245][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1049.482843][T16856] hugetlbfs: Unknown parameter 'Fn"ml9\ǡ!c4-drymo' [ 1049.598174][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1049.838180][ T9] usb 7-1: config 0 has no interface number 0 [ 1049.847610][ T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1049.870396][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.928257][ T9] usb 7-1: Product: syz [ 1049.940119][ T9] usb 7-1: Manufacturer: syz [ 1049.956628][T16852] loop9: detected capacity change from 0 to 7 [ 1049.970670][T16852] Dev loop9: unable to read RDB block 7 [ 1049.976289][T16852] loop9: unable to read partition table [ 1049.982150][T16852] loop9: partition table beyond EOD, truncated [ 1049.988378][T16852] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1050.021358][ T9] usb 7-1: SerialNumber: syz [ 1050.061730][ T9] usb 7-1: config 0 descriptor?? [ 1050.122739][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1050.451055][ T7743] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1051.088645][T11604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1051.234844][T11604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1051.247360][T11604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1051.338513][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1051.364659][T11604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1051.376458][T11604] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1051.389851][T11604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1051.478896][ T9] gspca_spca1528: reg_w err -110 [ 1051.499971][ T9] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1051.751052][T16870] FAULT_INJECTION: forcing a failure. [ 1051.751052][T16870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.778996][T16870] CPU: 0 UID: 0 PID: 16870 Comm: syz.7.2769 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1051.789812][T16870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1051.799891][T16870] Call Trace: [ 1051.803186][T16870] [ 1051.806150][T16870] dump_stack_lvl+0x241/0x360 [ 1051.810858][T16870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1051.816173][T16870] ? __pfx__printk+0x10/0x10 [ 1051.820798][T16870] ? snprintf+0xda/0x120 [ 1051.825071][T16870] should_fail_ex+0x3b0/0x4e0 [ 1051.829783][T16870] _copy_to_user+0x31/0xb0 [ 1051.834235][T16870] simple_read_from_buffer+0xca/0x150 [ 1051.839644][T16870] proc_fail_nth_read+0x1e9/0x250 [ 1051.844678][T16870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1051.850251][T16870] ? rw_verify_area+0x55e/0x6f0 [ 1051.855104][T16870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1051.860663][T16870] vfs_read+0x1fc/0xb70 [ 1051.864818][T16870] ? fdget_pos+0x24e/0x320 [ 1051.869234][T16870] ? __pfx_vfs_read+0x10/0x10 [ 1051.873914][T16870] ? __fget_files+0x3f3/0x470 [ 1051.878598][T16870] ? fdget_pos+0x24e/0x320 [ 1051.883021][T16870] ksys_read+0x183/0x2b0 [ 1051.887262][T16870] ? __pfx_ksys_read+0x10/0x10 [ 1051.892023][T16870] ? do_syscall_64+0x100/0x230 [ 1051.896802][T16870] ? do_syscall_64+0xb6/0x230 [ 1051.901476][T16870] do_syscall_64+0xf3/0x230 [ 1051.905976][T16870] ? clear_bhb_loop+0x35/0x90 [ 1051.910649][T16870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.916540][T16870] RIP: 0033:0x7f0c3057d15c [ 1051.920953][T16870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1051.940558][T16870] RSP: 002b:00007f0c31366030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1051.948982][T16870] RAX: ffffffffffffffda RBX: 00007f0c30735f80 RCX: 00007f0c3057d15c [ 1051.956972][T16870] RDX: 000000000000000f RSI: 00007f0c313660a0 RDI: 0000000000000005 [ 1051.964952][T16870] RBP: 00007f0c31366090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.972919][T16870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.980887][T16870] R13: 0000000000000000 R14: 00007f0c30735f80 R15: 00007ffed6e83528 [ 1051.988867][T16870] [ 1052.167633][T16864] lo speed is unknown, defaulting to 1000 [ 1052.179913][T16878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.455536][ T4733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.716065][ T29] kauditd_printk_skb: 26078 callbacks suppressed [ 1052.716085][ T29] audit: type=1400 audit(1731485821.883:647038): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16889 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 1052.735347][ T4733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.758109][T16889] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1052.775959][T16882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1052.779275][ T29] audit: type=1400 audit(1731485821.883:647039): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16889 comm="dhcpcd-run-hook" name="/" dev="sysfs" ino=1 [ 1052.783994][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1052.801941][T16882] audit: audit_lost=409019 audit_rate_limit=0 audit_backlog_limit=64 [ 1052.816513][T16889] audit: audit_lost=409020 audit_rate_limit=0 audit_backlog_limit=64 [ 1052.816536][T16889] audit: backlog limit exceeded [ 1052.830095][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1052.836642][ C1] audit: audit_lost=409021 audit_rate_limit=0 audit_backlog_limit=64 [ 1053.020256][ T4733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.490532][T12359] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1053.511991][T11604] Bluetooth: hci0: command tx timeout [ 1053.813438][ T4733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.891885][T16906] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2774'. [ 1054.065075][ T9] usb 7-1: USB disconnect, device number 13 [ 1054.720006][T16864] chnl_net:caif_netlink_parms(): no params data found [ 1054.777869][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.784552][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.012296][ T4733] bridge_slave_1: left allmulticast mode [ 1055.018008][ T4733] bridge_slave_1: left promiscuous mode [ 1055.087759][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.169840][ T4733] bridge_slave_0: left allmulticast mode [ 1055.199758][ T4733] bridge_slave_0: left promiscuous mode [ 1055.205532][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.611573][T11604] Bluetooth: hci0: command tx timeout [ 1056.031260][T10659] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1056.331237][T10659] usb 4-1: Using ep0 maxpacket: 32 [ 1056.447570][T10659] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.507384][T10659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1056.524082][T10659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1056.542784][T10659] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1056.543287][T16952] siw: device registration error -23 [ 1056.627059][T10659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.690481][T10659] usb 4-1: config 0 descriptor?? [ 1056.696774][T16940] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1056.707306][ T7743] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1056.715584][T10659] hub 4-1:0.0: USB hub found [ 1056.924982][T10659] hub 4-1:0.0: 3 ports detected [ 1056.936933][ T4733] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1057.303670][T10659] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1057.318748][T10659] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1057.340503][T10659] usbhid 4-1:0.0: can't add hid device: -71 [ 1057.346634][T10659] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1057.461789][T10659] usb 4-1: USB disconnect, device number 77 [ 1057.649238][T11604] Bluetooth: hci0: command tx timeout [ 1057.698459][ T4733] bridge0 (unregistering): left promiscuous mode [ 1057.725827][ T29] kauditd_printk_skb: 21170 callbacks suppressed [ 1057.725846][ T29] audit: type=1400 audit(1731485826.902:652350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13201 comm="udevd" name="/" dev="sda1" ino=2 [ 1057.758247][ T29] audit: type=1400 audit(1731485826.902:652351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13201 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1057.777302][ T29] audit: type=1400 audit(1731485826.902:652352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13201 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1057.806920][ T29] audit: type=1400 