last executing test programs: 2m26.701711187s ago: executing program 32 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 2m0.473568532s ago: executing program 33 (id=121): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peek(0x1, r0, 0x0) ptrace$getregset(0x4204, r0, 0x3, 0xfffffffffffffffe) 1m58.187813765s ago: executing program 34 (id=136): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x100000000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x6}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x4001) pipe2(&(0x7f0000000040), 0x84000) 1m57.221708299s ago: executing program 1 (id=143): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4104, 0x1008}], 0x1}}], 0x1, 0x12, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)) (async) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x51) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000040)="67d8ce0f3566ba4100ec66b8e9000f00d0c4e259bef065a52e0f092e3ef30f1efa660f3881150000000067f367f3f60400", 0x31}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000040)="67d8ce0f3566ba4100ec66b8e9000f00d0c4e259bef065a52e0f092e3ef30f1efa660f3881150000000067f367f3f60400", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 1m57.04992976s ago: executing program 35 (id=143): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4104, 0x1008}], 0x1}}], 0x1, 0x12, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)) (async) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x51) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000040)="67d8ce0f3566ba4100ec66b8e9000f00d0c4e259bef065a52e0f092e3ef30f1efa660f3881150000000067f367f3f60400", 0x31}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000040)="67d8ce0f3566ba4100ec66b8e9000f00d0c4e259bef065a52e0f092e3ef30f1efa660f3881150000000067f367f3f60400", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 1m48.716732589s ago: executing program 36 (id=165): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_debug_messages', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028002800bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114300000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000076000d2b000000006849dfd053689c21"], 0x18}}, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peek(0x1, r6, 0x0) ptrace$getregset(0x4204, r6, 0x3, 0xfffffffffffffffe) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe) 1m35.309286792s ago: executing program 37 (id=220): write$sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000003c0)="b8ff098ec00f201266b9800000c00f326635010000000f300f009b5c9f263ed382370b660ffc2d672e640fc7b70300000066b9800000c00f326635000800000f3036660f38826cf6ba400066b80000000066ef", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080c0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x4) 1m20.618748387s ago: executing program 38 (id=273): msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgget$private(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100000001}, {0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0xfffffffe, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xb}}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lseek(r5, 0x0, 0x4) 58.193793164s ago: executing program 39 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$unix(0x1, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}], 0x4}}], 0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1000001000104) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200200) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) socket$nl_generic(0x10, 0x3, 0x10) 55.377772334s ago: executing program 8 (id=379): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x3df6, 0xa4ad, 0x19, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="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"/917, 0x395}, {&(0x7f00000004c0)="439e9c06fc666cf70af3a6aec0617798af5a5cf62fc0cccc2529193558277dab", 0x20}], 0x2}}], 0x2, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000b400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 54.899184615s ago: executing program 40 (id=380): openat$audio(0xffffffffffffff9c, 0x0, 0x4221c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000feffffff6a014900a400000095cb276d2f9a0e5e1aac58e0539947ddeca29b9640fd8977be8d02ef0cf5a03b713848e44ee3377201061b39d5b201db8b9aec"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r5, 0xc6c3, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 54.895107315s ago: executing program 8 (id=383): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 53.868699375s ago: executing program 8 (id=384): msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgget$private(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1}, 0x0) 53.722916714s ago: executing program 8 (id=387): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 52.769042016s ago: executing program 0 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a300000"], 0x64}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x1009) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="613697", 0x3}], 0x1}}], 0x1, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e"], 0x7c}}, 0x0) 52.425128817s ago: executing program 8 (id=391): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d4974364d8864ce4ae8becb5ef51be56009bd6fba560dab0d939e30ff97a32d76f421e8cb37d7b"}, 0x53) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c1", 0x23) write$qrtrtun(r2, &(0x7f0000000c00)="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", 0x239) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x12, 0x909, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x2]}}}, 0x4c}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) 52.282553599s ago: executing program 0 (id=392): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 51.852575171s ago: executing program 8 (id=395): msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgget$private(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100000001}, {0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0xfffffffe, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xb}}]}]}, 0xfc}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 51.164382222s ago: executing program 41 (id=395): msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgget$private(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100000001}, {0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0xfffffffe, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xb}}]}]}, 0xfc}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 51.161396946s ago: executing program 0 (id=397): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)}], 0x1, &(0x7f00000001c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x5, 0x0, 0x3, 0x8, 0x2aa0, 0x6, 0x9}}], 0x50, 0x4048800}, 0x10) 50.913572835s ago: executing program 0 (id=399): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 49.548925629s ago: executing program 0 (id=405): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 49.198022104s ago: executing program 0 (id=406): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4048800}, 0x10) 49.110672914s ago: executing program 42 (id=406): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4048800}, 0x10) 45.357179699s ago: executing program 1 (id=381): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) userfaultfd(0x1) socket$key(0xf, 0x3, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (fail_nth: 1) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 44.926000433s ago: executing program 1 (id=411): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x5522, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r2}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 44.802870885s ago: executing program 1 (id=412): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 42.649460844s ago: executing program 1 (id=417): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = io_uring_setup(0x6779, &(0x7f0000000340)) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup(r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet(0x2b, 0x801, 0x0) (async) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x120) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x421, 0x70bd2d, 0x25dfdbfd}, 0x1080}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f000000c300)=""/102386, 0x18ff2}], 0x1, 0xa30e, 0x0) 41.925528031s ago: executing program 5 (id=420): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$alg(r0, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="4528e9b34ed5f5ca6a47df9c11238511a6dc50024cc01c6bd980548bb48727593a6081c9ed5afafec726472a2f1609bc19355a331a7432aaf8351af1b4055bf5087ae9731dcc525542c7d79c0eef90d7b67fee18646668044a33613636a2c682fbbdc9e7fe926709a74cdbc6f30db1d6bd25bb799930", 0x76}, {&(0x7f0000000440)="568c3db190fb087c4ddd9bb0bd3fe30f7b4faeaf363755293e9d29c378bc2b57f67c01c03d3d742f34ed041b02a0c34e52e4aac1cd500f22dc0c20385765de2ba1802f50593a4d7448512579734822ef4df36efe7e9df7de6e7c98771909a5e29b63d58836bb50fcc16716cb44c1ce5bcf41e65a7a9afa5ce30751004f5990afc2d06ff12129756018fbb19fbe9c44fd0d6cc42df013702b79f5e351a93fcb5984b2228a817c2428d293", 0xaa}, {&(0x7f0000000540)="009d0e538533501affe8374faeec6ce7f6d6a007b66d25427470be9509a0646de01eef11f75b2f33e2bf5ee3b9183c02b599ce03a31488c1d2852262a9746460784c8bc3e72b57a5c123667ab4fc1e7e654b2dae2b426e5d4ab9ffd78b596f602b8a4a53250aa4a17b5b67dc094dace6129bed017ff7fb559d", 0x79}, {&(0x7f0000004380)="aba52970f13b5b3b75bef7842e49fe01a7089d851854a275f35e494a2c97b9b94ee9869931b8edfe907444822b22bbaac23bb61be90c26289c61ad870ba4d38d888c71b4a421cddfc9a9a2e27b41d0ec2e6f5bbf3b99683ac5ae4a58663e031ce2c06c2065e10337fd28de0d16", 0x6d}, {&(0x7f00000003c0)="e269a6d7a3b384f717301955b922cdb16d0cf25122fa1532efc63224b074d9ffd2bcda8eb340d70ea405637780f918e855086c5a571b71be1127eb", 0x3b}, {&(0x7f0000000680)="57bdf57bf2ce3501321cb5ec95c1a927e8479707ee32cc1fe1aea0b4380ed279617364f6", 0x24}], 0x6, &(0x7f00000059c0)=[@iv={0xf8, 0x117, 0x2, 0xdf, "4f9cb27efefb83e743a256197d2d7175d85b59781a64ef5a0aa6cea10b24bf6444da0f009784d55150271afe3c5462c49d8de68c2c54cc36860f0b92753b6fbc72ab61be062906c8e8a59a048fc0a07d3be76bfb20e9bc7532e71a9199dc0e793c41043f8aa870994572f9f5fef88776d64b98e5dc34e370b64c042de0fb184ae089e6df56aa76bef04972fc8289ec4de5877b9a68891b103c1a17d1fe918384674e81195b8bbce4605bddeefa9301776516aeb74c98904949e526fbf70496780777fded74ad3640169d009c5c0e1018f5fe80fe72dcdd203a5658c5eb06dd"}, @iv={0x1018, 0x117, 0x2, 0x1000, "77075c11e69d37bb020869d2da1c5cb288eb442de67a9f4c47487cc1dd63969b478bd647bb9eaf9527ca70ddeea30ad7647196b65966fe4a53c6ce48d7e100dd1f7ade9827e1259cd70079f2dc287d3f40a58c4f5e8a1b9672dec4db2d0ed0b19661e69e22535012939eb8dff711a59c75a219f98cfbb634719086bcb5b6026897727a8e2be39fd5c9c848cb1681d50d20827d0a2191efd4d74b96f8f881babf37090dcd57ee83d761a3b2f3fdbb75b007fc15127bcda1ef3834110df240af90bdd0df2fe236616d096593ce79d4d4f54f5eb83da5915a0a873bace40a6d7faf689ba537b19b0fa5abed009db409303ebe22e219c70339d41f64077fe05c24982bff5ae331ed628be287b91f4cda00befa774b7c159cf4d24ee16dc98bc1653a6280c7ce744f1a1917317c47037f336c8b7d45d94bb21380ec6ec1c18237cc282d83203d0de2c032e4e73cd34cfbe76d671af62b33f5131d7525bde8dc1d921bd27ad7add1d1f939eca80ffa2fd7d5e145dfed22c1885a24ef36a20349ea92ffaf1377725d31a6cb84e632c82b16e71804ec8a560d2f61e04f189bb4e803621b82b4524d0a443c4a41549df466fdac760a68160f7d28344113d241821ed67293ee3c06426e13ff88049d24b25ca428d989bf9ea55ba400a5484d202bc0e9643fcc265311639ccbeb04a35d7441b4bd84373be11112a4028ec9fe3e33040ea2aafdc12cd71f75284ed9694443bddd6ee0ba5372d2def98610a48b25048af6cdc7fe62444a4de46a5addb77b72abbeb9af90dbab2d999d03671bc748e291fd17a7bbe514d830708296b14c21a00c35a1765c7eddd52448377bea77cc96bb1a8b5f74c42bdcc96bb01526def8970538d01b0717a7bd28701d4182686aed5dc5731d6c1c27a8c0711e82ef5f1491a754c1f77046c9d0d95b7bfa91532f09a92cf30793e284b13833cc38e1c80b77dc6643a2c10f04b1d725daae290530cb0237af43d8f1063863cd3ac8dfcbb23893c373e7350836923d254871198b59da685f0dc04c034dca88fb79c96d911837ad96f685c2493074a25370a3379b9b55f6fc73f58d450839ff957b63327cf13bee79bfaaa713d3a8a5c1656182ea7736836c6e2cb19a8355084067907538599ed95feb1c26b79feadca7eff296899b85df2b6d214a36125dc9a942ae551c65fcebc23cd6ca9effdcdc6945a2fab9cb01fc30cecd75b6610fc387d41a02a3961871bbd985d7c0414179bd3dfff694a883596b73339bcfe61c0d43893473feb06d6c9131fe9ab1f5725ad3f20af0b02196c8737cef7a9184d6b39a8e60e1ce267c05919a5b218a0eb8a64b51415d9fb1e7956f81151c98bdd682d15fc757380060a3d818f523c513c8c1bdf229fe82cffc2326c322fbac7b93c4e3f0cd584c5385f0507711acd75a5bfaeadcc9e20945013b0fb1793914963ab8de9db2f8d58f0253a3727e5da355866134d78e3673fe1011600cade6ad5542bca54a69fea79cd3dbab45f8eb503fdff908e5afdd96631a873d9eb7427ac80386a792f395f3fedc399dafa55d2c472401cb380cad934f6a0a8e6d3a98f7761f5105b81e0b3ffc88df6b118821e7884008499778a627a7210e3e83d7e81c0b8e25e4181ab671065442131a040e47fd80b911aaa5fcbbe1426b8438ede3af8a25e3dc6aa45711502dcc6aead96d5867a81feb1578d8ad65e29690f10e1f4d66d723576178205637b620668a892dc356e546a012e230c1265e2616f584114a6dd43adf40e18912147651e41d3469c47d54ef40dd81208755fdb2e3580bf43088928fc722be92ed8022677eb273893ec56e60938dc6b728a0923903e64b6f63dcb8539bfcb659e9ac92d4844842b61c409367041763f558810532e96c92fc391bc8da73d15341f6cd10b07ec2600173ee6b56f74bc98f3049f4d8ad923deb656647ba7c2f6a899ece3ee3c938144d6b9f1be0b7663b09837680f44e97c323a43c918170d90db000c68180f95baa8f8706e73515d6aea451f6e680af35653a21a4c629fcc000c162b7cc04a85b038ce28b678f287f655e22134d5e9a385f8fcf682b30f306171b6ec5d69d6f16c8cf608ee0956056570cc8da91219499265813e06328d0d486e0e12f93ef5714903607bdc8a82ce93092aaa9dceaced498c6ed9b30ee7da0be4f47035a8f4c3e7a9502e92fdee008805d43d51691e994ce0c46154840bf5be5ffb889436a52f80a10822c9d7646c5fb3929e6cfb898a743ee31b0047657d16faf48dd7155aafb1869569516b2b73cb45c86f8082062f7fc7598aea74af4a9439f1f329c974b2befe040ecc77b910a65dd87aee09ef0771ec1a3ae5cc12a2164e2a556522b3a46821362833599661fb7a3141a4ebe1fb19d24588a8c8fc8096ca2a22e30832f5592928146a59162086d9310ccc25a71e2f3fa0201dd6c48478ba45babf2b86f235946180f7174c76cac3fc390d4152047fee5daeeb4c4ad7b0cc9121d1ca43c98a76d55939975d375d141c2239b172845f840c12da0a512d14041e3d77647d4a742f12d96ba1b04f6786cb4299aea805b5ec7fbd90c863f5929d695f9f57c1c73c192622c5ce953a18ba72616af5a60d609547e57677cb6274e0e4d9f37b3d6cc11086b869f4454d9f2f605469054aeb5ef49f2e924ddd575cea1dda95f87d2d5813b3b060e3bd8bb606c3fb16ca07e969a53bcf93f637848644f891a8365e7322d3b01361560d88e16bc63aa893b98cd42bc2f2a5ea96bba61ad7125cbcc817fb31112c4e183da92989deb9606dd166c40f8f8c90021c0cc910b614eaf8c9385305f9a1de295d283500e1bdba041503346fe83aa90e14ed51dac064411ce70cad786ecc224c99b5c1f5ec0f99dcbd9a1d3c9111cbc9535d33633f98e2743732bd1dbcc29bdc924772f6355313610803337115958c6ae211c12e7318bc60a01492bbe56dc6f6ddc9766f2b0261b8a1642ccd472c6542cbdd9826cd6b906076ff10d111246ff9366e7baf9b82a8905886e92ffa39c751ce513293afa5fd5dd93284bf13222c705e655d31176f33a491ba1e2c7508347ce96bdba19f5831cbe9888a61d805a70862973828d3558d31b0d2b215feb05ad6d32473e5e9ad5003436b037995145dd16e51f16e7a57a462ec47ef54bbfba0ed52c1e31b7d0882e5208064d80e4c044922c26aa19ba42eda003b247d30df7df0db63766f5656e07da87d246a882b943f701057932c75403317f0eee2f117852ecd207ffc28cf07dcd206c34550fb7ad1f9da26647ffbbe999266626d3ddaa950510b01c8a0e47eaa534d97a5020cacd8e1ace5bd57805a1e752ff2f05ad0aa01de8e960780fcdcb5723bdaf22680c3b28a28f1a459072d12e4c6731cf3eb3ec1165a7299dd12e725dadca60c0955eb779125e7fdd63944a5639f1ef47cb3ea8065e0f2c680b6c7056bcdd3445f3ad6c9a702264e130a4dd7d95a2dc2575e7d627ad7882d02d6d0ca9e71e338ce58b4a0146253d43a52b2aaeea25fa29827623b28bb3c0f3900501180345ba3052cdf5e6908d8a70693c28ace8a35a097a2424bcdb917534343da7d5d231ed48092358b79bccf4caa0eea99fa8ca8f76d3e062afb162b3ea57932185b0322001f3f2fc2d7e6ba5ea5993cd933a60642c1e10d96eeb2fadc895af487d1e56c6c1f1bf3f688961be3865af893ad87bd7fdfab1ab1c63387b611a8ad412b229851bc8d1d43c7a08472172ad99a5f9f687c13e25a170fcd9c213d3b7b5445a1e43fef8fb7c1189940b7ece073ff291e4dbb9195c0cd9952446b1692a9f4ba064b046233aab859dc402dd8f26f7869888b2a70b48d92a73f38f3b9a36ab4d6ea3b3ef6c747b3d0e67713afab67395187a1dd7295aa72f156f5f38a37b08bdd735172c4b497b09085fc537e7cb4e1cbae60d0bb4999b8ca44ba780f485fbc1348fc1db64eaaa4d305d1fab8d0759b400f390d94eb7908afed92b8f9fa122e04fdf63e0bbb0f747cec74a59649dc1e504a67edfbc02c7294baf22757387e5d59a87e148ed62a305959649680a834f4c2f6529d4b8d1cdf59fef5723a66c89100c1f2459b73ea8ac21dd6a43b61ebb5320a15997941bbea74479cad311ef7ab9112d4b9678ec443f136220c2cfbd50dbab81f220a88e008dc1a61f1ac6b8ad74cc0b35fc84e7ea27a7f1fabeb70b12f14bd06a5d50c458946ffe3d11ab5b7d1a4448aa1ab347707cb98d381fad6b65f8b4a073f1a25886e0e5370543696d14205f783bb335e0d3ba8e944dc3cdeed242afc77ce26bf450da1935c8d0a457210bfaef2b00b820330cae082cd725d202916311b436c23b1158c5b22d4c189ab140d33480756498b8d6b03c1dd0bac9500d064a08e557df6282fb8fbbdb5e66b6c52bbed6d0acb1e858b7d6208cb29c33ce79f4915b6d111e7f970aca7da6b258217d1dae33f7108868c194b9f712500c31da9c96f73a19ed590fd4c7c1d6d7a36c8640a24c8991483d12e9642366de83b41a765969a7515a2f6fc02bb671183a6f327142e4e0e7f689ee80de84c94ff286efa3092fad30034e5f235315488b1dc41bd1eb322f2500d29db61fb0bf44017710cb0ae93f55b86c557ca10bd663b0c016f79e6bec1f690f75f0b6d34aa95fa5053a32540f42ba69dfd446b7ed6c3a72a65f0d9f1d1779ee9f1b1258f79bddba94ac963649924ba6ff3d44c70ed01f7134170021aa3e7820bf37ed28038b2fc9bbf00ba9d00cc8cd460f75c04bc38727421d76542fd2e86be1c0c7a2a6ad8271ab38ca8a69483d8da45f561411ae5d685d3acff545175f4edcb6b65784ff6758150df6fdea879b8742ec23599935305b113e7d51a83161bc21592e2c5f97bca81204205e4e51ba94ed355fd7ab4cb41d3bfcbf47cc4a57efc5b8293639c06469d55b45fbb5addd967945a384f15360ffa613fdc06d55dc242cc966093304df3e6574687f4dedcc444b688a309f39fe13a45c6283d58395cbcf753e71c9273f5b41081846f9edac2bb5940a7c8cf81d2bb13a37b63bfa69625ada93fdc2005e854210bc5e6475abe9ecdd2dbdb375b522033fc64a7eba0e0534375cf23274c9d411a708a37a301f5e57c57a569518ac8e42f6a4418aa3c7576293d342af1d0536eebf00e2487fad02a0a9916bfac8b97d60d63982ab9d54ec95d0377ce7143fc17912719230577025010a03cef2353f3b8d95835b95a35e4bc45fbddd22e94237a51923d4310bb45c4cdd348c92155de866e8d4cd1037a9726a0ec11173de1a2e12cc582c58ebc9eefa9036cfe992e2e186838f3c0b3d169e2a323db6d4fd853b9c3c0a37da5aafebf9f48a3ce0d770657f08c1f210962bdf2eaf8bf10f22ee1989fec609d530b3058cfb2cb089049671cd83edf82ef0779bab9319d4cb7f7e0ccfbb69e4e63e49c885adf0db88dfc479572e43ec836447499f0b8ded02b5ecc6ed0e2805a037276382d6433355e334e0ccb013f5c2e440944e0e98c500f5beb2c9744bb383450da72ba84bc1aee990ab95fb5f1df9c26d4c1eb3018807d8834d29f70d8214f744542ada97454c068674d87a331bd0a8772f5cee33065a21fffb2c983f53685e71a45b392008a1a91185551c6e53a71976961d1380db3a1586082030723e164ec44ed1c122d3c0d1467768e1c29e44b739a6a5b0e8bace50eaf7ef7d807ac4a7c4588b4d8bd7eb05599679198db3693b17d1452720ead49d7f826a9f670f43cb2a18148d87373dc43f2a15484592542c1f79beb5326571ee6d6ccd137f"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x7ae}, @op={0x18, 0x117, 0x3, 0x1}], 0x2188, 0x8045}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000600)="ef1e3428e2fe9dcee9d8faf9fa6e13aebffa36b7bf740df2c0f5678f6a8c29cf980b5805d9264fb9114fb676abeb7083df00ff57e7c95122e16ca3bbc40724ff50bd6eccc0aa45b6b420c147cf", 0x4d}, {&(0x7f0000000a00)="1ce42f3483e1e3809af28579e7f1590b90ebfa076dd2a1363223a28e15e0bdf5693b378e08d80d152955ac1dc68dcf8a5124fedfac2ed1a832224269f9c3b3498aeb9013f8", 0x45}, {&(0x7f0000000a80)="3c16357e1f1776c7fa21bb9dd9139db95c202519d5bb99ca1dc5e35f22aa59782f459965b0725c3b36c549d6c63f57e63c76f8bfe1a676bea7ee3eda690c1060881a291fbc156cdc42972b26cffb3795cbff860fea1d39d2281258945a034fe5290cfb1db184d62375f5e84958761736ac7f1ea03a400be16860dc4550ce102bf24096f074ec3d49b0f217eba35535b719a83dfe9658bef6ef7ab9f9ba1234223272c31b6ddf6c3bd4acdf4e", 0xac}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="c88a086c45a4964a5dc4d81c7df7bed3f487fe18ae7dcf545fe28bf52d74e0473084abad280050d88558874bc8dde31a2bb117c739b1d3dccae2a5aed3f49996905ecce1c32c97fcd6f4b663f94a2056ce1235b9e218e01fbb0277b3e03195e593c99dc400580b2a5a047001a07036968f61f83adad63302285a924e21e48d9906e8bd6ab8913bfd6da54779798751298b2bc3b532962ce405df9495613913b56fcd1e4484df8069ec24ed44caf8b181c26cff55394e47eda91549d695b192c521a60311cb3843b4cdebc2996684a5c155e9854f47a77bf39a8b3e9e6259218828e81020a79c9b073cfbf1866b41518502a63c2640", 0xf5}, {&(0x7f00000007c0)="ee54f39d3b17", 0x6}, {&(0x7f0000001c40)="3ba9963d977e4d79ad5fd407f0d1413b0c6162437d24ba8da1dbfe085c8b9d7057dac6d06965150dfa46b945a6093c7318292b6471967d84049388c01993911a99eb001d9857b7024461d93943fd383c0387f6e39d5a9878afc4ebb3e226dab5df597050bbf6627d584e875aa150542c9e6050d9f333f63c25aacbe4f55ee18a9c3d2f919c7473158cbb02f930c6efa5aa2330ec6b557d83c47683be11064df83e08488fff8a74ec3b4a1107c069557b1c863a615d9cf5d146b168d07d03", 0xbe}, {&(0x7f0000001d00)="d5a3d515df625ee0e48e0f97e1d7be549195449f5db98e4eef291305ab9a5063d6a2e01e86cac5eb866673c9deaff26acae4d769f14ec3d0bf2504822bb0c03ff2d0d954c3b83d2ee943a94bd2f4210f19a96f5ac1498dc37c134cf76eeca347e3e7c8092c63c13d85a65c9d21e2784178ab1a0eb7ef64705f2a5e125eb264a19b5809797b822911c5998fbe2f14bcfd9d6297d41a5a5312df34e23a38c6c2456fcd9b7ae7b85d51cc41e272b61a61b4f807ed1f105545084e7cfc3be881d8d8", 0xc0}], 0x8, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001e40)="0f8a92a26477e164793e55ba3b8ff793c7564d728be75d84672b72392770cedf68d45f2ef8eb616f1e457663ee2a439da6fc1e18e086926d88f7fa424752d90713931d13fbb079091807bdf12e06729c31e7c07bbf49267f9ccb5ed6c769b0642e36c5141908390c038ba95a80e79f877f4e7c11af4ec457d3dd73b1158a1eb603ed1dbf942b1f20416ccd86057ef43b10f39a2420e4e1b30e8e354f5ce397f2b9c4d528962a8f44fcc7ee00dbe8ff7e2549cb88621f47b516f4eb55f6ca6baf986058a1c7dbceb8", 0xc8}, {&(0x7f0000001f40)="1caf01b0b8a8ee4f6594dbf915219407b2e6e724b47b73d224a7b34abf35745a3950d59e6d0f26713c7bc87053341d4f8cc2942206785c990103b1fbe7a650bde24d318c3c5a29247ea2820f391c7c83b69474d2f4cb045ad5696f84b81de0db3725da53f4b91db3b99e48a657d29c9ec5eb49cc93f1d29b7f69b979c664c51ca40e2c4738e89e305b438c4ded7c2d9479f32836398bd692e4acabb57cfd208fd55a867bb6b22775ce5da808c380efc6f46b88a709dcfa6a024b11ac604da5242419e50722721eaef3626a40fe83a04cb2141415d513", 0xd6}, {&(0x7f0000002040)="b964833f6d9ddd24786fe9438c0a28accb7649150ec2b275674fb2de2d17b4956d39893903d9c4aa7bfa4c96", 0x2c}, {&(0x7f0000002080)="4a72a0309170bc98bf5f584c83acc9fd690e0335bb5fae5784c633df93a01ebbb60c70bd7723f6b2e0dfac72c0508768eae795d72842988eaeb621a781b8ddfd355a0d2b7669cf61827bdcf0bc511627c2e03a562a93708e63eb77ae0bba8e49c9a204ea6c707a31a879074d090e1bd2acc18b67b7ad17a5ed41e785b414c9aae809bae2447eb3898c18b7f557c27b4194d224f1c72cd2e8cf08eabbfd90d949", 0xa0}], 0x4, &(0x7f0000002180)=[@assoc={0x18, 0x117, 0x4, 0x70e}, @iv={0x68, 0x117, 0x2, 0x54, "2f3165df6ba08ea5a55f50969af437241affe6a0962497d573c851054c8a59e1052759448895278fe39e181d081209f47935168f27f24013a5bfa73255a32425acf4e2bdcb18c0ed077e919bd3c1ff63307ff796"}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xa0, 0x117, 0x2, 0x86, "d9e0c800d0f21dc1368dbe7ae5ec12ab9e23af130fdadb512efc236bd32536b4d85f2085dbb28950d07253b3b0fcc55c2c3442f232e37c5922a70100c5a71f3dfb87d246d888a568a9e9c5c1688f20b7f17e18cf990c0acf610dea0b823df7f824761b436916970ef976a01eafe1a9efc87c352d12623367605fd9445ea87f94a80395696f8d"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x101}, @iv={0x58, 0x117, 0x2, 0x44, "f229cbc3ca9707c0633afe9dae0854518a40221e2d7d29a6236acc7844993b26e031db2cc34edbdcd1851ffdde69583743acf27c8dbddefb4d3ab29a69f281fff6e2e42c"}, @op={0x18}], 0x1d8, 0x20000000}, {0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004780)="b63a3ac4332905fd827012487e206419762580a007a475d161063c4ab4d564f5248dc0071d2b835f1a59a13c6864a74568474d001298be4f04c9b823ae02c2c8f2cb54b61d000000000002000000000018fafa222d58a3c1ecde5c40c96bc962a69daf47e9f66c485347ea3e306cc67defda7de8e88b063631b7", 0x7a}, {&(0x7f0000004400)="5117b3936fe19c8a30ed515eec0dd0800a7654b3d9231b01090fe0636e5d5d4c2e2197ad8932195a5d0000986bef438808bc5c05f64182347ce57f01b7f5d65ec6eb48026a5992e59a030b37f5f33a5c5662c5c272feb566298aaa393b285a879387476c2831af08fbc87d83cb20dc6be510004ea464977ed4504c3ea8cdb19e176047bcc556fe46d40c73555d16bc13aa221bc0216c403a04a758e254801d9d35d86c183ecd92bbab0fc4c3af8a3590", 0xb0}, {&(0x7f00000044c0)="e2995d4fb422920a950dbf0e04033100ab1ce3f7144370dfd016f7ff49abfc1299e300262a8b42f21360e013e795d5efd9d0252cb78fd487294fb600f195d2815a40a8ebe4bb0bdf852de297dc1d0922b344e8f2946f97e6e0d9d0b6224b414283a90a9e4196e35e23c08cf1cca09b617ddfdfd1fe462f138b151840a7e5f05ca016386e7ae3307d79", 0x89}], 0x3, &(0x7f00000045c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "45424d22f924a17bd216c53ceaaaa0810ee0a563b702651d71fd954f94861ffe3152289c28249c21d3e8920658d27d0cfd0800e56edf51c3e69ed4e1b9416c8199ab9e377dad87726fdfc59418ec0d57e2864f127f73959f1c1e55ffa19dbe4858b540f075a5ba2eaab7329429817f03703c82b13788cc0423c19de470ac80a4c50db9fd0ad3bafd6f14e18745c70c0b3684b0059f8bc39159afdef590c36496"}], 0xb8, 0x44000}], 0x4, 0x200040c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 41.902187294s ago: executing program 5 (id=421): unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (fail_nth: 1) 41.848159364s ago: executing program 5 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000400)={{0x80, 0xfc}, 'port0\x00', 0x18, 0x80410, 0x0, 0x48c, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0xe4}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x20) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c000180060006008848"], 