last executing test programs: 16m4.197842932s ago: executing program 4 (id=2146): socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44015) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x5) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x270, 0x1d8, 0x190, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x8, [0x4e22, 0x4e23, 0x4e23, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e22], [0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 16m1.092257507s ago: executing program 4 (id=2149): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0xc054) 16m0.868657452s ago: executing program 4 (id=2153): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x5, 0x0, 0xffffffff}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x3, 0xc000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140900004200817a0000000000200000000000008a901ae2d44d3ae82913efaec97f6a78384c1f272dba7291a9e19f2c9f4170568bd5bf36185a246f6f67f9186c6a76962c246bb7445c9c1fe6cfa745f54c236eebe0764ab60f0ac82f41676a79bd3705fafa436b692efbcb0d6a22c2727a9da18a2fc11487b4930ef53053c32585fe7c4d1faa767380efe269cdb6a34073336fae97a1d201aba2f53333a422415368589bd54b304f2149f012ffd1a3180092a856eeb730cd90089797a91b72e20e587957f336aa63665e17df27c007ead43eb1ea758a330e91ef"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "5d25d6c688c890e7d51286135778ed08245dd2654debb120667c5c2a2e7b018f325738e71509e0a263c886dd70d346b6"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x0, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0xfffffffffffffd41, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x34}}, 0x4000080) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000004c0)={0x0, @in={0x2, 0x4e20, @private=0xa010101}, @vsock={0x28, 0x0, 0x2710, @hyper}, @generic={0x13, "ffda61dfeb761ef305767636927f"}, 0x101, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='wg1\x00', 0x9792, 0x7ff, 0xff6}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) r6 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x14, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000240)=ANY=[@ANYRES32=r6], 0x2b) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) sendto$packet(r8, &(0x7f00000003c0), 0x0, 0x8844, 0x0, 0x0) sendfile(r9, r6, 0x0, 0x4000000053d2) 16m0.704915948s ago: executing program 4 (id=2155): socket$pptp(0x18, 0x1, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x71) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0xa}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3, 0x400}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, {{@in=@local, 0x0, 0x32}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000}]}]}, 0x1fc}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="050000100000fedbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300001c005a80180003"], 0x44}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)={r7, 0x101, 0x20, 0xd5}, &(0x7f0000000180)=0x18) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28900, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0x15}) 15m59.229538811s ago: executing program 4 (id=2159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_io_uring_setup(0x71e2, &(0x7f0000000280)={0x0, 0x0, 0x10180, 0x9, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000080)) r4 = syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x2000000, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) write$char_usb(r3, &(0x7f0000000340)="e96f90418d34ec37b9c09db5f80426b07ff86629cbce7144fc6f9fffa6bf45edb8c41826c1e75151b8907b66a43c3e4a4db96f93d313032a3e08264b03d775f6a771606148d3da819fcf44780808d2cee932393e3a0313361631a59ac31002b80a6186ee4624d3f0ff1095b1e6c1aca00be5a8331aa9291ff3836fa30ad3a5c8036322ed9d5fcf8cf5f497faba6e1f7519d5", 0x92) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x39}}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x3, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xe4}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0xfff3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xb61c}}}]}]}]}}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @loopback}, {0x6, @random="8d4ef0ae5eee"}, 0x20, {0x2, 0x4e20, @local}, 'pim6reg\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 15m53.919664441s ago: executing program 4 (id=2174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102}, {@in6=@remote, 0x2, 0x32}, @in6=@private1, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) getpriority(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x87, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15m50.832562429s ago: executing program 32 (id=2174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102}, {@in6=@remote, 0x2, 0x32}, @in6=@private1, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) getpriority(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x87, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13m8.699343371s ago: executing program 3 (id=2583): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 13m8.344468256s ago: executing program 3 (id=2585): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 13m7.323192467s ago: executing program 3 (id=2590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003001200850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r7 = syz_clone3(&(0x7f0000000400)={0xc0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x25}, &(0x7f0000000640)=""/4096, 0x1000, &(0x7f00000000c0)=""/45, 0x0}, 0x58) prlimit64(r7, 0x4, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x20002000000, 0x0) 13m3.356450083s ago: executing program 3 (id=2600): futex(&(0x7f0000000040), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x70) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0xb, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000580)='./file0/file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 13m2.220809108s ago: executing program 3 (id=2602): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmp(&(0x7f0000001c40), 0x1ff, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa00090582"], 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)="130b54fd3dd0f5c2973d73d467b390efea3e21652799730c4b87372e9db8dc74"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000001ff0100000000000000000000000000010000000e4e2000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000023070000000000000000000000000000000000000000000000feffffffffffffff020000000000000000000100000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xbb8) 13m1.652457094s ago: executing program 3 (id=2605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40900000000000061110300000000008510000002000000850000006600000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafb", 0xf}, {&(0x7f0000000440)="9c74df4d92d56ec64d0cb7607d58bb", 0xf}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) 13m0.858391531s ago: executing program 33 (id=2605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40900000000000061110300000000008510000002000000850000006600000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafb", 0xf}, {&(0x7f0000000440)="9c74df4d92d56ec64d0cb7607d58bb", 0xf}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) 13m0.709719837s ago: executing program 5 (id=2612): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@remote, @local, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000001ec0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x10, 0xc8, @any, 0x2, 0x7f, 0x9, 0x7, 0x5, 0x9}}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x10005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xc) clock_getres(0x6, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000000c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x4008084) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, r1, 0x1179}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xf}, {0x4, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x0, 0x1, 'BATMAN_IV'}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="6cbbfbf86d37"}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12m59.398696684s ago: executing program 5 (id=2614): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = shmget$private(0x0, 0x3000, 0x10, &(0x7f00005bc000/0x3000)=nil) shmat(r4, &(0x7f0000021000/0x2000)=nil, 0x1000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getcwd(&(0x7f0000000000)=""/48, 0x30) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$int_in(r0, 0x40000000af01, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010003", 0x7) eventfd(0x7f) 12m57.458106465s ago: executing program 5 (id=2619): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) pipe2(&(0x7f0000000040), 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040844) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1], 0x0) 12m55.776669793s ago: executing program 5 (id=2627): futex(&(0x7f0000000040), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x70) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0xb, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000580)='./file0/file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 12m54.22186138s ago: executing program 5 (id=2630): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 12m51.911802053s ago: executing program 5 (id=2634): socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x20000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (fail_nth: 6) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) 12m51.470981038s ago: executing program 34 (id=2634): socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x20000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (fail_nth: 6) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) 40.143214905s ago: executing program 0 (id=5504): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050006"], 0x48}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x50100) dup(r1) 39.951997646s ago: executing program 0 (id=5507): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x9, "ac7667", 0x1, 0x7}) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffc, 0x4}, 0x6) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 39.95136422s ago: executing program 2 (id=5508): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x84000100) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0xffff7fff, {{0xa, 0x4e23, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffa}}, {{0xa, 0x4e22, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6b}}}, 0x108) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0xcac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc6c, 0x2, [@TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_POLICE={0xc64, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10, 0x4, 0x7, 0x4, 0x8001, 0x6, 0x2, 0xfffffffe, 0xe022, 0x3, 0x5, 0x0, 0x7, 0x7, 0x8, 0xff, 0x8000, 0x8, 0xbc, 0x4, 0x0, 0x8, 0x4, 0x7, 0xffffffff, 0x9, 0x1, 0x4b69431d, 0x1, 0x7fffffff, 0x2, 0xc75, 0x2, 0x2, 0x3, 0xff, 0x6, 0x6, 0x0, 0x6, 0x84, 0x2, 0x3, 0x0, 0x7, 0x3, 0x1, 0x3746, 0x8000, 0xbe, 0xfffff57f, 0x4, 0x9, 0x7ff, 0x2, 0x7, 0x5, 0xfffffaa5, 0x8, 0x4, 0x2, 0xfffffff7, 0x5c3, 0x8, 0xd2c1, 0x1, 0xd9b, 0x9, 0x6, 0x10001, 0x70b, 0x6, 0xe, 0x7, 0x7, 0x8, 0x3, 0x1, 0x1c000, 0x5, 0x80000001, 0x77, 0xb, 0x1, 0xf3a3, 0xb, 0x80000000, 0xffffffff, 0x10, 0xffffff37, 0x2, 0x2000000, 0x7c6c, 0x216c355c, 0x81, 0x8, 0x10000, 0x7, 0x6, 0xa7a, 0xfff, 0xffffff80, 0x7, 0x8, 0x0, 0x6, 0xffffff01, 0x8000, 0x4, 0x8, 0x6e90, 0x6, 0xffa, 0xd, 0x7, 0x7, 0xfffffffa, 0xe338, 0x3ff, 0xffff2b0d, 0x1, 0x0, 0x9c29, 0x2, 0xdbe, 0x9, 0x6, 0x2, 0x7, 0x2, 0x0, 0x3, 0x8, 0x8, 0x7, 0x3ff, 0x9, 0x38, 0x0, 0x8, 0xfd07, 0x80000, 0x0, 0x6, 0x9, 0x800, 0x1, 0x8, 0x200, 0x7fffffff, 0x4, 0xbae9, 0x80000000, 0x7, 0xfffffc01, 0x4, 0xc, 0xfffffff9, 0x8, 0x3, 0x4, 0x3ad, 0xc5, 0x7, 0xff, 0xc4, 0x0, 0x5, 0x0, 0x8, 0x4, 0x25, 0xffffffff, 0x80000000, 0x2, 0x499, 0x2, 0x6, 0x80000001, 0x74a, 0x3, 0xad, 0x6, 0x9, 0x7c, 0x6, 0x0, 0x7ff, 0x10000, 0x3, 0x4f1d2a27, 0x4, 0xff, 0x7, 0x7ff, 0xd, 0x80000000, 0x2, 0x3, 0x1, 0x0, 0x0, 0x5, 0xc, 0x9, 0x1, 0x7, 0xfffffffd, 0x10, 0xfffffe01, 0x7b, 0xc642, 0x80000001, 0x8000, 0xe, 0x1, 0x0, 0x7b, 0x5, 0x7, 0x0, 0x2, 0x9, 0x7f, 0x8, 0x163ecc1d, 0x752c, 0x2, 0x6, 0x100, 0x4, 0x22a5, 0x1, 0x7ff, 0x4, 0x10000, 0x2, 0x5, 0x8, 0x6, 0x0, 0x8, 0x6dc, 0x4, 0xad, 0x24b8, 0x0, 0xf, 0x8000, 0x9, 0x8, 0x8, 0x0, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x9, 0x3, 0x10000, 0xb, 0xed9b, 0x8, 0x81, 0x81, 0x7, 0x9, 0xfffffffb, 0xc, 0x10000, 0x2, 0x3, 0x0, 0x6, 0xbcad, 0x7, 0x2, 0x0, 0x2, 0x1, 0xfffffffc, 0x200, 0x2, 0x400, 0x59, 0xfffffff4, 0xffffffc0, 0xc, 0x7, 0x2, 0xe52, 0x3, 0x7, 0x7ff, 0x4, 0x80, 0x10001, 0x8c0c799, 0x6, 0x3, 0x7, 0x7, 0x5, 0x8, 0x1c, 0x100, 0x7ff, 0xb93f, 0x9, 0x101, 0x100, 0x8000, 0x6, 0x9, 0x2, 0x5102, 0x416c, 0x6, 0x80000000, 0x2, 0x7, 0xf9, 0x2, 0x4, 0x1, 0x1, 0x3, 0x8, 0x80, 0x8, 0xf2, 0xfffffffa, 0x7f, 0x2, 0x8, 0x5, 0x7fff, 0x9, 0x1ff, 0xbbb6, 0x2, 0x6, 0x0, 0x3, 0x7, 0xffff, 0x8000, 0x9627, 0xff, 0x7, 0x2, 0x80000, 0x2, 0x3b60, 0x3, 0x8001, 0x6, 0x7fffffff, 0xb, 0xa2e, 0x6, 0x7, 0x1, 0x85, 0x9, 0x4, 0x5, 0x2, 0x5, 0x3ff, 0x0, 0x2cd3, 0xb31b2c91, 0x5, 0x2, 0x1, 0xd, 0x5, 0x4, 0xde, 0x10001, 0xede, 0x3, 0x400, 0x6, 0x7ff, 0x6, 0x6, 0xf, 0x1, 0x3, 0x3, 0x1, 0x1, 0x4, 0x4, 0x10000, 0x3, 0x9, 0x6, 0x1, 0x0, 0x9, 0x7ad, 0x4, 0x87, 0x4, 0xd8b, 0x6, 0x80000001, 0x80000001, 0x7fff, 0x4, 0x8, 0x7, 0x4249, 0x7, 0x3, 0x2, 0x3, 0x2, 0x6, 0xfffffff9, 0x7, 0x5, 0x0, 0x1, 0x7f, 0x9, 0x4, 0xfff, 0x8000, 0x8, 0x2, 0x8001, 0x7, 0x80000001, 0x10, 0x6, 0x6, 0x5b, 0x7f, 0x1, 0x1, 0x1, 0x52, 0x1625, 0xc9a3, 0x0, 0xff, 0xd, 0x0, 0xb10, 0xf, 0x74, 0x2, 0x7ff, 0xc, 0x0, 0x10000, 0x401, 0x3, 0x0, 0x80000000, 0x0, 0x1, 0x3, 0xffff, 0x3, 0x100, 0x5, 0xfffffffd, 0x4045, 0x9, 0x7, 0x2, 0x1, 0x9, 0xff, 0x9, 0x4, 0x3, 0x1, 0x100, 0x2, 0x10001, 0x3, 0x7fffffff, 0x1, 0xd7, 0x4, 0x3e, 0x0, 0x4, 0x5, 0x4, 0x2, 0x1, 0x5, 0x0, 0x4, 0x8, 0x7, 0x8, 0x8, 0x2, 0x7, 0x8000, 0x5, 0xf, 0x4, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x3, 0x6, 0xa8, 0xadf, 0x2000, 0x2a4bfa07, 0x9, 0x7, 0x5, 0x92f8, 0x3ff, 0x4, 0x1, 0x2, 0x0, 0x2, 0x6, 0x4, 0x3, 0x4, 0x9, 0x6, 0xed4, 0x5, 0x59, 0x2, 0x1400, 0x444, 0x80, 0x0, 0x0, 0x5, 0xe, 0x0, 0x2, 0x7, 0x6, 0xf5f, 0x8, 0x3, 0x30, 0x2000000, 0x3ff, 0xfff, 0x8, 0x9, 0x15, 0x4, 0xfff, 0x8, 0x7, 0xff, 0x3, 0x80000001, 0x9, 0x0, 0x93, 0x20a, 0xa, 0x0, 0x1000, 0x292, 0x7, 0x7, 0x8, 0x8000, 0xb1d, 0x5, 0x6, 0x7, 0x4, 0x4, 0x48ec, 0x2323614, 0x87000000, 0x10000, 0x5, 0x7, 0x971, 0x52, 0xfffffff8, 0x1, 0x2, 0x2, 0x0, 0x1, 0xff, 0x1, 0x8, 0x2, 0xa, 0x9, 0x151, 0x2, 0x8, 0x5, 0x7fff, 0x8, 0xfffffffd, 0x3, 0x9, 0xffffffa7, 0x7, 0x0, 0x8, 0x5, 0x4, 0x7, 0x5, 0xf98, 0x9, 0xff, 0x8, 0x0, 0x80000000, 0xcf1, 0x9, 0x8, 0xa, 0x0, 0x4ea, 0x3, 0x2, 0x28c7, 0x3, 0xb, 0x7, 0x0, 0x7, 0xa99, 0x3, 0x4, 0x6, 0x0, 0xf40, 0x9, 0x1cd, 0x6, 0x790, 0x8001, 0x6, 0xd, 0x7, 0x4, 0x3, 0x913e, 0x1, 0x1, 0x1, 0x18, 0x9, 0x0, 0xbb, 0xfff, 0x8, 0xffff5ec7, 0x4, 0xe1d, 0x2, 0x7, 0x0, 0x7, 0x5, 0xfff, 0xff, 0xa3, 0x4, 0xa760, 0x5, 0x4, 0x10, 0xbcb5, 0x28b8, 0x101, 0xfff, 0x7fffffff, 0x2, 0x37b1, 0xffffffff, 0x80000000, 0x127, 0x7, 0x8, 0xc, 0x4, 0x8909, 0x401, 0x1, 0x1000, 0x4, 0x7d1, 0x3, 0x6, 0x1, 0x6, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0x9, 0x6, 0x6, 0x84ef, 0x0, 0x7fff, 0x10, 0x9, 0x1, 0x4, 0x8000, 0xff, 0x3, 0x1000, 0x40, 0x8, 0x3, 0x7, 0xfff, 0x8001, 0xc7f, 0x3, 0x5, 0xffff516a, 0x3, 0x5, 0x1, 0x58, 0x3, 0x9, 0x5e, 0x80000001, 0x4, 0x3ff, 0x475, 0x3, 0x9, 0x7, 0xff18, 0x54bc, 0x5, 0x7, 0xfffffff8, 0x4, 0x0, 0x10001, 0x8, 0xffff, 0x1, 0x5, 0x4, 0x79, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x10000000, 0x6, 0xa34, 0x3, {0x9, 0x0, 0xa, 0x8, 0x1, 0x7}, {0x9, 0x2, 0x400, 0x6, 0x960f, 0x2}, 0x800, 0x2, 0x1}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_RATE={0x6, 0x5, {0x4b, 0x3}}]}, 0xcac}}, 0x24040084) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 39.845076918s ago: executing program 1 (id=5509): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_OPEN(r3, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x8}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77669e366f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x2010}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000b00)={'syz0\x00', {0x3, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c02, 0x6, 0x939, 0x5, 0x10009, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xbd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x6, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x5643049c, 0xffffffff, 0x0, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x7, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x9, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0xfffffffd, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3886, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x5, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x7, 0xffff, 0xe, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0xa0, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000ffffffff0000000000000000"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x5, 0x9fd, 0x5, 0x105, 0xffffffffffffffff, 0x800, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3be4, 0x9}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001209000000000000e3a300008520000001000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705007ac480097d000800000085000000a50000", @ANYRES32=r4, @ANYBLOB="000000003400000095000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1000, &(0x7f00000006c0)=""/4096, 0x32e0d43cb44489bc, 0x5, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x9, 0xa, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r8, r9, r10], &(0x7f00000004c0)=[{0x3, 0x4, 0x9, 0x2}, {0x2, 0x2, 0x3, 0xb}, {0x7, 0x5, 0xe, 0x2}, {0x1, 0x1, 0xe, 0x7}, {0x3, 0x5, 0xf, 0x2}, {0x0, 0x5, 0xb, 0xe}, {0x2, 0x1, 0x8, 0x6}, {0x5, 0x4, 0xd}], 0x10, 0x401, @void, @value}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000140)=0xf8) 39.788761624s ago: executing program 0 (id=5510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aa", 0xc3}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 39.715981876s ago: executing program 2 (id=5512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003001200850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r8 = syz_clone3(&(0x7f0000000400)={0xc0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x25}, &(0x7f0000000640)=""/4096, 0x1000, &(0x7f00000000c0)=""/45, 0x0}, 0x58) prlimit64(r8, 0x4, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x20002000000, 0x0) 39.463872795s ago: executing program 1 (id=5514): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) creat(&(0x7f00000001c0)='./bus\x00', 0x77) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000dc0), 0x23c80, 0x0) close_range(r1, r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_ima(&(0x7f0000000300)='./bus\x00', &(0x7f0000000180), &(0x7f0000000380)=ANY=[@ANYBLOB="7506"], 0x2, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f00000004c0)=""/114, &(0x7f0000000280)=0x72) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x3b, 0x2, 0x0, 0x0, "a6fd090f9ca7c0b3723a37b42f0cba593d7faa5033ca4e5aad408f6e536df0a0da5b6d020a51c34b43be62eb7996006ab9d0cc217d0c0853bfc296929b62e5b5"}, 0x48}, 0x2}, 0x810) 39.458155573s ago: executing program 0 (id=5515): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000018f9ab509c22ec000000000000311300"/43], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000400)='attr/fscreate\x00') socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000067000079102800000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) unshare(0x62040200) 37.943451599s ago: executing program 2 (id=5516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 37.937664273s ago: executing program 1 (id=5517): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020435581000000000000010902240001000000000904e200010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001640)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x2, 0x4000010) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'wm\x00'}, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {0x10, 0xa}, {0xfff2}}}, 0x24}}, 0x2000c044) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x40}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.735079902s ago: executing program 0 (id=5519): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100b}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 37.497935242s ago: executing program 2 (id=5522): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 36.938578361s ago: executing program 6 (id=5524): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 36.916429451s ago: executing program 1 (id=5525): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mount$afs(0x0, 0x0, 0x0, 0x700, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) syz_open_dev$vbi(&(0x7f0000000a80), 0x3, 0x2) 36.809439187s ago: executing program 2 (id=5526): syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0xb, 0x0, [@private=0xa010102, @local]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}]}]}}}}}}}, 0x0) 36.370737982s ago: executing program 6 (id=5528): syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0xb, 0x0, [@private=0xa010102, @local]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}]}]}}}}}}}, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0xad, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0x8, 0x8}}) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab0076af9722daa2675c7272bfda", 0xe}], 0x1, &(0x7f0000000f40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast1}}}, @ip_retopts={{0x12c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xe3, [@private=0xa010102, @private=0xa010102]}, @ssrr={0x89, 0x13, 0x86, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @ssrr={0x89, 0xf, 0x3f, [@local, @multicast2, @empty]}, @cipso={0x86, 0x5e, 0xfffffffffffffffe, [{0x5, 0x3, 'j'}, {0x1, 0x11, "37d290004048d85cfd7ce56ce30f6a"}, {0x0, 0xb, "0eac24af1f21af24da"}, {0x0, 0x5, "1add9e"}, {0x6, 0x7, "0089405124"}, {0x6, 0x11, "6839f3205f727974c6085a912f9e45"}, {0x5, 0x8, "a865c9e7b39d"}, {0x3, 0x7, "26e4357176"}, {0x6, 0xd, "e93acc164cad1929c6f353"}]}, @timestamp_prespec={0x44, 0x34, 0x8f, 0x3, 0xa, [{@rand_addr=0x64010101, 0x635c84fa}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0xa7}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@multicast1, 0x1}, {@multicast2, 0x800}]}, @rr={0x7, 0x7, 0xba, [@remote]}, @timestamp_prespec={0x44, 0x44, 0xe7, 0x3, 0x3, [{@broadcast, 0x3}, {@multicast2, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x1}, {@empty, 0x4}, {@multicast2, 0x3}, {@multicast1, 0x8001}, {@remote, 0xfffffffc}, {@local, 0x5}]}, @noop, @end, @ssrr={0x89, 0xf, 0xaf, [@dev={0xac, 0x14, 0x14, 0x32}, @loopback, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x3b, 0x1, [{0x0, 0xd, "85f692169c4fddfce2ff5e"}, {0x0, 0xb, "e9200b02b43b394ac0"}, {0x6, 0xf, "b0145223b48bcc30de03e1d9cd"}, {0x5, 0xe, "d5deac6aaaff97c21d52541e"}]}, @rr={0x7, 0xb, 0x52, [@dev={0xac, 0x14, 0x14, 0x24}, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@cipso={0x86, 0x24, 0x0, [{0x5, 0x6, "2c3f955e"}, {0x7, 0x5, "ec69d9"}, {0x5, 0x6, "a1bc38e3"}, {0x7, 0xd, "3921695e23d9529b20debe"}]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xc, "129811a9a10ee48f60f2"}, {0x5, 0xd, "fa5ab9a0a8295683584cc0"}, {0x7, 0x11, "45be2880a31eb6f19cac89bb13d4eb"}, {0x6, 0x4, "d34d"}, {0x0, 0x7, "9834cdc61f"}, {0x5, 0x3, "c2"}]}, @ssrr={0x89, 0x3, 0xf9}, @timestamp_addr={0x44, 0x34, 0x2a, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@loopback, 0x38000}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@loopback, 0x626}]}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0xc, [{@multicast1, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x2c8}}, {{&(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)="d9bafa589b462991362036364c989bdc8fc718dd6b05bb633f856498a8b3228700783827014be8cb03542ae2d701ef4e5f03434b1620c230a4bec5346e9720cdf3ee47595068a05a8c4b854dfa740abe0a5dce0263c7df9c6eff050bb2961e3de59891635cd5b7c81d0f74d7e0c6", 0x6e}], 0x1, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="d151fb60506f03bfc045703da92e815d4268998dc42f01637fde30c84e306c7e9ded7acc9a18311cda8a3e10db8aaf7fd7e57df7e6a814f71552c170fc04c226f5aa5eef8590308394d86e228505a7598ce7bd6bfb4e09519b7a203bfafed8c5a7dc1c8c9352628bd6af247a1fe684c5a93db3a64e7f43edd922f29ca3a21b8b2c43ee3022ffd108851afb63918d45c6887a490b6a03d3cff1b0ca696464a6c548150452265dd7b8b6b91aa80b3cb60d198e6f437679ef3512a59f41c3c708f2f00d5ea8585e9ba89705f6a0db709a5b346a8a0987cce1e4d40a1154", 0xdc}, {&(0x7f00000008c0)="ba6b3c7ab75234d43f465352562084d78e389ab404013f79d2fbb9182add24", 0x1f}, {&(0x7f0000000900)="99d0a111f2fd933d053547e6ce76e07ee0358bc042534229", 0x18}, {&(0x7f0000000940)="29a4883afeea91f0101c7bc2372e569916ae2bb13cc56e1dea5109cdc8634652e5c798099f070cc123baf61c7c2820aa71869df6f3bcc926375328f53fd79a17a16b1de778f57e6b8191116a986c30fa6bb9470a5a495d6ce28aa9fd16af1429b835f9823bc7fa546c85ace923a8178a11736d370bada72a9ed359e9f2d476119041e18cad05e78a54e03dcd67d2f36a6ad8da640c9a26164ce39a01e69fc164ddf3e911c161023353ed5d2807a3468d2116a98b67bd19c0040b2d068fa873cf5bd6c835a25efcc12abd032e7c70e7a11b46f78ac027a0ba3cb6cc7cf269da52cf59ab", 0xe3}], 0x4, &(0x7f0000000a80)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0xa, [@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @empty]}]}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x81, 0x0, 0x9, [0x80, 0x2, 0x8, 0x2, 0x2, 0xc, 0x101]}, @noop, @noop, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x7, 0x6, "cffc570e"}, {0x6, 0xf, "953a12e83baf15444522c95f50"}]}]}}}], 0x70}}, {{&(0x7f0000000b00)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b40)="e5f8d515f88513a6848855bff0b467b5d168b8bfe1fd807cc23be418148ed49a63e26a9d2cbbcf57eec160f6fc17389a6d746b71e3d95e", 0x37}, {&(0x7f0000000b80)="870dee69429e81402827ba69ae6e71b00b19e14a61b9924e740751b397da364afa3fe92f3da2d6ce56ee3cbfd513b2218b0b055da19d51afec6967c4fe8df4de46d94b06c20b3f", 0x47}], 0x2, &(0x7f0000000d00)=[@ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0x17, 0xe8, [@empty, @empty, @broadcast, @broadcast, @multicast2]}, @timestamp={0x44, 0xc, 0x6d, 0x0, 0x9, [0x6, 0x4]}, @timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0x7}, @noop, @cipso={0x86, 0x26, 0x2, [{0x7, 0x10, "abac8cc00a3649223bf890cba631"}, {0x0, 0xe, "47ff926be7cf5aaeb23fbafe"}, {0x6, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010100, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x44, 0x0, 0x8, [0x8, 0x100, 0x401]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xee, 0x0, 0x6, [0x8, 0x100, 0xfffffffa]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdbc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x118}}], 0x4, 0x4004) 35.4961744s ago: executing program 0 (id=5529): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000018f9ab509c22ec000000000000311300"/43], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000400)='attr/fscreate\x00') socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000067000079102800000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) unshare(0x62040200) 35.495670577s ago: executing program 2 (id=5530): syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0xec25, 0x2, 0x0, 0x113}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0xfffffffffffffca8}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)) 35.363076361s ago: executing program 1 (id=5531): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x21a, @private0, 0x6}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @sliced={0x6, [0x8, 0xc4, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x10, 0x3, 0x800, 0x7, 0x6, 0xfbff, 0x401, 0xa, 0xf, 0x6, 0x7, 0x7, 0x0, 0x8, 0x3, 0x4, 0x2, 0xe, 0x2, 0xfffb, 0x3, 0x800, 0x101, 0xdcc8, 0x1, 0x1, 0x1, 0x1, 0xc, 0x5, 0xd, 0x1d, 0x2, 0xc, 0xec1, 0x9, 0xfd, 0xfffa], 0xfffffff3}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x2010, 0xffffffffffffffff, 0xfd399000) r3 = syz_io_uring_setup(0x5dd3, &(0x7f0000000180)={0x0, 0x8e9b, 0x200, 0x2, 0x380, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000280)) fchownat(r0, &(0x7f00000002c0)='./file0\x00', r1, r2, 0x100) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000300)=0x4) sendto$phonet(r0, &(0x7f0000000340)="1d15e011ee5e32ae306c8a7dc2adefbb93fec0ab08516faf6e42e3dbf622b698c79f20a9883bb693422eae0b9adbcbedc644d66e0439991e165da0f0e5eda33bf78a5d4b5bdbf4704312e151a4bb45c9da8e647c0e99390b49ee7dc784800b36c1e0227dfc082c0ea8da0e8ed3358d52d9f65f2a33e326782c4d5162897438d33512baf60531", 0x86, 0x4000040, &(0x7f0000000400)={0x23, 0x3, 0x7, 0x9}, 0x10) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000440)={0x4, "3eedf086b392532d687f8d1d102e286f3d38b3487406c2bcc45c1dfc13c3e335", 0x3, 0xbcc, 0x10, 0x7fff, 0x1, 0x4, 0x3, 0x1ff}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x404000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x3, @sdr={0x0, 0x8000}}) syz_open_dev$cec(&(0x7f0000000640), 0x0, 0x2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x420000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000006c0)={0x8000, r5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x2f, 0xd, 0xf7, 0x6, 0x24, @private1, @mcast1, 0x8, 0x700, 0xfff, 0x3}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r4, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x1a, &(0x7f0000000700)=@raw=[@call={0x85, 0x0, 0x0, 0x2d}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0xa, 0x2, 0x0, r6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffe14}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8fb1, 0x0, 0x0, 0x0, 0x6}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xeb}, @ldst={0x1, 0x1d0a67341302d19e, 0x2, 0x0, 0x4, 0xfffffffffffffff0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000800)='syzkaller\x00', 0x6, 0x9d, &(0x7f0000000840)=""/157, 0x41100, 0x60, '\x00', r7, @fallback=0x4, r0, 0x8, &(0x7f00000009c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x4, 0x8, 0xfb9c}, 0x10, 0x0, r0, 0x1, &(0x7f0000000b00)=[r4, r8, r4, r4, r6, r6, r6, r4, r6, r0], &(0x7f0000000b40)=[{0x1, 0x5, 0xf, 0x4}], 0x10, 0x7, @void, @value}, 0x94) bind$can_raw(r4, &(0x7f0000000c40)={0x1d, r7}, 0x10) r9 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x4002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0xe0, 0x6, [{{0x9, 0x4, 0x0, 0x43, 0x2, 0x3, 0x1, 0x3, 0xf1, {0x9, 0x21, 0x4ba, 0x0, 0x1, {0x22, 0x1fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x9, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x88, 0xd6, 0xe}}]}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x0, 0x0, 0x8, 0x10, 0x15}, 0x9c, &(0x7f0000000d00)={0x5, 0xf, 0x9c, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x18000, 0xf0f, 0x2, [0x1f80, 0xf0, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb, 0x6, 0xe, 0x8492, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x6a}, @generic={0x63, 0x10, 0x4, "ee82632e41d5f631c632363a537b3ff528ff613986d1809801827e3b5405c51d3f1cde20394530f2cefe551aeed3876ac931b18576c9cf4d65d7fc2cdee0f726e415ec08d68224ad6372ba4e8c4ac958ff4e477a3c90a92aa10b051909b2b21c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x2, 0x5}]}, 0x1, [{0xa0, &(0x7f0000000dc0)=@string={0xa0, 0x3, "a6626ac9f4d26b4acc9cf55b29857f399d3e716e94481f1723c69ad8e6c0b7f2e208af8ffed2cc1509aa24e9cb114c286716be83cf95e211bede6323c37691dc1f5ee133092bfc70741e75b6fe1a09e28d37a9ca3c101a446d7a5e1996291c3a3592a1d7b27514cfff83b31e00f668a7bbc445e11d9aadb80c4ed3d6aa1101d9ed1312ecd1f6b8c1576eb7227db288a53d3fcbe01bf643fd03e5819372fa"}}]}) syz_usb_control_io$hid(r9, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x40, 0x9, 0xaf, {0xaf, 0x23, "d7898ea137a40490da520bf28cc34b50cd542816466a3a9facb7af48b7aa69eff1dca38e631b610735044bcf901a5ed7a0857fc957e297cb10729a28feb651ac6d0dd69d10c1d5635da4cec18a793315ec6fc60b37d182db726349c6e337817fb56ebdd7dafb1e7e6a6012b3a4f7c0503224237436a4d1a7b837dbb67dc4bbec17b3157ed14adcdc395bcd303bd209db0a8916a29d2fbf552a3d3824ade3318aaa3f79e6ab90db59cf92696919"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xd501086d6d241235}}, &(0x7f0000000fc0)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0xc, "371a"}, @local=@item_4={0x3, 0x2, 0x0, "5173b655"}, @global=@item_012={0x1, 0x1, 0xf, ';'}, @main=@item_4={0x3, 0x0, 0xc, "df855039"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x481}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001080)={0x20, 0xc, 0x5, "5db63a3361"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001140)={0x20, 0x1, 0xde, "882a01f1735adee268e07f4651e36c08d64b50a69fda99b82a6901954123209ec7869f11440a037cf0b9fc477291d7980d9ee1785e291597819bdbdac0aac30274e0ac21c073d7e18cad3ab716d9e944628a599241e1eb902e410d84ef6063e982733499639119accf5659fbd1a983e11c92fd0537c1c0b6053df89daf571c4dcf05d7ed15086eb917daa8f5c5ee93ef9880c363defc9a8c69d032c686e8b5ab3829fcaead40e8a14003c39d755c8166bbf6ff7a14d8b74048b1fd3d7252c2b580ca50af3b01946950ac19e28fac14de019dfaa6459fa0af57c3c2823d9e"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0xfc}}) syz_open_dev$vim2m(&(0x7f00000012c0), 0x8, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001300)={{0x1, 0x1, 0x18, r5, {0xaaa, 0x7}}, './file0/file0\x00'}) ioctl$SNDCTL_DSP_GETODELAY(r10, 0x80045017, &(0x7f0000001340)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000001380)={0x3}, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r10, 0xc0505405, &(0x7f00000013c0)={{0x5704b2634981f9c7, 0x3, 0xfff, 0x2, 0x4}, 0x6, 0x93a7, 0x9}) open_tree(r0, &(0x7f0000001440)='./file0/file0\x00', 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x8) syz_genetlink_get_family_id$SEG6(&(0x7f0000001480), 0xffffffffffffffff) 35.346287252s ago: executing program 7 (id=5532): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{0x6, 0x6, 0xd, 0x446d, '\x00', 0x5}, 0x1, [0x1, 0x7ff, 0x80000001, 0x100000001, 0x6, 0x25, 0x8, 0x140, 0x8599, 0x1000000000000002, 0x0, 0x4, 0x7ff, 0x2, 0x6, 0x1, 0x2, 0x9, 0xff, 0x1f, 0x4, 0x2d8, 0x5, 0x9, 0x4, 0x4, 0x2, 0x2, 0x8, 0x5, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x53, 0x0, 0x8, 0x3, 0x0, 0x80, 0x2, 0x1, 0x6, 0x1, 0x0, 0x8001, 0x8, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0xfffffffffffffffc, 0x5, 0x2, 0x200b, 0x5, 0x0, 0x1, 0x0, 0x73ea, 0xfffffffffffffff8, 0xb9, 0x6, 0xa213, 0x101, 0x389, 0x8, 0x0, 0x8534, 0x7, 0x1ff, 0x2, 0x7, 0x1, 0x1, 0x0, 0x8000, 0x9, 0x2a2c, 0x8000000000000001, 0x25, 0x8, 0x8000, 0x51dc, 0x2, 0x0, 0x9, 0x4, 0xffffffffffffffff, 0x4, 0x6, 0x2, 0x4, 0x800, 0x4, 0x5513, 0x4, 0x41, 0x4, 0x664d, 0x2, 0x6, 0x4, 0xffffffffffffffff, 0x1, 0xa, 0x0, 0xff, 0xffffffffffffffb3, 0x8bff, 0xfffffffffffffffd, 0x0, 0x12c69cce, 0x5, 0xfe, 0x4, 0x3, 0x3039, 0x50, 0x2, 0xffffffffffffff4f, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000, 0x8000000000000001]}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 35.224114167s ago: executing program 6 (id=5533): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aa", 0xc3}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 35.046431338s ago: executing program 6 (id=5534): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="a4000000120000022abd7000fddbdf2529bd06054e244e220900000000000000010000807400000000000000070000000700000003000000", @ANYRES32=0x0, @ANYBLOB="ff00000025960000080000000500000057000100adf00c8ac3b831e70c5f70d7710b798f7daf273b16ece44f19050abe1ba11604bf293953932bd7ea86c9c5f9479ad65a17569419249ea4f7bb01b070327fbd4144a99e0f01569d46c3939c3a9405fe4fc3a21f12248a8a11df67961fe81ff8e400"], 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/5, 0x5}, &(0x7f0000001340)=0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x11) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 34.986156478s ago: executing program 7 (id=5535): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001800128008000100677265000c00028006000e000208"], 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nfc_llcp(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x27, 0x0, 0x1, 0x3, 0xbc, 0x9, "a8260447380447cfa44008e9c4ea8bf5b2fdd05cdb0e8433fa13b204ddcd421d88b44b38d7d9da611a74ecb922fcaae75aeeb8582bc32a6699638970103049", 0x2d}, 0x60, &(0x7f0000000540)=[{&(0x7f0000000240)="f50ea865d5fb319505809350e2fac3e9fa0da553339a4d77458f929541553d726c38683b7af94d98ec8c0c228e43da129f012218108003c198ebcd9fe3188907cb763f158f44dd8711f67826", 0x4c}, {&(0x7f00000002c0)="7f69c2d10c417558ec2e747a0a0957b43ba22eafd4b3e1546b7398394eb489b8da2b6a15eb06645f42ec595b286d7a2aedc4cb7192aad6d39cc9edab8a36a8d10ee1654be30007d928e1fadb1d9204070475c153a7f62c23d47cd46d55732d7256c59adaff278aafb23317eaa4691e28fc712c69085787cb6f", 0x79}, {&(0x7f0000000340)="82764e84647a9b59f73930388c505f2a18ff3ea278350b965b538290f5a2e706faaf2618b4b33b1a53501735b005b35510297587fc0d3844d34459460a3e2da69b75b32a3f88f70ab89b43bf3f0c1ac25371e23a291a41d6ecbef9ad2d5ad2a9dde7bdd8041e06f6c41a2e4c90948654dbf424b5f786bb893bfb88e1190aeaec055793fe9dbf01d80ba815cd04e4d889b63b0e41f6f7f576671b1ac9743c6d37b188bd820d19e7c1cd9db30c43c17da05c70f70130ee9eb29dbda0084a4a0a4267795199ba736216365683f6c7", 0xcd}, {&(0x7f0000000440)="286538139a9bb7eaabe725589d5651be91c8c81f5998b3e2be5e5434707cb6bbccd65787c674afbd2f46dc0fc72d782b274c0c9548908c073ab464d9fe5bed6ffb7bd0fda570ffdce1f1bf81ec4bde022251be82fee1c760a0b98f", 0x5b}, {&(0x7f00000004c0)="1dee6f25dd670a3884c6df71fa5307e5d8db7f266724fa4aad86ecf948a17e0f85fd4adb7e9cef2914edbdb56c9f9b4e904ebc6624e718f75c5f5ea0093184073433c451d477fa01c8ed51b3d3867853bfecee3f7d94c528d0b8c41a093a95dc23653b1b8fdff3ab6866ae06d9abd28577296cb1fff8", 0x76}], 0x5, 0x0, 0x0, 0x10}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1404, 0x300, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 34.532124256s ago: executing program 7 (id=5536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/32, 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/240, 0xf0}], 0x1}}], 0x2, 0x100, 0x0) (fail_nth: 2) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 34.41721419s ago: executing program 7 (id=5537): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/32, 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/240, 0xf0}], 0x1}}], 0x2, 0x100, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="248f3a00", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf2501000000100008800c00008008000a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 34.233155332s ago: executing program 6 (id=5538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/32, 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/240, 0xf0}], 0x1}}], 0x2, 0x100, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 34.096054082s ago: executing program 1 (id=5539): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg1\x00'}) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='gfs2meta\x00', 0x48, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/5, 0x5}, &(0x7f0000001340)=0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x11) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/246, 0xf6}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 34.083699513s ago: executing program 7 (id=5540): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x2a, 0xa, 0x3) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x4b4, 0x1f, 0x4, 0x70bd2c, 0x25dfdbfe, {0x10}, [@nested={0xf6, 0x1c, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @typed={0x8, 0x10f, 0x0, 0x0, @u32=0x7ff}, @typed={0x8, 0x131, 0x0, 0x0, @fd}, @generic="d18b221fb3f4ce36034c151fee267faa711b71ad6cb211fb95400430fc28b9d9bffbc9160995403331b9ab57d348c4b9dd9e4a1c810a69c064001adc863b02", @typed={0xb, 0x10, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0x8, 0xf6, 0x0, 0x0, @fd=r1}, @generic="d324f1d1946e62c4d821c5ae314a086a4484fecbb80ac73fe1d0bfde2c7d21b4f3e760454c664d016b0e61cb921caaffcfaa15b6d58c0f2084c511215274a5235616ff5b57c1d58174bc8e3000a99981732765068d1516f6096cd11a70c94d4b0d689b84d900550380ee9a738d545e6ae79ec60ecc44eca1a4fc57df2381d85c4def6d4d1845f4"]}, @nested={0xcb, 0x63, 0x0, 0x1, [@generic="4ec76ae709073dca584969875b86391d43abd1475ccbe946de9ad1880b5b7b58ea489de2fdfbe0f424ebdc4e90e8e2c85617abb556a7466243fb9a79051d3a25f5c8ac8c4d41c777aba48f2067a25eb8297909a00a90a77a8e8a60f785202e4b22f4ea8d798a4628bf8fdba8f0613fe7256c0c30e71b670770c8768636e77bc997689c0c4d1b812fdc7971998d07e231128fcea6402befe39b131f0e6315402c9075a08e75b3820f07ed88dbd3eea6100c145bae5861c633d9bf2ca6b59120d6df60a6ce29973e"]}, @generic="4ac043bd39eabb343d28080208322571a76cb173906832592ba019bc0b329480d3eea9c37807f9423c894d212b445923165678fc5d21901e81ce2f7fe389694e2754b1924a0d5064dbd891f80ba83a2e501f63d938ec6c7f482c2a4b280436e4824963cea2523eb03aec61109bd3541c75fc920166d6399808555877123378ff8cfdb3fb6964086feb86ba6884149228e0f2871b30d0969fa3ebc74028ffaae5c5f1ba6e41a7de5bb08d933ddf7d", @nested={0x20, 0x36, 0x0, 0x1, [@typed={0x5, 0x7d, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xaf}, @nested={0x4, 0xad}, @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @generic, @nested={0x4, 0x13b}]}, @generic="87268f39a439c894d8c988a91675d0547903cb0afc1aba7a1369a529b6fb1986b7f3d2ff74fc779324bebdc4bcdbdda937a87bb8e3fdcd0b638ffef345825a597f6e174d7dd1dd1f4f8178c80056b1cf55b46ac788537a217f4ba2de431911d5b22a20b8dcb9da06f2d68088b60fa2fdf24e8e4f70474f96905e6e3a6de8c3c16a8e4187ce148365baab539199820b052d544b7a66516d0f", @nested={0x174, 