audit(1731485826.902:652353): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13201 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1057.834370][T16492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1057.840174][ T29] audit: type=1400 audit(1731485826.902:652354): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=13201 comm="udevd" name="c189:460" dev="tmpfs" ino=7619 [ 1057.859963][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1057.859983][ T5185] audit: audit_lost=414342 audit_rate_limit=0 audit_backlog_limit=64 [ 1057.859998][ T5185] audit: backlog limit exceeded [ 1057.860018][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1058.157403][ T4733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.168294][ T4733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.182002][ T4733] bond0 (unregistering): Released all slaves [ 1058.197551][ T4733] bond1 (unregistering): Released all slaves [ 1058.199387][ T5880] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1058.359229][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 1058.367807][ T5880] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.385237][ T5880] usb 8-1: config 0 has no interface number 0 [ 1058.404426][ T5880] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1058.414831][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.415998][ T4733] bond2 (unregistering): Released all slaves [ 1058.429287][ T5880] usb 8-1: Product: syz [ 1058.433514][ T5880] usb 8-1: Manufacturer: syz [ 1058.445935][ T5880] usb 8-1: SerialNumber: syz [ 1058.480049][ T5880] usb 8-1: config 0 descriptor?? [ 1058.492745][ T5880] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1058.716314][ T7214] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1059.119977][ T4733] tipc: Disabling bearer [ 1059.145111][ T4733] tipc: Left network mode [ 1059.194237][ T5880] gspca_spca1528: reg_w err -110 [ 1059.250819][ T5880] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110 [ 1059.378696][ T4733] IPVS: stopping master sync thread 8365 ... [ 1059.385144][T16985] FAULT_INJECTION: forcing a failure. [ 1059.385144][T16985] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.398331][T16985] CPU: 1 UID: 0 PID: 16985 Comm: syz.3.2795 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1059.409123][T16985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1059.419192][T16985] Call Trace: [ 1059.422480][T16985] [ 1059.425411][T16985] dump_stack_lvl+0x241/0x360 [ 1059.430098][T16985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1059.435299][T16985] ? __pfx__printk+0x10/0x10 [ 1059.439890][T16985] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1059.445347][T16985] ? __pfx___might_resched+0x10/0x10 [ 1059.450630][T16985] ? audit_log_format+0xdb/0x130 [ 1059.455569][T16985] should_fail_ex+0x3b0/0x4e0 [ 1059.460251][T16985] should_failslab+0xac/0x100 [ 1059.464941][T16985] ? audit_log_d_path+0xbb/0x310 [ 1059.469878][T16985] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1059.475165][T16985] ? audit_log_n_string+0x397/0x5f0 [ 1059.480363][T16985] audit_log_d_path+0xbb/0x310 [ 1059.485133][T16985] ? get_mm_exe_file+0x1c/0x170 [ 1059.490003][T16985] audit_log_d_path_exe+0x42/0x70 [ 1059.495027][T16985] audit_log_task+0x219/0x2f0 [ 1059.499709][T16985] ? __pfx_audit_log_task+0x10/0x10 [ 1059.504908][T16985] ? __pfx___cant_migrate+0x10/0x10 [ 1059.510377][T16985] audit_seccomp+0x7b/0x1f0 [ 1059.514895][T16985] __seccomp_filter+0xb38/0x1fe0 [ 1059.519836][T16985] ? __pfx_lock_release+0x10/0x10 [ 1059.524885][T16985] ? vfs_write+0x730/0xd30 [ 1059.529312][T16985] ? __pfx___seccomp_filter+0x10/0x10 [ 1059.534714][T16985] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1059.540351][T16985] ? __pfx_vfs_write+0x10/0x10 [ 1059.545122][T16985] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1059.551106][T16985] ? __fget_files+0x3f3/0x470 [ 1059.555799][T16985] ? __secure_computing+0x125/0x370 [ 1059.560998][T16985] syscall_trace_enter+0xa8/0x150 [ 1059.566028][T16985] do_syscall_64+0xcc/0x230 [ 1059.570533][T16985] ? clear_bhb_loop+0x35/0x90 [ 1059.575211][T16985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.581099][T16985] RIP: 0033:0x7f77cb37e719 [ 1059.585511][T16985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.605130][T16985] RSP: 002b:00007f77cb1f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1059.613570][T16985] RAX: ffffffffffffffda RBX: 00007f77cb535f80 RCX: 00007f77cb37e719 [ 1059.621538][T16985] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000004 [ 1059.629512][T16985] RBP: 00007f77cb1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.637490][T16985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.645472][T16985] R13: 0000000000000000 R14: 00007f77cb535f80 R15: 00007ffc44875b58 [ 1059.653815][T16985] [ 1059.725307][T16864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.729400][T11604] Bluetooth: hci0: command tx timeout [ 1059.741492][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.750776][T16864] bridge_slave_0: entered allmulticast mode [ 1059.774710][T16988] siw: device registration error -23 [ 1059.791406][T16864] bridge_slave_0: entered promiscuous mode [ 1059.835968][T16864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.860913][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.869860][T16864] bridge_slave_1: entered allmulticast mode [ 1059.876968][T16864] bridge_slave_1: entered promiscuous mode [ 1060.351132][T16864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.426653][T16864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.880627][ T5911] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1061.077918][T16864] team0: Port device team_slave_0 added [ 1061.171213][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 1061.266666][ T5911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.355887][ T5911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1061.366700][T16864] team0: Port device team_slave_1 added [ 1061.405432][ T5911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1061.480449][ T5911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1061.517240][ T5911] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1061.558651][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.586319][T16864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.620117][T16864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.664610][ T5911] hub 7-1:1.0: bad descriptor, ignoring hub [ 1061.687065][ T5911] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1061.712503][ T5911] cdc_wdm 7-1:1.0: skipping garbage [ 1061.717758][ T5911] cdc_wdm 7-1:1.0: skipping garbage [ 1061.722652][T16864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.785688][ T5911] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1061.810841][ T5911] cdc_wdm 7-1:1.0: Unknown control protocol [ 1061.811325][T16864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.898273][T16864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.928625][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.962457][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.995086][T16864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.240771][T10659] usb 7-1: USB disconnect, device number 14 [ 1062.467646][ T7214] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1062.700383][ T9] usb 8-1: USB disconnect, device number 2 [ 1062.729744][ T29] kauditd_printk_skb: 10883 callbacks suppressed [ 1062.729762][ T29] audit: type=1400 audit(1731485831.902:659533): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16492 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1062.733081][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.746498][ T29] audit: type=1400 audit(1731485831.902:659534): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16492 comm="syz-executor" name="9" dev="tmpfs" ino=63 [ 1062.755920][T13323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.769252][T17025] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.796355][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.803656][T16082] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.810604][T16082] audit: audit_lost=415581 audit_rate_limit=0 audit_backlog_limit=64 [ 1062.818679][T16082] audit: backlog limit exceeded [ 