0x24}}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001240), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000000)={0x46, 0x1}) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 40.6126528s ago: executing program 5 (id=426): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 40.612347183s ago: executing program 1 (id=427): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x10, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="000088a8", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r6}, 0x14) ppoll(&(0x7f00000000c0)=[{r0, 0x500}], 0x1, 0x0, 0x0, 0x0) unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 40.135089893s ago: executing program 43 (id=427): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x10, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="000088a8", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r6}, 0x14) ppoll(&(0x7f00000000c0)=[{r0, 0x500}], 0x1, 0x0, 0x0, 0x0) unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 36.920643633s ago: executing program 5 (id=438): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 36.572271657s ago: executing program 2 (id=440): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x18) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x206, 0x6, 0xb, 0x3, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x3e]}}, &(0x7f0000000500)=""/143, 0x2b, 0x8f, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xa011}, 0x4048091) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000380)='/dev/cpu/#/msr\x00', 0x40, 0x1c, &(0x7f0000000440)={0x6, 0x1, 0xa0, 0xf097}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) clock_adjtime(0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c6173740000"], 0x140}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 35.152738737s ago: executing program 2 (id=442): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="4528e9b34ed5f5ca6a47df9c11238511a6dc50024cc01c6bd980548bb48727593a6081c9ed5afafec726472a2f1609bc19355a331a7432aaf8351af1b4055bf5087ae9731dcc525542c7d79c0eef90d7b67fee18646668044a33613636a2c682fbbdc9e7fe926709a74cdbc6f30db1d6bd25bb799930", 0x76}, {&(0x7f0000000440)="568c3db190fb087c4ddd9bb0bd3fe30f7b4faeaf363755293e9d29c378bc2b57f67c01c03d3d742f34ed041b02a0c34e52e4aac1cd500f22dc0c20385765de2ba1802f50593a4d7448512579734822ef4df36efe7e9df7de6e7c98771909a5e29b63d58836bb50fcc16716cb44c1ce5bcf41e65a7a9afa5ce30751004f5990afc2d06ff12129756018fbb19fbe9c44fd0d6cc42df013702b79f5e351a93fcb5984b2228a817c2428d293", 0xaa}, {&(0x7f0000000540)="009d0e538533501affe8374faeec6ce7f6d6a007b66d25427470be9509a0646de01eef11f75b2f33e2bf5ee3b9183c02b599ce03a31488c1d2852262a9746460784c8bc3e72b57a5c123667ab4fc1e7e654b2dae2b426e5d4ab9ffd78b596f602b8a4a53250aa4a17b5b67dc094dace6129bed017ff7fb559d", 0x79}, {&(0x7f0000004380)="aba52970f13b5b3b75bef7842e49fe01a7089d851854a275f35e494a2c97b9b94ee9869931b8edfe907444822b22bbaac23bb61be90c26289c61ad870ba4d38d888c71b4a421cddfc9a9a2e27b41d0ec2e6f5bbf3b99683ac5ae4a58663e031ce2c06c2065e10337fd28de0d16", 0x6d}, {&(0x7f00000003c0)="e269a6d7a3b384f717301955b922cdb16d0cf25122fa1532efc63224b074d9ffd2bcda8eb340d70ea405637780f918e855086c5a571b71be1127eb", 0x3b}, {&(0x7f0000000680)="57bdf57bf2ce3501321cb5ec95c1a927e8479707ee32cc1fe1aea0b4380ed279617364f6", 0x24}], 0x6, &(0x7f00000059c0)=[@iv={0xf8, 0x117, 0x2, 0xdf, "4f9cb27efefb83e743a256197d2d7175d85b59781a64ef5a0aa6cea10b24bf6444da0f009784d55150271afe3c5462c49d8de68c2c54cc36860f0b92753b6fbc72ab61be062906c8e8a59a048fc0a07d3be76bfb20e9bc7532e71a9199dc0e793c41043f8aa870994572f9f5fef88776d64b98e5dc34e370b64c042de0fb184ae089e6df56aa76bef04972fc8289ec4de5877b9a68891b103c1a17d1fe918384674e81195b8bbce4605bddeefa9301776516aeb74c98904949e526fbf70496780777fded74ad3640169d009c5c0e1018f5fe80fe72dcdd203a5658c5eb06dd"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x7ae}, @op={0x18, 0x117, 0x3, 0x1}], 0x2188, 0x8045}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000600)="ef1e3428e2fe9dcee9d8faf9fa6e13aebffa36b7bf740df2c0f5678f6a8c29cf980b5805d9264fb9114fb676abeb7083df00ff57e7c95122e16ca3bbc40724ff50bd6eccc0aa45b6b420c147cf", 0x4d}, {&(0x7f0000000a00)="1ce42f3483e1e3809af28579e7f1590b90ebfa076dd2a1363223a28e15e0bdf5693b378e08d80d152955ac1dc68dcf8a5124fedfac2ed1a832224269f9c3b3498aeb9013f8", 0x45}, {&(0x7f0000000a80)="3c16357e1f1776c7fa21bb9dd9139db95c202519d5bb99ca1dc5e35f22aa59782f459965b0725c3b36c549d6c63f57e63c76f8bfe1a676bea7ee3eda690c1060881a291fbc156cdc42972b26cffb3795cbff860fea1d39d2281258945a034fe5290cfb1db184d62375f5e84958761736ac7f1ea03a400be16860dc4550ce102bf24096f074ec3d49b0f217eba35535b719a83dfe9658bef6ef7ab9f9ba1234223272c31b6ddf6c3bd4acdf4e", 0xac}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="c88a086c45a4964a5dc4d81c7df7bed3f487fe18ae7dcf545fe28bf52d74e0473084abad280050d88558874bc8dde31a2bb117c739b1d3dccae2a5aed3f49996905ecce1c32c97fcd6f4b663f94a2056ce1235b9e218e01fbb0277b3e03195e593c99dc400580b2a5a047001a07036968f61f83adad63302285a924e21e48d9906e8bd6ab8913bfd6da54779798751298b2bc3b532962ce405df9495613913b56fcd1e4484df8069ec24ed44caf8b181c26cff55394e47eda91549d695b192c521a60311cb3843b4cdebc2996684a5c155e9854f47a77bf39a8b3e9e6259218828e81020a79c9b073cfbf1866b41518502a63c2640", 0xf5}, {&(0x7f00000007c0)="ee54f39d3b17", 0x6}, {&(0x7f0000001c40)="3ba9963d977e4d79ad5fd407f0d1413b0c6162437d24ba8da1dbfe085c8b9d7057dac6d06965150dfa46b945a6093c7318292b6471967d84049388c01993911a99eb001d9857b7024461d93943fd383c0387f6e39d5a9878afc4ebb3e226dab5df597050bbf6627d584e875aa150542c9e6050d9f333f63c25aacbe4f55ee18a9c3d2f919c7473158cbb02f930c6efa5aa2330ec6b557d83c47683be11064df83e08488fff8a74ec3b4a1107c069557b1c863a615d9cf5d146b168d07d03", 0xbe}, {&(0x7f0000001d00)="d5a3d515df625ee0e48e0f97e1d7be549195449f5db98e4eef291305ab9a5063d6a2e01e86cac5eb866673c9deaff26acae4d769f14ec3d0bf2504822bb0c03ff2d0d954c3b83d2ee943a94bd2f4210f19a96f5ac1498dc37c134cf76eeca347e3e7c8092c63c13d85a65c9d21e2784178ab1a0eb7ef64705f2a5e125eb264a19b5809797b822911c5998fbe2f14bcfd9d6297d41a5a5312df34e23a38c6c2456fcd9b7ae7b85d51cc41e272b61a61b4f807ed1f105545084e7cfc3be881d8d8", 0xc0}], 0x8, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001e40)="0f8a92a26477e164793e55ba3b8ff793c7564d728be75d84672b72392770cedf68d45f2ef8eb616f1e457663ee2a439da6fc1e18e086926d88f7fa424752d90713931d13fbb079091807bdf12e06729c31e7c07bbf49267f9ccb5ed6c769b0642e36c5141908390c038ba95a80e79f877f4e7c11af4ec457d3dd73b1158a1eb603ed1dbf942b1f20416ccd86057ef43b10f39a2420e4e1b30e8e354f5ce397f2b9c4d528962a8f44fcc7ee00dbe8ff7e2549cb88621f47b516f4eb55f6ca6baf986058a1c7dbceb8", 0xc8}, {&(0x7f0000001f40)="1caf01b0b8a8ee4f6594dbf915219407b2e6e724b47b73d224a7b34abf35745a3950d59e6d0f26713c7bc87053341d4f8cc2942206785c990103b1fbe7a650bde24d318c3c5a29247ea2820f391c7c83b69474d2f4cb045ad5696f84b81de0db3725da53f4b91db3b99e48a657d29c9ec5eb49cc93f1d29b7f69b979c664c51ca40e2c4738e89e305b438c4ded7c2d9479f32836398bd692e4acabb57cfd208fd55a867bb6b22775ce5da808c380efc6f46b88a709dcfa6a024b11ac604da5242419e50722721eaef3626a40fe83a04cb2141415d513", 0xd6}, {&(0x7f0000002040)="b964833f6d9ddd24786fe9438c0a28accb7649150ec2b275674fb2de2d17b4956d39893903d9c4aa7bfa4c96", 0x2c}, {&(0x7f0000002080)="4a72a0309170bc98bf5f584c83acc9fd690e0335bb5fae5784c633df93a01ebbb60c70bd7723f6b2e0dfac72c0508768eae795d72842988eaeb621a781b8ddfd355a0d2b7669cf61827bdcf0bc511627c2e03a562a93708e63eb77ae0bba8e49c9a204ea6c707a31a879074d090e1bd2acc18b67b7ad17a5ed41e785b414c9aae809bae2447eb3898c18b7f557c27b4194d224f1c72cd2e8cf08eabbfd90d949", 0xa0}], 0x4, &(0x7f0000002180)=[@assoc={0x18, 0x117, 0x4, 0x70e}, @iv={0x68, 0x117, 0x2, 0x54, "2f3165df6ba08ea5a55f50969af437241affe6a0962497d573c851054c8a59e1052759448895278fe39e181d081209f47935168f27f24013a5bfa73255a32425acf4e2bdcb18c0ed077e919bd3c1ff63307ff796"}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xa0, 0x117, 0x2, 0x86, "d9e0c800d0f21dc1368dbe7ae5ec12ab9e23af130fdadb512efc236bd32536b4d85f2085dbb28950d07253b3b0fcc55c2c3442f232e37c5922a70100c5a71f3dfb87d246d888a568a9e9c5c1688f20b7f17e18cf990c0acf610dea0b823df7f824761b436916970ef976a01eafe1a9efc87c352d12623367605fd9445ea87f94a80395696f8d"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x101}, @iv={0x58, 0x117, 0x2, 0x44, "f229cbc3ca9707c0633afe9dae0854518a40221e2d7d29a6236acc7844993b26e031db2cc34edbdcd1851ffdde69583743acf27c8dbddefb4d3ab29a69f281fff6e2e42c"}, @op={0x18}], 0x1d8, 0x20000000}, {0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004780)="b63a3ac4332905fd827012487e206419762580a007a475d161063c4ab4d564f5248dc0071d2b835f1a59a13c6864a74568474d001298be4f04c9b823ae02c2c8f2cb54b61d000000000002000000000018fafa222d58a3c1ecde5c40c96bc962a69daf47e9f66c485347ea3e306cc67defda7de8e88b063631b7", 0x7a}, {&(0x7f0000004400)="5117b3936fe19c8a30ed515eec0dd0800a7654b3d9231b01090fe0636e5d5d4c2e2197ad8932195a5d0000986bef438808bc5c05f64182347ce57f01b7f5d65ec6eb48026a5992e59a030b37f5f33a5c5662c5c272feb566298aaa393b285a879387476c2831af08fbc87d83cb20dc6be510004ea464977ed4504c3ea8cdb19e176047bcc556fe46d40c73555d16bc13aa221bc0216c403a04a758e254801d9d35d86c183ecd92bbab0fc4c3af8a3590", 0xb0}, {&(0x7f00000044c0)="e2995d4fb422920a950dbf0e04033100ab1ce3f7144370dfd016f7ff49abfc1299e300262a8b42f21360e013e795d5efd9d0252cb78fd487294fb600f195d2815a40a8ebe4bb0bdf852de297dc1d0922b344e8f2946f97e6e0d9d0b6224b414283a90a9e4196e35e23c08cf1cca09b617ddfdfd1fe462f138b151840a7e5f05ca016386e7ae3307d79", 0x89}], 0x3, &(0x7f00000045c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "45424d22f924a17bd216c53ceaaaa0810ee0a563b702651d71fd954f94861ffe3152289c28249c21d3e8920658d27d0cfd0800e56edf51c3e69ed4e1b9416c8199ab9e377dad87726fdfc59418ec0d57e2864f127f73959f1c1e55ffa19dbe4858b540f075a5ba2eaab7329429817f03703c82b13788cc0423c19de470ac80a4c50db9fd0ad3bafd6f14e18745c70c0b3684b0059f8bc39159afdef590c36496"}], 0xb8, 0x44000}], 0x4, 0x200040c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 35.108987088s ago: executing program 2 (id=443): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x81, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) 34.563550461s ago: executing program 5 (id=446): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffd, 0x4d05f679, &(0x7f0000000180)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') poll(&(0x7f0000000200)=[{r1}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0xffffffffffffff40, &(0x7f0000000340)}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, 0x0, 0x30, 0xe1515f8735398f3, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) close(r4) 34.549732292s ago: executing program 2 (id=447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 33.866462723s ago: executing program 44 (id=446): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffd, 0x4d05f679, &(0x7f0000000180)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') poll(&(0x7f0000000200)=[{r1}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0xffffffffffffff40, &(0x7f0000000340)}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, 0x0, 0x30, 0xe1515f8735398f3, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) close(r4) 32.604852306s ago: executing program 6 (id=451): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2, 0x0, 0x800}, 0x0) 31.830157786s ago: executing program 2 (id=454): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f0003010000000904000000010110000a24010000000201020904010000010200000904010101010200000909000000000000000725010010000009040200000184000009040201010102000009060009000000000007250100000000"], 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') (async) io_uring_setup(0x901, &(0x7f00000004c0)={0x0, 0x894c, 0x10, 0xfff7ffff, 0x1fc}) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @local, 0x8000}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10], 0x0, 0x0, 0x0}, 0x0) ioperm(0x7, 0x80000000, 0xff) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x8087, 0x40, 0xffffffff, 0xaed0, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000000200000006000000faffffff20000000", @ANYRES32=r2, @ANYBLOB="ff010000000000000000000025c1000000000000", @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0200000005000000010000000b00"/28], 0x50) socket$packet(0x11, 0x2, 0x300) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x1, @none, 0x0, 0x1}, 0x72) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r9, &(0x7f0000000200)=""/82, 0x52) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r11, &(0x7f0000000380)="a0fd1ad76d5f9f282e32da8b780400c7760f6dff2410a1333b6eac033108dcb54c8401dd6d09e0cd1c3f0d71954e43c04959fd93a19cbf42d74d5628ecc7297ee22a40da43955ccee41fa2290bfdbd8280d54a", 0x53) (async) splice(r11, &(0x7f0000000040), r10, 0x0, 0x800000000ff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) 31.821581671s ago: executing program 6 (id=455): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 30.745752552s ago: executing program 6 (id=459): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x230, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x21c, 0x1, [@m_skbedit={0xe0, 0x18, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffe0}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x84, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9f17c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a168eca666c86a6321ae76cba859e771aa7894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69890f61ef4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x108, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x20000000, 0x7, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x3, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}]}, {0x99, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69db801c8d08e1d6ea90e03c637d4dc6a17cefee6540c36dba3573d039f7b6e9fb810ecdc039c3105f3423c721e04c7b057f85097c23a753a9cfb0eba5c78b15b4a0e5f89bc641b223"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x230}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000600)=[@request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="8500000022000000040000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 29.720542685s ago: executing program 2 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000400)={{0x80, 0xfc}, 'port0\x00', 0x18, 0x80410, 0x0, 0x48c, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0xe4}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, 0x0, 0x0}, 0x20) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c000180060006008848"], 0x24}}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001240), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000000)={0x46, 0x1}) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 29.596369285s ago: executing program 45 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000400)={{0x80, 0xfc}, 'port0\x00', 0x18, 0x80410, 0x0, 0x48c, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0xe4}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, 0x0, 0x0}, 0x20) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c000180060006008848"], 0x24}}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001240), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000000)={0x46, 0x1}) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 29.590394536s ago: executing program 6 (id=462): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 28.575239725s ago: executing program 6 (id=464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400d8000206"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x49}]}]}, 0x34}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x5000aea5, 0x0) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xb) copy_file_range(r8, &(0x7f00000008c0)=0x4, r6, 0x0, 0x8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)=0x0) timer_settime(r13, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r14 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r14, 0x4004550c, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r17, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r16, @ANYBLOB="0a000600080211000001000005001900020000000500e400010000000600b5004601000005007400060000000500130000000000060012"], 0x94}}, 0x90) ioctl$SIOCSIFHWADDR(r9, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="0000040000000b0f3d5e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.23800743s ago: executing program 6 (id=466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x10b, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close(r5) 27.707657609s ago: executing program 46 (id=466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x10b, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close(r5) 27.201492107s ago: executing program 3 (id=469): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000001b1401"], 0x18}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) 26.921901738s ago: executing program 3 (id=470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private0, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/203, 0xcb}}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r7 = fanotify_init(0x4, 0x0) fanotify_mark(r7, 0x1, 0x40000011, r6, 0x0) getdents(r6, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0xffffffffffffffff, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0xb, 0x5, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000080)=0x2) 25.82063154s ago: executing program 3 (id=471): syz_emit_ethernet(0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb28f6ee412b8f86dd60ffff00002d2f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088a80000000007ff0001000008000006000086dd"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1}, 0x3) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000005c0)=@abs={0x1}, 0x6e) pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0x100000000e0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050025bd7000fedbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="08000500060008000cc2642645b2c80017800400010004000200"], 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x60600) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r7, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) 25.63109448s ago: executing program 3 (id=472): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 24.504457619s ago: executing program 3 (id=473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)=0x0) r2 = getegid() chown(&(0x7f0000000000)='./file1\x00', r1, r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078008001140000000000500150082ffffff0500010007000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078008001140000000000500150082ffffff0500010007000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) (async) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r3, 0x0) (async) dup3(r7, r3, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x800000009) 24.150039564s ago: executing program 3 (id=474): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80201, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) 23.974938258s ago: executing program 47 (id=474): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80201, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) 23.404644785s ago: executing program 9 (id=477): msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgget$private(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1}, 0x0) 23.403973259s ago: executing program 9 (id=478): unshare(0x10060000) unshare(0x10000000) r0 = socket(0x2, 0x3, 0x100000001) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x40000) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f124a6bed4a6e874c28a9af81606b403693c64c130d1c03d41c1da8ebbbd090ffdef352b1d82f25c7719aa569b4e29f1b1c3200d701547228df8a88f7c32e749"}, 0x48}, 0x2}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000401000/0x3000)=nil) munlockall() ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'bond0\x00', {0x7}, 0xe30}) 23.22991079s ago: executing program 9 (id=479): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4040010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000000000400101c00000000000000000000000ff"]) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r7, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r10 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x10b, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f0000000100)={r3}) fcntl$setlease(r10, 0x400, 0x0) gettid() sched_rr_get_interval(r4, &(0x7f0000000000)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) 22.139069682s ago: executing program 9 (id=480): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x48) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 21.052164948s ago: executing program 9 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x11f2c3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r2, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fsopen(&(0x7f0000000240)='efs\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x948) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup(r7) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, 0x0) r9 = memfd_secret(0x80000) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f00000002c0)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 21.045140585s ago: executing program 7 (id=487): semget(0x2, 0x3, 0x208) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f2, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00ffffff09ffffff000000"], 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$media(&(0x7f0000000040), 0x7, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x4, 0x9, 0x4, 0x70000, 0x6, {}, {0x3, 0xc, 0x6, 0x6, 0x34, 0x10, "3129d16b"}, 0x101, 0x2, {&(0x7f0000000440)=[{0x1, 0x8, {0x0}, 0x7fffffff}, {0x3, 0xfffff463, {0x0}, 0x3}]}, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) syz_open_procfs$userns(0x0, 0x0) r5 = semget(0x3, 0x3, 0x40) semctl$SETVAL(r5, 0x0, 0x10, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000100)='5\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) getpgid(r3) 20.885295553s ago: executing program 4 (id=488): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) 20.65806912s ago: executing program 4 (id=489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x9) r1 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x2000000, 0x0, 0x0, 0x0) 20.657680703s ago: executing program 7 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000e9cef07075d875b51a7fc70aa400ab727cef18844500"/44, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0004000000000000d780f69fbd4ab6ac21922b783ffaf537e6fb45a859bf9b895370a16ecd40c5b5acfae9c3deb5169d99a466adeba06efd854fe05bcb7a765feb745d3259e8d121e492c231d7d816c1aea6c4da753d4397ed88c5d52844faeaff2f5a084e4931cafcf6bb3dcbaf976643471a43dadf0ccf8bb194b5cc626d75ed056c0c5abe46"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="000000000040000014000300766c616e30000000000020000000006656000100ffffffffffff0000065f3df5086e31199e7b2e09bcf04aaa6c4718c9c9e2d262ca962561b618d31fa952da4e4dc1f24e95b8b32802b8e8f7bdadb0e94dfb4435a81ee1b52dc75b0ae26d4965d96a73e796a127ebdf0498061f5c4526e88e427bf36a6689b759e8879466058ac674d2c210520364dd5669b20a6a88520d7f115a1181c8"], 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) dup2(r6, r6) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000200)) r7 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x44, r10, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r12, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r13, 0x0, 0x0) r14 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r14, 0xaf01, 0x0) fcntl$setpipe(r12, 0x407, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) 20.639751145s ago: executing program 4 (id=491): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$IPC_STAT(r3, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0x0) timer_settime(r2, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 19.662500197s ago: executing program 48 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1600"/12, @ANYRES32, @ANYBLOB="a57c34cf29ca1c8b3113e7407006c4d3419b9edd60a33869acd3f71ac2dcb65b58b32b8115822d21ecaf6ddab0eafebff2cc36b014ab397ae560132f2a", @ANYRES64=0x0], 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 19.62167278s ago: executing program 4 (id=494): semctl$SETALL(0x0, 0x0, 0x13, &(0x7f00000003c0)) 19.610302418s ago: executing program 4 (id=495): mmap$IORING_OFF_SQ_RING(&(0x7f0000772000/0x1000)=nil, 0x1000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRES8], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000580)=0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0x0, @in6=@private2, 0x0, 0x0, 0x2}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$setsig(r8, 0xa, 0x21) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 18.652788289s ago: executing program 4 (id=496): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESOCT], 0x48) r2 = syz_io_uring_setup(0x3676, &(0x7f00000002c0), &(0x7f000000aa40), &(0x7f000000aa80)) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r2, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x6db8, 0x6, 0x55, 0x9, 0x80, 0x5, 0x7, 0x8, 0x4, [0xffff, 0x1, 0xff, 0x6, 0x8, 0x8, 0x3, 0x7]}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007f4ffff07000400e000000108000500"], 0x24}}, 0x0) recvmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2002) 17.409981131s ago: executing program 7 (id=497): unshare(0x400) r0 = socket(0x2, 0x3, 0x100000001) setsockopt$IP_VS_SO_SET_ADD(r0, 0xff00, 0x482, 0x0, 0x0) 17.409660884s ago: executing program 7 (id=498): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c8243, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000280)=0xbd, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'veth0_to_hsr\x00', {0x20, 0x4e22, @private=0xa010101}}) 16.486925592s ago: executing program 7 (id=499): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = epoll_create1(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000ee894bfa2e43000010000000"], &(0x7f00000001c0)='GPL\x00', 0x7fffffff, 0x3d, &(0x7f0000000200)=""/61, 0x41100, 0x14, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x2, 0xb3, 0x342}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000003c0)=[{0x3, 0x5, 0x2, 0x6}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x2, 0x9, 0x1}, {0x0, 0x1, 0x2, 0x5}, {0x3, 0x2, 0xc, 0xb}, {0x0, 0x5, 0xf, 0x8}, {0x5, 0x2, 0x5, 0x1}, {0x1, 0x5, 0xd, 0x6}, {0x5, 0x5, 0x8}, {0x5, 0x4, 0x1}], 0x10, 0x3, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x88000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x20000000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="a5643c0384e211f31dabd63a23e76af8e5128050b87c4f07000000000000001ce2a1a74e9a99728e15fb7858", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fanotify_mark(r5, 0x8, 0x1010, r5, &(0x7f0000000040)='./file0\x00') 16.441821977s ago: executing program 7 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@generic={0x1, 0xfffffffffffffff7, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r3, 0x0, 0x3834, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8003}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x9, 0x0, 0x1, "0062ba7dffff0000008000"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCMSET(r6, 0x5418, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtclass={0x90, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0xe}, {0xd, 0xfff3}, {0xc, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x63}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x2, 0x6, 0xbbf6, 0xffffffff}, {0x5, 0x2, 0x80, 0x9, 0x0, 0x982}, 0x6, 0x5, 0x1, 0x8, 0x8}}, @TCA_HTB_RATE64={0xc, 0x6, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb2}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80a0}, 0x0) 1.801822826s ago: executing program 49 (id=496): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESOCT], 0x48) r2 = syz_io_uring_setup(0x3676, &(0x7f00000002c0), &(0x7f000000aa40), &(0x7f000000aa80)) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r2, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x6db8, 0x6, 0x55, 0x9, 0x80, 0x5, 0x7, 0x8, 0x4, [0xffff, 0x1, 0xff, 0x6, 0x8, 0x8, 0x3, 0x7]}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007f4ffff07000400e000000108000500"], 0x24}}, 0x0) recvmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2002) 0s ago: executing program 50 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@generic={0x1, 0xfffffffffffffff7, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r3, 0x0, 0x3834, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8003}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x9, 0x0, 0x1, "0062ba7dffff0000008000"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCMSET(r6, 0x5418, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtclass={0x90, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0xe}, {0xd, 0xfff3}, {0xc, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x63}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x2, 0x6, 0xbbf6, 0xffffffff}, {0x5, 0x2, 0x80, 0x9, 0x0, 0x982}, 0x6, 0x5, 0x1, 0x8, 0x8}}, @TCA_HTB_RATE64={0xc, 0x6, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb2}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80a0}, 0x0) kernel console output (not intermixed with test programs): T7525] alloc_inode+0x65/0x1a0 [ 144.128643][ T7525] do_accept+0x130/0x6d0 [ 144.128662][ T7525] ? __pfx_do_accept+0x10/0x10 [ 144.128687][ T7525] __sys_accept4+0x11f/0x1d0 [ 144.128705][ T7525] ? __pfx___sys_accept4+0x10/0x10 [ 144.128720][ T7525] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.128739][ T7525] ? rcu_is_watching+0x15/0xb0 [ 144.128759][ T7525] __x64_sys_accept+0x7d/0x90 [ 144.128776][ T7525] do_syscall_64+0xf3/0x230 [ 144.128793][ T7525] ? clear_bhb_loop+0x35/0x90 [ 144.128815][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.128834][ T7525] RIP: 0033:0x7f45e7f8cd29 [ 144.128847][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.128860][ T7525] RSP: 002b:00007f45e8ed6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 144.128877][ T7525] RAX: ffffffffffffffda RBX: 00007f45e81a5fa0 RCX: 00007f45e7f8cd29 [ 144.128887][ T7525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 144.128897][ T7525] RBP: 00007f45e8ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.128906][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.128916][ T7525] R13: 0000000000000000 R14: 00007f45e81a5fa0 R15: 00007ffe50da0d58 [ 144.128933][ T7525] [ 144.171969][ T5872] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.350825][ T976] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 145.482925][ T976] usb 8-1: device descriptor read/64, error -71 [ 145.490518][ T5872] usb 1-1: device descriptor read/64, error -71 [ 145.605962][ T7534] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 145.615652][ T5872] usb usb1-port1: attempt power cycle [ 146.279212][ T5908] usb 9-1: USB disconnect, device number 5 [ 146.374583][ T25] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 146.427829][ T976] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 146.505242][ T7542] netlink: 20 bytes leftover after parsing attributes in process `syz.8.345'. [ 146.557796][ T25] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 146.570819][ T7544] FAULT_INJECTION: forcing a failure. [ 146.570819][ T7544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.586696][ T25] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 146.588070][ T976] usb 8-1: device descriptor read/64, error -71 [ 146.602213][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.4.343 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 146.602236][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.602245][ T7544] Call Trace: [ 146.602251][ T7544] [ 146.602258][ T7544] dump_stack_lvl+0x241/0x360 [ 146.602286][ T7544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.602308][ T7544] ? __pfx__printk+0x10/0x10 [ 146.602329][ T7544] ? __pfx_lock_release+0x10/0x10 [ 146.602347][ T7544] ? rcu_is_watching+0x15/0xb0 [ 146.602368][ T7544] ? lock_release+0xbf/0xa30 [ 146.602387][ T7544] should_fail_ex+0x3b0/0x4e0 [ 146.602405][ T7544] _copy_from_user+0x2d/0xb0 [ 146.602419][ T7544] copy_msghdr_from_user+0xae/0x680 [ 146.602437][ T7544] ? rcu_is_watching+0x15/0xb0 [ 146.602459][ T7544] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 146.602475][ T7544] ? __fget_files+0x2a/0x410 [ 146.602494][ T7544] ? __fget_files+0x2a/0x410 [ 146.602515][ T7544] __sys_sendmsg+0x209/0x350 [ 146.602535][ T7544] ? bpf_lsm_file_permission+0x9/0x10 [ 146.602553][ T7544] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.602577][ T7544] ? do_sys_openat2+0x17a/0x1d0 [ 146.602606][ T7544] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.602625][ T7544] ? rcu_is_watching+0x15/0xb0 [ 146.602646][ T7544] ? rcu_is_watching+0x15/0xb0 [ 146.602668][ T7544] do_syscall_64+0xf3/0x230 [ 146.602685][ T7544] ? clear_bhb_loop+0x35/0x90 [ 146.602707][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.602726][ T7544] RIP: 0033:0x7f165f98cd29 [ 146.602740][ T7544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.602752][ T7544] RSP: 002b:00007f1660836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.602770][ T7544] RAX: ffffffffffffffda RBX: 00007f165fba5fa0 RCX: 00007f165f98cd29 [ 146.602780][ T7544] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 146.602789][ T7544] RBP: 00007f1660836090 R08: 0000000000000000 R09: 0000000000000000 [ 146.602798][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.602806][ T7544] R13: 0000000000000000 R14: 00007f165fba5fa0 R15: 00007ffe351fb698 [ 146.602822][ T7544] [ 146.603000][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 146.603024][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.728082][ T7548] 9pnet_fd: Insufficient options for proto=fd [ 146.803137][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'. [ 146.863929][ T976] usb usb8-port1: attempt power cycle [ 147.696112][ T976] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 147.932545][ T976] usb 8-1: device not accepting address 12, error -71 [ 148.203565][ T25] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 148.258569][ T25] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input7 [ 148.275903][ T25] input: failed to attach handler kbd to device input7, error: -5 [ 148.292045][ T25] usb 6-1: USB disconnect, device number 2 [ 148.897283][ T47] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 148.986385][ T7584] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 149.986994][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.007671][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.018113][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.027739][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.043383][ T7580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.070555][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.140053][ T47] kernel write not supported for file bpf-prog (pid: 47 comm: kworker/1:1) [ 150.173594][ T7593] netlink: 60 bytes leftover after parsing attributes in process `syz.8.359'. [ 150.359771][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.8.359'. [ 151.543906][ T7604] FAULT_INJECTION: forcing a failure. [ 151.543906][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.557183][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.8.361 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 151.557209][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.557219][ T7604] Call Trace: [ 151.557225][ T7604] [ 151.557231][ T7604] dump_stack_lvl+0x241/0x360 [ 151.557260][ T7604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.557282][ T7604] ? __pfx__printk+0x10/0x10 [ 151.557304][ T7604] ? __pfx_lock_release+0x10/0x10 [ 151.557322][ T7604] ? rcu_is_watching+0x15/0xb0 [ 151.557344][ T7604] ? lock_release+0xbf/0xa30 [ 151.557363][ T7604] should_fail_ex+0x3b0/0x4e0 [ 151.557382][ T7604] _copy_from_user+0x2d/0xb0 [ 151.557397][ T7604] copy_msghdr_from_user+0xae/0x680 [ 151.557415][ T7604] ? rcu_is_watching+0x15/0xb0 [ 151.557437][ T7604] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 151.557453][ T7604] ? __fget_files+0x2a/0x410 [ 151.557472][ T7604] ? __fget_files+0x2a/0x410 [ 151.557494][ T7604] __sys_sendmsg+0x209/0x350 [ 151.557514][ T7604] ? bpf_lsm_file_permission+0x9/0x10 [ 151.557531][ T7604] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.557556][ T7604] ? do_sys_openat2+0x17a/0x1d0 [ 151.557585][ T7604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.557605][ T7604] ? rcu_is_watching+0x15/0xb0 [ 151.557627][ T7604] ? rcu_is_watching+0x15/0xb0 [ 151.557649][ T7604] do_syscall_64+0xf3/0x230 [ 151.557679][ T7604] ? clear_bhb_loop+0x35/0x90 [ 151.557702][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.557722][ T7604] RIP: 0033:0x7fb18638cd29 [ 151.557736][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.557749][ T7604] RSP: 002b:00007fb1841d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.557767][ T7604] RAX: ffffffffffffffda RBX: 00007fb1865a6160 RCX: 00007fb18638cd29 [ 151.557779][ T7604] RDX: 0000000000000000 RSI: 0000000020000e80 RDI: 0000000000000007 [ 151.557789][ T7604] RBP: 00007fb1841d5090 R08: 0000000000000000 R09: 0000000000000000 [ 151.557799][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.557809][ T7604] R13: 0000000000000000 R14: 00007fb1865a6160 R15: 00007ffd57447bb8 [ 151.557826][ T7604] [ 151.789955][ T7607] FAULT_INJECTION: forcing a failure. [ 151.789955][ T7607] name failslab, interval 1, probability 0, space 0, times 0 [ 151.802776][ T7607] CPU: 1 UID: 0 PID: 7607 Comm: syz.5.363 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 151.802800][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.802814][ T7607] Call Trace: [ 151.802820][ T7607] [ 151.802827][ T7607] dump_stack_lvl+0x241/0x360 [ 151.802855][ T7607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.802877][ T7607] ? __pfx__printk+0x10/0x10 [ 151.802900][ T7607] ? __pfx___might_resched+0x10/0x10 [ 151.802919][ T7607] should_fail_ex+0x3b0/0x4e0 [ 151.802938][ T7607] should_failslab+0xac/0x100 [ 151.802956][ T7607] __kmalloc_noprof+0xdd/0x4c0 [ 151.802975][ T7607] ? kstrtouint_from_user+0x128/0x190 [ 151.802994][ T7607] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 151.803018][ T7607] tomoyo_realpath_from_path+0xcf/0x5e0 [ 151.803044][ T7607] tomoyo_path_number_perm+0x236/0x860 [ 151.803063][ T7607] ? proc_fail_nth_write+0x24f/0x2d0 [ 151.803081][ T7607] ? tomoyo_path_number_perm+0x206/0x860 [ 151.803099][ T7607] ? __pfx_lock_release+0x10/0x10 [ 151.803118][ T7607] ? trace_contention_end+0x3c/0x120 [ 151.803140][ T7607] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.803158][ T7607] ? preempt_count_add+0x93/0x190 [ 151.803188][ T7607] ? fput+0x21b/0x290 [ 151.803206][ T7607] ? __fget_files+0x2a/0x410 [ 151.803226][ T7607] ? __fget_files+0x2a/0x410 [ 151.803246][ T7607] security_file_ioctl+0xc6/0x2a0 [ 151.803267][ T7607] __se_sys_ioctl+0x46/0x170 [ 151.803290][ T7607] do_syscall_64+0xf3/0x230 [ 151.803308][ T7607] ? clear_bhb_loop+0x35/0x90 [ 151.803330][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.803350][ T7607] RIP: 0033:0x7f45e7f8cd29 [ 151.803365][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.803378][ T7607] RSP: 002b:00007f45e8ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.803397][ T7607] RAX: ffffffffffffffda RBX: 00007f45e81a5fa0 RCX: 00007f45e7f8cd29 [ 151.803409][ T7607] RDX: 0000000020000180 RSI: 0000000040047438 RDI: 0000000000000005 [ 151.803420][ T7607] RBP: 00007f45e8ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.803430][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.803440][ T7607] R13: 0000000000000000 R14: 00007f45e81a5fa0 R15: 00007ffe50da0d58 [ 151.803458][ T7607] [ 151.803485][ T7607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.271164][ T6018] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.339812][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.359327][ T6018] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.413998][ T6018] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.504513][ T6018] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.522609][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 152.535445][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.551744][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.562801][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.583817][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.709991][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.726253][ T47] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.735744][ T47] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.744014][ T47] usb 1-1: Manufacturer: syz [ 152.755129][ T6018] bridge_slave_1: left allmulticast mode [ 152.787419][ T5868] usb 5-1: USB disconnect, device number 14 [ 152.806687][ T6018] bridge_slave_1: left promiscuous mode [ 152.816180][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.828803][ T47] usb 1-1: config 0 descriptor?? [ 153.059485][ T7623] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 153.257849][ T6018] bridge_slave_0: left allmulticast mode [ 153.266343][ T6018] bridge_slave_0: left promiscuous mode [ 153.317870][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.325236][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.441366][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.603695][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.620341][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.783432][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.792506][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.802414][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.811910][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.659197][ T6018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.668582][ T5872] kernel write not supported for file bpf-prog (pid: 5872 comm: kworker/0:5) [ 154.700390][ T7642] netlink: 60 bytes leftover after parsing attributes in process `syz.8.375'. [ 154.720815][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.8.375'. [ 154.746645][ T6018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.805099][ T6018] bond0 (unregistering): Released all slaves [ 155.303840][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 155.312716][ T47] rc_core: IR keymap rc-hauppauge not found [ 155.318621][ T47] Registered IR keymap rc-empty [ 155.365929][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.482826][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.536766][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 155.580561][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 155.640213][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.685818][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.738462][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.783611][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.815604][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.819747][ T7629] chnl_net:caif_netlink_parms(): no params data found [ 155.846319][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.869282][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.893344][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.574723][ T7673] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 156.606856][ T55] Bluetooth: hci2: command tx timeout [ 156.616093][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.637223][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.672843][ T47] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 156.684257][ T6018] hsr_slave_0: left promiscuous mode [ 156.709502][ T47] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.773535][ T47] usb 1-1: USB disconnect, device number 6 [ 156.776016][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.789755][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.797034][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.804793][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.812220][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.819636][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.861252][ T6018] hsr_slave_1: left promiscuous mode [ 156.897455][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.928072][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.058975][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.097207][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.195045][ T6018] veth1_macvtap: left promiscuous mode [ 157.200576][ T6018] veth0_macvtap: left promiscuous mode [ 157.277543][ T6018] veth1_vlan: left promiscuous mode [ 157.292087][ T6018] veth0_vlan: left promiscuous mode [ 157.436603][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.461783][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.474378][ T7629] bridge_slave_0: entered allmulticast mode [ 157.480875][ T5871] kernel write not supported for file bpf-prog (pid: 5871 comm: kworker/0:4) [ 157.494345][ T7690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.386'. [ 157.504272][ T7629] bridge_slave_0: entered promiscuous mode [ 157.513436][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.523171][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'. [ 157.536266][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.543469][ T7629] bridge_slave_1: entered allmulticast mode [ 157.569170][ T7629] bridge_slave_1: entered promiscuous mode [ 157.711965][ T6018] team0 (unregistering): Port device team_slave_1 removed [ 157.744603][ T6018] team0 (unregistering): Port device team_slave_0 removed [ 157.948632][ T7629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.965714][ T7629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.033558][ T7629] team0: Port device team_slave_0 added [ 158.046334][ T7629] team0: Port device team_slave_1 added [ 158.054067][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 158.162697][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.176714][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.233253][ T7629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.261276][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.276253][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.344348][ T7629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.522222][ T7629] hsr_slave_0: entered promiscuous mode [ 158.528398][ T7629] hsr_slave_1: entered promiscuous mode [ 158.541977][ T7629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.549552][ T7629] Cannot create hsr debugfs directory [ 158.591957][ T7709] netlink: 44 bytes leftover after parsing attributes in process `syz.5.393'. [ 158.831881][ T5825] Bluetooth: hci2: command tx timeout [ 158.989575][ T7716] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 159.386193][ T5825] Bluetooth: hci0: command tx timeout [ 159.461577][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 159.608606][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.734614][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.767527][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.800377][ T7675] bridge_slave_0: entered allmulticast mode [ 159.801459][ T47] kernel write not supported for file bpf-prog (pid: 47 comm: kworker/1:1) [ 159.816342][ T7725] netlink: 60 bytes leftover after parsing attributes in process `syz.5.398'. [ 159.838718][ T7675] bridge_slave_0: entered promiscuous mode [ 159.858669][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.878586][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.887512][ T7675] bridge_slave_1: entered allmulticast mode [ 159.907611][ T7675] bridge_slave_1: entered promiscuous mode [ 159.934820][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.943474][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.958283][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.965878][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.972281][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 159.975551][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.002982][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.010284][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.079426][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.135645][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.205892][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.233053][ T7675] team0: Port device team_slave_0 added [ 160.450974][ T7675] team0: Port device team_slave_1 added [ 160.593975][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.637546][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.643100][ T7739] FAULT_INJECTION: forcing a failure. [ 160.643100][ T7739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.644494][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.659441][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.5.401 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 160.659463][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.659473][ T7739] Call Trace: [ 160.659479][ T7739] [ 160.659485][ T7739] dump_stack_lvl+0x241/0x360 [ 160.659512][ T7739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.659533][ T7739] ? __pfx__printk+0x10/0x10 [ 160.659554][ T7739] ? __pfx_lock_release+0x10/0x10 [ 160.659572][ T7739] ? rcu_is_watching+0x15/0xb0 [ 160.659594][ T7739] ? lock_release+0xbf/0xa30 [ 160.659613][ T7739] should_fail_ex+0x3b0/0x4e0 [ 160.659631][ T7739] _copy_from_user+0x2d/0xb0 [ 160.659646][ T7739] copy_msghdr_from_user+0xae/0x680 [ 160.659663][ T7739] ? rcu_is_watching+0x15/0xb0 [ 160.659684][ T7739] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 160.659701][ T7739] ? __fget_files+0x2a/0x410 [ 160.659720][ T7739] ? __fget_files+0x2a/0x410 [ 160.659741][ T7739] __sys_sendmsg+0x209/0x350 [ 160.659760][ T7739] ? bpf_lsm_file_permission+0x9/0x10 [ 160.659778][ T7739] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.659803][ T7739] ? do_sys_openat2+0x17a/0x1d0 [ 160.659830][ T7739] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.659849][ T7739] ? rcu_is_watching+0x15/0xb0 [ 160.659871][ T7739] ? rcu_is_watching+0x15/0xb0 [ 160.659892][ T7739] do_syscall_64+0xf3/0x230 [ 160.659912][ T7739] ? clear_bhb_loop+0x35/0x90 [ 160.659933][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.659951][ T7739] RIP: 0033:0x7f45e7f8cd29 [ 160.659965][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.659978][ T7739] RSP: 002b:00007f45e8ed6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.659996][ T7739] RAX: ffffffffffffffda RBX: 00007f45e81a5fa0 