0xd0, 0x0, 0x1, [@generic="782d6188eaca6112b10a06611ddb030b24a5da3ca4b27e1a2d0dea0b63297104872f668845f4a4a61acabc79359d3f3f3bbf7314f8f9e06a54b35cbc000dfa84cf1b68b77c1e7a5d6f207b3ef118116f3f4460a7f65c0b655edb0070a7309278145572b9185e94b7e6ca381350bef7d5b186e41607a6021aaf02d737ab165ad9a35be56af605b948c45f2fc6e384489f03712a1534c5aa4c97aecb5048b48f1391552ed19768be1feb37ec7a554e78f34cfb755def2da9155704fb8f9871a3b24488b849874eaa10688ab842649eb0210e1306a70c928cbb4a9075eb9b110757698a8c1fdd80997ec70cd918", @typed={0x8, 0xf9, 0x0, 0x0, @fd=r0}, @typed={0xb, 0x63, 0x0, 0x0, @str='TIPCv2\x00'}, @nested={0x4, 0xcf}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}, @generic="8f473e2038bbe0bd07d71f1957b92d3006a348ababfacf617ef4fc7c944e441b3dcb1b6ebf547ebd47790855e56cf96059b94d9af5ee3a343b88678676d2cb00026b375638246125ff595626dae08ae26c6907fe073151e2da4ed30c4abcb726456bb1b2"]}]}, 0x4b4}}, 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f000000b500), r1) 34.000071984s ago: executing program 6 (id=5541): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "82f84cbe349c4abc", "0e5d23e3519731b5395c0eb4843f822e", "c02be723", "df1215a7d932f72d"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8724, 0x2) 26.183850567s ago: executing program 7 (id=5542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="01000100b67adc663f224d2436a3c6e7ceb23cafe52a2e7b3d8195872991280658f4c778633a352e897c"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 35 (id=5529): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000018f9ab509c22ec000000000000311300"/43], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000400)='attr/fscreate\x00') socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000067000079102800000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) unshare(0x62040200) kernel console output (not intermixed with test programs): k_lvl+0x189/0x250 [ 1206.623332][T18549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1206.623354][T18549] ? __pfx__printk+0x10/0x10 [ 1206.623384][T18549] ? __pfx___might_resched+0x10/0x10 [ 1206.623407][T18549] ? fs_reclaim_acquire+0x7d/0x100 [ 1206.623430][T18549] should_fail_ex+0x414/0x560 [ 1206.623466][T18549] should_failslab+0xa8/0x100 [ 1206.623493][T18549] __kmalloc_cache_noprof+0x70/0x3d0 [ 1206.623516][T18549] ? tty_register_device_attr+0x2d2/0x8f0 [ 1206.623540][T18549] tty_register_device_attr+0x2d2/0x8f0 [ 1206.623566][T18549] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1206.623596][T18549] ? tty_port_register_device+0x5a/0x100 [ 1206.623619][T18549] rfcomm_dev_ioctl+0x1788/0x1d40 [ 1206.623643][T18549] ? kasan_quarantine_put+0xdd/0x220 [ 1206.623664][T18549] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 1206.623688][T18549] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1206.623707][T18549] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1206.623727][T18549] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1206.623746][T18549] ? bt_sock_ioctl+0xe7/0x2d0 [ 1206.623775][T18549] sock_do_ioctl+0xd9/0x300 [ 1206.623802][T18549] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1206.623827][T18549] ? smk_tskacc+0x2fc/0x370 [ 1206.623855][T18549] ? smack_file_ioctl+0x24a/0x340 [ 1206.623882][T18549] sock_ioctl+0x576/0x790 [ 1206.623907][T18549] ? __pfx_sock_ioctl+0x10/0x10 [ 1206.623933][T18549] ? __fget_files+0x3a0/0x420 [ 1206.623956][T18549] ? __fget_files+0x2a/0x420 [ 1206.623983][T18549] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1206.624003][T18549] ? __pfx_sock_ioctl+0x10/0x10 [ 1206.624024][T18549] __se_sys_ioctl+0xf9/0x170 [ 1206.624047][T18549] do_syscall_64+0xf6/0x210 [ 1206.624068][T18549] ? clear_bhb_loop+0x45/0xa0 [ 1206.624090][T18549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.624106][T18549] RIP: 0033:0x7f26bbf8e969 [ 1206.624121][T18549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.624137][T18549] RSP: 002b:00007f26bce00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.624156][T18549] RAX: ffffffffffffffda RBX: 00007f26bc1b5fa0 RCX: 00007f26bbf8e969 [ 1206.624168][T18549] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000008 [ 1206.624179][T18549] RBP: 00007f26bce00090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.624190][T18549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.624200][T18549] R13: 0000000000000000 R14: 00007f26bc1b5fa0 R15: 00007ffd914049c8 [ 1206.624229][T18549] [ 1207.437599][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'. [ 1208.186363][T12451] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1209.986377][T12451] usb 7-1: Using ep0 maxpacket: 16 [ 1210.004064][T12451] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1210.017758][ T30] audit: type=1326 audit(1746743830.208:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.197926][T12451] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1210.235839][T12451] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1210.245022][T12451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.254687][ T30] audit: type=1326 audit(1746743830.208:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.300630][T12451] usb 7-1: config 0 descriptor?? [ 1210.336495][ T30] audit: type=1326 audit(1746743830.208:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.380993][T18590] FAULT_INJECTION: forcing a failure. [ 1210.380993][T18590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.394196][T18590] CPU: 0 UID: 0 PID: 18590 Comm: syz.1.3258 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1210.394219][T18590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1210.394229][T18590] Call Trace: [ 1210.394237][T18590] [ 1210.394245][T18590] dump_stack_lvl+0x189/0x250 [ 1210.394274][T18590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1210.394295][T18590] ? __pfx__printk+0x10/0x10 [ 1210.394330][T18590] should_fail_ex+0x414/0x560 [ 1210.394359][T18590] _copy_to_user+0x31/0xb0 [ 1210.394383][T18590] simple_read_from_buffer+0xe1/0x170 [ 1210.394410][T18590] proc_fail_nth_read+0x1df/0x250 [ 1210.394431][T18590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1210.394450][T18590] ? rw_verify_area+0x258/0x650 [ 1210.394470][T18590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1210.394488][T18590] vfs_read+0x1fd/0x980 [ 1210.394513][T18590] ? __pfx___mutex_lock+0x10/0x10 [ 1210.394531][T18590] ? __pfx_vfs_read+0x10/0x10 [ 1210.394552][T18590] ? __fget_files+0x2a/0x420 [ 1210.394579][T18590] ? __fget_files+0x3a0/0x420 [ 1210.394599][T18590] ? __fget_files+0x2a/0x420 [ 1210.394630][T18590] ksys_read+0x145/0x250 [ 1210.394648][T18590] ? __pfx_filldir+0x10/0x10 [ 1210.394669][T18590] ? __pfx_ksys_read+0x10/0x10 [ 1210.394693][T18590] ? do_syscall_64+0xba/0x210 [ 1210.394717][T18590] do_syscall_64+0xf6/0x210 [ 1210.394736][T18590] ? clear_bhb_loop+0x45/0xa0 [ 1210.394755][T18590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.394769][T18590] RIP: 0033:0x7fdc6058d37c [ 1210.394783][T18590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1210.394797][T18590] RSP: 002b:00007fdc613b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1210.394822][T18590] RAX: ffffffffffffffda RBX: 00007fdc607b5fa0 RCX: 00007fdc6058d37c [ 1210.394833][T18590] RDX: 000000000000000f RSI: 00007fdc613b20a0 RDI: 0000000000000005 [ 1210.394842][T18590] RBP: 00007fdc613b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.394851][T18590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.394861][T18590] R13: 0000000000000000 R14: 00007fdc607b5fa0 R15: 00007ffc001bd108 [ 1210.394888][T18590] [ 1210.612162][ T30] audit: type=1326 audit(1746743830.208:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.634059][ T30] audit: type=1326 audit(1746743830.208:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.655944][ T30] audit: type=1326 audit(1746743830.208:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.678484][ T30] audit: type=1326 audit(1746743830.208:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.782988][ T30] audit: type=1326 audit(1746743830.208:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.838112][T18594] overlayfs: failed to resolve './file0': -2 [ 1210.896567][ T30] audit: type=1326 audit(1746743830.208:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.896610][ T30] audit: type=1326 audit(1746743830.208:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18580 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1210.988865][T12451] hid (null): report_id 0 is invalid [ 1210.991975][T12451] kye 0003:0458:5019.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1210.992813][T12451] kye 0003:0458:5019.001E: report_id 0 is invalid [ 1210.992831][T12451] kye 0003:0458:5019.001E: item 0 0 1 8 parsing failed [ 1210.993553][T12451] kye 0003:0458:5019.001E: parse failed [ 1211.054542][T12451] kye 0003:0458:5019.001E: probe with driver kye failed with error -22 [ 1211.077501][T18595] netlink: zone id is out of range [ 1211.077501][T18596] netlink: zone id is out of range [ 1211.077517][T18596] netlink: zone id is out of range [ 1211.078810][T18596] netlink: zone id is out of range [ 1211.079622][T18596] netlink: zone id is out of range [ 1211.079634][T18596] netlink: zone id is out of range [ 1211.079635][T18595] netlink: zone id is out of range [ 1211.079993][T18595] netlink: zone id is out of range [ 1211.080002][T18595] netlink: zone id is out of range [ 1211.080068][T18596] netlink: zone id is out of range [ 1211.112520][T18600] 9pnet: Could not find request transport: xen [ 1211.258450][T12451] usb 7-1: USB disconnect, device number 27 [ 1212.567397][T18620] FAULT_INJECTION: forcing a failure. [ 1212.567397][T18620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.649048][T18622] FAULT_INJECTION: forcing a failure. [ 1212.649048][T18622] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.665043][T18622] CPU: 0 UID: 0 PID: 18622 Comm: syz.1.3267 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1212.665068][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1212.665077][T18622] Call Trace: [ 1212.665085][T18622] [ 1212.665093][T18622] dump_stack_lvl+0x189/0x250 [ 1212.665124][T18622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.665144][T18622] ? __pfx__printk+0x10/0x10 [ 1212.665171][T18622] ? __pfx___might_resched+0x10/0x10 [ 1212.665191][T18622] ? fs_reclaim_acquire+0x7d/0x100 [ 1212.665213][T18622] should_fail_ex+0x414/0x560 [ 1212.665241][T18622] should_failslab+0xa8/0x100 [ 1212.665267][T18622] __kmalloc_noprof+0xcb/0x4f0 [ 1212.665288][T18622] ? kernfs_fop_write_iter+0x158/0x4f0 [ 1212.665312][T18622] kernfs_fop_write_iter+0x158/0x4f0 [ 1212.665339][T18622] vfs_write+0x548/0xa90 [ 1212.665364][T18622] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1212.665386][T18622] ? __pfx_vfs_write+0x10/0x10 [ 1212.665417][T18622] ? __fget_files+0x2a/0x420 [ 1212.665449][T18622] ksys_write+0x145/0x250 [ 1212.665469][T18622] ? rcu_is_watching+0x15/0xb0 [ 1212.665491][T18622] ? __pfx_ksys_write+0x10/0x10 [ 1212.665512][T18622] ? do_syscall_64+0xba/0x210 [ 1212.665532][T18622] do_syscall_64+0xf6/0x210 [ 1212.665551][T18622] ? clear_bhb_loop+0x45/0xa0 [ 1212.665572][T18622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.665587][T18622] RIP: 0033:0x7fdc6058e969 [ 1212.665603][T18622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.665616][T18622] RSP: 002b:00007fdc613b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1212.665633][T18622] RAX: ffffffffffffffda RBX: 00007fdc607b5fa0 RCX: 00007fdc6058e969 [ 1212.665645][T18622] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 1212.665656][T18622] RBP: 00007fdc613b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.665667][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.665677][T18622] R13: 0000000000000000 R14: 00007fdc607b5fa0 R15: 00007ffc001bd108 [ 1212.665705][T18622] [ 1212.872018][T18620] CPU: 1 UID: 0 PID: 18620 Comm: syz.7.3266 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1212.872044][T18620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1212.872055][T18620] Call Trace: [ 1212.872064][T18620] [ 1212.872073][T18620] dump_stack_lvl+0x189/0x250 [ 1212.872095][T18620] ? __lock_acquire+0xaac/0xd20 [ 1212.872117][T18620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.872136][T18620] ? __pfx__printk+0x10/0x10 [ 1212.872157][T18620] ? __might_fault+0xb0/0x130 [ 1212.872189][T18620] should_fail_ex+0x414/0x560 [ 1212.872216][T18620] _copy_from_user+0x2d/0xb0 [ 1212.872237][T18620] ___sys_sendmsg+0x158/0x2a0 [ 1212.872260][T18620] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.872315][T18620] ? __fget_files+0x2a/0x420 [ 1212.872336][T18620] ? __fget_files+0x3a0/0x420 [ 1212.872367][T18620] __sys_sendmmsg+0x227/0x430 [ 1212.872402][T18620] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1212.872431][T18620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1212.872468][T18620] ? ksys_write+0x1f0/0x250 [ 1212.872487][T18620] ? rcu_is_watching+0x15/0xb0 [ 1212.872525][T18620] __x64_sys_sendmmsg+0xa0/0xc0 [ 1212.872547][T18620] do_syscall_64+0xf6/0x210 [ 1212.872567][T18620] ? clear_bhb_loop+0x45/0xa0 [ 1212.872589][T18620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.872605][T18620] RIP: 0033:0x7f966ad8e969 [ 1212.872620][T18620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.872636][T18620] RSP: 002b:00007f966bb6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1212.872654][T18620] RAX: ffffffffffffffda RBX: 00007f966afb5fa0 RCX: 00007f966ad8e969 [ 1212.872667][T18620] RDX: 0000000000000001 RSI: 0000200000006d80 RDI: 0000000000000003 [ 1212.872678][T18620] RBP: 00007f966bb6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.872689][T18620] R10: 0000000000040950 R11: 0000000000000246 R12: 0000000000000001 [ 1212.872699][T18620] R13: 0000000000000000 R14: 00007f966afb5fa0 R15: 00007ffdde0a2418 [ 1212.872726][T18620] [ 1213.246625][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1213.260572][T18625] FAULT_INJECTION: forcing a failure. [ 1213.260572][T18625] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.273327][T18625] CPU: 1 UID: 0 PID: 18625 Comm: syz.7.3270 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1213.273350][T18625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1213.273361][T18625] Call Trace: [ 1213.273368][T18625] [ 1213.273376][T18625] dump_stack_lvl+0x189/0x250 [ 1213.273403][T18625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1213.273424][T18625] ? __pfx__printk+0x10/0x10 [ 1213.273462][T18625] ? __pfx___might_resched+0x10/0x10 [ 1213.273483][T18625] ? fs_reclaim_acquire+0x7d/0x100 [ 1213.273506][T18625] should_fail_ex+0x414/0x560 [ 1213.273535][T18625] should_failslab+0xa8/0x100 [ 1213.273559][T18625] __kmalloc_noprof+0xcb/0x4f0 [ 1213.273579][T18625] ? kfree+0x4d/0x440 [ 1213.273597][T18625] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1213.273622][T18625] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1213.273644][T18625] ? tomoyo_domain+0xda/0x130 [ 1213.273668][T18625] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1213.273685][T18625] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1213.273705][T18625] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1213.273739][T18625] ? __lock_acquire+0xaac/0xd20 [ 1213.273777][T18625] ? __fget_files+0x2a/0x420 [ 1213.273804][T18625] ? __fget_files+0x3a0/0x420 [ 1213.273826][T18625] ? __fget_files+0x2a/0x420 [ 1213.273852][T18625] security_file_ioctl+0xcb/0x2d0 [ 1213.273873][T18625] __se_sys_ioctl+0x47/0x170 [ 1213.273895][T18625] do_syscall_64+0xf6/0x210 [ 1213.273916][T18625] ? clear_bhb_loop+0x45/0xa0 [ 1213.273937][T18625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.273953][T18625] RIP: 0033:0x7f966ad8e969 [ 1213.273968][T18625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.273982][T18625] RSP: 002b:00007f966bb6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.274000][T18625] RAX: ffffffffffffffda RBX: 00007f966afb5fa0 RCX: 00007f966ad8e969 [ 1213.274013][T18625] RDX: 0000200000002200 RSI: 00000000000089e3 RDI: 0000000000000004 [ 1213.274024][T18625] RBP: 00007f966bb6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.274035][T18625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.274046][T18625] R13: 0000000000000000 R14: 00007f966afb5fa0 R15: 00007ffdde0a2418 [ 1213.274075][T18625] [ 1213.274082][T18625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1213.396729][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1214.820259][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1214.828603][ T9] usb 7-1: config 0 has no interface number 0 [ 1214.842159][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1214.923097][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1214.942629][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.967073][ T9] usb 7-1: Product: syz [ 1214.971568][ T9] usb 7-1: Manufacturer: syz [ 1214.983321][ T9] usb 7-1: SerialNumber: syz [ 1215.022984][ T9] usb 7-1: config 0 descriptor?? [ 1215.858762][T18642] tipc: Enabled bearer , priority 0 [ 1216.099836][T18642] syzkaller0: entered promiscuous mode [ 1216.106518][T18642] syzkaller0: entered allmulticast mode [ 1216.114793][T18642] tipc: Resetting bearer [ 1216.262434][T18638] tipc: Resetting bearer [ 1217.504353][ T9] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1219.200964][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1219.208752][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1219.216445][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1219.243693][ T9] usb 7-1: USB disconnect, device number 28 [ 1220.019741][T18664] trusted_key: encrypted_key: keylen parameter is missing [ 1220.241892][T18666] FAULT_INJECTION: forcing a failure. [ 1220.241892][T18666] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.285589][T18666] CPU: 0 UID: 0 PID: 18666 Comm: syz.1.3279 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1220.285615][T18666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1220.285626][T18666] Call Trace: [ 1220.285634][T18666] [ 1220.285641][T18666] dump_stack_lvl+0x189/0x250 [ 1220.285671][T18666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1220.285693][T18666] ? __pfx__printk+0x10/0x10 [ 1220.285722][T18666] ? __pfx___might_resched+0x10/0x10 [ 1220.285744][T18666] ? fs_reclaim_acquire+0x7d/0x100 [ 1220.285767][T18666] should_fail_ex+0x414/0x560 [ 1220.285797][T18666] should_failslab+0xa8/0x100 [ 1220.285823][T18666] __kmalloc_noprof+0xcb/0x4f0 [ 1220.285843][T18666] ? kfree+0x4d/0x440 [ 1220.285862][T18666] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1220.285888][T18666] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1220.285910][T18666] ? tomoyo_domain+0xda/0x130 [ 1220.285936][T18666] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1220.285953][T18666] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1220.285979][T18666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1220.286014][T18666] ? __lock_acquire+0xaac/0xd20 [ 1220.286053][T18666] ? __fget_files+0x2a/0x420 [ 1220.286081][T18666] ? __fget_files+0x3a0/0x420 [ 1220.286102][T18666] ? __fget_files+0x2a/0x420 [ 1220.286128][T18666] security_file_ioctl+0xcb/0x2d0 [ 1220.286149][T18666] __se_sys_ioctl+0x47/0x170 [ 1220.286172][T18666] do_syscall_64+0xf6/0x210 [ 1220.286193][T18666] ? clear_bhb_loop+0x45/0xa0 [ 1220.286214][T18666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.286232][T18666] RIP: 0033:0x7fdc6058e969 [ 1220.286246][T18666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1220.286259][T18666] RSP: 002b:00007fdc613b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.286277][T18666] RAX: ffffffffffffffda RBX: 00007fdc607b5fa0 RCX: 00007fdc6058e969 [ 1220.286290][T18666] RDX: 00002000000014c0 RSI: 0000000040085112 RDI: 0000000000000003 [ 1220.286301][T18666] RBP: 00007fdc613b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.286312][T18666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.286321][T18666] R13: 0000000000000000 R14: 00007fdc607b5fa0 R15: 00007ffc001bd108 [ 1220.286349][T18666] [ 1220.518412][T18666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1220.805730][T18673] FAULT_INJECTION: forcing a failure. [ 1220.805730][T18673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.885759][T18673] CPU: 0 UID: 0 PID: 18673 Comm: syz.1.3281 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1220.885786][T18673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1220.885797][T18673] Call