1062.824472][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.839226][T16864] hsr_slave_0: entered promiscuous mode [ 1062.865090][T16864] hsr_slave_1: entered promiscuous mode [ 1062.891280][T16864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.915743][T16864] Cannot create hsr debugfs directory [ 1062.988248][T17029] 9p: Unknown Cache mode or invalid value l [ 1064.598114][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1065.360355][ T5911] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1065.530405][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 1065.564840][ T5911] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1065.625140][ T5911] usb 7-1: config 0 has no interface number 0 [ 1065.713389][ T5911] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1065.780660][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.820156][ T5911] usb 7-1: Product: syz [ 1065.824976][ T5911] usb 7-1: Manufacturer: syz [ 1065.829708][ T5911] usb 7-1: SerialNumber: syz [ 1065.961366][ T5911] usb 7-1: config 0 descriptor?? [ 1065.970162][ T5911] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1066.243758][T17082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2818'. [ 1066.422104][T17090] input: syz0 as /devices/virtual/input/input24 [ 1067.651019][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1067.741649][T17066] audit_log_start: 21406 callbacks suppressed [ 1067.741667][T17066] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1067.750547][T13323] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1067.761211][ T29] audit: type=1400 audit(1731485836.901:667161): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5203 comm="udevd" name="/" dev="sda1" ino=2 [ 1067.766036][T17100] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1067.782106][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1067.792629][T13323] audit: audit_lost=420236 audit_rate_limit=0 audit_backlog_limit=64 [ 1067.809067][T13323] audit: backlog limit exceeded [ 1067.809112][T17101] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1067.814133][ T5203] audit: audit_lost=420237 audit_rate_limit=0 audit_backlog_limit=64 [ 1067.814153][ T5203] audit: backlog limit exceeded [ 1068.793307][T17111] netlink: 'syz.7.2823': attribute type 1 has an invalid length. [ 1068.801885][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1069.052044][ T5911] gspca_spca1528: reg_r err -110 [ 1069.057096][ T5911] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1069.498131][T16864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1069.663186][T16864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1069.697713][T16864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1069.752369][T16864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1069.802234][ T4733] batadv_slave_1: left promiscuous mode [ 1069.816668][ T4733] hsr_slave_0: left promiscuous mode [ 1069.839994][ T4733] hsr_slave_1: left promiscuous mode [ 1069.866034][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.892432][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.931029][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.955370][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.050032][ T9129] usb 7-1: USB disconnect, device number 15 [ 1070.117361][ T4733] veth0_macvtap: left promiscuous mode [ 1070.132943][ T7214] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1070.222703][ T5911] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1070.233355][T17133] FAULT_INJECTION: forcing a failure. [ 1070.233355][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.270680][T17133] CPU: 0 UID: 0 PID: 17133 Comm: syz.3.2829 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1070.273401][ T5911] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1070.281472][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1070.281517][T17133] Call Trace: [ 1070.281526][T17133] [ 1070.281536][T17133] dump_stack_lvl+0x241/0x360 [ 1070.281565][T17133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.281589][T17133] ? __pfx__printk+0x10/0x10 [ 1070.281612][T17133] ? uhid_char_write+0x75/0xb40 [ 1070.281642][T17133] should_fail_ex+0x3b0/0x4e0 [ 1070.281668][T17133] _copy_from_user+0x2f/0xc0 [ 1070.281690][T17133] uhid_char_write+0x1f6/0xb40 [ 1070.281711][T17133] ? security_file_permission+0x74/0x280 [ 1070.281743][T17133] vfs_writev+0x5a9/0xba0 [ 1070.281776][T17133] ? __pfx_uhid_char_write+0x10/0x10 [ 1070.281798][T17133] ? __pfx_vfs_writev+0x10/0x10 [ 1070.281841][T17133] ? fdget_pos+0x19a/0x320 [ 1070.365362][T17133] do_writev+0x1b1/0x350 [ 1070.369617][T17133] ? __pfx_do_writev+0x10/0x10 [ 1070.374377][T17133] ? do_syscall_64+0x100/0x230 [ 1070.379143][T17133] ? do_syscall_64+0xb6/0x230 [ 1070.383825][T17133] do_syscall_64+0xf3/0x230 [ 1070.388332][T17133] ? clear_bhb_loop+0x35/0x90 [ 1070.393015][T17133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.398906][T17133] RIP: 0033:0x7f77cb37e719 [ 1070.403318][T17133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.422921][T17133] RSP: 002b:00007f77cb1f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1070.431363][T17133] RAX: ffffffffffffffda RBX: 00007f77cb535f80 RCX: 00007f77cb37e719 [ 1070.439335][T17133] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1070.447304][T17133] RBP: 00007f77cb1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.455277][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.463247][T17133] R13: 0000000000000000 R14: 00007f77cb535f80 R15: 00007ffc44875b58 [ 1070.471579][T17133] [ 1070.474707][ C0] vkms_vblank_simulate: vblank timer overrun [ 1072.753837][ T5839] audit_log_start: 10255 callbacks suppressed [ 1072.753855][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.766894][ T29] audit: type=1400 audit(1731485841.920:672321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1072.786966][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.793681][ T5185] audit: audit_lost=421973 audit_rate_limit=0 audit_backlog_limit=64 [ 1072.809217][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1072.820536][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.827169][ C1] audit: audit_lost=421974 audit_rate_limit=0 audit_backlog_limit=64 [ 1072.835279][ C1] audit: backlog limit exceeded [ 1072.843483][ T5185] audit: backlog limit exceeded [ 1072.851225][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.858040][ T29] audit: type=1400 audit(1731485841.920:672322): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1075.091212][ T5911] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1075.115095][ T4733] team0 (unregistering): Port device team_slave_1 removed [ 1075.225828][ T4733] team0 (unregistering): Port device team_slave_0 removed [ 1075.265589][T12359] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1075.291242][ T5911] usb 8-1: Using ep0 maxpacket: 16 [ 1075.302883][ T5911] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1075.311875][ T5911] usb 8-1: config 0 has no interface number 0 [ 1075.325834][ T5911] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1075.342000][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.350796][ T5911] usb 8-1: Product: syz [ 1075.356401][ T5911] usb 8-1: Manufacturer: syz [ 1075.361402][ T5911] usb 8-1: SerialNumber: syz [ 1075.370199][ T5911] usb 8-1: config 0 descriptor?? [ 1075.399095][ T5911] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1075.433824][T17172] FAULT_INJECTION: forcing a failure. [ 1075.433824][T17172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.447180][T17172] CPU: 1 UID: 0 PID: 17172 Comm: syz.3.2838 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1075.457982][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1075.468077][T17172] Call Trace: [ 1075.471369][T17172] [ 1075.474289][T17172] dump_stack_lvl+0x241/0x360 [ 1075.478956][T17172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1075.484149][T17172] ? __pfx__printk+0x10/0x10 [ 1075.488751][T17172] ? __pfx_lock_release+0x10/0x10 [ 1075.493787][T17172] should_fail_ex+0x3b0/0x4e0 [ 1075.498468][T17172] _copy_from_iter+0x21f/0x1e70 [ 1075.503441][T17172] ? __virt_addr_valid+0x183/0x530 [ 1075.508621][T17172] ? __pfx_lock_release+0x10/0x10 [ 1075.513676][T17172] ? __alloc_skb+0x28f/0x440 [ 1075.518316][T17172] ? __pfx__copy_from_iter+0x10/0x10 [ 1075.523628][T17172] ? __virt_addr_valid+0x183/0x530 [ 1075.528739][T17172] ? __virt_addr_valid+0x183/0x530 [ 1075.533847][T17172] ? __virt_addr_valid+0x45f/0x530 [ 1075.538952][T17172] ? __check_object_size+0x48e/0x900 [ 1075.544332][T17172] netlink_sendmsg+0x73d/0xcb0 [ 1075.549120][T17172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.554410][T17172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.559689][T17172] __sock_sendmsg+0x221/0x270 [ 1075.564364][T17172] ____sys_sendmsg+0x52a/0x7e0 [ 1075.569133][T17172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1075.574426][T17172] __sys_sendmsg+0x292/0x380 [ 1075.579018][T17172] ? __pfx___sys_sendmsg+0x10/0x10 [ 1075.584137][T17172] ? __pfx_vfs_write+0x10/0x10 [ 1075.588915][T17172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1075.595243][T17172] ? do_syscall_64+0x100/0x230 [ 1075.600007][T17172] ? do_syscall_64+0xb6/0x230 [ 1075.604683][T17172] do_syscall_64+0xf3/0x230 [ 1075.609192][T17172] ? clear_bhb_loop+0x35/0x90 [ 1075.613882][T17172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.619774][T17172] RIP: 0033:0x7f77cb37e719 [ 1075.624188][T17172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.643790][T17172] RSP: 002b:00007f77cb1f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.652207][T17172] RAX: ffffffffffffffda RBX: 00007f77cb535f80 RCX: 00007f77cb37e719 [ 1075.660176][T17172] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1075.668140][T17172] RBP: 00007f77cb1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.676103][T17172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.684101][T17172] R13: 0000000000000000 R14: 00007f77cb535f80 R15: 00007ffc44875b58 [ 1075.692083][T17172] [ 1076.014299][T17174] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2839'. [ 1076.442376][ T5911] gspca_spca1528: reg_w err -110 [ 1076.488402][ T5911] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110 [ 1077.308376][T10659] lo speed is unknown, defaulting to 1000 [ 1077.651823][T16864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.668115][T16864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.699838][T16864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1077.710355][T16864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1077.891935][ T29] kauditd_printk_skb: 6478 callbacks suppressed [ 1077.891956][ T29] audit: type=1400 audit(1731485847.000:676003): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1077.922070][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.929238][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.953630][T17195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1077.960216][T17195] audit: audit_lost=422910 audit_rate_limit=0 audit_backlog_limit=64 [ 1077.969165][T17195] audit: backlog limit exceeded [ 1077.974285][T17195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1077.980813][T17195] audit: audit_lost=422911 audit_rate_limit=0 audit_backlog_limit=64 [ 1077.982064][T17185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1077.988965][T17195] audit: backlog limit exceeded [ 1077.995470][T17185] audit: audit_lost=422912 audit_rate_limit=0 audit_backlog_limit=64 [ 1077.995490][T17185] audit: backlog limit exceeded [ 1078.004245][T17185] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2840'. [ 1078.467797][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.474976][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.613441][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1078.973023][ T9] usb 8-1: USB disconnect, device number 3 [ 1079.666602][T17206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.062847][ T4733] IPVS: stop unused estimator thread 0... [ 1080.078627][T16864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.254400][T17224] FAULT_INJECTION: forcing a failure. [ 1080.254400][T17224] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.303418][T17224] CPU: 1 UID: 0 PID: 17224 Comm: syz.6.2846 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1080.314244][T17224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1080.324326][T17224] Call Trace: [ 1080.327623][T17224] [ 1080.330570][T17224] dump_stack_lvl+0x241/0x360 [ 1080.335275][T17224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.340495][T17224] ? __pfx__printk+0x10/0x10 [ 1080.345107][T17224] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1080.351109][T17224] ? __pfx___might_resched+0x10/0x10 [ 1080.356418][T17224] should_fail_ex+0x3b0/0x4e0 [ 1080.361122][T17224] should_failslab+0xac/0x100 [ 1080.365818][T17224] ? __alloc_skb+0x1c3/0x440 [ 1080.370425][T17224] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1080.376257][T17224] ? nl80211_parse_mon_options+0x6eb/0x910 [ 1080.382091][T17224] __alloc_skb+0x1c3/0x440 [ 1080.386532][T17224] ? __pfx_nl80211_parse_mon_options+0x10/0x10 [ 1080.392715][T17224] ? trace_contention_end+0x3c/0x120 [ 1080.398015][T17224] ? __pfx___alloc_skb+0x10/0x10 [ 1080.402974][T17224] ? cfg80211_iftype_allowed+0x19e/0x300 [ 1080.408630][T17224] nl80211_new_interface+0x574/0xfd0 [ 1080.413942][T17224] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1080.420215][T17224] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1080.426058][T17224] genl_rcv_msg+0xb14/0xec0 [ 1080.430586][T17224] ? mark_lock+0x9a/0x360 [ 1080.434939][T17224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1080.440009][T17224] ? __pfx_lock_acquire+0x10/0x10 [ 1080.445161][T17224] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1080.450554][T17224] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1080.456376][T17224] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1080.461847][T17224] ? __pfx___might_resched+0x10/0x10 [ 1080.467163][T17224] netlink_rcv_skb+0x1e3/0x430 [ 1080.471948][T17224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1080.476999][T17224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1080.482317][T17224] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1080.487813][T17224] genl_rcv+0x28/0x40 [ 1080.491826][T17224] netlink_unicast+0x7f6/0x990 [ 1080.496617][T17224] ? __pfx_netlink_unicast+0x10/0x10 [ 1080.501915][T17224] ? __virt_addr_valid+0x183/0x530 [ 1080.507050][T17224] ? __check_object_size+0x48e/0x900 [ 1080.512378][T17224] netlink_sendmsg+0x8e4/0xcb0 [ 1080.517180][T17224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.522501][T17224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.527813][T17224] __sock_sendmsg+0x221/0x270 [ 1080.532538][T17224] ____sys_sendmsg+0x52a/0x7e0 [ 1080.537336][T17224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.542662][T17224] __sys_sendmsg+0x292/0x380 [ 1080.547279][T17224] ? __pfx___sys_sendmsg+0x10/0x10 [ 1080.552423][T17224] ? __pfx_vfs_write+0x10/0x10 [ 1080.557234][T17224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1080.563591][T17224] ? do_syscall_64+0x100/0x230 [ 1080.568382][T17224] ? do_syscall_64+0xb6/0x230 [ 1080.573097][T17224] do_syscall_64+0xf3/0x230 [ 1080.577629][T17224] ? clear_bhb_loop+0x35/0x90 [ 1080.582330][T17224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.588252][T17224] RIP: 0033:0x7fe05bf7e719 [ 1080.592694][T17224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.612341][T17224] RSP: 002b:00007fe05ce18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.620791][T17224] RAX: ffffffffffffffda RBX: 00007fe05c135f80 RCX: 00007fe05bf7e719 [ 1080.628799][T17224] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003 [ 1080.636800][T17224] RBP: 00007fe05ce18090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.644797][T17224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.652801][T17224] R13: 0000000000000000 R14: 00007fe05c135f80 R15: 00007fffc4b38c58 [ 1080.660816][T17224] [ 1080.774228][T17232] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2849'. [ 1080.803295][T16864] veth0_vlan: entered promiscuous mode [ 1081.062093][ T6426] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1081.118344][T16864] veth1_vlan: entered promiscuous mode [ 1081.662149][T17236] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2850'. [ 1082.557155][T16864] veth0_macvtap: entered promiscuous mode [ 1082.615873][T16864] veth1_macvtap: entered promiscuous mode [ 