RCX: 00007f45e7f8cd29 [ 160.660008][ T7739] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 160.660018][ T7739] RBP: 00007f45e8ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.660028][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.660037][ T7739] R13: 0000000000000000 R14: 00007f45e81a5fa0 R15: 00007ffe50da0d58 [ 160.660053][ T7739] [ 160.689792][ T7741] FAULT_INJECTION: forcing a failure. [ 160.689792][ T7741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.725227][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.737571][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.5.402 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 160.737597][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.737606][ T7741] Call Trace: [ 160.737613][ T7741] [ 160.737619][ T7741] dump_stack_lvl+0x241/0x360 [ 160.737647][ T7741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.737669][ T7741] ? __pfx__printk+0x10/0x10 [ 160.737690][ T7741] ? __pfx_lock_release+0x10/0x10 [ 160.737708][ T7741] ? rcu_is_watching+0x15/0xb0 [ 160.737729][ T7741] ? lock_release+0xbf/0xa30 [ 160.737749][ T7741] should_fail_ex+0x3b0/0x4e0 [ 160.737766][ T7741] _copy_from_user+0x2d/0xb0 [ 160.737781][ T7741] copy_msghdr_from_user+0xae/0x680 [ 160.737798][ T7741] ? rcu_is_watching+0x15/0xb0 [ 160.737820][ T7741] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 160.737836][ T7741] ? __fget_files+0x2a/0x410 [ 160.737855][ T7741] ? __fget_files+0x2a/0x410 [ 160.737875][ T7741] __sys_sendmsg+0x209/0x350 [ 160.737895][ T7741] ? bpf_lsm_file_permission+0x9/0x10 [ 160.737913][ T7741] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.737938][ T7741] ? do_sys_openat2+0x17a/0x1d0 [ 160.737965][ T7741] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.737984][ T7741] ? rcu_is_watching+0x15/0xb0 [ 160.738006][ T7741] ? rcu_is_watching+0x15/0xb0 [ 160.738027][ T7741] do_syscall_64+0xf3/0x230 [ 160.738046][ T7741] ? clear_bhb_loop+0x35/0x90 [ 160.738067][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.738087][ T7741] RIP: 0033:0x7f45e7f8cd29 [ 160.738101][ T7741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.738114][ T7741] RSP: 002b:00007f45e8ed6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.738132][ T7741] RAX: ffffffffffffffda RBX: 00007f45e81a5fa0 RCX: 00007f45e7f8cd29 [ 160.738151][ T7741] RDX: 0000000000000080 RSI: 00000000200006c0 RDI: 0000000000000003 [ 160.738161][ T7741] RBP: 00007f45e8ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.738170][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.738180][ T7741] R13: 0000000000000000 R14: 00007f45e81a5fa0 R15: 00007ffe50da0d58 [ 160.738196][ T7741] [ 161.011357][ T55] Bluetooth: hci2: command tx timeout [ 161.152300][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.160181][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.169457][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.198203][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.220842][ T7728] chnl_net:caif_netlink_parms(): no params data found [ 161.248904][ T7629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.284987][ T7629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.314277][ T7629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.322399][ T5908] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.338073][ T7675] hsr_slave_0: entered promiscuous mode [ 161.344420][ T5908] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.344551][ T7675] hsr_slave_1: entered promiscuous mode [ 161.355709][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.360166][ T7675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.368306][ T5908] usb 6-1: Product: syz [ 161.375799][ T7675] Cannot create hsr debugfs directory [ 161.382476][ T5908] usb 6-1: Manufacturer: syz [ 161.389970][ T5908] usb 6-1: SerialNumber: syz [ 161.411882][ T7629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.470882][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.478579][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.486186][ T7728] bridge_slave_0: entered allmulticast mode [ 161.493968][ T7728] bridge_slave_0: entered promiscuous mode [ 161.505941][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.518891][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.526396][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.533954][ T7728] bridge_slave_1: entered allmulticast mode [ 161.540937][ T7728] bridge_slave_1: entered promiscuous mode [ 161.601244][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.608746][ T55] Bluetooth: hci0: command tx timeout [ 161.620030][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.645144][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.721644][ T7728] team0: Port device team_slave_0 added [ 161.734466][ T7728] team0: Port device team_slave_1 added [ 161.754104][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.807084][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.815387][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.841472][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.848812][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.852767][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.863163][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.867680][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.880941][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.881767][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.916179][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.917601][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.923447][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.965577][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.018227][ T7728] hsr_slave_0: entered promiscuous mode [ 162.025529][ T7728] hsr_slave_1: entered promiscuous mode [ 162.031633][ T7728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.040773][ T7728] Cannot create hsr debugfs directory [ 162.066721][ T5908] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 162.073046][ T5908] cdc_ncm 6-1:1.0: bind() failure [ 162.080532][ T5908] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 162.087985][ T5908] cdc_ncm 6-1:1.1: bind() failure [ 162.108761][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.155198][ T12] bridge_slave_1: left allmulticast mode [ 162.160889][ T12] bridge_slave_1: left promiscuous mode [ 162.166627][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.174570][ T12] bridge_slave_0: left allmulticast mode [ 162.180383][ T12] bridge_slave_0: left promiscuous mode [ 162.186459][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.194746][ T12] bridge_slave_1: left allmulticast mode [ 162.200510][ T12] bridge_slave_1: left promiscuous mode [ 162.206130][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.213501][ T55] Bluetooth: hci1: command tx timeout [ 162.221045][ T12] bridge_slave_0: left allmulticast mode [ 162.226694][ T12] bridge_slave_0: left promiscuous mode [ 162.232949][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.403089][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.412929][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.423115][ T12] bond0 (unregistering): Released all slaves [ 162.433916][ T12] bond0 (unregistering): Released all slaves [ 162.480250][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.490265][ T7675] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.505950][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.513080][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.522971][ T7675] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.547455][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.554579][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.563455][ T7675] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.572612][ T7675] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.643893][ T7629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.684431][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 162.799945][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.809244][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.818103][ T7753] bridge_slave_0: entered allmulticast mode [ 162.825433][ T7753] bridge_slave_0: entered promiscuous mode [ 162.833856][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.841475][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.849108][ T7753] bridge_slave_1: entered allmulticast mode [ 162.855593][ T7753] bridge_slave_1: entered promiscuous mode [ 162.877018][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.889508][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.915561][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.938526][ T7753] team0: Port device team_slave_0 added [ 162.958815][ T7753] team0: Port device team_slave_1 added [ 162.973680][ T7728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.992385][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.999443][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.025712][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.038884][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.047710][ T7728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.056821][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.064591][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.091947][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.120305][ T7728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.131617][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.141190][ T12] hsr_slave_0: left promiscuous mode [ 163.146876][ T12] hsr_slave_1: left promiscuous mode [ 163.152877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.160635][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.168218][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.176024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.185474][ T12] hsr_slave_0: left promiscuous mode [ 163.191594][ T12] hsr_slave_1: left promiscuous mode [ 163.197243][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.204891][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.213378][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.220825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.231240][ T12] veth1_macvtap: left promiscuous mode [ 163.236853][ T55] Bluetooth: hci2: command tx timeout [ 163.237820][ T12] veth0_macvtap: left promiscuous mode [ 163.248266][ T12] veth1_vlan: left promiscuous mode [ 163.253609][ T12] veth0_vlan: left promiscuous mode [ 163.259577][ T12] veth1_macvtap: left promiscuous mode [ 163.265072][ T12] veth0_macvtap: left promiscuous mode [ 163.271288][ T12] veth1_vlan: left promiscuous mode [ 163.276882][ T12] veth0_vlan: left promiscuous mode [ 163.353112][ T7753] hsr_slave_0: entered promiscuous mode [ 163.359130][ T7753] hsr_slave_1: entered promiscuous mode [ 163.365682][ T7753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.375052][ T7753] Cannot create hsr debugfs directory [ 163.380547][ T7728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.393402][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.400516][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.442628][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.459520][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.545010][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.563839][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.625196][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.634304][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.751984][ T7629] veth0_vlan: entered promiscuous mode [ 163.773826][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.788820][ T7629] veth1_vlan: entered promiscuous mode [ 163.808244][ T7728] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.832766][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.839876][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.847387][ T55] Bluetooth: hci0: command tx timeout [ 163.859934][ T7629] veth0_macvtap: entered promiscuous mode [ 163.879035][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.886157][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.909982][ T7629] veth1_macvtap: entered promiscuous mode [ 163.925518][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.954173][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.964767][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.976435][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.986976][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.998104][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.026396][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.038440][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.048629][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.061754][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.072754][ T5868] usb 6-1: USB disconnect, device number 3 [ 164.072787][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.088627][ T55] Bluetooth: hci3: command tx timeout [ 164.109307][ T7675] veth0_vlan: entered promiscuous mode [ 164.119249][ T7629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.129644][ T7629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.139055][ T7629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.150047][ T7629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.184336][ T7675] veth1_vlan: entered promiscuous mode [ 164.233420][ T7753] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.262526][ T7753] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.276881][ T7753] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.288950][ T7753] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.322263][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.335004][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.348054][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.371117][ T7675] veth0_macvtap: entered promiscuous mode [ 164.379773][ T7675] veth1_macvtap: entered promiscuous mode [ 164.402803][ T12] IPVS: stop unused estimator thread 0... [ 164.433760][ T55] Bluetooth: hci1: command tx timeout [ 164.445617][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.456539][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.466881][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.477448][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.487342][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.498352][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.509340][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.520596][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.531468][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.542015][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.553306][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.563312][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.573937][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.585011][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.592524][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.600346][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.617486][ T7675] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.639306][ T7675] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.661839][ T7675] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.672549][ T7675] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.756368][ T7728] veth0_vlan: entered promiscuous mode [ 164.800201][ T7728] veth1_vlan: entered promiscuous mode [ 164.835414][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.884138][ T6018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.887466][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.898756][ T6018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.907395][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.914507][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.274588][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.281707][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.310666][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.326331][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.334714][ T5869] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 165.337322][ T7728] veth0_macvtap: entered promiscuous mode [ 165.349315][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.376056][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.388903][ T7728] veth1_macvtap: entered promiscuous mode [ 165.421559][ T7788] FAULT_INJECTION: forcing a failure. [ 165.421559][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.435462][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.1.381 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 165.435488][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.435498][ T7788] Call Trace: [ 165.435503][ T7788] [ 165.435509][ T7788] dump_stack_lvl+0x241/0x360 [ 165.435537][ T7788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.435557][ T7788] ? __pfx__printk+0x10/0x10 [ 165.435575][ T7788] ? rcu_is_watching+0x15/0xb0 [ 165.435595][ T7788] ? __pfx_lock_release+0x10/0x10 [ 165.435613][ T7788] ? lock_release+0xbf/0xa30 [ 165.435629][ T7788] ? __pfx_lock_release+0x10/0x10 [ 165.435646][ T7788] ? __pfx_lock_acquire+0x10/0x10 [ 165.435664][ T7788] should_fail_ex+0x3b0/0x4e0 [ 165.435679][ T7788] _copy_from_user+0x2d/0xb0 [ 165.435690][ T7788] core_sys_select+0x508/0x910 [ 165.435706][ T7788] ? __pfx_core_sys_select+0x10/0x10 [ 165.435729][ T7788] ? __pfx_set_user_sigmask+0x10/0x10 [ 165.435741][ T7788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.435756][ T7788] ? __fget_files+0x2a/0x410 [ 165.435773][ T7788] __se_sys_pselect6+0x321/0x3e0 [ 165.435795][ T7788] ? __pfx___se_sys_pselect6+0x10/0x10 [ 165.435808][ T7788] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.435823][ T7788] ? rcu_is_watching+0x15/0xb0 [ 165.435841][ T7788] ? __x64_sys_pselect6+0x21/0xf0 [ 165.435855][ T7788] do_syscall_64+0xf3/0x230 [ 165.435869][ T7788] ? clear_bhb_loop+0x35/0x90 [ 165.435886][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.435901][ T7788] RIP: 0033:0x7fb84338cd29 [ 165.435913][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.435923][ T7788] RSP: 002b:00007fb8441d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 165.435938][ T7788] RAX: ffffffffffffffda RBX: 00007fb8435a5fa0 RCX: 00007fb84338cd29 [ 165.435948][ T7788] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 165.435956][ T7788] RBP: 00007fb8441d8090 R08: 0000000000000000 R09: 0000000000000000 [ 165.435964][ T7788] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 165.435972][ T7788] R13: 0000000000000000 R14: 00007fb8435a5fa0 R15: 00007ffdcebf2ea8 [ 165.435984][ T7788] [ 165.441258][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.666526][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.677006][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.687854][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.698041][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.708976][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.720887][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.731849][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.743995][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.752162][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.777314][ T5869] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.788216][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.791935][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.796841][ T5869] usb 6-1: Product: syz [ 165.811719][ T5869] usb 6-1: Manufacturer: syz [ 165.816332][ T5869] usb 6-1: SerialNumber: syz [ 165.919271][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.942571][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.955440][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.968508][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.979647][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.172808][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.183690][ T55] Bluetooth: hci0: command tx timeout [ 166.352040][ T55] Bluetooth: hci3: command tx timeout [ 166.361362][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.376609][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.389274][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.420918][ T7728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.432400][ T7728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.442559][ T7728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.453845][ T7728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.530113][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.566106][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.588783][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.654398][ T55] Bluetooth: hci1: command tx timeout [ 166.660209][ T5869] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 166.660785][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.677844][ T5869] cdc_ncm 6-1:1.0: bind() failure [ 166.706593][ T5869] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 166.734964][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.742781][ T5869] cdc_ncm 6-1:1.1: bind() failure [ 166.753207][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.797098][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.809676][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.825233][ T12] bridge_slave_1: left allmulticast mode [ 166.847336][ T12] bridge_slave_1: left promiscuous mode [ 166.865131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.931815][ T12] bridge_slave_0: left allmulticast mode [ 166.939914][ T12] bridge_slave_0: left promiscuous mode [ 166.956786][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.560776][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.586147][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.602774][ T12] bond0 (unregistering): Released all slaves [ 168.044218][ T7753] veth0_vlan: entered promiscuous mode [ 168.060648][ T7753] veth1_vlan: entered promiscuous mode [ 168.105354][ T12] hsr_slave_0: left promiscuous mode [ 168.118454][ T12] hsr_slave_1: left promiscuous mode [ 168.134356][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.150009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.246758][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.272099][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.291540][ T12] veth1_macvtap: left promiscuous mode [ 168.297076][ T12] veth0_macvtap: left promiscuous mode [ 168.302707][ T12] veth1_vlan: left promiscuous mode [ 168.307980][ T12] veth0_vlan: left promiscuous mode [ 168.537454][ T55] Bluetooth: hci3: command tx timeout [ 168.713240][ T6830] usb 6-1: USB disconnect, device number 4 [ 168.811406][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.822892][ T7836] netlink: 60 bytes leftover after parsing attributes in process `syz.5.420'. [ 168.838054][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.875403][ T7839] FAULT_INJECTION: forcing a failure. [ 168.875403][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.890512][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.5.421 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 168.890523][ T55] Bluetooth: hci1: command tx timeout [ 168.890538][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.890547][ T7839] Call Trace: [ 168.890553][ T7839] [ 168.890559][ T7839] dump_stack_lvl+0x241/0x360 [ 168.890585][ T7839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.890607][ T7839] ? __pfx__printk+0x10/0x10 [ 168.890629][ T7839] ? __pfx_lock_release+0x10/0x10 [ 168.890647][ T7839] ? sb_end_write+0xe9/0x1c0 [ 168.890667][ T7839] should_fail_ex+0x3b0/0x4e0 [ 168.890685][ T7839] _copy_from_user+0x2d/0xb0 [ 168.890700][ T7839] __sys_bpf+0x1a4/0x810 [ 168.890717][ T7839] ? __pfx___sys_bpf+0x10/0x10 [ 168.890737][ T7839] ? ksys_write+0x242/0x2b0 [ 168.890758][ T7839] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.890777][ T7839] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.890795][ T7839] ? rcu_is_watching+0x15/0xb0 [ 168.890819][ T7839] __x64_sys_bpf+0x7c/0x90 [ 168.890833][ T7839] do_syscall_64+0xf3/0x230 [ 168.890852][ T7839] ? clear_bhb_loop+0x35/0x90 [ 168.890872][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.890892][ T7839] RIP: 0033:0x7f45e7f8cd29 [ 168.890906][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.890919][ T7839] RSP: 002b:00007f45e8ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.890936][ T7839] RAX: ffffffffffffffda RBX: 00007f45e81a5fa0 RCX: 00007f45e7f8cd29 [ 168.890948][ T7839] RDX: 0000000000000020 RSI: 0000000020001380 RDI: 0000000000000004 [ 168.890958][ T7839] RBP: 00007f45e8ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.890968][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.890978][ T7839] R13: 0000000000000000 R14: 00007f45e81a5fa0 R15: 00007ffe50da0d58 [ 168.890994][ T7839] [ 169.252715][ T7842] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 169.503957][ T7753] veth0_macvtap: entered promiscuous mode [ 169.915974][ T7753] veth1_macvtap: entered promiscuous