Trace: [ 1220.885804][T18673] [ 1220.885812][T18673] dump_stack_lvl+0x189/0x250 [ 1220.885842][T18673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1220.885864][T18673] ? __pfx__printk+0x10/0x10 [ 1220.885908][T18673] should_fail_ex+0x414/0x560 [ 1220.885938][T18673] _copy_to_user+0x31/0xb0 [ 1220.885961][T18673] simple_read_from_buffer+0xe1/0x170 [ 1220.885989][T18673] proc_fail_nth_read+0x1df/0x250 [ 1220.886010][T18673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1220.886029][T18673] ? rw_verify_area+0x258/0x650 [ 1220.886049][T18673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1220.886066][T18673] vfs_read+0x1fd/0x980 [ 1220.886092][T18673] ? __pfx___mutex_lock+0x10/0x10 [ 1220.886114][T18673] ? __pfx_vfs_read+0x10/0x10 [ 1220.886137][T18673] ? __fget_files+0x2a/0x420 [ 1220.886165][T18673] ? __fget_files+0x3a0/0x420 [ 1220.886185][T18673] ? __fget_files+0x2a/0x420 [ 1220.886213][T18673] ksys_read+0x145/0x250 [ 1220.886239][T18673] ? __pfx_ksys_read+0x10/0x10 [ 1220.886262][T18673] ? do_syscall_64+0xba/0x210 [ 1220.886285][T18673] do_syscall_64+0xf6/0x210 [ 1220.886304][T18673] ? clear_bhb_loop+0x45/0xa0 [ 1220.886325][T18673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.886342][T18673] RIP: 0033:0x7fdc6058d37c [ 1220.886358][T18673] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1220.886372][T18673] RSP: 002b:00007fdc61370030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1220.886390][T18673] RAX: ffffffffffffffda RBX: 00007fdc607b6160 RCX: 00007fdc6058d37c [ 1220.886401][T18673] RDX: 000000000000000f RSI: 00007fdc613700a0 RDI: 0000000000000005 [ 1220.886413][T18673] RBP: 00007fdc61370090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.886423][T18673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.886434][T18673] R13: 0000000000000001 R14: 00007fdc607b6160 R15: 00007ffc001bd108 [ 1220.886462][T18673] [ 1223.313019][T18594] net_ratelimit: 11 callbacks suppressed [ 1223.313033][T18594] Set syz1 is full, maxelem 65536 reached [ 1224.516511][T18683] misc userio: The device must be registered before sending interrupts [ 1224.614979][T18683] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3283'. [ 1224.717917][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 1225.492550][T18638] tipc: Disabling bearer [ 1225.948970][T18699] FAULT_INJECTION: forcing a failure. [ 1225.948970][T18699] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.971243][T18699] CPU: 1 UID: 0 PID: 18699 Comm: syz.1.3288 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1225.971268][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1225.971279][T18699] Call Trace: [ 1225.971287][T18699] [ 1225.971295][T18699] dump_stack_lvl+0x189/0x250 [ 1225.971322][T18699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1225.971391][T18699] ? __pfx__printk+0x10/0x10 [ 1225.971420][T18699] ? __pfx___might_resched+0x10/0x10 [ 1225.971449][T18699] should_fail_ex+0x414/0x560 [ 1225.971479][T18699] should_failslab+0xa8/0x100 [ 1225.971506][T18699] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1225.971530][T18699] ? __alloc_skb+0x112/0x2d0 [ 1225.971553][T18699] __alloc_skb+0x112/0x2d0 [ 1225.971577][T18699] tcp_stream_alloc_skb+0x3d/0x340 [ 1225.971604][T18699] tcp_sendmsg_locked+0xd2f/0x5030 [ 1225.971645][T18699] ? is_bpf_text_address+0x26/0x2b0 [ 1225.971698][T18699] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1225.971718][T18699] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1225.971741][T18699] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1225.971774][T18699] tcp_sendmsg+0x2f/0x50 [ 1225.971793][T18699] __sock_sendmsg+0xe5/0x270 [ 1225.971817][T18699] sock_write_iter+0x258/0x330 [ 1225.971841][T18699] ? __pfx_sock_write_iter+0x10/0x10 [ 1225.971873][T18699] ? bpf_lsm_file_permission+0x9/0x20 [ 1225.971889][T18699] ? security_file_permission+0x75/0x290 [ 1225.971914][T18699] vfs_write+0x548/0xa90 [ 1225.971939][T18699] ? __pfx_sock_write_iter+0x10/0x10 [ 1225.971961][T18699] ? __pfx_vfs_write+0x10/0x10 [ 1225.971994][T18699] ? __fget_files+0x2a/0x420 [ 1225.972027][T18699] ksys_write+0x145/0x250 [ 1225.972046][T18699] ? rcu_is_watching+0x15/0xb0 [ 1225.972082][T18699] ? __pfx_ksys_write+0x10/0x10 [ 1225.972111][T18699] ? do_syscall_64+0xba/0x210 [ 1225.972134][T18699] do_syscall_64+0xf6/0x210 [ 1225.972157][T18699] ? clear_bhb_loop+0x45/0xa0 [ 1225.972177][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.972193][T18699] RIP: 0033:0x7fdc6058e969 [ 1225.972213][T18699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.972227][T18699] RSP: 002b:00007fdc613b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1225.972245][T18699] RAX: ffffffffffffffda RBX: 00007fdc607b5fa0 RCX: 00007fdc6058e969 [ 1225.972258][T18699] RDX: 00000000fffffd9d RSI: 0000200000000200 RDI: 0000000000000003 [ 1225.972273][T18699] RBP: 00007fdc613b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.972284][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.972294][T18699] R13: 0000000000000000 R14: 00007fdc607b5fa0 R15: 00007ffc001bd108 [ 1225.972319][T18699] [ 1226.026409][T12691] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1226.418291][T12691] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 1226.436472][T12691] usb 7-1: config 0 has no interface number 0 [ 1226.443369][T12691] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1226.476431][T12691] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1226.496372][T12691] usb 7-1: config 0 interface 113 has no altsetting 0 [ 1226.518035][T12691] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1226.531695][T12691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.574337][T12691] usb 7-1: Product: syz [ 1226.579400][T12691] usb 7-1: Manufacturer: syz [ 1226.584022][T12691] usb 7-1: SerialNumber: syz [ 1226.601330][T12691] usb 7-1: config 0 descriptor?? [ 1226.614435][T18711] fuse: Unknown parameter 'f_5c$ .žú/0ª_º@`÷Žúßýkôdá+¥Àï`O¦P®T ¹ÞV’“M{Ddç­³cc†êgtñØßKäÚžX¡êéZ¡¢p6á—rÅ_Óo*DÒóiƒ-´HÚÍ‚ôïk)³Yoµ¥OIN›ŸÇ½í˜™' [ 1226.638784][T12691] pn533_usb 7-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1226.685549][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'. [ 1228.589207][T18731] tipc: Started in network mode [ 1228.594181][T18731] tipc: Node identity ba7a3c18e48c, cluster identity 4711 [ 1228.603293][T18731] tipc: Enabled bearer , priority 0 [ 1229.342207][T12451] usb 7-1: USB disconnect, device number 29 [ 1229.596375][ T24] tipc: Node number set to 1593195544 [ 1230.045567][T18731] syzkaller0: entered promiscuous mode [ 1230.051353][T18731] syzkaller0: entered allmulticast mode [ 1230.070384][T18731] tipc: Resetting bearer [ 1230.126707][T18728] tipc: Resetting bearer [ 1230.353752][T18746] FAULT_INJECTION: forcing a failure. [ 1230.353752][T18746] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.403488][T18746] CPU: 0 UID: 0 PID: 18746 Comm: syz.6.3301 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1230.403524][T18746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1230.403535][T18746] Call Trace: [ 1230.403542][T18746] [ 1230.403550][T18746] dump_stack_lvl+0x189/0x250 [ 1230.403580][T18746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.403606][T18746] ? __pfx__printk+0x10/0x10 [ 1230.403636][T18746] ? __pfx___might_resched+0x10/0x10 [ 1230.403658][T18746] ? fs_reclaim_acquire+0x7d/0x100 [ 1230.403680][T18746] should_fail_ex+0x414/0x560 [ 1230.403710][T18746] should_failslab+0xa8/0x100 [ 1230.403735][T18746] __kmalloc_cache_noprof+0x70/0x3d0 [ 1230.403761][T18746] ? sctp_datamsg_from_user+0x88/0xef0 [ 1230.403786][T18746] sctp_datamsg_from_user+0x88/0xef0 [ 1230.403803][T18746] ? __sk_mem_raise_allocated+0xb14/0x1300 [ 1230.403835][T18746] ? __sk_mem_schedule+0x7f/0xf0 [ 1230.403855][T18746] ? __genradix_ptr+0x1e1/0x220 [ 1230.403879][T18746] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 1230.403912][T18746] ? __lock_acquire+0xaac/0xd20 [ 1230.403946][T18746] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1230.403970][T18746] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1230.403993][T18746] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1230.404018][T18746] ? sctp_sendmsg_check_sflags+0x18d/0x2e0 [ 1230.404046][T18746] sctp_sendmsg+0x1941/0x2810 [ 1230.404077][T18746] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1230.404098][T18746] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1230.404123][T18746] ? __might_fault+0xb0/0x130 [ 1230.404159][T18746] ? sock_rps_record_flow+0x19/0x400 [ 1230.404183][T18746] ? inet_sendmsg+0x2f4/0x370 [ 1230.404202][T18746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1230.404223][T18746] __sock_sendmsg+0x19c/0x270 [ 1230.404251][T18746] sock_write_iter+0x258/0x330 [ 1230.404276][T18746] ? __pfx_sock_write_iter+0x10/0x10 [ 1230.404309][T18746] ? bpf_lsm_file_permission+0x9/0x20 [ 1230.404326][T18746] ? security_file_permission+0x75/0x290 [ 1230.404352][T18746] vfs_write+0x548/0xa90 [ 1230.404379][T18746] ? __pfx_sock_write_iter+0x10/0x10 [ 1230.404402][T18746] ? __pfx_vfs_write+0x10/0x10 [ 1230.404433][T18746] ? __fget_files+0x2a/0x420 [ 1230.404466][T18746] ksys_write+0x145/0x250 [ 1230.404486][T18746] ? rcu_is_watching+0x15/0xb0 [ 1230.404509][T18746] ? __pfx_ksys_write+0x10/0x10 [ 1230.404533][T18746] ? do_syscall_64+0xba/0x210 [ 1230.404557][T18746] do_syscall_64+0xf6/0x210 [ 1230.404577][T18746] ? clear_bhb_loop+0x45/0xa0 [ 1230.404603][T18746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.404619][T18746] RIP: 0033:0x7f95d638e969 [ 1230.404635][T18746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1230.404650][T18746] RSP: 002b:00007f95d41f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1230.404668][T18746] RAX: ffffffffffffffda RBX: 00007f95d65b5fa0 RCX: 00007f95d638e969 [ 1230.404681][T18746] RDX: 000000000000ffe0 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1230.404691][T18746] RBP: 00007f95d41f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.404702][T18746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.404712][T18746] R13: 0000000000000000 R14: 00007f95d65b5fa0 R15: 00007ffdaff1e768 [ 1230.404741][T18746] [ 1230.894027][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3303'. [ 1231.232867][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3304'. [ 1234.002273][T18765] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3307'. [ 1234.630853][T18728] tipc: Disabling bearer [ 1234.643208][T18748] netlink: 'syz.2.3303': attribute type 1 has an invalid length. [ 1235.076038][T18778] vxcan1: tx drop: invalid sa for name 0x0000000002000000 [ 1235.304094][T18781] vxcan1: tx drop: invalid sa for name 0x0000000002000000 [ 1236.466502][T16169] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1236.636861][T16169] usb 7-1: Using ep0 maxpacket: 32 [ 1237.111830][T16169] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1237.120380][T16169] usb 7-1: config 0 has no interface number 0 [ 1237.137060][T16169] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1237.148410][T16169] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1237.166407][T16169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.174834][T16169] usb 7-1: Product: syz [ 1237.186290][T16169] usb 7-1: Manufacturer: syz [ 1237.196505][T16169] usb 7-1: SerialNumber: syz [ 1237.209358][T16169] usb 7-1: config 0 descriptor?? [ 1237.335348][T18814] tipc: Enabling of bearer rejected, failed to enable media [ 1237.448644][T18796] loop2: detected capacity change from 0 to 7 [ 1237.503425][T18796] Dev loop2: unable to read RDB block 7 [ 1237.545327][T18796] loop2: unable to read partition table [ 1237.582176][T18796] loop2: partition table beyond EOD, truncated [ 1237.635851][T18796] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1237.673353][T16169] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1237.711415][T16169] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1237.747011][T16169] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1237.766395][T16169] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1237.805394][T16169] usb 7-1: USB disconnect, device number 30 [ 1238.264748][T18843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3330'. [ 1238.413796][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3332'. [ 1238.777363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.983736][T18849] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1239.252505][T18859] FAULT_INJECTION: forcing a failure. [ 1239.252505][T18859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.270189][T18859] CPU: 1 UID: 0 PID: 18859 Comm: syz.1.3336 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1239.270214][T18859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1239.270225][T18859] Call Trace: [ 1239.270232][T18859] [ 1239.270241][T18859] dump_stack_lvl+0x189/0x250 [ 1239.270267][T18859] ? __lock_acquire+0xaac/0xd20 [ 1239.270291][T18859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.270312][T18859] ? __pfx__printk+0x10/0x10 [ 1239.270336][T18859] ? __might_fault+0xb0/0x130 [ 1239.270371][T18859] should_fail_ex+0x414/0x560 [ 1239.270400][T18859] _copy_from_user+0x2d/0xb0 [ 1239.270422][T18859] ___sys_sendmsg+0x158/0x2a0 [ 1239.270445][T18859] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.270504][T18859] ? __fget_files+0x2a/0x420 [ 1239.270525][T18859] ? __fget_files+0x3a0/0x420 [ 1239.270558][T18859] __x64_sys_sendmsg+0x19b/0x260 [ 1239.270580][T18859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1239.270616][T18859] ? do_syscall_64+0xba/0x210 [ 1239.270639][T18859] do_syscall_64+0xf6/0x210 [ 1239.270658][T18859] ? clear_bhb_loop+0x45/0xa0 [ 1239.270679][T18859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.270700][T18859] RIP: 0033:0x7fdc6058e969 [ 1239.270716][T18859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.270731][T18859] RSP: 002b:00007fdc613b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.270749][T18859] RAX: ffffffffffffffda RBX: 00007fdc607b5fa0 RCX: 00007fdc6058e969 [ 1239.270762][T18859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1239.270773][T18859] RBP: 00007fdc613b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.270784][T18859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.270794][T18859] R13: 0000000000000000 R14: 00007fdc607b5fa0 R15: 00007ffc001bd108 [ 1239.270823][T18859] [ 1239.603747][T18863] 9pnet_fd: Insufficient options for proto=fd [ 1239.709056][T18869] FAULT_INJECTION: forcing a failure. [ 1239.709056][T18869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.736376][T18869] CPU: 1 UID: 0 PID: 18869 Comm: syz.1.3340 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1239.736400][T18869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1239.736410][T18869] Call Trace: [ 1239.736417][T18869] [ 1239.736424][T18869] dump_stack_lvl+0x189/0x250 [ 1239.736448][T18869] ? __lock_acquire+0xaac/0xd20 [ 1239.736471][T18869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.736491][T18869] ? __pfx__printk+0x10/0x10 [ 1239.736514][T18869] ? __might_fault+0xb0/0x130 [ 1239.736546][T18869] should_fail_ex+0x414/0x560 [ 1239.736575][T18869] _copy_from_user+0x2d/0xb0 [ 1239.736596][T18869] __sys_sendto+0x25c/0x520 [ 1239.736615][T18869] ? __pfx___sys_sendto+0x10/0x10 [ 1239.736631][T18869] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1239.736664][T18869] ? __fget_files+0x3a0/0x420 [ 1239.736698][T18869] ? ksys_write+0x1f0/0x250 [ 1239.736717][T18869] ? rcu_is_watching+0x15/0xb0 [ 1239.736747][T18869] __x64_sys_sendto+0xde/0x100 [ 1239.736769][T18869] do_syscall_64+0xf6/0x210 [ 1239.736790][T18869] ? clear_bhb_loop+0x45/0xa0 [ 1239.736811][T18869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.736827][T18869] RIP: 0033:0x7fdc6058e969 [ 1239.736842][T18869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.736865][T18869] RSP: 002b:00007fdc613b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1239.736884][T18869] RAX: ffffffffffffffda RBX: 00007fdc607b5fa0 RCX: 00007fdc6058e969 [ 1239.736898][T18869] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1239.736909][T18869] RBP: 00007fdc613b2090 R08: 000020000005ffe4 R09: 000000000000001c [ 1239.736921][T18869] R10: 000000000000cc03 R11: 0000000000000246 R12: 0000000000000001 [ 1239.736932][T18869] R13: 0000000000000000 R14: 00007fdc607b5fa0 R15: 00007ffc001bd108 [ 1239.736960][T18869] [ 1240.017692][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 1241.587926][T18890] NILFS (nullb0): couldn't find nilfs on the device [ 1242.225797][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 1242.886544][T18902] tipc: Enabling of bearer rejected, failed to enable media [ 1243.644342][T18910] FAULT_INJECTION: forcing a failure. [ 1243.644342][T18910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.658398][T18910] CPU: 1 UID: 0 PID: 18910 Comm: syz.1.3352 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1243.658423][T18910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1243.658430][T18910] Call Trace: [ 1243.658434][T18910] [ 1243.658439][T18910] dump_stack_lvl+0x189/0x250 [ 1243.658458][T18910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1243.658471][T18910] ? __pfx__printk+0x10/0x10 [ 1243.658493][T18910] should_fail_ex+0x414/0x560 [ 1243.658510][T18910] strncpy_from_user+0x36/0x290 [ 1243.658527][T18910] keyctl_restrict_keyring+0xc7/0x210 [ 1243.658538][T18910] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 1243.658556][T18910] __se_sys_keyctl+0x314/0x910 [ 1243.658568][T18910] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1243.658580][T18910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1243.658595][T18910] ? __fget_files+0x3a0/0x420 [ 1243.658613][T18910] ? fput+0xa0/0xd0 [ 1243.658623][T18910] ? ksys_write+0x1f0/0x250 [ 1243.658640][T18910] ? do_syscall_64+0xba/0x210 [ 1243.658651][T18910] ? __x64_sys_keyctl+0x20/0xc0 [ 1243.658663][T18910] do_syscall_64+0xf6/0x210 [ 1243.658674][T18910] ? clear_bhb_loop+0x45/0xa0 [ 1243.658686][T18910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.658694][T18910] RIP: 0033:0x7fdc6058e969 [ 1243.658704][T18910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.658713][T18910] RSP: 002b:00007fdc61391038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1243.658724][T18910] RAX: ffffffffffffffda RBX: 00007fdc607b6080 RCX: 00007fdc6058e969 [ 1243.658731][T18910] RDX: 00002000000000c0 RSI: 00000000200a5b5c RDI: 000000000000001d [ 1243.658737][T18910] RBP: 00007fdc61391090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.658743][T18910] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 1243.658749][T18910] R13: 0000000000000000 R14: 00007fdc607b6080 R15: 00007ffc001bd108 [ 1243.658764][T18910] [ 1244.203355][T18914] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3351'. [ 1244.226974][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3351'. [ 1244.383645][T18922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1245.853272][T18956] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1245.866563][T18956] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1246.391834][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1247.616315][T12451] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1247.799199][T12451] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1247.891595][T12451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.100212][T12451] usb 7-1: config 0 descriptor?? [ 1248.128602][T12451] cp210x 7-1:0.0: cp210x converter detected [ 1248.736597][T12451] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1249.289180][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1249.312044][T19011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.364396][T19011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.606344][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1249.616431][ T24] usb 2-1: no configurations [ 1249.621118][ T24] usb 2-1: can't read configurations, error -22 [ 1249.806560][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1250.087940][T19019] FAULT_INJECTION: forcing a failure. [ 1250.087940][T19019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.119751][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1250.138100][ T24] usb 2-1: no configurations [ 1250.142888][T19019] CPU: 0 UID: 0 PID: 19019 Comm: syz.0.3382 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1250.142910][T19019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1250.142921][T19019] Call