1082.635858][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.646799][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.923901][ T29] kauditd_printk_skb: 16230 callbacks suppressed [ 1082.924069][ T29] audit: type=1400 audit(1731485852.059:679145): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5185 comm="syslogd" name="/" dev="sda1" ino=2 [ 1082.951691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.234500][ T29] audit: type=1400 audit(1731485852.099:679146): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5185 comm="syslogd" name="var" dev="sda1" ino=1906 [ 1083.254059][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.292106][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.310409][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.321049][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.331289][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.342354][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.345685][ T29] audit: type=1400 audit(1731485852.159:679147): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5185 comm="syslogd" name="var" dev="sda1" ino=1906 [ 1083.353673][T16864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.371179][ T29] audit: type=1400 audit(1731485852.159:679148): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5185 comm="syslogd" name="/" dev="sda1" ino=2 [ 1083.380762][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.396883][ T29] audit: type=1400 audit(1731485852.159:679149): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5185 comm="syslogd" name="/" dev="tmpfs" ino=1 [ 1083.396923][ T29] audit: type=1400 audit(1731485852.159:679150): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wa pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=12 [ 1083.396954][ T29] audit: type=1400 audit(1731485852.159:679151): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5185 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 [ 1083.396995][ T29] audit: type=1400 audit(1731485852.159:679152): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5185 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 [ 1083.397026][ T29] audit: type=1400 audit(1731485852.499:679153): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1083.407974][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.426350][ T29] audit: type=1400 audit(1731485852.499:679154): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1083.445165][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.502448][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.549620][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.559578][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.570078][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.580107][T16864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.590595][T16864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.602558][T16864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.640418][T16864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.649339][T16864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.658482][T16864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.668284][T16864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.782843][T10659] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1083.918736][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.940273][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.993556][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1084.064825][T17264] pimreg: entered allmulticast mode [ 1084.105628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.112221][T10659] usb 4-1: Using ep0 maxpacket: 16 [ 1084.123030][T10659] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1084.131222][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.144954][T10659] usb 4-1: config 0 has no interface number 0 [ 1084.145055][T17259] hsr0: entered promiscuous mode [ 1084.253521][T10659] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1084.994137][T10659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.033930][T17256] hsr0: left promiscuous mode [ 1085.047066][T10659] usb 4-1: Product: syz [ 1085.051281][T10659] usb 4-1: Manufacturer: syz [ 1085.079248][T10659] usb 4-1: SerialNumber: syz [ 1085.103403][T17264] pimreg: left allmulticast mode [ 1085.131566][T10659] usb 4-1: config 0 descriptor?? [ 1085.146352][T10659] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1085.283897][T17278] loop6: detected capacity change from 0 to 524287999 [ 1085.325764][T17265] lo speed is unknown, defaulting to 1000 [ 1085.331602][T17265] lo speed is unknown, defaulting to 1000 [ 1085.338376][T17265] lo speed is unknown, defaulting to 1000 [ 1085.348157][T17265] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1085.363300][T17265] lo speed is unknown, defaulting to 1000 [ 1085.369692][T17265] lo speed is unknown, defaulting to 1000 [ 1085.376152][T17265] lo speed is unknown, defaulting to 1000 [ 1085.382703][T17265] lo speed is unknown, defaulting to 1000 [ 1085.389177][T17265] lo speed is unknown, defaulting to 1000 [ 1085.428453][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.437985][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.470010][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.511040][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.520263][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.533560][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.542786][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.572829][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.582085][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.593164][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.602413][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.630012][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.639247][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.653806][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.663079][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.697394][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.706655][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.854702][T17278] ldm_validate_partition_table(): Disk read failed. [ 1085.878299][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1085.887549][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.899480][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.915499][T17278] Dev loop6: unable to read RDB block 0 [ 1085.956470][T17278] loop6: unable to read partition table [ 1086.016522][T17278] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1086.823502][ T7214] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1086.917600][T17302] pimreg: entered allmulticast mode [ 1086.998148][T17306] pimreg: left allmulticast mode [ 1087.065250][T17307] ALSA: seq fatal error: cannot create timer (-22) [ 1087.353680][T17309] siw: device registration error -23 [ 1087.573619][T10659] gspca_spca1528: reg_w err -110 [ 1087.578981][T10659] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 1087.945058][ T29] kauditd_printk_skb: 16907 callbacks suppressed [ 1087.945077][ T29] audit: type=1400 audit(1731485857.119:684934): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5839 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 [ 1087.957126][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1087.972267][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1087.992779][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1087.995865][T17314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1088.003946][ T5185] audit: audit_lost=431015 audit_rate_limit=0 audit_backlog_limit=64 [ 1088.024721][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1088.031355][ C1] audit: audit_lost=431016 audit_rate_limit=0 audit_backlog_limit=64 [ 1088.032779][T17314] audit: audit_lost=431017 audit_rate_limit=0 audit_backlog_limit=64 [ 1088.039516][ C1] audit: backlog limit exceeded [ 1088.060291][T10659] usb 4-1: USB disconnect, device number 78 [ 1088.142089][T17316] dvmrp0: entered allmulticast mode [ 1088.154025][T17316] pimreg: entered allmulticast mode [ 1088.722819][T10659] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1088.756783][T17322] pimreg: entered allmulticast mode [ 1088.924215][T17325] pimreg: left allmulticast mode [ 