mode [ 169.963478][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.998275][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.158792][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.225626][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.315887][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.326373][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.337024][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.349910][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.361203][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.370326][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.380802][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.391289][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.424129][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.453096][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.503741][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.524296][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.534748][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.590707][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.609658][ T7753] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.630535][ T7753] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.659615][ T7753] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.682134][ T7753] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.761142][ T55] Bluetooth: hci3: command tx timeout [ 170.918637][ T7868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.431'. [ 170.936232][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.962600][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.975929][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.995339][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.588375][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.626474][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.634454][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.643488][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.654782][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.663431][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.672773][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.756511][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.849932][ T5908] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 172.074859][ T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.269660][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.289898][ T5908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.301381][ T7881] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 172.325274][ T5908] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.336993][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.375064][ T5908] usb 7-1: Product: syz [ 172.381036][ T5908] usb 7-1: Manufacturer: syz [ 172.418486][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 172.423316][ T5908] usb 7-1: SerialNumber: syz [ 172.434402][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.454982][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 172.470423][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 163, changing to 7 [ 172.481567][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 9176, setting to 1024 [ 172.492747][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.503586][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.525786][ T47] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 172.535482][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.545917][ T47] usb 4-1: Product: syz [ 172.550104][ T47] usb 4-1: Manufacturer: syz [ 172.570488][ T47] usb 4-1: SerialNumber: syz [ 172.582549][ T47] usb 4-1: config 0 descriptor?? [ 172.602569][ T47] usb 4-1: ucan: probing device on interface #0 [ 172.608884][ T47] usb 4-1: ucan: invalid endpoint configuration [ 172.705571][ T47] usb 4-1: ucan: probe failed; try to update the device firmware [ 172.932548][ T7891] capability: warning: `syz.2.436' uses deprecated v2 capabilities in a way that may be insecure [ 172.946192][ T7872] FAULT_INJECTION: forcing a failure. [ 172.946192][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 173.240669][ T6119] usb 4-1: USB disconnect, device number 5 [ 173.244509][ T7876] chnl_net:caif_netlink_parms(): no params data found [ 173.255214][ T7872] CPU: 0 UID: 0 PID: 7872 Comm: syz.6.407 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 173.255240][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 173.255250][ T7872] Call Trace: [ 173.255257][ T7872] [ 173.255263][ T7872] dump_stack_lvl+0x241/0x360 [ 173.255292][ T7872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.255314][ T7872] ? __pfx__printk+0x10/0x10 [ 173.255338][ T7872] should_fail_ex+0x3b0/0x4e0 [ 173.255357][ T7872] should_failslab+0xac/0x100 [ 173.255376][ T7872] __kmalloc_noprof+0xdd/0x4c0 [ 173.255395][ T7872] ? kstrtouint_from_user+0x128/0x190 [ 173.255412][ T7872] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 173.255435][ T7872] tomoyo_realpath_from_path+0xcf/0x5e0 [ 173.255457][ T7872] tomoyo_path_number_perm+0x236/0x860 [ 173.255475][ T7872] ? proc_fail_nth_write+0x24f/0x2d0 [ 173.255492][ T7872] ? tomoyo_path_number_perm+0x206/0x860 [ 173.255508][ T7872] ? __pfx_lock_release+0x10/0x10 [ 173.255524][ T7872] ? trace_contention_end+0x3c/0x120 [ 173.255544][ T7872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.255562][ T7872] ? preempt_count_add+0x93/0x190 [ 173.255591][ T7872] ? fput+0x21b/0x290 [ 173.255610][ T7872] ? __fget_files+0x2a/0x410 [ 173.255629][ T7872] ? __fget_files+0x2a/0x410 [ 173.255648][ T7872] security_file_ioctl+0xc6/0x2a0 [ 173.255669][ T7872] __se_sys_ioctl+0x46/0x170 [ 173.255692][ T7872] do_syscall_64+0xf3/0x230 [ 173.255711][ T7872] ? clear_bhb_loop+0x35/0x90 [ 173.255732][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.255753][ T7872] RIP: 0033:0x7f542b18c92b [ 173.255768][ T7872] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 173.255781][ T7872] RSP: 002b:00007f542bf67f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.255798][ T7872] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f542b18c92b [ 173.255810][ T7872] RDX: 00007f542bf68ff0 RSI: 0000000080085502 RDI: 0000000000000006 [ 173.255822][ T7872] RBP: 00007f542bf6a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.255832][ T7872] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 173.255842][ T7872] R13: 0000000000000000 R14: 00007f542b3a5fa0 R15: 00007ffecdf30068 [ 173.255860][ T7872] [ 173.256520][ T7872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.311952][ T12] bridge_slave_1: left allmulticast mode [ 173.632299][ T12] bridge_slave_1: left promiscuous mode [ 173.638576][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.656435][ T12] bridge_slave_0: left allmulticast mode [ 173.793630][ T5908] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 173.796805][ T12] bridge_slave_0: left promiscuous mode [ 173.806383][ T5908] cdc_ncm 7-1:1.0: bind() failure [ 173.808274][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.828307][ T5908] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 174.140070][ T55] Bluetooth: hci0: command tx timeout [ 174.148917][ T5908] cdc_ncm 7-1:1.1: bind() failure [ 175.189514][ T7905] netlink: 108 bytes leftover after parsing attributes in process `syz.2.440'. [ 175.209253][ T7905] netlink: 108 bytes leftover after parsing attributes in process `syz.2.440'. [ 175.218796][ T7905] netlink: 108 bytes leftover after parsing attributes in process `syz.2.440'. [ 175.285555][ T7909] FAULT_INJECTION: forcing a failure. [ 175.285555][ T7909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.299922][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.3.441 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 175.299946][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 175.299956][ T7909] Call Trace: [ 175.299961][ T7909] [ 175.299967][ T7909] dump_stack_lvl+0x241/0x360 [ 175.299992][ T7909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.300014][ T7909] ? __pfx__printk+0x10/0x10 [ 175.300032][ T7909] ? lock_acquire+0xe3/0x550 [ 175.300052][ T7909] ? __pfx_lock_release+0x10/0x10 [ 175.300067][ T7909] ? rcu_is_watching+0x15/0xb0 [ 175.300088][ T7909] ? lock_release+0xbf/0xa30 [ 175.300106][ T7909] should_fail_ex+0x3b0/0x4e0 [ 175.300124][ T7909] _copy_from_user+0x2d/0xb0 [ 175.300139][ T7909] kstrtouint_from_user+0xc6/0x190 [ 175.300158][ T7909] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 175.300178][ T7909] ? __pfx_lock_acquire+0x10/0x10 [ 175.300194][ T7909] ? __pfx___might_resched+0x10/0x10 [ 175.300211][ T7909] proc_fail_nth_write+0xaa/0x2d0 [ 175.300228][ T7909] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.300242][ T7909] ? trace_contention_end+0x3c/0x120 [ 175.300262][ T7909] ? bpf_lsm_file_permission+0x9/0x10 [ 175.300278][ T7909] ? preempt_count_add+0x93/0x190 [ 175.300292][ T7909] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.300308][ T7909] vfs_write+0x29f/0xd10 [ 175.300330][ T7909] ? fdget_pos+0x254/0x320 [ 175.300347][ T7909] ? __mutex_unlock_slowpath+0x227/0x800 [ 175.300367][ T7909] ? __pfx_vfs_write+0x10/0x10 [ 175.300389][ T7909] ? __fget_files+0x2a/0x410 [ 175.300407][ T7909] ? __fget_files+0x395/0x410 [ 175.300424][ T7909] ? __fget_files+0x2a/0x410 [ 175.300443][ T7909] ksys_write+0x18f/0x2b0 [ 175.300463][ T7909] ? __pfx_ksys_write+0x10/0x10 [ 175.300484][ T7909] ? rcu_is_watching+0x15/0xb0 [ 175.300505][ T7909] ? rcu_is_watching+0x15/0xb0 [ 175.300526][ T7909] do_syscall_64+0xf3/0x230 [ 175.300545][ T7909] ? clear_bhb_loop+0x35/0x90 [ 175.300566][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.300585][ T7909] RIP: 0033:0x7f262c38b7df [ 175.300599][ T7909] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 175.300610][ T7909] RSP: 002b:00007f262d2a0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 175.300625][ T7909] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f262c38b7df [ 175.300634][ T7909] RDX: 0000000000000001 RSI: 00007f262d2a00a0 RDI: 0000000000000004 [ 175.300641][ T7909] RBP: 00007f262d2a0090 R08: 0000000000000000 R09: 0000000000000000 [ 175.300650][ T7909] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 175.300659][ T7909] R13: 0000000000000001 R14: 00007f262c5a6080 R15: 00007ffefc54ec08 [ 175.300676][ T7909] [ 175.619215][ T7911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.442'. [ 175.808627][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.869912][ T6830] usb 7-1: USB disconnect, device number 3 [ 175.902162][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.911914][ T12] bond0 (unregistering): Released all slaves [ 176.227409][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.234936][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.242792][ T7876] bridge_slave_0: entered allmulticast mode [ 176.331163][ T55] Bluetooth: hci0: command tx timeout [ 176.706808][ T7876] bridge_slave_0: entered promiscuous mode [ 176.720612][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.747109][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.771634][ T7876] bridge_slave_1: entered allmulticast mode [ 176.805518][ T7876] bridge_slave_1: entered promiscuous mode [ 176.911658][ T7876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.983274][ T7876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.173112][ T7931] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 177.604358][ T7935] FAULT_INJECTION: forcing a failure. [ 177.604358][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 177.673825][ T7876] team0: Port device team_slave_0 added [ 177.685646][ T7935] CPU: 0 UID: 0 PID: 7935 Comm: syz.3.450 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 177.685670][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.685677][ T7935] Call Trace: [ 177.685681][ T7935] [ 177.685685][ T7935] dump_stack_lvl+0x241/0x360 [ 177.685704][ T7935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.685717][ T7935] ? __pfx__printk+0x10/0x10 [ 177.685730][ T7935] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 177.685740][ T7935] ? __pfx___might_resched+0x10/0x10 [ 177.685750][ T7935] ? __kernel_text_address+0xd/0x40 [ 177.685763][ T7935] should_fail_ex+0x3b0/0x4e0 [ 177.685774][ T7935] should_failslab+0xac/0x100 [ 177.685786][ T7935] kmem_cache_alloc_node_noprof+0x77/0x380 [ 177.685797][ T7935] ? __alloc_skb+0x1c3/0x440 [ 177.685809][ T7935] ? stack_trace_save+0x118/0x1d0 [ 177.685818][ T7935] __alloc_skb+0x1c3/0x440 [ 177.685830][ T7935] ? __pfx___alloc_skb+0x10/0x10 [ 177.685842][ T7935] tipc_nl_compat_doit+0x170/0x610 [ 177.685854][ T7935] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 177.685882][ T7935] ? safesetid_security_capable+0xb2/0x1d0 [ 177.685894][ T7935] ? bpf_lsm_capable+0x9/0x10 [ 177.685904][ T7935] ? security_capable+0x7e/0x2d0 [ 177.685918][ T7935] tipc_nl_compat_recv+0xe25/0x14c0 [ 177.685930][ T7935] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 177.685940][ T7935] ? __pfx___mutex_lock+0x10/0x10 [ 177.685950][ T7935] ? rcu_is_watching+0x15/0xb0 [ 177.685963][ T7935] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 177.685975][ T7935] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 177.685985][ T7935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.685996][ T7935] ? lock_release+0xbf/0xa30 [ 177.686007][ T7935] ? rcu_is_watching+0x15/0xb0 [ 177.686019][ T7935] ? genl_get_cmd+0x71c/0xbe0 [ 177.686030][ T7935] genl_rcv_msg+0xb14/0xec0 [ 177.686041][ T7935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.686050][ T7935] ? __dev_queue_xmit+0x1775/0x3f50 [ 177.686063][ T7935] ? kasan_save_track+0x51/0x80 [ 177.686073][ T7935] ? ____sys_sendmsg+0x52a/0x7e0 [ 177.686089][ T7935] ? __pfx_lock_acquire+0x10/0x10 [ 177.686099][ T7935] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 177.686108][ T7935] ? __pfx___might_resched+0x10/0x10 [ 177.686119][ T7935] netlink_rcv_skb+0x1e3/0x430 [ 177.686131][ T7935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.686141][ T7935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.686152][ T7935] ? lock_release+0xbf/0xa30 [ 177.686164][ T7935] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 177.686179][ T7935] genl_rcv+0x28/0x40 [ 177.686187][ T7935] netlink_unicast+0x7f6/0x990 [ 177.686199][ T7935] ? __pfx_netlink_unicast+0x10/0x10 [ 177.686210][ T7935] ? __virt_addr_valid+0x45f/0x530 [ 177.686222][ T7935] ? __phys_addr_symbol+0x2f/0x70 [ 177.686233][ T7935] ? __check_object_size+0x47a/0x730 [ 177.686245][ T7935] netlink_sendmsg+0x8e4/0xcb0 [ 177.686259][ T7935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.686272][ T7935] ? lock_release+0xbf/0xa30 [ 177.686283][ T7935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.686295][ T7935] __sock_sendmsg+0x221/0x270 [ 177.686305][ T7935] ____sys_sendmsg+0x52a/0x7e0 [ 177.686318][ T7935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.686329][ T7935] ? __fget_files+0x2a/0x410 [ 177.686341][ T7935] ? __fget_files+0x2a/0x410 [ 177.686352][ T7935] __sys_sendmsg+0x269/0x350 [ 177.686363][ T7935] ? bpf_lsm_file_permission+0x9/0x10 [ 177.686374][ T7935] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.686388][ T7935] ? do_sys_openat2+0x17a/0x1d0 [ 177.686403][ T7935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.686414][ T7935] ? rcu_is_watching+0x15/0xb0 [ 177.686427][ T7935] ? rcu_is_watching+0x15/0xb0 [ 177.686439][ T7935] do_syscall_64+0xf3/0x230 [ 177.686454][ T7935] ? clear_bhb_loop+0x35/0x90 [ 177.686467][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.686478][ T7935] RIP: 0033:0x7f262c38cd29 [ 177.686486][ T7935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.686494][ T7935] RSP: 002b:00007f262d2c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.686505][ T7935] RAX: ffffffffffffffda RBX: 00007f262c5a5fa0 RCX: 00007f262c38cd29 [ 177.686512][ T7935] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 177.686518][ T7935] RBP: 00007f262d2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 177.686524][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.686529][ T7935] R13: 0000000000000000 R14: 00007f262c5a5fa0 R15: 00007ffefc54ec08 [ 177.686538][ T7935] [ 178.429592][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.430423][ T7876] team0: Port device team_slave_1 added [ 178.443851][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.444486][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.451'. [ 178.482122][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.498398][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.544898][ T7945] FAULT_INJECTION: forcing a failure. [ 178.544898][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 178.557811][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.3.453 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 178.557836][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.557849][ T7945] Call Trace: [ 178.557856][ T7945] [ 178.557862][ T7945] dump_stack_lvl+0x241/0x360 [ 178.557899][ T7945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.557921][ T7945] ? __pfx__printk+0x10/0x10 [ 178.557942][ T7945] ? tomoyo_get_local_path+0x662/0x7b0 [ 178.557965][ T7945] ? __pfx___might_resched+0x10/0x10 [ 178.557984][ T7945] should_fail_ex+0x3b0/0x4e0 [ 178.558002][ T7945] should_failslab+0xac/0x100 [ 178.558021][ T7945] __kmalloc_noprof+0xdd/0x4c0 [ 178.558039][ T7945] ? tomoyo_encode+0x26f/0x540 [ 178.558061][ T7945] tomoyo_encode+0x26f/0x540 [ 178.558084][ T7945] tomoyo_realpath_from_path+0x59e/0x5e0 [ 178.558110][ T7945] tomoyo_check_open_permission+0x258/0x4f0 [ 178.558130][ T7945] ? tomoyo_check_open_permission+0x207/0x4f0 [ 178.558150][ T7945] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 178.558174][ T7945] ? kasan_check_range+0x82/0x290 [ 178.558199][ T7945] ? mnt_get_write_access+0x68/0x2b0 [ 178.558220][ T7945] ? mnt_get_write_access+0x68/0x2b0 [ 178.558240][ T7945] ? tomoyo_file_open+0x165/0x220 [ 178.558255][ T7945] ? mnt_get_write_access+0x226/0x2b0 [ 178.558276][ T7945] security_file_open+0xac/0x250 [ 178.558297][ T7945] do_dentry_open+0x320/0x1960 [ 178.558318][ T7945] ? vfs_open+0x31/0x370 [ 178.558336][ T7945] vfs_open+0x3b/0x370 [ 178.558354][ T7945] dentry_open+0x61/0xa0 [ 178.558372][ T7945] do_mq_open+0x613/0x7d0 [ 178.558395][ T7945] ? __pfx_do_mq_open+0x10/0x10 [ 178.558414][ T7945] ? preempt_schedule_irq+0x144/0x1c0 [ 178.558434][ T7945] __x64_sys_mq_open+0x164/0x1b0 [ 178.558453][ T7945] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 178.558475][ T7945] ? trace_irq_enable+0x2c/0x120 [ 178.558494][ T7945] do_syscall_64+0xf3/0x230 [ 178.558518][ T7945] ? clear_bhb_loop+0x35/0x90 [ 178.558540][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.558560][ T7945] RIP: 0033:0x7f262c38cd29 [ 178.558578][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.558592][ T7945] RSP: 002b:00007f262d27f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 178.558610][ T7945] RAX: ffffffffffffffda RBX: 00007f262c5a6160 RCX: 00007f262c38cd29 [ 178.558622][ T7945] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 00000000205a1ffb [ 178.558633][ T7945] RBP: 00007f262d27f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.558643][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.558653][ T7945] R13: 0000000000000000 R14: 00007f262c5a6160 R15: 00007ffefc54ec08 [ 178.558670][ T7945] [ 178.558734][ T7945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.679532][ T5828] Bluetooth: hci0: command tx timeout [ 178.790257][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.849195][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.937541][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.947555][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.973800][ T7876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.995522][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.003571][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.030471][ T7876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.100767][ T12] hsr_slave_0: left promiscuous mode [ 179.106813][ T12] hsr_slave_1: left promiscuous mode [ 179.113154][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.122421][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.130518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.137996][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.147346][ T12] veth1_macvtap: left promiscuous mode [ 179.152995][ T12] veth0_macvtap: left promiscuous mode [ 179.158564][ T12] veth1_vlan: left promiscuous mode [ 179.163930][ T12] veth0_vlan: left promiscuous mode [ 179.686398][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.696760][ T12] team0 (unregistering): Port device team_slave_0 removed [ 179.803001][ T7954] tipc: Started in network mode [ 179.808145][ T7954] tipc: Node identity 4, cluster identity 4711 [ 179.814909][ T7954] tipc: Node number set to 4 [ 179.851031][ T7876] hsr_slave_0: entered promiscuous mode [ 179.858146][ T7876] hsr_slave_1: entered promiscuous mode [ 179.865727][ T7876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.873854][ T7876] Cannot create hsr debugfs directory [ 181.005955][ T55] Bluetooth: hci0: command tx timeout [ 181.022578][ T55] Bluetooth: hci4: command tx timeout [ 181.424363][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.455753][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.578911][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.601779][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.604370][ T7942] chnl_net:caif_netlink_parms(): no params data found [ 181.609126][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.624154][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.766764][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.787125][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.794468][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.801891][ T7942] bridge_slave_0: entered allmulticast mode [ 181.808876][ T7942] bridge_slave_0: entered promiscuous mode [ 181.819206][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.826664][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.835529][ T7942] bridge_slave_1: entered allmulticast mode [ 181.846257][ T7942] bridge_slave_1: entered promiscuous mode [ 181.899479][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.964878][ T7942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.012366][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.030142][ T7942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.059285][ T7942] team0: Port device team_slave_0 added [ 182.065663][ T7876] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 182.074734][ T7876] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 182.085290][ T7942] team0: Port device team_slave_1 added [ 182.094529][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.106323][ T7876] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 182.119175][ T7876] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 182.172447][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.179600][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.206236][ T7942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.221199][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.228190][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.254320][ T7942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.352171][ T7973] chnl_net:caif_netlink_parms(): no params data found [ 182.370469][ T7942] hsr_slave_0: entered promiscuous mode [ 182.377673][ T7942] hsr_slave_1: entered promiscuous mode [ 182.384826][ T7942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.393120][ T7942] Cannot create hsr debugfs directory [ 182.563258][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.093633][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.101442][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.111823][ T7973] bridge_slave_0: entered allmulticast mode [ 183.120948][ T7973] bridge_slave_0: entered promiscuous mode [ 183.130232][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.153712][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.161099][ T5825] Bluetooth: hci0: command tx timeout [ 183.169879][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.177803][ T7973] bridge_slave_1: entered allmulticast mode [ 183.187112][ T7973] bridge_slave_1: entered promiscuous mode [ 183.202041][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.212516][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.220087][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.228269][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.230209][ T7973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.245423][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.255951][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.258311][ T5828] Bluetooth: hci4: command tx timeout [ 183.277678][ T7973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.298436][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.318792][ T7973] team0: Port device team_slave_0 added [ 183.332077][ T7876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.341666][ T7973] team0: Port device team_slave_1 added [ 183.361971][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.384527][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.392241][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.419449][ T7973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.467892][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.475040][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.503631][ T7973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.515967][ T7997] FAULT_INJECTION: forcing a failure. [ 183.515967][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.529457][ T7997] CPU: 1 UID: 0 PID: 7997 Comm: syz.3.468 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 183.529479][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 183.529488][ T7997] Call Trace: [ 183.529494][ T7997] [ 183.529499][ T7997] dump_stack_lvl+0x241/0x360 [ 183.529525][ T7997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.529547][ T7997] ? __pfx__printk+0x10/0x10 [ 183.529568][ T7997] ? __pfx_lock_release+0x10/0x10 [ 183.529587][ T7997] should_fail_ex+0x3b0/0x4e0 [ 183.529602][ T7997] _copy_from_user+0x2d/0xb0 [ 183.529615][ T7997] sctp_setsockopt+0xcc/0x11c0 [ 183.529632][ T7997] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 183.529649][ T7997] do_sock_setsockopt+0x3af/0x720 [ 183.529672][ T7997] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 183.529691][ T7997] ? __fget_files+0x395/0x410 [ 183.529708][ T7997] ? __fget_files+0x2a/0x410 [ 183.529726][ T7997] __x64_sys_setsockopt+0x1ee/0x280 [ 183.529747][ T7997] do_syscall_64+0xf3/0x230 [ 183.529764][ T7997] ? clear_bhb_loop+0x35/0x90 [ 183.529785][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.529804][ T7997] RIP: 0033:0x7f262c38cd29 [ 183.529817][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.529829][ T7997] RSP: 002b:00007f262d2c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.529846][ T7997] RAX: ffffffffffffffda RBX: 00007f262c5a5fa0 RCX: 00007f262c38cd29 [ 183.529858][ T7997] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 183.529868][ T7997] RBP: 00007f262d2c1090 R08: 000000000000001c R09: 0000000000000000 [ 183.529878][ T7997] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 183.529888][ T7997] R13: 0000000000000000 R14: 00007f262c5a5fa0 R15: 00007ffefc54ec08 [ 183.529905][ T7997] [ 183.534129][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.559348][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 183.606853][ T7942] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.645316][ T7999] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 183.760907][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.768050][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.797083][ T7942] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.807843][ T7942] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.827208][ T7942] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.844678][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.851846][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.856002][ T5828] Bluetooth: hci2: command tx timeout [ 183.894410][ T7973] hsr_slave_0: entered promiscuous mode [ 183.900794][ T7973] hsr_slave_1: entered promiscuous mode [ 183.906680][ T7973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.915175][ T7973] Cannot create hsr debugfs directory [ 184.010903][ T12] bridge_slave_1: left allmulticast mode [ 184.018628][ T12] bridge_slave_1: left promiscuous mode [ 184.025746][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.044988][ T12] bridge_slave_0: left allmulticast mode [ 184.051534][ T12] bridge_slave_0: left promiscuous mode [ 184.057314][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.069135][ T12] bridge_slave_1: left allmulticast mode [ 184.075295][ T12] bridge_slave_1: left promiscuous mode [ 184.081612][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.090283][ T12] bridge_slave_0: left allmulticast mode [ 184.096529][ T12] bridge_slave_0: left promiscuous mode [ 184.103695][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.286200][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.297000][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.306481][ T12] bond0 (unregistering): Released all slaves [ 184.317977][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.328899][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.339391][ T12] bond0 (unregistering): Released all slaves [ 184.398771][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 184.482279][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.511584][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.520939][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.528236][ T7994] bridge_slave_0: entered allmulticast mode [ 184.536704][ T7994] bridge_slave_0: entered promiscuous mode [ 184.548345][ T7942] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.563604][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.570737][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.579259][ T7994] bridge_slave_1: entered allmulticast mode [ 184.586435][ T7994] bridge_slave_1: entered promiscuous mode [ 184.606683][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.620276][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.637744][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.644865][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.655237][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.662349][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.681488][ T7994] team0: Port device team_slave_0 added [ 184.689038][ T7994] team0: Port device team_slave_1 added [ 184.735996][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.744531][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.770815][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.785199][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.793517][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.822871][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.879523][ T7942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.893316][ T7942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.913121][ T7876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.931788][ T7994] hsr_slave_0: entered promiscuous mode [ 184.939481][ T7994] hsr_slave_1: entered promiscuous mode [ 184.946379][ T7994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.953950][ T7994] Cannot create hsr debugfs directory [ 185.009491][ T8018] netlink: 'syz.3.471': attribute type 15 has an invalid length. [ 185.026571][ T8018] netlink: 723 bytes leftover after parsing attributes in process `syz.3.471'. [ 185.106610][ T7973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.126150][ T7973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.154564][ T7973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.210259][ T7973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.239346][ T12] hsr_slave_0: left promiscuous mode [ 185.247878][ T12] hsr_slave_1: left promiscuous mode [ 185.253582][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.265743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.275888][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.284128][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.294377][ T12] hsr_slave_0: left promiscuous mode [ 185.300458][ T12] hsr_slave_1: left promiscuous mode [ 185.306113][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.313665][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.323656][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.331417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.343017][ T12] veth1_macvtap: left promiscuous mode [ 185.348549][ T12] veth0_macvtap: left promiscuous mode [ 185.354481][ T12] veth1_vlan: left promiscuous mode [ 185.359760][ T12] veth0_vlan: left promiscuous mode [ 185.366316][ T12] veth1_macvtap: left promiscuous mode [ 185.371827][ T12] veth0_macvtap: left promiscuous mode [ 185.377863][ T12] veth1_vlan: left promiscuous mode [ 185.383135][ T12] veth0_vlan: left promiscuous mode [ 185.470412][ T5828] Bluetooth: hci3: command tx timeout [ 185.472534][ T5825] Bluetooth: hci4: command tx timeout [ 185.618219][ T12] team0 (unregistering): Port device team_slave_1 removed [ 185.643505][ T12] team0 (unregistering): Port device team_slave_0 removed [ 185.862759][ T12] team0 (unregistering): Port device team_slave_1 removed [ 185.891391][ T12] team0 (unregistering): Port device team_slave_0 removed [ 186.069399][ T5825] Bluetooth: hci2: command tx timeout [ 186.089708][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.108714][ T7876] veth0_vlan: entered promiscuous mode [ 186.157277][ T7876] veth1_vlan: entered promiscuous mode [ 186.201787][ T7876] veth0_macvtap: entered promiscuous mode [ 186.217343][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.243107][ T7876] veth1_macvtap: entered promiscuous mode [ 186.282790][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.300324][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.307451][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.317714][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.324815][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.361458][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.372555][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.383011][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.393796][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.405233][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.416310][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.427272][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.438409][ T7876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.448903][ T7876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.459531][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.477488][ T7876] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.486570][ T7876] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.495250][ T7876] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.504462][ T7876] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.548464][ T7994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 186.558013][ T7994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 186.577990][ T7994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 186.590195][ T7994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 186.648145][ T7942] veth0_vlan: entered promiscuous mode [ 186.674644][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.693695][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.702937][ T7942] veth1_vlan: entered promiscuous mode [ 186.758628][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.774584][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.782656][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.835686][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.871463][ T7942] veth0_macvtap: entered promiscuous mode [ 186.883200][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.893335][ T7942] veth1_macvtap: entered promiscuous mode [ 186.926791][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.952170][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.975201][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.006622][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.031035][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.042328][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.046873][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.049602][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.061594][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.068619][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.081829][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.091477][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.094446][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.105540][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.107183][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.134185][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.141314][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.153375][ T8053] syz_tun: entered allmulticast mode [ 187.174280][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.189353][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.200702][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.211987][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.222256][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.232758][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.243661][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.254693][ T7942] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.263530][ T7942] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.273607][ T7942] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.282580][ T7942] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.296167][ T8052] syz_tun: left allmulticast mode [ 187.314340][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.408671][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.434586][ T7973] veth0_vlan: entered promiscuous mode [ 187.500815][ T7973] veth1_vlan: entered promiscuous mode [ 187.563281][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.609506][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.617359][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.669258][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.677192][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.688919][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.697674][ T5828] Bluetooth: hci4: command tx timeout [ 187.701465][ T5825] Bluetooth: hci3: command tx timeout [ 187.717317][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.730553][ T8050] chnl_net:caif_netlink_parms(): no params data found [ 188.222742][ T7973] veth0_macvtap: entered promiscuous mode [ 188.270318][ T7973] veth1_macvtap: entered promiscuous mode [ 188.293026][ T5825] Bluetooth: hci2: command tx timeout [ 188.383916][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.398325][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.410422][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.420293][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.430906][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.445451][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.456575][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.469631][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.480964][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.494252][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.534255][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.547420][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.558480][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.569065][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.579394][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.589925][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.599868][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.634438][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.654673][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.677353][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.684502][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.699724][ T8050] bridge_slave_0: entered allmulticast mode [ 188.709902][ T8050] bridge_slave_0: entered promiscuous mode [ 188.738035][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.752204][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.760258][ T8050] bridge_slave_1: entered allmulticast mode [ 188.776137][ T8050] bridge_slave_1: entered promiscuous mode [ 188.815030][ T7973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.829047][ T7973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.829370][ T8092] FAULT_INJECTION: forcing a failure. [ 188.829370][ T8092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.838079][ T7973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.860989][ T7973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.877141][ T8092] CPU: 0 UID: 0 PID: 8092 Comm: syz.7.482 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 188.877164][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 188.877174][ T8092] Call Trace: [ 188.877180][ T8092] [ 188.877186][ T8092] dump_stack_lvl+0x241/0x360 [ 188.877213][ T8092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.877234][ T8092] ? __pfx__printk+0x10/0x10 [ 188.877255][ T8092] ? snprintf+0xda/0x120 [ 188.877268][ T8092] should_fail_ex+0x3b0/0x4e0 [ 188.877285][ T8092] _copy_to_user+0x31/0xb0 [ 188.877297][ T8092] simple_read_from_buffer+0xca/0x150 [ 188.877316][ T8092] proc_fail_nth_read+0x1e9/0x250 [ 188.877334][ T8092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.877348][ T8092] ? trace_contention_end+0x3c/0x120 [ 188.877369][ T8092] ? rw_verify_area+0x243/0x630 [ 188.877387][ T8092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.877403][ T8092] vfs_read+0x1f8/0xb40 [ 188.877423][ T8092] ? do_sock_setsockopt+0x3e2/0x720 [ 188.877443][ T8092] ? fdget_pos+0x254/0x320 [ 188.877460][ T8092] ? __pfx___mutex_lock+0x10/0x10 [ 188.877477][ T8092] ? __pfx_vfs_read+0x10/0x10 [ 188.877498][ T8092] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 188.877517][ T8092] ? __fget_files+0x2a/0x410 [ 188.877535][ T8092] ? __fget_files+0x395/0x410 [ 188.877552][ T8092] ? __fget_files+0x2a/0x410 [ 188.877573][ T8092] ksys_read+0x18f/0x2b0 [ 188.877596][ T8092] ? __pfx_ksys_read+0x10/0x10 [ 188.877615][ T8092] ? rcu_is_watching+0x15/0xb0 [ 188.877636][ T8092] ? rcu_is_watching+0x15/0xb0 [ 188.877656][ T8092] do_syscall_64+0xf3/0x230 [ 188.877672][ T8092] ? clear_bhb_loop+0x35/0x90 [ 188.877692][ T8092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.877712][ T8092] RIP: 0033:0x7f8535f8b73c [ 188.877725][ T8092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 188.877748][ T8092] RSP: 002b:00007f8536ec8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.877764][ T8092] RAX: ffffffffffffffda RBX: 00007f85361a5fa0 RCX: 00007f8535f8b73c [ 188.877774][ T8092] RDX: 000000000000000f RSI: 00007f8536ec80a0 RDI: 0000000000000004 [ 188.877782][ T8092] RBP: 00007f8536ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 188.877790][ T8092] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 188.877800][ T8092] R13: 0000000000000000 R14: 00007f85361a5fa0 R15: 00007ffcf96feb58 [ 188.877814][ T8092] [ 188.931772][ T8095] Bluetooth: MGMT ver 1.23 [ 189.137950][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.160628][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.173393][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.198556][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.230929][ T8050] team0: Port device team_slave_0 added [ 189.248164][ T8050] team0: Port device team_slave_1 added [ 189.291130][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.319240][ T5825] Bluetooth: hci1: command tx timeout [ 189.325833][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.337240][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.355493][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.362739][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.389420][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.407637][ T7994] veth0_vlan: entered promiscuous mode [ 189.415717][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.422669][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.449295][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.479308][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.490659][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.499658][ T8050] hsr_slave_0: entered promiscuous mode [ 189.505922][ T8050] hsr_slave_1: entered promiscuous mode [ 189.512524][ T7994] veth1_vlan: entered promiscuous mode [ 189.560289][ T8100] netlink: 68 bytes leftover after parsing attributes in process `syz.4.461'. [ 189.595971][ T12] bridge_slave_1: left allmulticast mode [ 189.603364][ T12] bridge_slave_1: left promiscuous mode [ 189.617823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.630229][ T12] bridge_slave_0: left allmulticast mode [ 189.635996][ T12] bridge_slave_0: left promiscuous mode [ 189.641993][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.663953][ T12] bridge_slave_1: left allmulticast mode [ 189.669890][ T12] bridge_slave_1: left promiscuous mode [ 189.677320][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.705047][ T12] bridge_slave_0: left allmulticast mode [ 189.715698][ T12] bridge_slave_0: left promiscuous mode [ 189.723113][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.918008][ T5825] Bluetooth: hci3: command tx timeout [ 190.761985][ T5825] Bluetooth: hci2: command tx timeout [ 190.768182][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.793285][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.817577][ T12] bond0 (unregistering): Released all slaves [ 190.842505][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.868295][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.895892][ T12] bond0 (unregistering): Released all slaves [ 191.006414][ T7994] veth0_macvtap: entered promiscuous mode [ 191.084205][ T7994] veth1_macvtap: entered promiscuous mode [ 191.129633][ T12] tipc: Left network mode [ 191.147434][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.162173][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.173776][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.186696][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.196831][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.210464][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.224296][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.235243][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.247516][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.259768][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.284034][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.313046][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.329291][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.341947][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.349269][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.360515][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.367587][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.377829][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.384968][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.395764][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.405784][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.416380][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.421139][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.426823][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.436644][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.451647][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.452067][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.478929][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.497806][ T7994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.506963][ T7994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.516354][ T7994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.526506][ T7994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.542467][ T5828] Bluetooth: hci1: command tx timeout [ 191.641790][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.650082][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.141332][ T5828] Bluetooth: hci3: command tx timeout [ 193.680263][ T5828] Bluetooth: hci0: command tx timeout [ 193.765750][ T5828] Bluetooth: hci1: command tx timeout [ 195.903896][ T5828] Bluetooth: hci0: command tx timeout [ 195.989422][ T5828] Bluetooth: hci1: command tx timeout [ 198.127514][ T5828] Bluetooth: hci0: command tx timeout [ 200.351216][ T5828] Bluetooth: hci0: command tx timeout [ 202.320041][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.050956][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.059763][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.067181][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.075620][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.083053][ T5825] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.090729][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.845958][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.853256][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.860869][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.868624][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.876284][ T5828] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.883709][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.298382][ T5825] Bluetooth: hci5: command tx timeout [ 213.094433][ T5825] Bluetooth: hci6: command tx timeout [ 213.522023][ T5825] Bluetooth: hci5: command tx timeout [ 215.318813][ T5825] Bluetooth: hci6: command tx timeout [ 215.745701][ T5825] Bluetooth: hci5: command tx timeout [ 217.541709][ T5825] Bluetooth: hci6: command tx timeout [ 217.969292][ T5825] Bluetooth: hci5: command tx timeout [ 219.765386][ T5825] Bluetooth: hci6: command tx timeout [ 248.035519][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.046026][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.053757][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.061409][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.070353][ T5828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 248.077659][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.297735][ T5825] Bluetooth: hci7: command tx timeout [ 251.473960][ T5828] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 251.481312][ T5828] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 251.488522][ T5828] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 251.496651][ T5828] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 251.504103][ T5828] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 251.511541][ T5828] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 252.532050][ T5825] Bluetooth: hci7: command tx timeout [ 253.718945][ T5825] Bluetooth: hci8: command tx timeout [ 254.745010][ T5825] Bluetooth: hci7: command tx timeout [ 255.482219][ T5828] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 255.489608][ T5828] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 255.496908][ T5828] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 255.504734][ T5828] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 255.512470][ T5828] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 255.522650][ T5828] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 255.942467][ T5825] Bluetooth: hci8: command tx timeout [ 256.969383][ T5825] Bluetooth: hci7: command tx timeout [ 257.738945][ T5825] Bluetooth: hci9: command tx timeout [ 258.166176][ T5825] Bluetooth: hci8: command tx timeout [ 259.962103][ T5825] Bluetooth: hci9: command tx timeout [ 260.389627][ T5825] Bluetooth: hci8: command tx timeout [ 262.185733][ T5825] Bluetooth: hci9: command tx timeout [ 264.409404][ T5825] Bluetooth: hci9: command tx timeout [ 268.003090][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.530113][ T5828] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 273.537412][ T5828] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 273.547007][ T5828] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 273.554972][ T5828] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 273.564989][ T5828] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 273.572884][ T5828] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 275.660014][ T5828] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 275.667380][ T5828] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 275.674644][ T5828] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 275.682546][ T5828] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 275.690410][ T5828] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 275.697692][ T5828] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 275.784099][ T5828] Bluetooth: hci10: command tx timeout [ 277.922345][ T5828] Bluetooth: hci11: command tx timeout [ 278.007831][ T5828] Bluetooth: hci10: command tx timeout [ 280.145976][ T5828] Bluetooth: hci11: command tx timeout [ 280.231486][ T5828] Bluetooth: hci10: command tx timeout [ 282.369597][ T5828] Bluetooth: hci11: command tx timeout [ 282.455131][ T5828] Bluetooth: hci10: command tx timeout [ 284.593264][ T5828] Bluetooth: hci11: command tx timeout [ 313.109583][ T5831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 313.117100][ T5831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 313.124450][ T5831] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 313.132420][ T5831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 313.140099][ T5831] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 313.147386][ T5831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 314.013752][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 314.024757][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 314.026729][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 315.296775][ T5828] Bluetooth: hci12: command tx timeout [ 316.076296][ T5134] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 316.083631][ T5134] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 316.091242][ T5134] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 316.099942][ T5134] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 316.107461][ T5134] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 316.114816][ T5134] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 317.520505][ T5828] Bluetooth: hci12: command tx timeout [ 318.290120][ T5828] Bluetooth: hci13: command tx timeout [ 319.487826][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 319.744041][ T5134] Bluetooth: hci12: command tx timeout [ 320.103136][ T5828] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 320.111066][ T5828] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 320.118384][ T5828] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 320.126444][ T5828] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 320.134021][ T5828] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 320.141320][ T5828] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 320.513778][ T5828] Bluetooth: hci13: command tx timeout [ 321.967690][ T5828] Bluetooth: hci12: command tx timeout [ 322.320391][ T5828] Bluetooth: hci14: command tx timeout [ 322.741033][ T5828] Bluetooth: hci13: command tx timeout [ 324.533320][ T5828] Bluetooth: hci14: command tx timeout [ 324.960941][ T5828] Bluetooth: hci13: command tx timeout [ 324.962781][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 326.757120][ T5134] Bluetooth: hci14: command tx timeout [ 328.980742][ T5134] Bluetooth: hci14: command tx timeout [ 333.689817][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.108000][ T5831] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 338.116046][ T5831] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 338.123527][ T5831] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 338.131587][ T5831] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 338.139450][ T5831] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 338.146801][ T5831] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 340.111431][ T5828] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 340.118804][ T5828] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 340.126546][ T5828] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 340.135496][ T5828] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 340.143464][ T5828] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 340.150766][ T5828] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 340.355481][ T5828] Bluetooth: hci15: command tx timeout [ 341.381773][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 342.322540][ T5831] Bluetooth: hci16: command tx timeout [ 342.579163][ T5831] Bluetooth: hci15: command tx timeout [ 344.546265][ T5831] Bluetooth: hci16: command tx timeout [ 344.802717][ T5828] Bluetooth: hci15: command tx timeout [ 346.780626][ T5828] Bluetooth: hci16: command tx timeout [ 346.855359][ T5828] Bluetooth: hci6: command 0x0406 tx timeout [ 347.026381][ T5831] Bluetooth: hci15: command tx timeout [ 348.993526][ T5831] Bluetooth: hci16: command tx timeout [ 356.263099][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 356.270771][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 356.280546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.289314][ T30] task:kworker/u8:1 state:D stack:22360 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 356.299624][ T30] Workqueue: netns cleanup_net [ 356.304413][ T30] Call Trace: [ 356.307712][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.310682][ T30] __schedule+0x181a/0x4b90 [ 356.315297][ T30] ? schedule+0x90/0x320 [ 356.319586][ T30] ? __pfx___schedule+0x10/0x10 [ 356.324602][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.329698][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.364957][ T30] ? kthread_data+0x52/0xd0 [ 356.369768][ T30] ? schedule+0x90/0x320 [ 356.374077][ T30] ? wq_worker_sleeping+0x66/0x240 [ 356.379193][ T30] ? schedule+0x90/0x320 [ 356.383473][ T30] schedule+0x14b/0x320 [ 356.387627][ T30] schedule_preempt_disabled+0x13/0x30 [ 356.393163][ T30] __mutex_lock+0x817/0x1010 [ 356.397756][ T30] ? __mutex_lock+0x602/0x1010 [ 356.402550][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 356.409067][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 356.414128][ T30] ? __pfx___might_resched+0x10/0x10 [ 356.419417][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 356.425948][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.430700][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 356.437364][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 356.443979][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.448786][ T30] ? lock_release+0xbf/0xa30 [ 356.453378][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.459754][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 356.466557][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.471327][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.476342][ T30] unregister_netdevice_queue+0x303/0x370 [ 356.482079][ T30] ? __pfx_up_write+0x10/0x10 [ 356.486753][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 356.493032][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 356.498774][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 356.504392][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 356.510233][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 356.516566][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.521384][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 356.526761][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 356.532355][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 356.538440][ T30] hwsim_exit_net+0x5c1/0x670 [ 356.543169][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 356.548375][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 356.554643][ T30] cleanup_net+0x812/0xd60 [ 356.559078][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 356.564040][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.568818][ T30] ? process_scheduled_works+0x976/0x1840 [ 356.574617][ T30] process_scheduled_works+0xa66/0x1840 [ 356.580183][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.586189][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 356.591736][ T30] ? assign_work+0x364/0x3d0 [ 356.596359][ T30] worker_thread+0x870/0xd30 [ 356.600951][ T30] ? __kthread_parkme+0x169/0x1d0 [ 356.605998][ T30] ? __pfx_worker_thread+0x10/0x10 [ 356.611110][ T30] kthread+0x7a9/0x920 [ 356.615169][ T30] ? __pfx_kthread+0x10/0x10 [ 356.619784][ T30] ? __pfx_worker_thread+0x10/0x10 [ 356.624896][ T30] ? __pfx_kthread+0x10/0x10 [ 356.629518][ T30] ? __pfx_kthread+0x10/0x10 [ 356.634110][ T30] ? __pfx_kthread+0x10/0x10 [ 356.638722][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.643917][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 356.649149][ T30] ? __pfx_kthread+0x10/0x10 [ 356.653766][ T30] ret_from_fork+0x4b/0x80 [ 356.658186][ T30] ? __pfx_kthread+0x10/0x10 [ 356.663201][ T30] ret_from_fork_asm+0x1a/0x30 [ 356.667998][ T30] [ 356.671132][ T30] INFO: task kworker/u8:7:1172 blocked for more than 143 seconds. [ 356.678945][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 356.686281][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.695163][ T30] task:kworker/u8:7 state:D stack:22352 pid:1172 tgid:1172 ppid:2 flags:0x00004000 [ 356.705574][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 356.712580][ T30] Call Trace: [ 356.715844][ T30] [ 356.718763][ T30] __schedule+0x181a/0x4b90 [ 356.723302][ T30] ? schedule+0x90/0x320 [ 356.727543][ T30] ? __pfx___schedule+0x10/0x10 [ 356.732381][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.737425][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.742199][ T30] ? kthread_data+0x52/0xd0 [ 356.746728][ T30] ? schedule+0x90/0x320 [ 356.750970][ T30] ? wq_worker_sleeping+0x66/0x240 [ 356.756129][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.760901][ T30] ? schedule+0x90/0x320 [ 356.765133][ T30] schedule+0x14b/0x320 [ 356.769304][ T30] schedule_preempt_disabled+0x13/0x30 [ 356.775062][ T30] __mutex_lock+0x817/0x1010 [ 356.779880][ T30] ? __mutex_lock+0x602/0x1010 [ 356.784663][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 356.791292][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 356.796339][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.801280][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 356.807547][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 356.813336][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.818370][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 356.824388][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 356.831267][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.836038][ T30] ? process_scheduled_works+0x976/0x1840 [ 356.841780][ T30] process_scheduled_works+0xa66/0x1840 [ 356.847342][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.853349][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 356.859335][ T30] ? assign_work+0x364/0x3d0 [ 356.863993][ T30] worker_thread+0x870/0xd30 [ 356.868592][ T30] ? __kthread_parkme+0x169/0x1d0 [ 356.873672][ T30] ? __pfx_worker_thread+0x10/0x10 [ 356.878797][ T30] kthread+0x7a9/0x920 [ 356.883234][ T30] ? __pfx_kthread+0x10/0x10 [ 356.887835][ T30] ? __pfx_worker_thread+0x10/0x10 [ 356.892926][ T30] ? __pfx_kthread+0x10/0x10 [ 356.897527][ T30] ? __pfx_kthread+0x10/0x10 [ 356.902118][ T30] ? __pfx_kthread+0x10/0x10 [ 356.906726][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.911925][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 356.917142][ T30] ? __pfx_kthread+0x10/0x10 [ 356.921732][ T30] ret_from_fork+0x4b/0x80 [ 356.926187][ T30] ? __pfx_kthread+0x10/0x10 [ 356.930792][ T30] ret_from_fork_asm+0x1a/0x30 [ 356.935568][ T30] [ 356.938704][ T30] INFO: task kworker/u8:8:2965 blocked for more than 143 seconds. [ 356.946504][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 356.954132][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.962852][ T30] task:kworker/u8:8 state:D stack:22376 pid:2965 tgid:2965 ppid:2 flags:0x00004000 [ 356.974202][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 356.980256][ T30] Call Trace: [ 356.983538][ T30] [ 356.986452][ T30] __schedule+0x181a/0x4b90 [ 356.991537][ T30] ? schedule+0x90/0x320 [ 356.995809][ T30] ? __pfx___schedule+0x10/0x10 [ 357.000938][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.005978][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.010738][ T30] ? kthread_data+0x52/0xd0 [ 357.015339][ T30] ? schedule+0x90/0x320 [ 357.019589][ T30] ? wq_worker_sleeping+0x66/0x240 [ 357.024777][ T30] ? lock_acquire+0xe3/0x550 [ 357.029368][ T30] ? schedule+0x90/0x320 [ 357.033706][ T30] schedule+0x14b/0x320 [ 357.037873][ T30] schedule_preempt_disabled+0x13/0x30 [ 357.043361][ T30] __mutex_lock+0x817/0x1010 [ 357.048208][ T30] ? __mutex_lock+0x602/0x1010 [ 357.052982][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 357.058253][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 357.063277][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 357.068701][ T30] addrconf_dad_work+0x10e/0x16a0 [ 357.073743][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.078858][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 357.084328][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.090740][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.095517][ T30] ? process_scheduled_works+0x976/0x1840 [ 357.101823][ T30] process_scheduled_works+0xa66/0x1840 [ 357.107390][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.113453][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 357.119178][ T30] ? assign_work+0x364/0x3d0 [ 357.123771][ T30] worker_thread+0x870/0xd30 [ 357.128526][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 357.134546][ T30] ? __kthread_parkme+0x169/0x1d0 [ 357.139632][ T30] ? __pfx_worker_thread+0x10/0x10 [ 357.144746][ T30] kthread+0x7a9/0x920 [ 357.148798][ T30] ? __pfx_kthread+0x10/0x10 [ 357.153458][ T30] ? __pfx_worker_thread+0x10/0x10 [ 357.158568][ T30] ? __pfx_kthread+0x10/0x10 [ 357.163217][ T30] ? __pfx_kthread+0x10/0x10 [ 357.167841][ T30] ? __pfx_kthread+0x10/0x10 [ 357.172502][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.177705][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 357.183076][ T30] ? __pfx_kthread+0x10/0x10 [ 357.187680][ T30] ret_from_fork+0x4b/0x80 [ 357.192099][ T30] ? __pfx_kthread+0x10/0x10 [ 357.196825][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.201597][ T30] [ 357.204695][ T30] INFO: task kworker/u8:10:5937 blocked for more than 144 seconds. [ 357.212982][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 357.220364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.229072][ T30] task:kworker/u8:10 state:D stack:23152 pid:5937 tgid:5937 ppid:2 flags:0x00004000 [ 357.239285][ T30] Workqueue: events_unbound linkwatch_event [ 357.245191][ T30] Call Trace: [ 357.248505][ T30] [ 357.251437][ T30] __schedule+0x181a/0x4b90 [ 357.255931][ T30] ? schedule+0x90/0x320 [ 357.260214][ T30] ? schedule+0x90/0x320 [ 357.264488][ T30] ? __pfx___schedule+0x10/0x10 [ 357.269373][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.274401][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.279239][ T30] ? kthread_data+0x52/0xd0 [ 357.283743][ T30] ? schedule+0x90/0x320 [ 357.287968][ T30] ? wq_worker_sleeping+0x66/0x240 [ 357.293223][ T30] ? schedule+0x90/0x320 [ 357.297652][ T30] schedule+0x14b/0x320 [ 357.302048][ T30] schedule_preempt_disabled+0x13/0x30 [ 357.307527][ T30] __mutex_lock+0x817/0x1010 [ 357.312242][ T30] ? __mutex_lock+0x602/0x1010 [ 357.317028][ T30] ? linkwatch_event+0xe/0x60 [ 357.322292][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 357.327338][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 357.333358][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.338135][ T30] ? process_scheduled_works+0x976/0x1840 [ 357.343938][ T30] linkwatch_event+0xe/0x60 [ 357.348455][ T30] process_scheduled_works+0xa66/0x1840 [ 357.354067][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.360059][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 357.365660][ T30] ? assign_work+0x364/0x3d0 [ 357.370259][ T30] worker_thread+0x870/0xd30 [ 357.374977][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 357.380969][ T30] ? __kthread_parkme+0x169/0x1d0 [ 357.386108][ T30] ? __pfx_worker_thread+0x10/0x10 [ 357.391245][ T30] kthread+0x7a9/0x920 [ 357.395323][ T30] ? __pfx_worker_thread+0x10/0x10 [ 357.400538][ T30] ? __pfx_kthread+0x10/0x10 [ 357.405178][ T30] ? __pfx_kthread+0x10/0x10 [ 357.409844][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.414624][ T30] ? __pfx_kthread+0x10/0x10 [ 357.419396][ T30] ? __pfx_kthread+0x10/0x10 [ 357.424008][ T30] ret_from_fork+0x4b/0x80 [ 357.430204][ T30] ? __pfx_kthread+0x10/0x10 [ 357.434828][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.439647][ T30] [ 357.442697][ T30] INFO: task syz-executor:7994 blocked for more than 144 seconds. [ 357.450635][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 357.457937][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.466889][ T30] task:syz-executor state:D stack:21360 pid:7994 tgid:7994 ppid:1 flags:0x00004004 [ 357.477158][ T30] Call Trace: [ 357.480429][ T30] [ 357.483427][ T30] __schedule+0x181a/0x4b90 [ 357.487948][ T30] ? schedule+0x90/0x320 [ 357.492203][ T30] ? __pfx___schedule+0x10/0x10 [ 357.497121][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.502158][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.507001][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 357.512899][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.519288][ T30] ? schedule+0x90/0x320 [ 357.523536][ T30] schedule+0x14b/0x320 [ 357.527736][ T30] schedule_preempt_disabled+0x13/0x30 [ 357.533196][ T30] __mutex_lock+0x817/0x1010 [ 357.538538][ T30] ? __mutex_lock+0x602/0x1010 [ 357.543334][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 357.549713][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 357.554750][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 357.560807][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 357.566811][ T30] wiphy_register+0x1be5/0x27b0 [ 357.571699][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 357.576897][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 357.582059][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 357.588128][ T30] ieee80211_register_hw+0x354e/0x4240 [ 357.593652][ T30] ? ieee80211_register_hw+0x15a1/0x4240 [ 357.599354][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 357.605172][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 357.611069][ T30] ? __asan_memset+0x23/0x50 [ 357.615675][ T30] ? __hrtimer_init+0x170/0x250 [ 357.620527][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 357.626320][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 357.632528][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 357.637805][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 357.643652][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 357.649644][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 357.656172][ T30] genl_rcv_msg+0xb14/0xec0 [ 357.660683][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.665752][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 357.670956][ T30] ? kasan_save_track+0x51/0x80 [ 357.675847][ T30] ? __sys_sendto+0x363/0x4c0 [ 357.680533][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 357.685703][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 357.691261][ T30] ? __pfx___might_resched+0x10/0x10 [ 357.696582][ T30] netlink_rcv_skb+0x1e3/0x430 [ 357.701355][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.706436][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.711728][ T30] ? lock_release+0xbf/0xa30 [ 357.716323][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 357.721840][ T30] genl_rcv+0x28/0x40 [ 357.725835][ T30] netlink_unicast+0x7f6/0x990 [ 357.730654][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 357.735942][ T30] ? __virt_addr_valid+0x45f/0x530 [ 357.741155][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 357.746206][ T30] ? __check_object_size+0x47a/0x730 [ 357.751577][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 357.756881][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.762243][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.767533][ T30] __sock_sendmsg+0x221/0x270 [ 357.772432][ T30] __sys_sendto+0x363/0x4c0 [ 357.777294][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 357.782354][ T30] ? xfd_validate_state+0x6e/0x150 [ 357.787474][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.793859][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.798635][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.805146][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.809925][ T30] __x64_sys_sendto+0xde/0x100 [ 357.814771][ T30] do_syscall_64+0xf3/0x230 [ 357.819283][ T30] ? clear_bhb_loop+0x35/0x90 [ 357.824002][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.829900][ T30] RIP: 0033:0x7ff8b938ebbc [ 357.834301][ T30] RSP: 002b:00007ffe33673600 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 357.842759][ T30] RAX: ffffffffffffffda RBX: 00007ff8ba0d4620 RCX: 00007ff8b938ebbc [ 357.850807][ T30] RDX: 0000000000000024 RSI: 00007ff8ba0d4670 RDI: 0000000000000003 [ 357.859285][ T30] RBP: 0000000000000000 R08: 00007ffe33673654 R09: 000000000000000c [ 357.867720][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 357.875697][ T30] R13: 0000000000000000 R14: 00007ff8ba0d4670 R15: 0000000000000000 [ 357.883737][ T30] [ 357.886783][ T30] INFO: task syz-executor:8050 blocked for more than 144 seconds. [ 357.894867][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 357.902456][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.911164][ T30] task:syz-executor state:D stack:22000 pid:8050 tgid:8050 ppid:1 flags:0x00004004 [ 357.921366][ T30] Call Trace: [ 357.924630][ T30] [ 357.927553][ T30] __schedule+0x181a/0x4b90 [ 357.932109][ T30] ? schedule+0x90/0x320 [ 357.936361][ T30] ? __pfx___schedule+0x10/0x10 [ 357.941207][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.946278][ T30] ? rcu_is_watching+0x15/0xb0 [ 357.951050][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 357.956980][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.963357][ T30] ? schedule+0x90/0x320 [ 357.967601][ T30] schedule+0x14b/0x320 [ 357.971738][ T30] schedule_preempt_disabled+0x13/0x30 [ 357.977853][ T30] __mutex_lock+0x817/0x1010 [ 357.982466][ T30] ? __mutex_lock+0x602/0x1010 [ 357.987282][ T30] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 357.993705][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 