Trace: [ 1250.142929][T19019] [ 1250.142937][T19019] dump_stack_lvl+0x189/0x250 [ 1250.142959][T19019] ? __lock_acquire+0xaac/0xd20 [ 1250.142976][T19019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.142988][T19019] ? __pfx__printk+0x10/0x10 [ 1250.143006][T19019] ? __might_fault+0xb0/0x130 [ 1250.143037][T19019] should_fail_ex+0x414/0x560 [ 1250.143067][T19019] _copy_from_user+0x2d/0xb0 [ 1250.143089][T19019] ___sys_sendmsg+0x158/0x2a0 [ 1250.143108][T19019] ? __pfx____sys_sendmsg+0x10/0x10 [ 1250.143139][T19019] ? __fget_files+0x2a/0x420 [ 1250.143153][T19019] ? __fget_files+0x3a0/0x420 [ 1250.143179][T19019] __x64_sys_sendmsg+0x19b/0x260 [ 1250.143203][T19019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1250.143240][T19019] ? do_syscall_64+0xba/0x210 [ 1250.143258][T19019] do_syscall_64+0xf6/0x210 [ 1250.143269][T19019] ? clear_bhb_loop+0x45/0xa0 [ 1250.143281][T19019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.143290][T19019] RIP: 0033:0x7f094fd8e969 [ 1250.143300][T19019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.143308][T19019] RSP: 002b:00007f0950b88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.143325][T19019] RAX: ffffffffffffffda RBX: 00007f094ffb6080 RCX: 00007f094fd8e969 [ 1250.143338][T19019] RDX: 0000000020040010 RSI: 00002000000001c0 RDI: 0000000000000007 [ 1250.143349][T19019] RBP: 00007f0950b88090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.143360][T19019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.143371][T19019] R13: 0000000000000000 R14: 00007f094ffb6080 R15: 00007ffc753f77f8 [ 1250.143398][T19019] [ 1250.338018][ T24] usb 2-1: can't read configurations, error -22 [ 1250.394744][ T24] usb usb2-port1: attempt power cycle [ 1250.950902][ T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1250.977395][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1251.007923][ T24] usb 2-1: no configurations [ 1251.033060][ T24] usb 2-1: can't read configurations, error -22 [ 1251.080317][T19034] NILFS (nullb0): couldn't find nilfs on the device [ 1251.908649][T12451] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1251.934250][T12451] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1251.984132][T12451] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1252.179671][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'. [ 1253.475339][T12451] usb 7-1: USB disconnect, device number 31 [ 1253.501624][T12451] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1253.524773][T12451] cp210x 7-1:0.0: device disconnected [ 1254.276418][T19056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1254.282981][T19056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1254.329373][T19056] vhci_hcd vhci_hcd.0: Device attached [ 1254.481345][T19062] vhci_hcd: connection closed [ 1254.486346][T14033] vhci_hcd: stop threads [ 1254.495956][T14033] vhci_hcd: release socket [ 1254.516706][T14033] vhci_hcd: disconnect device [ 1255.048983][T12692] vhci_hcd: vhci_device speed not set [ 1255.662159][T19084] NILFS (nullb0): couldn't find nilfs on the device [ 1258.199294][T19096] tipc: Enabling of bearer rejected, failed to enable media [ 1258.712566][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1261.824245][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1261.824261][ T30] audit: type=1326 audit(1746743882.998:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19130 comm="syz.1.3415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x0 [ 1262.523405][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3418'. [ 1264.427446][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3420'. [ 1264.812755][T19150] tipc: Enabling of bearer rejected, failed to enable media [ 1265.372476][T19176] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3425'. [ 1266.275554][T19193] NILFS (nullb0): couldn't find nilfs on the device [ 1267.158597][T19200] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3430'. [ 1267.328489][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 1269.178775][T19232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1269.895750][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 1272.416422][T19251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3445'. [ 1273.136427][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 1274.818343][T19276] tipc: Enabling of bearer rejected, failed to enable media [ 1275.644501][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1275.662157][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 1277.432860][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1278.320399][T19310] NILFS (nullb0): couldn't find nilfs on the device [ 1278.706569][T12451] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1278.780310][T19321] tipc: Enabling of bearer rejected, failed to enable media [ 1278.868436][T12451] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 1278.880246][T12451] usb 7-1: config 0 has no interface number 0 [ 1278.888698][T12451] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1278.900927][T12451] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1278.921213][T12451] usb 7-1: config 0 interface 113 has no altsetting 0 [ 1278.948402][T12451] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1278.976360][T12451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.986018][T12451] usb 7-1: Product: syz [ 1278.992495][T12451] usb 7-1: Manufacturer: syz [ 1278.998190][T12451] usb 7-1: SerialNumber: syz [ 1279.010057][T12451] usb 7-1: config 0 descriptor?? [ 1279.021313][T12451] pn533_usb 7-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1279.839108][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3468'. [ 1281.859375][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3473'. [ 1282.080928][ T24] usb 7-1: USB disconnect, device number 32 [ 1282.978638][T19369] tipc: Enabling of bearer rejected, failed to enable media [ 1284.182967][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3481'. [ 1285.989841][T19419] NILFS (nullb0): couldn't find nilfs on the device [ 1287.234004][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 1287.560770][T19423] tipc: Enabled bearer , priority 0 [ 1288.019935][T19423] syzkaller0: entered promiscuous mode [ 1288.025485][T19423] syzkaller0: entered allmulticast mode [ 1288.033375][T19423] tipc: Resetting bearer [ 1288.934439][ T24] tipc: Node number set to 3595306626 [ 1288.998118][T19417] tipc: Resetting bearer [ 1290.568750][T19447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1292.994959][T19417] tipc: Disabling bearer [ 1293.011090][T19443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3496'. [ 1293.204922][T19462] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1293.559798][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3503'. [ 1295.680304][T19501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3513'. [ 1295.891175][T19506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1296.351464][T19507] tipc: Enabling of bearer rejected, failed to enable media [ 1298.274711][T19544] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3525'. [ 1298.738361][T19558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1299.952912][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3534'. [ 1300.194256][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.988676][T19614] FAULT_INJECTION: forcing a failure. [ 1301.988676][T19614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.024274][T19614] CPU: 1 UID: 0 PID: 19614 Comm: syz.0.3549 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1302.024300][T19614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1302.024311][T19614] Call Trace: [ 1302.024319][T19614] [ 1302.024327][T19614] dump_stack_lvl+0x189/0x250 [ 1302.024357][T19614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1302.024379][T19614] ? __pfx__printk+0x10/0x10 [ 1302.024406][T19614] ? rcu_read_lock_any_held+0xb3/0x120 [ 1302.024437][T19614] should_fail_ex+0x414/0x560 [ 1302.024467][T19614] strncpy_from_user+0x36/0x290 [ 1302.024494][T19614] __x64_sys_lgetxattr+0x153/0x210 [ 1302.024518][T19614] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 1302.024569][T19614] ? do_syscall_64+0xba/0x210 [ 1302.024593][T19614] do_syscall_64+0xf6/0x210 [ 1302.024613][T19614] ? clear_bhb_loop+0x45/0xa0 [ 1302.024634][T19614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.024651][T19614] RIP: 0033:0x7f094fd8e969 [ 1302.024666][T19614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.024682][T19614] RSP: 002b:00007f0950ba9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 1302.024700][T19614] RAX: ffffffffffffffda RBX: 00007f094ffb5fa0 RCX: 00007f094fd8e969 [ 1302.024713][T19614] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000200000000040 [ 1302.024725][T19614] RBP: 00007f0950ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.024735][T19614] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1302.024746][T19614] R13: 0000000000000000 R14: 00007f094ffb5fa0 R15: 00007ffc753f77f8 [ 1302.024773][T19614] [ 1302.854388][T19624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1303.344006][T19634] pim6reg1: entered promiscuous mode [ 1303.399544][T19634] pim6reg1: entered allmulticast mode [ 1303.496685][T19634] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3552'. [ 1303.907692][T19648] tipc: Enabling of bearer rejected, failed to enable media [ 1303.981869][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 1306.025622][T19683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3564'. [ 1307.419785][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3569'. [ 1308.234088][T19707] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1308.240641][T19707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1308.248401][T19707] vhci_hcd vhci_hcd.0: Device attached [ 1308.479656][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3570'. [ 1308.782872][ T24] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1309.130857][T19708] vhci_hcd: connection closed [ 1309.141739][ T7891] vhci_hcd: stop threads [ 1309.307445][ T7891] vhci_hcd: release socket [ 1309.379482][ T7891] vhci_hcd: disconnect device [ 1310.186986][T19731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3577'. [ 1312.014659][T19757] 9pnet_fd: Insufficient options for proto=fd [ 1312.505710][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3583'. [ 1313.504455][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1314.256488][ T24] vhci_hcd: vhci_device speed not set [ 1315.990491][T19812] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1315.998075][T19812] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1319.469932][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 1321.716212][ C0] hrtimer: interrupt took 36876 ns [ 1322.004247][T19892] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1322.015176][T19892] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1324.289052][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'. [ 1324.566379][T19919] netlink: ct family unspecified [ 1324.574003][T19919] openvswitch: netlink: Actions may not be safe on all matching packets [ 1324.611461][T19919] netlink: 'syz.7.3633': attribute type 21 has an invalid length. [ 1325.270029][T19931] input: syz0 as /devices/virtual/input/input76 [ 1327.636269][T19965] netlink: ct family unspecified [ 1327.641429][T19965] openvswitch: netlink: Actions may not be safe on all matching packets [ 1327.651187][T19965] netlink: 'syz.7.3647': attribute type 21 has an invalid length. [ 1327.867229][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3646'. [ 1329.323615][T19990] tipc: Can't bind to reserved service type 1 [ 1329.419208][T19994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1330.088771][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3656'. [ 1330.512735][T12691] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1331.076802][T20019] netlink: ct family unspecified [ 1331.081802][T20019] openvswitch: netlink: Actions may not be safe on all matching packets [ 1331.287377][T20019] netlink: 'syz.1.3660': attribute type 21 has an invalid length. [ 1331.734961][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3661'. [ 1331.887483][T12691] usb 7-1: too many configurations: 18, using maximum allowed: 8 [ 1332.092903][T12691] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1332.116320][T12691] usb 7-1: can't read configurations, error -61 [ 1332.910438][T12691] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1333.164628][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3667'. [ 1334.037474][T20059] FAULT_INJECTION: forcing a failure. [ 1334.037474][T20059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.101382][T20059] CPU: 1 UID: 0 PID: 20059 Comm: syz.0.3672 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1334.101408][T20059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1334.101419][T20059] Call Trace: [ 1334.101427][T20059] [ 1334.101435][T20059] dump_stack_lvl+0x189/0x250 [ 1334.101461][T20059] ? __lock_acquire+0xaac/0xd20 [ 1334.101484][T20059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1334.101506][T20059] ? __pfx__printk+0x10/0x10 [ 1334.101530][T20059] ? __might_fault+0xb0/0x130 [ 1334.101564][T20059] should_fail_ex+0x414/0x560 [ 1334.101592][T20059] _copy_from_user+0x2d/0xb0 [ 1334.101614][T20059] ___sys_sendmsg+0x158/0x2a0 [ 1334.101637][T20059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.101692][T20059] ? __fget_files+0x2a/0x420 [ 1334.101714][T20059] ? __fget_files+0x3a0/0x420 [ 1334.101746][T20059] __x64_sys_sendmsg+0x19b/0x260 [ 1334.101768][T20059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1334.101804][T20059] ? do_syscall_64+0xba/0x210 [ 1334.101826][T20059] do_syscall_64+0xf6/0x210 [ 1334.101845][T20059] ? clear_bhb_loop+0x45/0xa0 [ 1334.101865][T20059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.101881][T20059] RIP: 0033:0x7f094fd8e969 [ 1334.101896][T20059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1334.101910][T20059] RSP: 002b:00007f0950ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.101929][T20059] RAX: ffffffffffffffda RBX: 00007f094ffb5fa0 RCX: 00007f094fd8e969 [ 1334.101942][T20059] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 1334.101953][T20059] RBP: 00007f0950ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.101964][T20059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.101974][T20059] R13: 0000000000000000 R14: 00007f094ffb5fa0 R15: 00007ffc753f77f8 [ 1334.102001][T20059] [ 1334.296013][T20061] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1334.305868][T20061] veth0_vlan: entered allmulticast mode [ 1334.964811][T20068] netlink: ct family unspecified [ 1334.969877][T20068] openvswitch: netlink: Actions may not be safe on all matching packets [ 1334.979173][T20068] netlink: 'syz.2.3675': attribute type 21 has an invalid length. [ 1335.146553][T20083] tipc: Enabling of bearer rejected, failed to enable media [ 1335.221175][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3681'. [ 1335.230824][T20086] vlan0: entered promiscuous mode [ 1335.718867][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3682'. [ 1335.791715][T20102] veth0_vlan: entered allmulticast mode [ 1336.779580][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1336.883724][T20113] tipc: Enabling of bearer rejected, failed to enable media [ 1337.666503][T20121] netlink: ct family unspecified [ 1337.671559][T20121] openvswitch: netlink: Actions may not be safe on all matching packets [ 1337.680993][T20121] netlink: 'syz.1.3694': attribute type 21 has an invalid length. [ 1338.345115][T20143] veth0_vlan: left promiscuous mode [ 1338.351451][T20143] veth0_vlan: entered promiscuous mode [ 1338.398115][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1338.426440][T20145] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1338.458332][T20145] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1338.559982][T20147] tipc: Enabling of bearer rejected, failed to enable media [ 1338.696133][T20151] FAULT_INJECTION: forcing a failure. [ 1338.696133][T20151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.741109][T20151] CPU: 0 UID: 0 PID: 20151 Comm: syz.0.3704 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1338.741133][T20151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1338.741144][T20151] Call Trace: [ 1338.741151][T20151] [ 1338.741158][T20151] dump_stack_lvl+0x189/0x250 [ 1338.741188][T20151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1338.741208][T20151] ? __pfx__printk+0x10/0x10 [ 1338.741242][T20151] should_fail_ex+0x414/0x560 [ 1338.741270][T20151] _copy_to_user+0x31/0xb0 [ 1338.741290][T20151] simple_read_from_buffer+0xe1/0x170 [ 1338.741322][T20151] proc_fail_nth_read+0x1df/0x250 [ 1338.741338][T20151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.741356][T20151] ? rw_verify_area+0x258/0x650 [ 1338.741374][T20151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.741389][T20151] vfs_read+0x1fd/0x980 [ 1338.741404][T20151] ? do_readv+0x244/0x2d0 [ 1338.741424][T20151] ? __pfx_vfs_read+0x10/0x10 [ 1338.741444][T20151] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1338.741467][T20151] ? do_sys_openat2+0x154/0x1c0 [ 1338.741493][T20151] ksys_read+0x145/0x250 [ 1338.741515][T20151] ? __pfx_ksys_read+0x10/0x10 [ 1338.741538][T20151] ? do_syscall_64+0xba/0x210 [ 1338.741561][T20151] do_syscall_64+0xf6/0x210 [ 1338.741580][T20151] ? clear_bhb_loop+0x45/0xa0 [ 1338.741598][T20151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.741612][T20151] RIP: 0033:0x7f094fd8d37c [ 1338.741626][T20151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1338.741641][T20151] RSP: 002b:00007f0950ba9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1338.741659][T20151] RAX: ffffffffffffffda RBX: 00007f094ffb5fa0 RCX: 00007f094fd8d37c [ 1338.741671][T20151] RDX: 000000000000000f RSI: 00007f0950ba90a0 RDI: 0000000000000004 [ 1338.741682][T20151] RBP: 00007f0950ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.741691][T20151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.741700][T20151] R13: 0000000000000000 R14: 00007f094ffb5fa0 R15: 00007ffc753f77f8 [ 1338.741725][T20151] [ 1339.751812][T20168] netlink: ct family unspecified [ 1339.757108][T20168] openvswitch: netlink: Actions may not be safe on all matching packets [ 1339.766789][T20168] netlink: 'syz.1.3707': attribute type 21 has an invalid length. [ 1340.848052][T20173] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3710'. [ 1341.121969][T20183] tipc: Enabling of bearer rejected, failed to enable media [ 1342.189368][T20190] veth0_vlan: entered allmulticast mode [ 1343.212012][T20211] netlink: ct family unspecified [ 1343.217281][T20211] openvswitch: netlink: Actions may not be safe on all matching packets [ 1343.228881][T20211] netlink: 'syz.2.3720': attribute type 21 has an invalid length. [ 1344.734673][T20228] netlink: ct family unspecified [ 1344.739904][T20228] openvswitch: netlink: Actions may not be safe on all matching packets [ 1344.750159][T20228] netlink: 'syz.2.3724': attribute type 21 has an invalid length. [ 1345.335217][T20237] tipc: Enabling of bearer rejected, failed to enable media [ 1345.527781][T20239] tipc: Enabling of bearer rejected, failed to enable media [ 1347.109925][T20264] netlink: ct family unspecified [ 1347.114952][T20264] openvswitch: netlink: Actions may not be safe on all matching packets [ 1347.124522][T20264] netlink: 'syz.7.3738': attribute type 21 has an invalid length. [ 1347.280414][T20266] tipc: Enabling of bearer rejected, failed to enable media [ 1347.588890][T20280] tipc: Enabling of bearer rejected, failed to enable media [ 1350.377540][T20335] netlink: ct family unspecified [ 1350.382578][T20335] openvswitch: netlink: Actions may not be safe on all matching packets [ 1350.391718][T20335] netlink: 'syz.1.3756': attribute type 21 has an invalid length. [ 1350.429103][T20329] tipc: Enabling of bearer rejected, failed to enable media [ 1351.245135][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1352.701915][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1353.316785][T20359] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3765'. [ 1354.888435][T20386] netlink: ct family unspecified [ 1354.893423][T20386] openvswitch: netlink: Actions may not be safe on all matching packets [ 1354.902451][T20386] netlink: 'syz.0.3772': attribute type 21 has an invalid length. [ 1355.290991][T20379] tipc: Enabling