1088.935827][T10659] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1089.067242][T10659] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1089.099474][T10659] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1089.172533][T17323] syz.6.2865: attempt to access beyond end of device [ 1089.172533][T17323] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1089.203220][T10659] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1089.214427][T10659] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1089.389425][T10659] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1089.400824][T10659] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1089.408996][T10659] usb 8-1: Product: syz [ 1089.413833][T10659] usb 8-1: Manufacturer: syz [ 1090.051003][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1090.122102][T10659] cdc_wdm 8-1:1.0: skipping garbage [ 1090.127504][T10659] cdc_wdm 8-1:1.0: skipping garbage [ 1090.196041][T10659] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1090.202006][T10659] cdc_wdm 8-1:1.0: Unknown control protocol [ 1090.353530][T17343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2870'. [ 1090.453741][T17317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.495126][T17317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.579874][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2872'. [ 1090.641385][T17317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.661149][T17317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.700526][T17358] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2869'. [ 1091.443659][T17369] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 1091.563881][T17368] 9pnet_fd: Insufficient options for proto=fd [ 1091.779420][T10659] usb 8-1: USB disconnect, device number 4 [ 1091.894244][ T6426] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1092.224803][T17389] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2877'. [ 1092.820620][T17397] pimreg: entered allmulticast mode [ 1092.894965][T17402] dlm: no locking on control device [ 1093.071247][ T5185] audit_log_start: 25668 callbacks suppressed [ 1093.071288][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1093.084427][ T29] audit: type=1400 audit(1731485861.998:693213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13201 comm="udevd" name="/" dev="sda1" ino=2 [ 1093.109261][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1093.122577][T17403] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1093.151483][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1093.188592][T13201] audit: audit_lost=436868 audit_rate_limit=0 audit_backlog_limit=64 [ 1093.212784][ T5185] audit: audit_lost=436869 audit_rate_limit=0 audit_backlog_limit=64 [ 1093.236293][T17399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1093.340655][ T29] audit: type=1400 audit(1731485861.998:693214): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13201 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 1093.386155][T17405] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1093.546749][T17403] pimreg: left allmulticast mode [ 1093.744033][T17412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.132280][T17423] Bluetooth: MGMT ver 1.23 [ 1094.550965][T17436] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2886'. [ 1094.629701][T17438] netlink: 'syz.2.2887': attribute type 33 has an invalid length. [ 1094.781233][T17440] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2889'. [ 1095.224182][T17450] FAULT_INJECTION: forcing a failure. [ 1095.224182][T17450] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.246160][T17450] CPU: 1 UID: 0 PID: 17450 Comm: syz.6.2890 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1095.256981][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1095.267049][T17450] Call Trace: [ 1095.270336][T17450] [ 1095.273280][T17450] dump_stack_lvl+0x241/0x360 [ 1095.277971][T17450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.283198][T17450] ? __pfx__printk+0x10/0x10 [ 1095.287834][T17450] should_fail_ex+0x3b0/0x4e0 [ 1095.292544][T17450] should_failslab+0xac/0x100 [ 1095.297250][T17450] ? __alloc_skb+0x1c3/0x440 [ 1095.301864][T17450] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1095.307703][T17450] __alloc_skb+0x1c3/0x440 [ 1095.312143][T17450] ? trace_contention_end+0x3c/0x120 [ 1095.317453][T17450] ? __pfx___alloc_skb+0x10/0x10 [ 1095.322422][T17450] ? __local_bh_enable_ip+0x168/0x200 [ 1095.327816][T17450] ? hci_sock_sendmsg+0x617/0x11c0 [ 1095.332920][T17450] ? lockdep_hardirqs_on+0x99/0x150 [ 1095.338126][T17450] hci_mgmt_cmd+0x1c1/0x11d0 [ 1095.342747][T17450] hci_sock_sendmsg+0x7b8/0x11c0 [ 1095.347696][T17450] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1095.354471][T17450] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1095.359852][T17450] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1095.365217][T17450] __sock_sendmsg+0x221/0x270 [ 1095.369894][T17450] sock_write_iter+0x2d7/0x3f0 [ 1095.374672][T17450] ? __pfx_sock_write_iter+0x10/0x10 [ 1095.379983][T17450] ? bpf_lsm_file_permission+0x9/0x10 [ 1095.385349][T17450] ? security_file_permission+0x74/0x280 [ 1095.390981][T17450] vfs_write+0xaeb/0xd30 [ 1095.395222][T17450] ? __pfx_sock_write_iter+0x10/0x10 [ 1095.400540][T17450] ? __pfx_vfs_write+0x10/0x10 [ 1095.405307][T17450] ? fdget_pos+0x19a/0x320 [ 1095.409731][T17450] ksys_write+0x183/0x2b0 [ 1095.414056][T17450] ? __pfx_ksys_write+0x10/0x10 [ 1095.418902][T17450] ? do_syscall_64+0x100/0x230 [ 1095.423672][T17450] ? do_syscall_64+0xb6/0x230 [ 1095.428379][T17450] do_syscall_64+0xf3/0x230 [ 1095.432913][T17450] ? clear_bhb_loop+0x35/0x90 [ 1095.437641][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.443563][T17450] RIP: 0033:0x7fe05bf7e719 [ 1095.448000][T17450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.467623][T17450] RSP: 002b:00007fe05ce18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1095.476038][T17450] RAX: ffffffffffffffda RBX: 00007fe05c135f80 RCX: 00007fe05bf7e719 [ 1095.484004][T17450] RDX: 000000000000000d RSI: 0000000020000000 RDI: 0000000000000006 [ 1095.491971][T17450] RBP: 00007fe05ce18090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.499968][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.507944][T17450] R13: 0000000000000000 R14: 00007fe05c135f80 R15: 00007fffc4b38c58 [ 1095.515931][T17450] [ 1095.523407][T17437] ALSA: mixer_oss: invalid OSS volume '' [ 1095.760402][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1097.253013][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1098.424393][ T29] kauditd_printk_skb: 20064 callbacks suppressed [ 1098.424434][ T29] audit: type=1400 audit(1731485867.217:700700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17475 comm="syz.6.2897" name="142" dev="tmpfs" ino=769 [ 1098.459657][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1098.532884][ T29] audit: type=1400 audit(1731485867.217:700701): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17475 comm="syz.6.2897" name="142" dev="tmpfs" ino=769 [ 1098.552988][ T29] audit: type=1400 audit(1731485867.217:700702): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17475 comm="syz.6.2897" name="newroot" dev="tmpfs" ino=2 [ 1098.572570][ T29] audit: type=1400 audit(1731485867.217:700703): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17475 comm="syz.6.2897" name="/" dev="proc" ino=1 [ 1098.591363][ T29] audit: type=1400 audit(1731485867.217:700704): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17475 comm="syz.6.2897" name="/" dev="proc" ino=1 [ 1098.610255][ T5203] audit: audit_lost=441077 audit_rate_limit=0 audit_backlog_limit=64 [ 1098.625809][ T5185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1098.646375][ T5203] audit: backlog limit exceeded [ 1098.658348][ T5185] audit: audit_lost=441078 audit_rate_limit=0 audit_backlog_limit=64 [ 1098.859670][T17488] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2900'. [ 1098.901920][T17490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1100.614874][T17514] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1100.622004][T17514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1100.632414][T17514] vhci_hcd vhci_hcd.0: Device attached [ 1100.809056][T17517] vhci_hcd: connection closed [ 1100.832903][ T5108] vhci_hcd: stop