of bearer rejected, failed to enable media [ 1355.708381][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1355.811162][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1356.536716][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1356.600642][T20418] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3782'. [ 1358.196281][T20439] netlink: ct family unspecified [ 1358.207080][T20440] netlink: 'syz.2.3787': attribute type 21 has an invalid length. [ 1358.252735][T20439] openvswitch: netlink: Actions may not be safe on all matching packets [ 1359.518784][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3791'. [ 1359.585707][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1361.154533][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 1361.651259][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.177048][T20488] netlink: ct family unspecified [ 1362.182292][T20488] openvswitch: netlink: Actions may not be safe on all matching packets [ 1362.192455][T20488] netlink: 'syz.7.3800': attribute type 21 has an invalid length. [ 1363.511603][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1364.547706][T20522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1366.176025][T20548] tipc: Enabling of bearer rejected, failed to enable media [ 1366.238391][T20550] tipc: Enabling of bearer rejected, failed to enable media [ 1366.551748][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3824'. [ 1366.953392][T20563] netlink: 'syz.6.3828': attribute type 12 has an invalid length. [ 1368.322804][ T30] audit: type=1326 audit(2000000073.000:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20582 comm="syz.2.3832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x37b60000 [ 1369.139114][T20591] tipc: Enabling of bearer rejected, failed to enable media [ 1369.792698][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3841'. [ 1374.678583][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3854'. [ 1375.806402][T20671] 9pnet_fd: Insufficient options for proto=fd [ 1376.773380][T20686] sctp: [Deprecated]: syz.6.3865 (pid 20686) Use of int in maxseg socket option. [ 1376.773380][T20686] Use struct sctp_assoc_value instead [ 1377.022999][T20690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1378.173452][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3870'. [ 1379.385068][T20727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3874'. [ 1380.249265][T20746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3881'. [ 1381.196784][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3886'. [ 1384.059131][T20806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3898'. [ 1385.212733][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3903'. [ 1387.053868][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'. [ 1387.447307][T20861] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3913'. [ 1388.866522][T13975] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1390.141128][T20903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3925'. [ 1390.206339][T20908] lo speed is unknown, defaulting to 1000 [ 1390.212545][T20908] lo speed is unknown, defaulting to 1000 [ 1390.305329][T20908] lo speed is unknown, defaulting to 1000 [ 1390.407098][T20908] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1390.543974][T20908] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1390.661696][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 1390.748850][T20908] lo speed is unknown, defaulting to 1000 [ 1390.783598][T20908] lo speed is unknown, defaulting to 1000 [ 1390.978071][T20908] lo speed is unknown, defaulting to 1000 [ 1391.019362][T20908] lo speed is unknown, defaulting to 1000 [ 1391.027268][T20908] lo speed is unknown, defaulting to 1000 [ 1391.109411][T20927] delete_channel: no stack [ 1391.301352][T20908] lo speed is unknown, defaulting to 1000 [ 1391.623426][T20908] lo speed is unknown, defaulting to 1000 [ 1392.731350][T20939] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3930'. [ 1393.446890][T20958] tipc: Enabling of bearer rejected, failed to enable media [ 1394.707468][T20979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1396.332790][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1398.994694][T21049] netlink: 'syz.6.3961': attribute type 21 has an invalid length. [ 1400.708202][T21073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 1401.233089][T21083] netlink: 'syz.7.3970': attribute type 1 has an invalid length. [ 1401.255635][T21083] overlay: ./bus is not a directory [ 1403.079116][T13975] Bluetooth: hci4: unexpected event 0x16 length: 7 > 6 [ 1404.261762][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3984'. [ 1408.467738][T21197] block device autoloading is deprecated and will be removed. [ 1410.226593][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1410.827787][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4025'. [ 1410.996381][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4025'. [ 1413.965632][T21315] netlink: 'syz.6.4038': attribute type 4 has an invalid length. [ 1413.974831][T21315] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4038'. [ 1414.604062][T21327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4043'. [ 1414.717886][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1416.752184][T21372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4057'. [ 1418.354569][ T30] audit: type=1326 audit(2000000123.030:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21397 comm="syz.2.4064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x0 [ 1420.160653][T21433] overlayfs: failed to clone upperpath [ 1421.689081][T21452] ERROR: device name not specified. [ 1423.527639][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.796618][T21454] Bluetooth: hci0: command tx timeout [ 1424.012061][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1424.354940][T21497] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1426.132599][T21523] dvmrp0: left allmulticast mode [ 1426.552566][ T30] audit: type=1804 audit(2000000131.230:264): pid=21531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4103" name="file0" dev="tmpfs" ino=1585 res=1 errno=0 [ 1427.738699][T21545] lo speed is unknown, defaulting to 1000 [ 1427.834350][T21548] netlink: 'syz.1.4110': attribute type 3 has an invalid length. [ 1427.842280][T21548] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1428.786502][T21575] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1428.831589][T21575] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 1428.843669][T21574] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1429.328146][T21599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4123'. [ 1430.248570][T21604] wireguard: wg2: Could not create IPv6 socket [ 1430.255424][T21604] wg2: entered promiscuous mode [ 1430.261423][T21604] wg2: entered allmulticast mode [ 1430.352726][T21619] veth0_vlan: entered allmulticast mode [ 1431.222741][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4133'. [ 1434.314269][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4143'. [ 1434.487712][T21669] openvswitch: netlink: Actions may not be safe on all matching packets [ 1434.684990][T21669] 9pnet_fd: Insufficient options for proto=fd [ 1435.290871][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4148'. [ 1435.393213][T21676] futex_wake_op: syz.7.4148 tries to shift op by 32; fix this program [ 1437.049571][ T30] audit: type=1326 audit(2000000141.720:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1437.102119][ T30] audit: type=1326 audit(2000000141.720:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1437.125320][ T30] audit: type=1326 audit(2000000141.730:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1437.165781][ T30] audit: type=1326 audit(2000000141.730:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1438.117974][ T30] audit: type=1326 audit(2000000141.760:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1438.139671][ T30] audit: type=1326 audit(2000000141.760:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1438.216645][ T30] audit: type=1326 audit(2000000141.760:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1438.314318][ T30] audit: type=1326 audit(2000000141.760:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1438.336421][ T30] audit: type=1326 audit(2000000141.760:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc6058e56b code=0x7ffc0000 [ 1438.358792][ T30] audit: type=1326 audit(2000000141.760:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21697 comm="syz.1.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1440.958766][T21743] 9pnet_fd: Insufficient options for proto=fd [ 1442.070174][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1442.070191][ T30] audit: type=1326 audit(2000000146.750:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1442.157915][ T30] audit: type=1326 audit(2000000146.750:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1442.187264][T21772] overlayfs: failed to clone lowerpath [ 1442.349979][ T30] audit: type=1326 audit(2000000146.750:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1442.374298][ T30] audit: type=1326 audit(2000000146.780:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1442.395923][ T30] audit: type=1326 audit(2000000146.780:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1442.975576][ T30] audit: type=1326 audit(2000000146.780:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1443.019229][ T30] audit: type=1326 audit(2000000146.800:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1443.111243][ T30] audit: type=1326 audit(2000000146.800:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1443.226280][ T30] audit: type=1326 audit(2000000146.800:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1443.299255][ T30] audit: type=1326 audit(2000000146.810:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21765 comm="syz.1.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdc6058e969 code=0x7ffc0000 [ 1443.353190][T21790] netlink: 'syz.7.4187': attribute type 9 has an invalid length. [ 1443.361037][T21790] netlink: 'syz.7.4187': attribute type 7 has an invalid length. [ 1443.368839][T21790] netlink: 'syz.7.4187': attribute type 8 has an invalid length. [ 1446.254277][T21812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.569430][T21865] overlayfs: failed to clone upperpath [ 1451.367321][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1455.826559][T21945] kAFS: unable to lookup cell 'sy@0' [ 1463.322876][T22053] PKCS7: Unknown OID: [5] (bad) [ 1463.331299][T22044] openvswitch: netlink: Message has 8 unknown bytes. [ 1463.339400][T22044] netlink: 'syz.0.4261': attribute type 21 has an invalid length. [ 1463.343853][T22053] PKCS7: Only support pkcs7_signedData type [ 1463.786468][T22063] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1463.823579][T22065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1464.203492][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4269'. [ 1464.252774][T22076] vlan3: entered allmulticast mode [ 1464.258005][T22076] gretap0: entered allmulticast mode [ 1465.086523][T22078] ip_vti0: entered promiscuous mode [ 1465.091951][T22078] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1466.627174][T22116] mac80211_hwsim hwsim24 : renamed from wlan1 (while UP) [ 1469.357623][T22205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1470.605203][T22220] lo speed is unknown, defaulting to 1000 [ 1471.293754][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1471.293771][ T30] audit: type=1326 audit(2000000175.970:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1471.348094][ T30] audit: type=1326 audit(2000000175.970:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1471.370657][ T30] audit: type=1326 audit(2000000175.970:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1471.406259][ T30] audit: type=1326 audit(2000000175.970:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1472.076252][ T30] audit: type=1326 audit(2000000176.030:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1472.121015][ T30] audit: type=1326 audit(2000000176.030:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1472.150377][ T30] audit: type=1326 audit(2000000176.030:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1472.172078][ T30] audit: type=1326 audit(2000000176.030:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f966ad8d2d0 code=0x7ffc0000 [ 1472.324697][ T30] audit: type=1326 audit(2000000176.030:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f966ad8d41f code=0x7ffc0000 [ 1472.431415][ T30] audit: type=1326 audit(2000000176.030:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22231 comm="syz.7.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f966ad8d41f code=0x7ffc0000 [ 1472.843516][T22266] tipc: Enabling of bearer rejected, failed to enable media [ 1472.963358][T22274] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4338'. [ 1473.786570][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1473.795449][T22291] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1474.941830][T22301] tipc: Enabling of bearer rejected, failed to enable media [ 1475.203915][T22308] x_tables: duplicate underflow at hook 1 [ 1475.387768][T22326] netlink: 'syz.7.4357': attribute type 21 has an invalid length. [ 1475.470531][T22326] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4357'. [ 1475.479832][T22326] netlink: 'syz.7.4357': attribute type 5 has an invalid length. [ 1475.489262][T22326] netlink: 'syz.7.4357': attribute type 6 has an invalid length. [ 1475.514971][T22326] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4357'. [ 1475.542209][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4357'. [ 1476.387174][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4364'. [ 1476.906923][T22364] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4366'. [ 1477.392172][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4356'. [ 1477.420961][T22359] tipc: Enabling of bearer rejected, failed to enable media [ 1479.341611][T22409] sctp: [Deprecated]: syz.0.4376 (pid 22409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1479.341611][T22409] Use struct sctp_sack_info instead [ 1479.830694][T22418] openvswitch: netlink: EtherType 0 is less than min 600 [ 1479.841646][T22418] netlink: 'syz.2.4380': attribute type 21 has an invalid length. [ 1480.152485][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4379'. [ 1480.580380][T22425] bridge1: entered promiscuous mode [ 1480.585651][T22425] bridge1: entered allmulticast mode [ 1481.199536][T22447] fuse: Bad value for 'fd' [ 1481.432207][T22452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4392'. [ 1483.100838][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1483.100854][ T30] audit: type=1326 audit(2000000187.770:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.235469][ T30] audit: type=1326 audit(2000000187.770:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.267800][ T30] audit: type=1326 audit(2000000187.770:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.409458][ T30] audit: type=1326 audit(2000000187.770:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.432899][ T30] audit: type=1326 audit(2000000187.770:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.726553][ T30] audit: type=1326 audit(2000000187.770:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.805936][ T30] audit: type=1326 audit(2000000187.770:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.912544][ T30] audit: type=1326 audit(2000000187.770:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.934265][ T30] audit: type=1326 audit(2000000187.770:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1483.979633][ T30] audit: type=1326 audit(2000000187.770:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22465 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x7ffc0000 [ 1484.028485][T22480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1484.537040][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.277458][T22562] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4430'. [ 1488.322665][T22562] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4430'. [ 1488.361444][T22568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 1488.436330][T22562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4430'. [ 1488.556943][T22572] fuse: Bad value for 'fd' [ 1492.423357][T22624] tipc: Enabling of bearer rejected, failed to enable media [ 1492.938381][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'. [ 1495.775907][T21454] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 1496.081634][T22667] fuse: Bad value for 'fd' [ 1500.046006][T22711] lo speed is unknown, defaulting to 1000 [ 1500.118820][T22717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1500.186490][T22717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1500.222682][T22717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1500.286254][T22717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1500.429234][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4483'. [ 1500.537308][T22732] tipc: Enabling of bearer rejected, failed to enable media [ 1500.792656][T22743] tipc: Enabling of bearer rejected, failed to enable media [ 1500.812738][T22747] 9pnet_fd: Insufficient options for proto=fd [ 1501.234094][T22765] 9pnet_fd: Insufficient options for proto=fd [ 1501.784289][T22761] mmap: syz.1.4496 (22761): VmData 37597184 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 1502.065016][T22776] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4500'. [ 1503.890705][T22829] overlayfs: failed to clone lowerpath [ 1506.713421][T22860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4529'. [ 1507.246222][T22886] 9pnet_fd: Insufficient options for proto=fd [ 1507.795244][T22891] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1507.885341][T22895] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1509.020469][T22927] netlink: ct family unspecified [ 1509.025604][T22927] openvswitch: netlink: Actions may not be safe on all matching packets [ 1509.036840][T22927] netlink: 'syz.6.4550': attribute type 21 has an invalid length. [ 1510.315680][T22938] netlink: 'syz.0.4555': attribute type 6 has an invalid length. [ 1511.775483][T22963] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20000 [ 1511.940741][T22963] veth0_to_bridge: entered promiscuous mode [ 1511.973734][T22963] macsec1: entered promiscuous mode [ 1511.996924][T22963] macsec1: entered allmulticast mode [ 1512.034228][T22963] veth0_to_bridge: entered allmulticast mode [ 1512.063598][T22963] veth0_to_bridge: left allmulticast mode [ 1512.083377][T22963] veth0_to_bridge: left promiscuous mode [ 1513.182875][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4568'. [ 1513.981804][T22988] tipc: Enabling of bearer rejected, failed to enable media [ 1514.300143][T23014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1514.321182][T23014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1514.332380][T23014] ipvlan2: entered promiscuous mode [ 1515.457148][T23035] tipc: Enabling of bearer rejected, failed to enable media [ 1515.630484][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1515.857703][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1516.439079][T23040] could not allocate digest TFM handle sha512-arm [ 1516.500419][T23050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.544198][T23052] tipc: Enabling of bearer rejected, failed to enable media [ 1516.725046][T23062] x_tables: duplicate underflow at hook 3 [ 1516.744402][T23062] netlink: 'syz.0.4594': attribute type 3 has an invalid length. [ 1516.766490][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1516.795349][T23062] netlink: 'syz.0.4594': attribute type 3 has an invalid length. [ 1516.798413][T23064] x_tables: duplicate underflow at hook 3 [ 1516.844024][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1516.903916][T23067] lo speed is unknown, defaulting to 1000 [ 1520.349601][T23122] sock: sock_timestamping_bind_phc: sock not bind to device [ 1520.733043][T23134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1522.264902][T23172] 9pnet_fd: Insufficient options for proto=fd [ 1523.333188][T23179] lo speed is unknown, defaulting to 1000 [ 1523.339047][T23179] lo speed is unknown, defaulting to 1000 [ 1523.345496][T23179] lo speed is unknown, defaulting to 1000 [ 1523.363854][T23179] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1523.577609][T23182] IPVS: stopping master sync thread 23183 ... [ 1523.584332][T23179] lo speed is unknown, defaulting to 1000 [ 1523.604905][T23179] lo speed is unknown, defaulting to 1000 [ 1523.689944][T23179] lo speed is unknown, defaulting to 1000 [ 1523.706677][T23179] lo speed is unknown, defaulting to 1000 [ 1523.728830][T23179] lo speed is unknown, defaulting to 1000 [ 1523.737800][T23179] lo speed is unknown, defaulting to 1000 [ 1523.746883][T23179] lo speed is unknown, defaulting to 1000 [ 1524.554423][T23189] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.624321][T23218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1527.729316][T23218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1527.750186][T23223] netlink: 'syz.6.4646': attribute type 3 has an invalid length. [ 1527.835572][T23214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1528.036672][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4639'. [ 1531.091382][T23267] lo speed is unknown, defaulting to 1000 [ 1531.120242][T23267] lo speed is unknown, defaulting to 1000 [ 1531.205605][T23272] tipc: Enabling of bearer rejected, failed to enable media [ 1531.514845][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1531.770255][T23291] delete_channel: no stack [ 1533.049190][T23310] netlink: ct family unspecified [ 1533.054326][T23310] openvswitch: netlink: Actions may not be safe on all matching packets [ 1534.290347][T23325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1534.475055][T23322] Smack: duplicate mount options [ 1534.898458][T23339] xt_policy: too many policy elements [ 1534.912116][T23339] netlink: 'syz.6.4680': attribute type 4 has an invalid length. [ 1538.100294][T23376] 9pnet_fd: Insufficient options for proto=fd [ 1538.228512][T23376] lo speed is unknown, defaulting to 1000 [ 1538.246357][T23376] lo speed is unknown, defaulting to 1000 [ 1539.029821][T23397] delete_channel: no stack [ 1539.051781][T23399] new mount options do not match the existing superblock, will be ignored [ 1539.522796][T23413] 9pnet_fd: Insufficient options for proto=fd [ 1539.531726][T23396] orangefs_mount: mount request failed with -4 [ 1539.942292][T23422] 9pnet_fd: Insufficient options for proto=fd [ 1540.061879][T23422] lo speed is unknown, defaulting to 1000 [ 1540.079973][T23422] lo speed is unknown, defaulting to 1000 [ 1544.041701][T23466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4717'. [ 1545.950156][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1545.950174][ T30] audit: type=1326 audit(2000000250.630:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23508 comm="syz.6.4729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95d638e969 code=0x0 [ 1546.111846][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4720'. [ 1546.129684][T23512] dvmrp0: entered allmulticast mode [ 1546.267876][T23514] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4730'. [ 1546.284199][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.903120][T23529] tipc: Enabling of bearer rejected, failed to enable media [ 1548.694698][T23565] tipc: Enabling of bearer rejected, failed to enable media [ 1550.719610][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4749'. [ 1551.137588][ T30] audit: type=1326 audit(2000000255.810:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.282387][ T30] audit: type=1326 audit(2000000255.840:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.305172][ T30] audit: type=1326 audit(2000000255.840:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.330532][ T30] audit: type=1326 audit(2000000255.840:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.352363][ T30] audit: type=1326 audit(2000000255.840:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.398327][ T30] audit: type=1326 audit(2000000255.840:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.445211][ T30] audit: type=1326 audit(2000000255.850:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.496487][ T30] audit: type=1326 audit(2000000255.850:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.539366][ T30] audit: type=1326 audit(2000000255.850:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.588103][ T30] audit: type=1326 audit(2000000255.850:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23601 comm="syz.1.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x7fc00000 [ 1551.877327][T23611] tipc: Enabling of bearer rejected, failed to enable media [ 1552.322962][T23621] netlink: 'syz.0.4761': attribute type 10 has an invalid length. [ 1552.724115][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4761'. [ 1553.286402][T23621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.297611][T23621] team0: Port device bond0 added [ 1553.571409][T23623] team0 (unregistering): Port device team_slave_0 removed [ 1553.584559][T23623] team0 (unregistering): Port device team_slave_1 removed [ 1553.601878][T23623] team0 (unregistering): Port device bond0 removed [ 1554.497346][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4769'. [ 1554.654029][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1555.322100][T23663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1555.564716][T23668] overlayfs: failed to clone upperpath [ 1555.591319][T23668] netlink: 'syz.1.4776': attribute type 5 has an invalid length. [ 1556.517962][T23677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4774'. [ 1556.621068][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1556.692642][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1557.104533][T23685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4780'. [ 1557.113646][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4780'. [ 1557.968815][T23700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1557.978169][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1557.997532][T23700] netlink: 'syz.2.4783': attribute type 15 has an invalid length. [ 1558.197101][T23718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1558.208702][T23719] fuse: Bad value for 'fd' [ 1558.272576][T23719] hsr0: entered promiscuous mode [ 1558.279202][T23717] hsr0: left promiscuous mode [ 1558.726292][T23730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4794'. [ 1559.252621][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4796'. [ 1560.350760][T23755] fuse: Bad value for 'fd' [ 1560.989991][T23766] netlink: 'syz.2.4807': attribute type 10 has an invalid length. [ 1561.075540][T23766] : (slave ): Enslaving as an active interface with an up link [ 1562.700487][T23796] 9pnet_fd: Insufficient options for proto=fd [ 1564.155988][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1564.272040][T23832] netlink: 268 bytes leftover after parsing attributes in process `syz.7.4832'. [ 1564.731243][T23849] tipc: Enabling of bearer rejected, failed to enable media [ 1565.544557][T23856] tipc: Enabling of bearer rejected, failed to enable media [ 1565.561266][T23857] tipc: Enabled bearer , priority 1 [ 1565.624462][T23857] tipc: Enabled bearer , priority 0 [ 1566.555898][T23888] tipc: Enabling of bearer rejected, failed to enable media [ 1567.195773][T23901] veth1_to_team: entered promiscuous mode [ 1567.231449][T23901] veth1_to_team: left promiscuous mode [ 1567.516421][T23902] Process accounting resumed [ 1571.027099][T23970] tipc: Enabling of bearer rejected, failed to enable media [ 1571.101635][T23972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4874'. [ 1572.343223][T23999] tipc: Enabling of bearer rejected, failed to enable media [ 1572.593188][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1573.569449][T24031] tipc: Enabling of bearer rejected, failed to enable media [ 1573.660523][T24039] netlink: 'syz.0.4899': attribute type 12 has an invalid length. [ 1574.042856][T24050] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1574.749547][T24066] tipc: Enabling of bearer rejected, failed to enable media [ 1576.179680][T24088] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4916'. [ 1576.767512][T24099] tipc: Enabling of bearer rejected, failed to enable media [ 1578.071237][T24119] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4927'. [ 1580.066411][T24154] overlayfs: failed to clone upperpath [ 1580.905722][T24163] xt_connbytes: Forcing CT accounting to be enabled [ 1580.913083][T24163] --map-set only usable from mangle table [ 1581.111570][T24168] x_tables: duplicate underflow at hook 2 [ 1581.488232][T24180] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4947'. [ 1581.519922][T24180] netlink: 157 bytes leftover after parsing attributes in process `syz.6.4947'. [ 1582.973909][T24199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4952'. [ 1583.621952][T24226] tipc: Enabling of bearer rejected, failed to enable media [ 1583.707238][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4960'. [ 1584.300357][T24239] lo speed is unknown, defaulting to 1000 [ 1584.403554][T24239] lo speed is unknown, defaulting to 1000 [ 1585.148347][T24253] overlayfs: failed to clone upperpath [ 1585.917968][T24268] tipc: Enabling of bearer rejected, failed to enable media [ 1586.103212][T24271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4977'. [ 1586.123458][T24274] netlink: 'syz.6.4978': attribute type 21 has an invalid length. [ 1586.132579][T24274] netlink: 'syz.6.4978': attribute type 1 has an invalid length. [ 1586.142438][T24274] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4978'. [ 1586.266635][T24275] netlink: 'syz.7.4976': attribute type 1 has an invalid length. [ 1588.040544][T24305] tipc: Enabling of bearer rejected, failed to enable media [ 1590.017743][T24344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4998'. [ 1590.944098][T24366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5003'. [ 1591.834071][T24378] 9pnet_fd: Insufficient options for proto=fd [ 1591.853304][T24378] MTD: Couldn't look up 'memory.events': -15 [ 1592.930454][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5016'. [ 1593.801561][T24420] netlink: ct family unspecified [ 1593.806866][T24420] openvswitch: netlink: Actions may not be safe on all matching packets [ 1593.818026][T24420] netlink: 'syz.1.5021': attribute type 21 has an invalid length. [ 1595.111174][ T30] kauditd_printk_skb: 1484 callbacks suppressed [ 1595.111192][ T30] audit: type=1326 audit(2000000300.028:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24437 comm="syz.2.5026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26bbf8e969 code=0x0 [ 1597.012154][T24457] overlayfs: failed to clone lowerpath [ 1597.057467][T24463] overlayfs: failed to clone upperpath [ 1597.088954][T24461] tipc: Enabling of bearer rejected, failed to enable media [ 1598.759565][T24500] tipc: Enabling of bearer rejected, failed to enable media [ 1598.822371][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1598.902281][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1598.912842][T24508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.947317][T24508] batadv_slave_0: entered promiscuous mode [ 1598.981838][T24508] batadv_slave_0: entered allmulticast mode [ 1599.031352][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.068470][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.307268][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.330513][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.364535][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.381907][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.394451][T24528] trusted_key: encrypted_key: master key parameter 't_usted:syz' is invalid [ 1599.478393][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.497531][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5049'. [ 1599.615881][T24528] 9pnet: Could not find request transport: ffdno=/>­‹»7P:è7 [ 1600.816658][T24549] geneve0: entered allmulticast mode [ 1601.008939][T24557] tipc: Enabling of bearer rejected, failed to enable media [ 1601.260995][ T30] audit: type=1326 audit(2000000306.211:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24563 comm="syz.1.5062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc6058e969 code=0x0 [ 1603.167798][ T30] audit: type=1326 audit(2000000308.118:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24589 comm="syz.6.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d638e969 code=0x7fc00000 [ 1603.341526][ T30] audit: type=1326 audit(2000000308.118:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24589 comm="syz.6.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f95d638e969 code=0x7fc00000 [ 1603.391598][T24605] geneve0: entered allmulticast mode [ 1603.411988][ T30] audit: type=1326 audit(2000000308.118:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24589 comm="syz.6.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d638e969 code=0x7fc00000 [ 1603.485013][ T30] audit: type=1326 audit(2000000308.118:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24589 comm="syz.6.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d638e969 code=0x7fc00000 [ 1604.509777][T24622] netdevsim netdevsim2: Direct firmware load for / [ 1604.509777][T24622] failed with error -2 [ 1604.530961][T24622] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 1604.530961][T24622] [ 1605.404979][T24642] overlayfs: failed to clone upperpath [ 1606.741752][T24667] __nla_validate_parse: 15 callbacks suppressed [ 1606.741799][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5092'. [ 1607.154772][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.272473][T24670] sctp: [Deprecated]: syz.6.5094 (pid 24670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1607.272473][T24670] Use struct sctp_sack_info instead [ 1607.986759][T24683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1609.659684][ T30] audit: type=1326 audit(2000000314.639:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24685 comm="syz.7.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7fc00000 [ 1610.665306][T24715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1610.779558][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5105'. [ 1613.256908][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 1614.127664][T24769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1614.136700][T24769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1614.145787][T24769] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1614.685449][T24779] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5128'. [ 1616.063759][T24792] geneve0: entered allmulticast mode [ 1616.686621][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5133'. [ 1617.812789][T24819] lo speed is unknown, defaulting to 1000 [ 1617.829529][T24819] lo speed is unknown, defaulting to 1000 [ 1618.398557][T24825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5141'. [ 1619.355482][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1619.374757][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1619.404643][T24847] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1619.515800][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 1619.584494][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1619.852641][T24847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1619.933139][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1621.804118][T24870] ceph: No mds server is up or the cluster is laggy [ 1622.402022][T20851] libceph: connect (1)[c::]:6789 error -97 [ 1622.408025][T20851] libceph: mon0 (1)[c::]:6789 connect error [ 1622.944635][ T5868] IPVS: starting estimator thread 0... [ 1622.955582][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5164'. [ 1622.970873][T24890] bond0: entered promiscuous mode [ 1622.976003][T24890] bond_slave_0: entered promiscuous mode [ 1622.996464][T24890] bond_slave_1: entered promiscuous mode [ 1623.003971][T24890] bond0: entered allmulticast mode [ 1623.028431][T24890] bond_slave_0: entered allmulticast mode [ 1623.045251][T24890] bond_slave_1: entered allmulticast mode [ 1623.059160][T24890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.135099][T24891] IPVS: using max 30 ests per chain, 72000 per kthread [ 1623.254016][T24899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5160'. [ 1625.953385][ T30] audit: type=1326 audit(2000000330.984:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24919 comm="syz.7.5173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966ad8e969 code=0x0 [ 1628.334393][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5180'. [ 1630.717794][T24976] lo speed is unknown, defaulting to 1000 [ 1630.733712][T24976] lo speed is unknown, defaulting to 1000 [ 1631.486877][T24988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5192'. [ 1631.709763][T24988] netlink: 'syz.7.5192': attribute type 5 has an invalid length. [ 1632.392587][T24988] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.401835][T24988] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.411073][T24988] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.420021][T24988] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.475884][T24988] vxlan0: entered promiscuous mode [ 1637.731786][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5205'. [ 1638.648728][T25070] netlink: 'syz.6.5217': attribute type 1 has an invalid length. [ 1639.245380][T25070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1639.305339][T25076] bond1: (slave dummy0): making interface the new active one [ 1639.319315][T25076] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1641.290566][T25115] sctp: [Deprecated]: syz.7.5230 (pid 25115) Use of int in max_burst socket option. [ 1641.290566][T25115] Use struct sctp_assoc_value instead [ 1641.381699][T25110] netlink: 'syz.7.5230': attribute type 21 has an invalid length. [ 1641.389892][T25110] netlink: 'syz.7.5230': attribute type 6 has an invalid length. [ 1641.397609][T25110] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5230'. [ 1641.911253][T25132] fuse: Unknown parameter '0x0000000000000005' [ 1642.998518][T25144] dvmrp0: left allmulticast mode [ 1643.054703][T25145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1645.118346][T25166] --map-set only usable from mangle table [ 1647.388022][T25197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5256'. [ 1649.951757][T25221] sctp: [Deprecated]: syz.2.5264 (pid 25221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1649.951757][T25221] Use struct sctp_sack_info instead [ 1652.562235][T25261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1654.711523][T25285] netlink: ct family unspecified [ 1654.716548][T25285] openvswitch: netlink: Actions may not be safe on all matching packets [ 1654.725338][T25285] netlink: 'syz.6.5283': attribute type 21 has an invalid length. [ 1655.572792][T25291] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1656.065655][T21454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1656.085915][T21454] CPU: 0 UID: 0 PID: 21454 Comm: kworker/u9:0 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1656.085942][T21454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1656.085955][T21454] Workqueue: hci5 hci_rx_work [ 1656.085982][T21454] Call Trace: [ 1656.085991][T21454] [ 1656.086001][T21454] dump_stack_lvl+0x189/0x250 [ 1656.086031][T21454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1656.086055][T21454] ? __pfx__printk+0x10/0x10 [ 1656.086082][T21454] ? kernfs_path_from_node+0x2b/0x260 [ 1656.086100][T21454] ? kernfs_path_from_node+0x2b/0x260 [ 1656.086115][T21454] ? kernfs_path_from_node+0x2b/0x260 [ 1656.086133][T21454] ? kernfs_path_from_node+0x216/0x260 [ 1656.086153][T21454] sysfs_create_dir_ns+0x259/0x280 [ 1656.086182][T21454] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1656.086208][T21454] ? kobject_add_internal+0x591/0xb40 [ 1656.086237][T21454] kobject_add_internal+0x59f/0xb40 [ 1656.086268][T21454] kobject_add+0x155/0x220 [ 1656.086295][T21454] ? __pfx_kobject_add+0x10/0x10 [ 1656.086318][T21454] ? _raw_spin_unlock+0x28/0x50 [ 1656.086340][T21454] ? get_device_parent+0x366/0x3a0 [ 1656.086364][T21454] device_add+0x408/0xb50 [ 1656.086388][T21454] hci_conn_add_sysfs+0xd5/0x1e0 [ 1656.086413][T21454] le_conn_complete_evt+0xc3a/0x1220 [ 1656.086458][T21454] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1656.086486][T21454] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1656.086506][T21454] ? __asan_memcpy+0x40/0x70 [ 1656.086529][T21454] ? __pfx___mutex_lock+0x10/0x10 [ 1656.086550][T21454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1656.086569][T21454] ? skb_pull_data+0xfb/0x200 [ 1656.086599][T21454] hci_le_conn_complete_evt+0x187/0x450 [ 1656.086639][T21454] hci_event_packet+0x7a2/0x1270 [ 1656.086667][T21454] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1656.086694][T21454] ? __pfx_hci_event_packet+0x10/0x10 [ 1656.086718][T21454] ? kcov_remote_start+0x4d3/0x7f0 [ 1656.086738][T21454] ? lockdep_hardirqs_on+0x20/0x150 [ 1656.086760][T21454] ? hci_send_to_monitor+0xd7/0x4f0 [ 1656.086790][T21454] hci_rx_work+0x46a/0xe80 [ 1656.086820][T21454] ? process_scheduled_works+0x9ec/0x17a0 [ 1656.086847][T21454] process_scheduled_works+0xadb/0x17a0 [ 1656.086902][T21454] ? __pfx_process_scheduled_works+0x10/0x10 [ 1656.086945][T21454] worker_thread+0x8a0/0xda0 [ 1656.086972][T21454] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1656.086999][T21454] ? __kthread_parkme+0x7b/0x200 [ 1656.087026][T21454] kthread+0x70e/0x8a0 [ 1656.087050][T21454] ? __pfx_worker_thread+0x10/0x10 [ 1656.087074][T21454] ? __pfx_kthread+0x10/0x10 [ 1656.087094][T21454] ? __pfx_kthread+0x10/0x10 [ 1656.087112][T21454] ? _raw_spin_unlock_irq+0x23/0x50 [ 1656.087129][T21454] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.087148][T21454] ? __pfx_kthread+0x10/0x10 [ 1656.087166][T21454] ret_from_fork+0x4b/0x80 [ 1656.087182][T21454] ? __pfx_kthread+0x10/0x10 [ 1656.087201][T21454] ret_from_fork_asm+0x1a/0x30 [ 1656.087244][T21454] [ 1656.087274][T21454] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1656.463140][T21454] Bluetooth: hci5: failed to register connection device [ 1658.680044][T25324] netlink: ct family unspecified [ 1658.685056][T25324] openvswitch: netlink: Actions may not be safe on all matching packets [ 1658.694343][T25324] netlink: 'syz.6.5296': attribute type 21 has an invalid length. [ 1660.358017][T25357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 1662.189330][T25378] tipc: Enabling of bearer rejected, failed to enable media [ 1662.508640][T25383] lo speed is unknown, defaulting to 1000 [ 1662.539786][T25383] lo speed is unknown, defaulting to 1000 [ 1664.742292][T25400] lo speed is unknown, defaulting to 1000 [ 1664.749613][T25400] lo speed is unknown, defaulting to 1000 [ 1664.829579][T25402] lo speed is unknown, defaulting to 1000 [ 1664.837006][T25402] lo speed is unknown, defaulting to 1000 [ 1664.970225][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5319'. [ 1668.224094][T25456] netlink: 'syz.0.5331': attribute type 6 has an invalid length. [ 1668.535999][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.160840][T25469] netlink: 'syz.0.5334': attribute type 1 has an invalid length. [ 1669.280522][T25469] bond1: entered promiscuous mode [ 1669.348746][T25469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1670.895766][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5344'. [ 1671.261042][T25508] lo speed is unknown, defaulting to 1000 [ 1671.268742][T25508] lo speed is unknown, defaulting to 1000 [ 1672.006366][T25516] IPVS: length: 4130 != 8 [ 1673.151112][T25535] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1673.166901][T25535] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1673.191191][T25535] veth0_to_bridge: entered allmulticast mode [ 1673.203879][T25535] veth0_to_bridge: entered promiscuous mode [ 1673.250320][T25535] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1673.284616][T25535] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1673.291898][T25535] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1674.503725][T25555] xt_connbytes: Forcing CT accounting to be enabled [ 1674.510684][T25555] --map-set only usable from mangle table [ 1674.832865][T25556] 9pnet_fd: Insufficient options for proto=fd [ 1676.389045][T25593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5369'. [ 1677.569416][T25613] overlayfs: failed to clone upperpath [ 1677.713382][T25618] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5383'. [ 1678.695039][ T30] audit: type=1326 audit(2000000383.791:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1678.778107][ T30] audit: type=1326 audit(2000000383.791:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1678.835617][T25640] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1678.848906][ T30] audit: type=1326 audit(2000000383.791:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1678.918053][ T30] audit: type=1326 audit(2000000383.791:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1678.983126][ T30] audit: type=1326 audit(2000000383.791:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1679.026688][T25644] atomic_op ffff88805b0e3998 conn xmit_atomic 0000000000000000 [ 1679.059752][ T30] audit: type=1326 audit(2000000383.791:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f966ad8d2d0 code=0x7ffc0000 [ 1679.109727][T25652] dummy0: entered promiscuous mode [ 1679.116156][T25652] dummy0: entered allmulticast mode [ 1679.131300][T25652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5397'. [ 1679.140778][T25652] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5397'. [ 1679.198575][ T30] audit: type=1326 audit(2000000383.791:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1679.262661][ T30] audit: type=1326 audit(2000000383.791:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1679.336516][ T30] audit: type=1326 audit(2000000383.791:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1679.492595][ T30] audit: type=1326 audit(2000000383.791:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25632 comm="syz.7.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f966ad8e969 code=0x7ffc0000 [ 1680.364080][T25679] overlayfs: failed to clone upperpath [ 1680.669906][T25689] overlayfs: failed to clone upperpath [ 1682.136659][T25706] 9pnet_fd: Insufficient options for proto=fd [ 1682.455100][T25719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5420'. [ 1684.669441][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5431'. [ 1685.170916][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5433'. [ 1685.221080][T25765] dvmrp0: entered allmulticast mode [ 1685.640965][T25766] fuse: Bad value for 'rootmode' [ 1686.110818][T25774] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5435'. [ 1688.284149][T25816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5447'. [ 1688.727492][T13975] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 1690.034844][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1691.847710][T25875] netlink: 'syz.0.5466': attribute type 1 has an invalid length. [ 1692.408581][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1692.489952][T25888] lo speed is unknown, defaulting to 1000 [ 1692.497833][T25888] lo speed is unknown, defaulting to 1000 [ 1695.521964][T25930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5483'. [ 1695.809779][T25936] lo speed is unknown, defaulting to 1000 [ 1695.817014][T25936] lo speed is unknown, defaulting to 1000 [ 1698.536051][T25980] netlink: 'syz.2.5501': attribute type 1 has an invalid length. [ 1698.630652][T25981] lo speed is unknown, defaulting to 1000 [ 1698.638128][T25981] lo speed is unknown, defaulting to 1000 [ 1699.144195][T25990] ptrace attach of "./syz-executor exec"[16119] was attempted by "./syz-executor exec"[25990] [ 1700.160110][T26009] sctp: [Deprecated]: syz.6.5511 (pid 26009) Use of int in max_burst socket option deprecated. [ 1700.160110][T26009] Use struct sctp_assoc_value instead [ 1701.072681][T26026] lo speed is unknown, defaulting to 1000 [ 1701.080165][T26026] lo speed is unknown, defaulting to 1000 [ 1701.366046][T26028] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5513'. [ 1705.569488][T26089] lo speed is unknown, defaulting to 1000 [ 1705.594517][T26089] lo speed is unknown, defaulting to 1000 [ 1709.918802][ C0] sched: DL replenish lagged too much [ 1731.364408][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.377383][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1942.948919][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1942.955918][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5804/1:b..l [ 1942.964538][ C0] rcu: (detected by 0, t=10502 jiffies, g=124009, q=134 ncpus=2) [ 1942.972358][ C0] task:syz-executor state:R running task stack:21912 pid:5804 tgid:5804 ppid:5803 task_flags:0x400100 flags:0x00004002 [ 1942.986929][ C0] Call Trace: [ 1942.990220][ C0] [ 1942.993161][ C0] __schedule+0x168f/0x4c70 [ 1942.997695][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1943.002999][ C0] ? __pfx___schedule+0x10/0x10 [ 1943.007874][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1943.013174][ C0] preempt_schedule_irq+0xb5/0x150 [ 1943.018296][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1943.024021][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1943.029824][ C0] irqentry_exit+0x6f/0x90 [ 1943.034246][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1943.040236][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1943.045535][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b 02 d4 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1943.065148][ C0] RSP: 0018:ffffc90003fbf238 EFLAGS: 00000206 [ 1943.071226][ C0] RAX: fcc22b1d8ad46c00 RBX: 0000000000000000 RCX: fcc22b1d8ad46c00 [ 1943.079292][ C0] RDX: 0000000000000000 RSI: ffffffff8d921248 RDI: ffffffff8bc0fe60 [ 1943.087279][ C0] RBP: ffffffff8171a9f5 R08: 0000000000000000 R09: 0000000000000000 [ 1943.095256][ C0] R10: 0000000000000000 R11: ffffffff8171a9f5 R12: 0000000000000002 [ 1943.103231][ C0] R13: ffffffff8df3b860 R14: 0000000000000000 R15: 0000000000000246 [ 1943.111215][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1943.116334][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1943.121479][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1943.126595][ C0] ? prepare_creds+0x497/0x6c0 [ 1943.131366][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1943.136490][ C0] unwind_next_frame+0xc2/0x2390 [ 1943.141435][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1943.146567][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1943.151685][ C0] ? security_prepare_creds+0x52/0x390 [ 1943.157147][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1943.163294][ C0] arch_stack_walk+0x11c/0x150 [ 1943.168076][ C0] ? prepare_creds+0x497/0x6c0 [ 1943.172843][ C0] stack_trace_save+0x9c/0xe0 [ 1943.177499][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1943.182873][ C0] save_stack+0xf7/0x1f0 [ 1943.187132][ C0] ? __pfx_save_stack+0x10/0x10 [ 1943.191996][ C0] ? __free_frozen_pages+0xb05/0xcd0 [ 1943.197289][ C0] ? __put_partials+0x161/0x1c0 [ 1943.202144][ C0] ? put_cpu_partial+0x17c/0x250 [ 1943.207082][ C0] ? __slab_free+0x2f7/0x400 [ 1943.211661][ C0] ? qlist_free_all+0x9a/0x140 [ 1943.216435][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1943.222085][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1943.227120][ C0] ? __kmalloc_noprof+0x224/0x4f0 [ 1943.232153][ C0] ? security_prepare_creds+0x52/0x390 [ 1943.237617][ C0] ? prepare_creds+0x497/0x6c0 [ 1943.242399][ C0] ? page_ext_put+0x97/0xc0 [ 1943.246925][ C0] __reset_page_owner+0x71/0x1f0 [ 1943.251878][ C0] __free_frozen_pages+0xb05/0xcd0 [ 1943.256993][ C0] __put_partials+0x161/0x1c0 [ 1943.261665][ C0] put_cpu_partial+0x17c/0x250 [ 1943.266440][ C0] ? put_cpu_partial+0x6d/0x250 [ 1943.271300][ C0] __slab_free+0x2f7/0x400 [ 1943.275698][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1943.282016][ C0] ? __phys_addr+0xba/0x170 [ 1943.286541][ C0] qlist_free_all+0x9a/0x140 [ 1943.291147][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1943.296623][ C0] __kasan_slab_alloc+0x22/0x80 [ 1943.301489][ C0] __kmalloc_noprof+0x224/0x4f0 [ 1943.306349][ C0] ? security_prepare_creds+0x52/0x390 [ 1943.311810][ C0] security_prepare_creds+0x52/0x390 [ 1943.317110][ C0] prepare_creds+0x497/0x6c0 [ 1943.321703][ C0] copy_creds+0x106/0xa10 [ 1943.326019][ C0] copy_process+0x95d/0x3b80 [ 1943.330611][ C0] ? __might_fault+0xb0/0x130 [ 1943.335312][ C0] ? __pfx_copy_process+0x10/0x10 [ 1943.340354][ C0] ? __asan_memset+0x22/0x50 [ 1943.344961][ C0] kernel_clone+0x224/0x7f0 [ 1943.349474][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1943.354500][ C0] ? __lock_acquire+0xaac/0xd20 [ 1943.359350][ C0] __se_sys_clone3+0x256/0x2d0 [ 1943.364120][ C0] ? __might_fault+0xb0/0x130 [ 1943.368812][ C0] ? __pfx___se_sys_clone3+0x10/0x10 [ 1943.374120][ C0] ? _copy_to_user+0x8a/0xb0 [ 1943.378742][ C0] ? do_syscall_64+0xba/0x210 [ 1943.383433][ C0] do_syscall_64+0xf6/0x210 [ 1943.387951][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1943.392640][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.398542][ C0] RIP: 0033:0x7fc6f35c31c9 [ 1943.402962][ C0] RSP: 002b:00007ffdd8fdb1d8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1943.411387][ C0] RAX: ffffffffffffffda RBX: 00007fc6f358cb70 RCX: 00007fc6f35c31c9 [ 1943.419367][ C0] RDX: 00007fc6f358cb70 RSI: 0000000000000058 RDI: 00007ffdd8fdb240 [ 1943.427342][ C0] RBP: 00007ffdd8fdb2a0 R08: 00007ffdd8fdb2a0 R09: 0000000000000000 [ 1943.435317][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8 [ 1943.443294][ C0] R13: 000000000000000b R14: 00007ffdd8fdb240 R15: 00007ffdd8fdb710 [ 1943.451287][ C0] [ 1943.454316][ C0] rcu: rcu_preempt kthread starved for 9686 jiffies! g124009 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1943.465512][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1943.475479][ C0] rcu: RCU grace-period kthread stack dump: [ 1943.481358][ C0] task:rcu_preempt state:R running task stack:27032 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1943.494857][ C0] Call Trace: [ 1943.498136][ C0] [ 1943.501086][ C0] __schedule+0x168f/0x4c70 [ 1943.505593][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1943.510792][ C0] ? schedule+0x165/0x360 [ 1943.515132][ C0] ? __pfx___schedule+0x10/0x10 [ 1943.520004][ C0] ? schedule+0x91/0x360 [ 1943.524254][ C0] schedule+0x165/0x360 [ 1943.528419][ C0] schedule_timeout+0x12b/0x270 [ 1943.533280][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1943.538663][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1943.544563][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1943.549869][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1943.555428][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1943.560288][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1943.565509][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1943.571671][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1943.576963][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1943.582180][ C0] rcu_gp_kthread+0x99/0x390 [ 1943.586789][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1943.591997][ C0] ? __kthread_parkme+0x7b/0x200 [ 1943.596939][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1943.601975][ C0] kthread+0x70e/0x8a0 [ 1943.606056][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1943.611263][ C0] ? __pfx_kthread+0x10/0x10 [ 1943.615864][ C0] ? __pfx_kthread+0x10/0x10 [ 1943.620460][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1943.625655][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1943.630843][ C0] ? __pfx_kthread+0x10/0x10 [ 1943.635439][ C0] ret_from_fork+0x4b/0x80 [ 1943.639863][ C0] ? __pfx_kthread+0x10/0x10 [ 1943.644460][ C0] ret_from_fork_asm+0x1a/0x30 [ 1943.649249][ C0] [ 1943.652275][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1943.658594][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1943.663800][ C1] NMI backtrace for cpu 1 [ 1943.663821][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1943.663840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1943.663851][ C1] RIP: 0010:__find_rr_leaf+0x12d/0x6d0 [ 1943.663874][ C1] Code: 44 24 68 4c 89 7c 24 30 4d 85 ff 74 3c 49 8d 9e 90 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 7e 03 00 00 8b 1b <89> df 44 8b 64 24 44 44 89 e6 e8 04 c8 b7 f7 44 39 e3 0f 85 07 04 [ 1943.663888][ C1] RSP: 0018:ffffc90000a081a0 EFLAGS: 00000246 [ 1943.663903][ C1] RAX: 0000000000000000 RBX: 0000000000000100 RCX: ffff88801c6cda00 [ 1943.663915][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 1943.663925][ C1] RBP: ffffc90000a082f8 R08: ffffc90000a08420 R09: ffffc90000a08430 [ 1943.663938][ C1] R10: ffffc90000a08280 R11: fffff52000141052 R12: 1ffff1100a52000c [ 1943.663950][ C1] R13: dffffc0000000000 R14: ffff888029045c00 R15: ffffc90000a083f8 [ 1943.663962][ C1] FS: 0000000000000000(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000 [ 1943.663976][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1943.663987][ C1] CR2: 00007f95d6265b1a CR3: 000000003303c000 CR4: 00000000003526f0 [ 1943.664002][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1943.664011][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1943.664022][ C1] Call Trace: [ 1943.664028][ C1] [ 1943.664042][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1943.664061][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1943.664083][ C1] fib6_table_lookup+0x39f/0xa80 [ 1943.664118][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1943.664144][ C1] ? ip6_pol_route+0x162/0x1180 [ 1943.664165][ C1] ip6_pol_route+0x222/0x1180 [ 1943.664189][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 1943.664210][ C1] ? stack_depot_save_flags+0x40/0x910 [ 1943.664241][ C1] fib6_rule_lookup+0x52f/0x6f0 [ 1943.664265][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1943.664287][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1943.664314][ C1] ? ip6t_do_table+0x1db/0x1530 [ 1943.664336][ C1] ip6_route_input+0x6ce/0xa50 [ 1943.664361][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 1943.664389][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 1943.664417][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 1943.664436][ C1] ip6_rcv_finish+0x141/0x2d0 [ 1943.664461][ C1] NF_HOOK+0x309/0x3a0 [ 1943.664477][ C1] ? skb_orphan+0xaf/0xd0 [ 1943.664495][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1943.664511][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1943.664528][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1943.664546][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1943.664569][ C1] __netif_receive_skb+0xd3/0x380 [ 1943.664594][ C1] ? process_backlog+0x2d5/0x14f0 [ 1943.664611][ C1] process_backlog+0x60e/0x14f0 [ 1943.664626][ C1] ? rcu_is_watching+0x15/0xb0 [ 1943.664653][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1943.664667][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1943.664685][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1943.664702][ C1] __napi_poll+0xc4/0x480 [ 1943.664723][ C1] ? net_rx_action+0x447/0xdf0 [ 1943.664740][ C1] net_rx_action+0x6ea/0xdf0 [ 1943.664763][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1943.664795][ C1] handle_softirqs+0x283/0x870 [ 1943.664819][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1943.664843][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1943.664866][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1943.664886][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1943.664907][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1943.664932][ C1] irq_exit_rcu+0x9/0x30 [ 1943.664952][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1943.664969][ C1] [ 1943.664975][ C1] [ 1943.664981][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1943.664997][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1943.665014][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 fb 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1943.665027][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1943.665040][ C1] RAX: f9847a64348e8500 RBX: ffffffff81974e48 RCX: f9847a64348e8500 [ 1943.665053][ C1] RDX: 0000000000000001 RSI: ffffffff8d737203 RDI: ffffffff8bc0fe60 [ 1943.665064][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 1943.665076][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7daf70 [ 1943.665088][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d9b40 [ 1943.665101][ C1] ? do_idle+0x1e8/0x510 [ 1943.665127][ C1] default_idle+0x13/0x20 [ 1943.665145][ C1] default_idle_call+0x74/0xb0 [ 1943.665164][ C1] do_idle+0x1e8/0x510 [ 1943.665187][ C1] ? __pfx_do_idle+0x10/0x10 [ 1943.665217][ C1] cpu_startup_entry+0x44/0x60 [ 1943.665238][ C1] start_secondary+0x101/0x110 [ 1943.665260][ C1] common_startup_64+0x13e/0x147 [ 1943.665287][ C1] [ 1951.348859][ T1300] ieee802154 phy0 wpan0: encryption failed: -22