threads [ 1100.856757][T12359] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1100.884654][T17257] vhci_hcd: vhci_device speed not set [ 1100.944416][T17257] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1101.070737][ T5108] vhci_hcd: release socket [ 1101.212752][T17512] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2907'. [ 1101.265231][ T5108] vhci_hcd: disconnect device [ 1102.217122][T17531] siw: device registration error -23 [ 1102.775684][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1103.006307][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 1103.109718][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1103.159037][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1103.185979][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1103.196538][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1103.323359][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1103.344449][ T9129] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1103.356917][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1103.442386][T13201] audit_log_start: 23622 callbacks suppressed [ 1103.442403][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1103.455900][T17508] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1103.463066][ T29] audit: type=1400 audit(1731485872.607:705513): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17540 comm="syz.6.2915" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1103.483749][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1103.483767][T13323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1103.497823][T17550] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1103.503458][T13323] audit: audit_lost=447400 audit_rate_limit=0 audit_backlog_limit=64 [ 1103.504610][T17550] audit: audit_lost=447401 audit_rate_limit=0 audit_backlog_limit=64 [ 1103.520764][T17550] audit: backlog limit exceeded [ 1103.533107][T17508] audit: audit_lost=447402 audit_rate_limit=0 audit_backlog_limit=64 [ 1103.546376][ T9129] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1103.553118][T17544] lo speed is unknown, defaulting to 1000 [ 1103.558243][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1103.572853][ T9129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1103.592374][ T9129] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.610255][ T9129] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1103.624458][ T9129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.651097][ T9129] usb 7-1: Product: syz [ 1103.663638][ T9129] usb 7-1: Manufacturer: syz [ 1103.690118][ T9129] usb 7-1: SerialNumber: syz [ 1103.710776][ T9129] usb 7-1: config 0 descriptor?? [ 1103.731032][ T9129] redrat3 7-1:0.0: Couldn't find all endpoints [ 1103.756422][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.775246][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1103.784971][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.803237][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1104.008214][T17550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.036124][T17550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.056747][ T5108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.273101][ T5108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.729906][ T5108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.294450][ T9] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1105.466645][ T5108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.494890][T11604] Bluetooth: hci2: command tx timeout [ 1105.568466][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1105.577449][ T9] stv0680 3-1:4.0: last error: 98, command = 0x5e [ 1106.066176][ T9] usb 3-1: USB disconnect, device number 80 [ 1106.093742][T17544] chnl_net:caif_netlink_parms(): no params data found [ 1106.098543][ T8] usb 7-1: USB disconnect, device number 16 [ 1106.129251][T17257] vhci_hcd: vhci_device speed not set [ 1106.135262][ T7743] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1106.725122][ T5840] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1106.893041][T17597] siw: device registration error -23 [ 1107.182724][ T5840] usb 6-1: No LPM exit latency info found, disabling LPM. [ 1107.234342][ T5840] usb 6-1: config 49 has an invalid interface number: 247 but max is 0 [ 1107.246220][ T5840] usb 6-1: config 49 has no interface number 0 [ 1107.258207][ T5840] usb 6-1: config 49 interface 247 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 1107.289069][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.413811][ T5840] usb 6-1: config 49 interface 247 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 1107.435048][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.442301][T17544] bridge_slave_0: entered allmulticast mode [ 1107.447795][ T5840] usb 6-1: config 49 interface 247 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 8 [ 1107.455282][T17544] bridge_slave_0: entered promiscuous mode [ 1107.506850][ T5840] usb 6-1: config 49 interface 247 altsetting 5 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1107.561133][ T5840] usb 6-1: config 49 interface 247 altsetting 5 endpoint 0x85 has invalid maxpacket 10803, setting to 8 [ 1107.582462][ T5840] usb 6-1: config 49 interface 247 altsetting 5 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 1107.595540][ T5840] usb 6-1: config 49 interface 247 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1107.610978][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.634179][T11604] Bluetooth: hci2: command tx timeout [ 1107.696118][ T5840] usb 6-1: config 49 interface 247 has no altsetting 0 [ 1107.780218][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.814071][T17544] bridge_slave_1: entered allmulticast mode [ 1107.823040][T17544] bridge_slave_1: entered promiscuous mode [ 1107.839664][ T5840] usb 6-1: Dual-Role OTG device on HNP port [ 1107.845105][ T8] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1107.854456][ T5840] usb 6-1: New USB device found, idVendor=19d2, idProduct=1018, bcdDevice=65.22 [ 1107.863825][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.872713][ T5840] usb 6-1: Product: Й [ 1107.877381][ T5840] usb 6-1: Manufacturer: 쪥縯牢ꦢण쵡*獆烊ㅫ痳揻ꬔ쭨⊵瓏䓀떷糿㟕﫠ᕪ왊Ҩ⤇罧ᕱ዆됻ᳫঁ㞧큘墈䭍⸝腀ᦏࢊｴ祰駞ꤊꧣ듢ㅳ쒅瀎㉬㲒릢 [ 1107.896596][ T5840] usb 6-1: SerialNumber: 礒㊷㵪坍㦙夑넇뗉뫮ⴑྌ玦ᴻ놱讗紐㜪쌔ෲᶆ樍騎믍ᆼ鯣ﺹ쓔 [ 1107.919955][T17585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1107.932073][T17585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1107.939762][ T5108] erspan0: left allmulticast mode [ 1107.944985][ T5108] erspan0: left promiscuous mode [ 1107.950110][ T5108] bridge0: port 3(erspan0) entered disabled state [ 1107.969932][ T5108] bridge_slave_0: left allmulticast mode [ 1107.971695][T17585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1107.975888][ T5108] bridge_slave_0: left promiscuous mode [ 1107.988722][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.005741][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1108.029568][ T8] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1108.049588][T17585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1108.062398][ T8] usb 7-1: language id specifier not provided by device, defaulting to English [ 1108.142309][T17585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1108.157680][ T8] usb 7-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 1108.188482][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.229088][ T8] usb 7-1: Product: syz [ 1108.266780][ T8] usb 7-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳󫋚 [ 1108.409289][ T8] usb 7-1: SerialNumber: syz [ 1108.419891][ T5840] option 6-1:49.247: GSM modem (1-port) converter detected [ 1108.445398][ T29] kauditd_printk_skb: 23384 callbacks suppressed [ 1108.445415][ T29] audit: type=1400 audit(1731485877.606:713194): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13323 comm="udevd" name="gadget" dev="sysfs" ino=3513 [ 1108.476084][ T8] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 1108.489120][ T5840] usb 6-1: USB disconnect, device number 22 [ 1108.489579][T13201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1108.503259][ T5840] option 6-1:49.247: device disconnected [ 1108.511488][ T5203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1108.519275][T13323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1108.533980][T13201] audit: audit_lost=452680 audit_rate_limit=0 audit_backlog_limit=64 [ 1108.538228][ T5203] audit: audit_lost=452681 audit_rate_limit=0 audit_backlog_limit=64 [ 1108.550922][T13323] audit: audit_lost=452682 audit_rate_limit=0 audit_backlog_limit=64 [ 1108.559535][T15103] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1108.569267][ T29] audit: type=1400 audit(1731485877.636:713195): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13323 comm="udevd" name="drivers" dev="sysfs" ino=3516 [ 1108.590915][T13323] audit: backlog limit exceeded [ 1108.591380][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1109.007975][ T5108] dvmrp0 (unregistering): left allmulticast mode [ 1109.664759][T11604] Bluetooth: hci2: command tx timeout [ 1110.279446][ T5108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.321824][ T5108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.385410][ T5108] bond0 (unregistering): Released all slaves [ 1110.768442][ T5108] bond1 (unregistering): Released all slaves [ 1110.775582][ T5911] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1110.809101][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.849601][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2925'. [ 1110.924019][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.947478][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.962507][ T9129] usb 7-1: USB disconnect, device number 17 [ 1110.982211][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1111.033022][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1111.092524][ T5911] usb 3-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 1111.121434][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.130209][ T5911] usb 3-1: Product: syz [ 1111.134515][ T5911] usb 3-1: Manufacturer: syz [ 1111.140243][ T5911] usb 3-1: SerialNumber: syz [ 1111.148264][ T5911] usb 3-1: config 0 descriptor?? [ 1111.157386][ T5911] usb 3-1: Found UVC 0.00 device syz (0086:0b5b) [ 1111.163895][ T5911] usb 3-1: No valid video chain found. [ 1111.185188][ T5108] ------------[ cut here ]------------ [ 1111.191228][ T5108] WARNING: CPU: 0 PID: 5108 at net/l2tp/l2tp_core.c:1881 l2tp_exit_net+0x165/0x170 [ 1111.200693][ T5108] Modules linked in: [ 1111.204590][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: kworker/u8:7 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1111.215713][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1111.225946][ T5108] Workqueue: netns cleanup_net [ 1111.230785][ T5108] RIP: 0010:l2tp_exit_net+0x165/0x170 [ 1111.236255][ T5108] Code: 0f 0b 90 e9 3b ff ff ff e8 48 08 ae f6 eb 05 e8 41 08 ae f6 90 0f 0b 90 e9 7a ff ff ff e8 33 08 ae f6 eb 05 e8 2c 08 ae f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 1111.239635][T17544] team0: Port device team_slave_0 added [ 1111.256606][ T5108] RSP: 0018:ffffc9000fc6fa98 EFLAGS: 00010293 [ 1111.269416][ T5108] RAX: ffffffff8ae6d17d RBX: ffff88814d5c2888 RCX: ffff888036163c00 [ 1111.277745][ T5108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1111.285904][ T5108] RBP: ffffc9000fc6fbb0 R08: ffffffff8bb73c06 R09: 1ffffffff2037bad [ 1111.293965][ T5108] R10: dffffc0000000000 R11: fffffbfff2037bae R12: dffffc0000000000 [ 1111.302095][ T5108] R13: 1ffffffff1fd8f6c R14: ffff88814d5c2930 R15: ffff88814d5c2840 [ 1111.310203][ T5108] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1111.319217][ T5108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1111.325986][ T5108] CR2: 00007f3725271378 CR3: 0000000048942000 CR4: 00000000003526f0 [ 1111.334073][ T5108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1111.342266][ T5108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1111.350649][ T5108] Call Trace: [ 1111.353926][ T5108] [ 1111.357420][ T5108] ? __warn+0x168/0x4e0 [ 1111.361657][ T5108] ? l2tp_exit_net+0x165/0x170 [ 1111.366897][ T5108] ? report_bug+0x2b3/0x500 [ 1111.371437][ T5108] ? l2tp_exit_net+0x165/0x170 [ 1111.376355][ T5108] ? handle_bug+0x60/0x90 [ 1111.380681][ T5108] ? exc_invalid_op+0x1a/0x50 [ 1111.385395][ T5108] ? asm_exc_invalid_op+0x1a/0x20 [ 1111.390475][ T5108] ? idr_destroy+0x56/0x290 [ 1111.395128][ T5108] ? l2tp_exit_net+0x15d/0x170 [ 1111.400054][ T5108] ? l2tp_exit_net+0x165/0x170 [ 1111.404883][ T5108] ? l2tp_exit_net+0x15d/0x170 [ 1111.409754][ T5108] cleanup_net+0x802/0xcc0 [ 1111.414291][ T5108] ? __pfx_cleanup_net+0x10/0x10 [ 1111.419341][ T5108] ? process_scheduled_works+0x976/0x1850 [ 1111.425097][ T5108] process_scheduled_works+0xa63/0x1850 [ 1111.430861][ T5108] ? __pfx_process_scheduled_works+0x10/0x10 [ 1111.436951][ T5108] ? assign_work+0x364/0x3d0 [ 1111.441582][ T5108] worker_thread+0x870/0xd30 [ 1111.446327][ T5108] ? __kthread_parkme+0x169/0x1d0 [ 1111.452011][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 1111.457849][ T5108] kthread+0x2f0/0x390 [ 1111.462051][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 1111.467348][ T5108] ? __pfx_kthread+0x10/0x10 [ 1111.472003][ T5108] ret_from_fork+0x4b/0x80 [ 1111.476541][ T5108] ? __pfx_kthread+0x10/0x10 [ 1111.481182][ T5108] ret_from_fork_asm+0x1a/0x30 [ 1111.486049][ T5108] [ 1111.489099][ T5108] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1111.496568][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: kworker/u8:7 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1111.507528][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1111.517608][ T5108] Workqueue: netns cleanup_net [ 1111.522401][ T5108] Call Trace: [ 1111.525676][ T5108] [ 1111.528606][ T5108] dump_stack_lvl+0x241/0x360 [ 1111.533292][ T5108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.538504][ T5108] ? __pfx__printk+0x10/0x10 [ 1111.543089][ T5108] ? _printk+0xd5/0x120 [ 1111.547243][ T5108] ? __init_begin+0x41000/0x41000 [ 1111.552273][ T5108] ? vscnprintf+0x5d/0x90 [ 1111.556702][ T5108] panic+0x349/0x880 [ 1111.560598][ T5108] ? __warn+0x177/0x4e0 [ 1111.564751][ T5108] ? __pfx_panic+0x10/0x10 [ 1111.569164][ T5108] ? show_trace_log_lvl+0x3b2/0x410 [ 1111.574368][ T5108] ? ret_from_fork_asm+0x1a/0x30 [ 1111.579309][ T5108] __warn+0x34b/0x4e0 [ 1111.583292][ T5108] ? l2tp_exit_net+0x165/0x170 [ 1111.588142][ T5108] report_bug+0x2b3/0x500 [ 1111.592475][ T5108] ? l2tp_exit_net+0x165/0x170 [ 1111.597245][ T5108] handle_bug+0x60/0x90 [ 1111.601405][ T5108] exc_invalid_op+0x1a/0x50 [ 1111.605907][ T5108] asm_exc_invalid_op+0x1a/0x20 [ 1111.610757][ T5108] RIP: 0010:l2tp_exit_net+0x165/0x170 [ 1111.616126][ T5108] Code: 0f 0b 90 e9 3b ff ff ff e8 48 08 ae f6 eb 05 e8 41 08 ae f6 90 0f 0b 90 e9 7a ff ff ff e8 33 08 ae f6 eb 05 e8 2c 08 ae f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 1111.635735][ T5108] RSP: 0018:ffffc9000fc6fa98 EFLAGS: 00010293 [ 1111.641826][ T5108] RAX: ffffffff8ae6d17d RBX: ffff88814d5c2888 RCX: ffff888036163c00 [ 1111.649881][ T5108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1111.657860][ T5108] RBP: ffffc9000fc6fbb0 R08: ffffffff8bb73c06 R09: 1ffffffff2037bad [ 1111.665927][ T5108] R10: dffffc0000000000 R11: fffffbfff2037bae R12: dffffc0000000000 [ 1111.673895][ T5108] R13: 1ffffffff1fd8f6c R14: ffff88814d5c2930 R15: ffff88814d5c2840 [ 1111.681878][ T5108] ? idr_destroy+0x56/0x290 [ 1111.686384][ T5108] ? l2tp_exit_net+0x15d/0x170 [ 1111.691151][ T5108] ? l2tp_exit_net+0x15d/0x170 [ 1111.695921][ T5108] cleanup_net+0x802/0xcc0 [ 1111.700340][ T5108] ? __pfx_cleanup_net+0x10/0x10 [ 1111.705278][ T5108] ? process_scheduled_works+0x976/0x1850 [ 1111.711004][ T5108] process_scheduled_works+0xa63/0x1850 [ 1111.716569][ T5108] ? __pfx_process_scheduled_works+0x10/0x10 [ 1111.722554][ T5108] ? assign_work+0x364/0x3d0 [ 1111.727150][ T5108] worker_thread+0x870/0xd30 [ 1111.731828][ T5108] ? __kthread_parkme+0x169/0x1d0 [ 1111.736864][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 1111.741978][ T5108] kthread+0x2f0/0x390 [ 1111.746050][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 1111.751171][ T5108] ? __pfx_kthread+0x10/0x10 [ 1111.755787][ T5108] ret_from_fork+0x4b/0x80 [ 1111.760207][ T5108] ? __pfx_kthread+0x10/0x10 [ 1111.764798][ T5108] ret_from_fork_asm+0x1a/0x30 [ 1111.769574][ T5108] [ 1111.772872][ T5108] Kernel Offset: disabled [ 1111.777269][ T5108] Rebooting in 86400 seconds..