357.998759][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.003790][ T30] unregister_netdevice_notifier_net+0x89/0x3a0 [ 358.010224][ T30] ? _raw_spin_unlock+0x28/0x50 [ 358.015080][ T30] ? mntput_no_expire+0x2da/0x850 [ 358.020153][ T30] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 358.027059][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 358.032442][ T30] ? _raw_spin_unlock+0x28/0x50 [ 358.037302][ T30] ? simple_release_fs+0x9c/0xd0 [ 358.042290][ T30] nsim_dev_hwstats_exit+0x81/0x290 [ 358.047507][ T30] ? devl_port_unregister+0x19d/0x290 [ 358.052932][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 358.058579][ T30] nsim_dev_reload_destroy+0x2ad/0x490 [ 358.064090][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 358.069388][ T30] nsim_drv_remove+0x58/0x160 [ 358.074130][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 358.080211][ T30] bus_remove_device+0x34f/0x420 [ 358.085679][ T30] device_del+0x57a/0x9b0 [ 358.090032][ T30] ? __pfx_device_del+0x10/0x10 [ 358.094935][ T30] device_unregister+0x20/0xc0 [ 358.099708][ T30] del_device_store+0x363/0x480 [ 358.104608][ T30] ? __pfx_del_device_store+0x10/0x10 [ 358.109985][ T30] ? __virt_addr_valid+0x45f/0x530 [ 358.115153][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 358.120019][ T30] ? bus_attr_store+0x4f/0xb0 [ 358.124913][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 358.130125][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 358.135462][ T30] vfs_write+0xacf/0xd10 [ 358.139714][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 358.145621][ T30] ? __pfx_vfs_write+0x10/0x10 [ 358.150422][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 358.155335][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 358.160539][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 358.166653][ T30] ksys_write+0x18f/0x2b0 [ 358.170984][ T30] ? __pfx_ksys_write+0x10/0x10 [ 358.175823][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.180651][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.185426][ T30] do_syscall_64+0xf3/0x230 [ 358.189978][ T30] ? clear_bhb_loop+0x35/0x90 [ 358.195195][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.201148][ T30] RIP: 0033:0x7f515698b7df [ 358.205567][ T30] RSP: 002b:00007ffdaeeb7b10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 358.214379][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f515698b7df [ 358.222428][ T30] RDX: 0000000000000001 RSI: 00007ffdaeeb7b60 RDI: 0000000000000005 [ 358.230485][ T30] RBP: 00007f5156a0f4ad R08: 0000000000000000 R09: 00007ffdaeeb7967 [ 358.238462][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 358.246754][ T30] R13: 00007ffdaeeb7b60 R14: 00007f51576d4620 R15: 0000000000000003 [ 358.254996][ T30] [ 358.258051][ T30] INFO: task syz-executor:8125 blocked for more than 145 seconds. [ 358.265899][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 358.273218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.281884][ T30] task:syz-executor state:D stack:22128 pid:8125 tgid:8125 ppid:1 flags:0x00004004 [ 358.292076][ T30] Call Trace: [ 358.295386][ T30] [ 358.298316][ T30] __schedule+0x181a/0x4b90 [ 358.302816][ T30] ? schedule+0x90/0x320 [ 358.307719][ T30] ? __pfx___schedule+0x10/0x10 [ 358.312584][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.317710][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.322484][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 358.329203][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 358.335560][ T30] ? schedule+0x90/0x320 [ 358.339836][ T30] schedule+0x14b/0x320 [ 358.343992][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.349480][ T30] __mutex_lock+0x817/0x1010 [ 358.354070][ T30] ? __mutex_lock+0x602/0x1010 [ 358.358983][ T30] ? rtnl_newlink+0xce2/0x2210 [ 358.363754][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.368773][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 358.374674][ T30] ? ns_capable+0x8a/0xf0 [ 358.379109][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 358.385106][ T30] rtnl_newlink+0xce2/0x2210 [ 358.389817][ T30] ? rtnl_newlink+0x741/0x2210 [ 358.394685][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 358.399712][ T30] ? xfd_validate_state+0x6e/0x150 [ 358.405041][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.409874][ T30] ? lock_release+0xbf/0xa30 [ 358.414980][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 358.420019][ T30] ? lock_release+0xbf/0xa30 [ 358.424669][ T30] ? deref_stack_reg+0x17c/0x210 [ 358.429624][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.434700][ T30] ? stack_trace_save+0x118/0x1d0 [ 358.439729][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 358.445071][ T30] ? deref_stack_reg+0x17c/0x210 [ 358.450020][ T30] ? preempt_count_add+0x93/0x190 [ 358.455093][ T30] ? 0xffffffffa0006080 [ 358.459247][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 358.464587][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 358.469817][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.476007][ T30] ? kernel_text_address+0xa7/0xe0 [ 358.481112][ T30] ? __kernel_text_address+0xd/0x40 [ 358.486299][ T30] ? unwind_get_return_address+0x4d/0x90 [ 358.492297][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.497089][ T30] ? lock_release+0xbf/0xa30 [ 358.501766][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.506796][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 358.512624][ T30] ? bpf_lsm_capable+0x9/0x10 [ 358.517304][ T30] ? security_capable+0x7e/0x2d0 [ 358.522773][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 358.527811][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 358.533078][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 358.538191][ T30] ? lock_release+0xbf/0xa30 [ 358.542809][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 358.548268][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 358.553329][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.558110][ T30] ? lock_acquire+0xe3/0x550 [ 358.562750][ T30] netlink_rcv_skb+0x1e3/0x430 [ 358.567526][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 358.573078][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.578708][ T30] ? net_generic+0x1f/0x240 [ 358.583250][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.588505][ T30] netlink_unicast+0x7f6/0x990 [ 358.593268][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 358.598593][ T30] ? __virt_addr_valid+0x45f/0x530 [ 358.603735][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 358.608996][ T30] ? __check_object_size+0x47a/0x730 [ 358.614289][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 358.619093][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.624394][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.629723][ T30] __sock_sendmsg+0x221/0x270 [ 358.634946][ T30] __sys_sendto+0x363/0x4c0 [ 358.639521][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 358.644587][ T30] ? xfd_validate_state+0x6e/0x150 [ 358.649733][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.656068][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.661111][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.667465][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.672262][ T30] __x64_sys_sendto+0xde/0x100 [ 358.677033][ T30] do_syscall_64+0xf3/0x230 [ 358.681579][ T30] ? clear_bhb_loop+0x35/0x90 [ 358.686273][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.692225][ T30] RIP: 0033:0x7fdfa558ebbc [ 358.696648][ T30] RSP: 002b:00007ffe630dda40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 358.705101][ T30] RAX: ffffffffffffffda RBX: 00007fdfa62d4620 RCX: 00007fdfa558ebbc [ 358.713119][ T30] RDX: 000000000000003c RSI: 00007fdfa62d4670 RDI: 0000000000000003 [ 358.721078][ T30] RBP: 0000000000000000 R08: 00007ffe630dda94 R09: 000000000000000c [ 358.729227][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 358.737229][ T30] R13: 0000000000000000 R14: 00007fdfa62d4670 R15: 0000000000000000 [ 358.745617][ T30] [ 358.748662][ T30] INFO: task syz.4.496:8133 blocked for more than 145 seconds. [ 358.756310][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 358.763586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.772365][ T30] task:syz.4.496 state:D stack:24560 pid:8133 tgid:8132 ppid:7973 flags:0x00000004 [ 358.782606][ T30] Call Trace: [ 358.785895][ T30] [ 358.788860][ T30] __schedule+0x181a/0x4b90 [ 358.793370][ T30] ? schedule+0x90/0x320 [ 358.797640][ T30] ? schedule+0x90/0x320 [ 358.801884][ T30] ? __pfx___schedule+0x10/0x10 [ 358.806732][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.811822][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.816599][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 358.822529][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 358.828892][ T30] ? schedule+0x90/0x320 [ 358.833144][ T30] schedule+0x14b/0x320 [ 358.837296][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.842862][ T30] __mutex_lock+0x817/0x1010 [ 358.847459][ T30] ? __mutex_lock+0x602/0x1010 [ 358.852622][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 358.857306][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.862402][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 358.867169][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 358.872753][ T30] ? dev_ethtool+0x145/0x1bc0 [ 358.877431][ T30] dev_ethtool+0x21e/0x1bc0 [ 358.881925][ T30] ? lock_release+0xbf/0xa30 [ 358.886540][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 358.891477][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.896535][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 358.902205][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 358.907912][ T30] ? dev_load+0x21/0x1f0 [ 358.912177][ T30] dev_ioctl+0x785/0x1340 [ 358.916929][ T30] sock_do_ioctl+0x240/0x460 [ 358.921540][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 358.926708][ T30] ? __asan_memset+0x23/0x50 [ 358.931333][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 358.936432][ T30] sock_ioctl+0x626/0x8e0 [ 358.940789][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 358.945627][ T30] ? __fget_files+0x2a/0x410 [ 358.950280][ T30] ? __fget_files+0x2a/0x410 [ 358.954878][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 358.959798][ T30] __se_sys_ioctl+0xf5/0x170 [ 358.964782][ T30] do_syscall_64+0xf3/0x230 [ 358.969374][ T30] ? clear_bhb_loop+0x35/0x90 [ 358.974059][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.979992][ T30] RIP: 0033:0x7feb05d8cd29 [ 358.984428][ T30] RSP: 002b:00007feb06c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.992911][ T30] RAX: ffffffffffffffda RBX: 00007feb05fa5fa0 RCX: 00007feb05d8cd29 [ 359.003028][ T30] RDX: 0000000020000180 RSI: 0000000000008946 RDI: 000000000000000a [ 359.011364][ T30] RBP: 00007feb05e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 359.019353][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.027358][ T30] R13: 0000000000000000 R14: 00007feb05fa5fa0 R15: 00007ffc1e792ef8 [ 359.035370][ T30] [ 359.038384][ T30] INFO: task syz.4.496:8135 blocked for more than 145 seconds. [ 359.045961][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 359.053278][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.061941][ T30] task:syz.4.496 state:D stack:28208 pid:8135 tgid:8132 ppid:7973 flags:0x00000004 [ 359.072554][ T30] Call Trace: [ 359.075858][ T30] [ 359.078772][ T30] __schedule+0x181a/0x4b90 [ 359.083260][ T30] ? schedule+0x90/0x320 [ 359.087619][ T30] ? schedule+0x90/0x320 [ 359.091878][ T30] ? __pfx___schedule+0x10/0x10 [ 359.096822][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.101861][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.106639][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.112581][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.118936][ T30] ? schedule+0x90/0x320 [ 359.123177][ T30] schedule+0x14b/0x320 [ 359.127310][ T30] schedule_preempt_disabled+0x13/0x30 [ 359.132795][ T30] __mutex_lock+0x817/0x1010 [ 359.137386][ T30] ? __mutex_lock+0x602/0x1010 [ 359.142176][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 359.146853][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 359.151897][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 359.156660][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 359.162240][ T30] ? dev_ethtool+0x145/0x1bc0 [ 359.166914][ T30] dev_ethtool+0x21e/0x1bc0 [ 359.171438][ T30] ? lock_release+0xbf/0xa30 [ 359.176031][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.181315][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 359.186290][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.191317][ T30] ? inet6_ioctl+0x203/0x280 [ 359.195941][ T30] ? __pfx_inet6_ioctl+0x10/0x10 [ 359.200880][ T30] ? dev_load+0x21/0x1f0 [ 359.205165][ T30] dev_ioctl+0x785/0x1340 [ 359.209502][ T30] sock_do_ioctl+0x240/0x460 [ 359.214149][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 359.219264][ T30] ? __asan_memset+0x23/0x50 [ 359.223852][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 359.228918][ T30] sock_ioctl+0x626/0x8e0 [ 359.233259][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 359.238165][ T30] ? __fget_files+0x2a/0x410 [ 359.242766][ T30] ? __fget_files+0x2a/0x410 [ 359.247394][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 359.252246][ T30] __se_sys_ioctl+0xf5/0x170 [ 359.256885][ T30] do_syscall_64+0xf3/0x230 [ 359.261391][ T30] ? clear_bhb_loop+0x35/0x90 [ 359.266051][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.271998][ T30] RIP: 0033:0x7feb05d8cd29 [ 359.276407][ T30] RSP: 002b:00007feb03bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.284834][ T30] RAX: ffffffffffffffda RBX: 00007feb05fa6080 RCX: 00007feb05d8cd29 [ 359.293096][ T30] RDX: 0000000020000100 RSI: 0000000000008946 RDI: 000000000000000e [ 359.301156][ T30] RBP: 00007feb05e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 359.309133][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.317120][ T30] R13: 0000000000000000 R14: 00007feb05fa6080 R15: 00007ffc1e792ef8 [ 359.325114][ T30] [ 359.328124][ T30] INFO: task syz.4.496:8136 blocked for more than 146 seconds. [ 359.335803][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 359.343274][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.351961][ T30] task:syz.4.496 state:D stack:27824 pid:8136 tgid:8132 ppid:7973 flags:0x00000004 [ 359.362160][ T30] Call Trace: [ 359.365476][ T30] [ 359.368405][ T30] __schedule+0x181a/0x4b90 [ 359.372892][ T30] ? schedule+0x90/0x320 [ 359.377158][ T30] ? schedule+0x90/0x320 [ 359.381412][ T30] ? __pfx___schedule+0x10/0x10 [ 359.386290][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.391318][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.396114][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.402287][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.408647][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.413424][ T30] ? schedule+0x90/0x320 [ 359.417717][ T30] schedule+0x14b/0x320 [ 359.421873][ T30] schedule_preempt_disabled+0x13/0x30 [ 359.427321][ T30] __mutex_lock+0x817/0x1010 [ 359.431962][ T30] ? __mutex_lock+0x602/0x1010 [ 359.436727][ T30] ? genl_rcv_msg+0x121/0xec0 [ 359.441437][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 359.446461][ T30] ? 0xffffffffa0006080 [ 359.450642][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.456798][ T30] ? kernel_text_address+0xa7/0xe0 [ 359.461929][ T30] ? __kernel_text_address+0xd/0x40 [ 359.467140][ T30] ? radix_tree_lookup+0x238/0x290 [ 359.472286][ T30] genl_rcv_msg+0x121/0xec0 [ 359.476794][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.481847][ T30] ? stack_trace_save+0x118/0x1d0 [ 359.486872][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 359.492283][ T30] ? stack_depot_save_flags+0x37/0x940 [ 359.497744][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.502549][ T30] ? lock_acquire+0xe3/0x550 [ 359.507148][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 359.512465][ T30] ? __pfx___might_resched+0x10/0x10 [ 359.517904][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.522837][ T30] ? lock_acquire+0xe3/0x550 [ 359.527766][ T30] netlink_rcv_skb+0x1e3/0x430 [ 359.532549][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.537606][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.542894][ T30] ? lock_release+0xbf/0xa30 [ 359.547519][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 359.552898][ T30] ? net_generic+0x1f/0x240 [ 359.557471][ T30] genl_rcv+0x28/0x40 [ 359.561460][ T30] netlink_unicast+0x7f6/0x990 [ 359.566220][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 359.571520][ T30] ? __virt_addr_valid+0x45f/0x530 [ 359.576638][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 359.581683][ T30] ? __check_object_size+0x47a/0x730 [ 359.586974][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 359.591851][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.597172][ T30] ? count_memcg_event_mm+0x94/0x420 [ 359.602503][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.607793][ T30] __sock_sendmsg+0x221/0x270 [ 359.612490][ T30] __sys_sendto+0x363/0x4c0 [ 359.617361][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 359.622446][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 359.627563][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.633937][ T30] ? __pfx___up_read+0x10/0x10 [ 359.638717][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.645087][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.649863][ T30] __x64_sys_sendto+0xde/0x100 [ 359.654649][ T30] do_syscall_64+0xf3/0x230 [ 359.659139][ T30] ? clear_bhb_loop+0x35/0x90 [ 359.663859][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.669761][ T30] RIP: 0033:0x7feb05d8ebbc [ 359.674194][ T30] RSP: 002b:00007feb03bd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 359.682607][ T30] RAX: ffffffffffffffda RBX: 00007feb03bd3fc0 RCX: 00007feb05d8ebbc [ 359.690725][ T30] RDX: 0000000000000024 RSI: 00007feb03bd4010 RDI: 0000000000000010 [ 359.698717][ T30] RBP: 0000000000000000 R08: 00007feb03bd3f14 R09: 000000000000000c [ 359.706714][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 359.714684][ T30] R13: 00007feb03bd3f68 R14: 00007feb03bd4010 R15: 0000000000000000 [ 359.722697][ T30] [ 359.725721][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 359.735126][ T30] INFO: task syz.7.500:8147 blocked for more than 146 seconds. [ 359.742710][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 359.750009][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.758669][ T30] task:syz.7.500 state:D stack:28208 pid:8147 tgid:8146 ppid:7942 flags:0x00000004 [ 359.768863][ T30] Call Trace: [ 359.772284][ T30] [ 359.775224][ T30] __schedule+0x181a/0x4b90 [ 359.779746][ T30] ? schedule+0x90/0x320 [ 359.784019][ T30] ? schedule+0x90/0x320 [ 359.788265][ T30] ? __pfx___schedule+0x10/0x10 [ 359.793142][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.798170][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.802965][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.808879][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.815243][ T30] ? schedule+0x90/0x320 [ 359.819512][ T30] schedule+0x14b/0x320 [ 359.823693][ T30] schedule_preempt_disabled+0x13/0x30 [ 359.829153][ T30] __mutex_lock+0x817/0x1010 [ 359.833788][ T30] ? __mutex_lock+0x602/0x1010 [ 359.838836][ T30] ? br_ioctl_stub+0xa4/0xb00 [ 359.843523][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 359.848603][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 359.854514][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.859347][ T30] ? trace_contention_end+0x3c/0x120 [ 359.864653][ T30] ? __mutex_lock+0x397/0x1010 [ 359.869441][ T30] br_ioctl_stub+0xa4/0xb00 [ 359.873954][ T30] ? __pfx_br_ioctl_stub+0x10/0x10 [ 359.879092][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 359.884122][ T30] ? __asan_memset+0x23/0x50 [ 359.888752][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 359.893787][ T30] ? __pfx_br_ioctl_stub+0x10/0x10 [ 359.898963][ T30] sock_ioctl+0x5eb/0x8e0 [ 359.903303][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 359.908152][ T30] ? __fget_files+0x2a/0x410 [ 359.912791][ T30] ? __fget_files+0x2a/0x410 [ 359.917397][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 359.922296][ T30] __se_sys_ioctl+0xf5/0x170 [ 359.926896][ T30] do_syscall_64+0xf3/0x230 [ 359.931426][ T30] ? clear_bhb_loop+0x35/0x90 [ 359.936109][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.942036][ T30] RIP: 0033:0x7f8535f8cd29 [ 359.946736][ T30] RSP: 002b:00007f8536ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.955375][ T30] RAX: ffffffffffffffda RBX: 00007f85361a5fa0 RCX: 00007f8535f8cd29 [ 359.963394][ T30] RDX: 0000000020000280 RSI: 0000000000008941 RDI: 0000000000000003 [ 359.971370][ T30] RBP: 00007f853600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 359.979406][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.987453][ T30] R13: 0000000000000000 R14: 00007f85361a5fa0 R15: 00007ffcf96feb58 [ 359.995508][ T30] [ 359.998522][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 360.007642][ T30] INFO: lockdep is turned off. [ 360.012407][ T30] NMI backtrace for cpu 0 [ 360.012416][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 360.012426][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.012432][ T30] Call Trace: [ 360.012436][ T30] [ 360.012440][ T30] dump_stack_lvl+0x241/0x360 [ 360.012458][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.012471][ T30] ? __pfx__printk+0x10/0x10 [ 360.012484][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 360.012498][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 360.012508][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.012520][ T30] ? _printk+0xd5/0x120 [ 360.012531][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 360.012543][ T30] ? __pfx__printk+0x10/0x10 [ 360.012555][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.012566][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 360.012580][ T30] watchdog+0xff6/0x1040 [ 360.012592][ T30] ? watchdog+0x1ea/0x1040 [ 360.012603][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.012613][ T30] kthread+0x7a9/0x920 [ 360.012624][ T30] ? __pfx_kthread+0x10/0x10 [ 360.012635][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.012644][ T30] ? __pfx_kthread+0x10/0x10 [ 360.012655][ T30] ? __pfx_kthread+0x10/0x10 [ 360.012665][ T30] ? __pfx_kthread+0x10/0x10 [ 360.012676][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.012684][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 360.012694][ T30] ? __pfx_kthread+0x10/0x10 [ 360.012705][ T30] ret_from_fork+0x4b/0x80 [ 360.012716][ T30] ? __pfx_kthread+0x10/0x10 [ 360.012726][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.012738][ T30] [ 360.012742][ T30] Sending NMI from CPU 0 to CPUs 1: [ 360.179886][ C1] NMI backtrace for cpu 1 [ 360.179899][ C1] CPU: 1 UID: 0 PID: 139 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 360.179917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.179927][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 360.179949][ C1] RIP: 0010:preempt_count_add+0x9/0x190 [ 360.179967][ C1] Code: 24 e8 6b e8 95 00 eb 8c e9 ee fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <89> fb 48 c7 c0 80 89 3c 9a 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff [ 360.179980][ C1] RSP: 0018:ffffc90002e6e7d0 EFLAGS: 00000202 [ 360.179992][ C1] RAX: 0000000000000001 RBX: 1ffff920005cdd18 RCX: ffffc90002e6fb20 [ 360.180003][ C1] RDX: dffffc0000000000 RSI: ffffffff8188d3a6 RDI: 0000000000000001 [ 360.180014][ C1] RBP: ffffc90002e6e8f8 R08: 000000000000000c R09: ffffc90002e6e9b0 [ 360.180024][ C1] R10: ffffc90002e6e910 R11: ffffffff81ab09e0 R12: dffffc0000000000 [ 360.180036][ C1] R13: ffffc90002e6e8c0 R14: ffffffff8188d3a6 R15: 0000000000000000 [ 360.180046][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 360.180058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.180069][ C1] CR2: 0000560f5140e708 CR3: 000000000e738000 CR4: 00000000003526f0 [ 360.180082][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.180091][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.180101][ C1] Call Trace: [ 360.180106][ C1] [ 360.180112][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 360.180128][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 360.180148][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.180177][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 360.180193][ C1] ? nmi_handle+0x14f/0x5a0 [ 360.180214][ C1] ? nmi_handle+0x2a/0x5a0 [ 360.180234][ C1] ? preempt_count_add+0x9/0x190 [ 360.180248][ C1] ? default_do_nmi+0x63/0x160 [ 360.180270][ C1] ? exc_nmi+0x123/0x1f0 [ 360.180290][ C1] ? end_repeat_nmi+0xf/0x53 [ 360.180311][ C1] ? process_scheduled_works+0xa66/0x1840 [ 360.180328][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.180346][ C1] ? process_scheduled_works+0xa66/0x1840 [ 360.180361][ C1] ? preempt_count_add+0x9/0x190 [ 360.180376][ C1] ? preempt_count_add+0x9/0x190 [ 360.180391][ C1] ? preempt_count_add+0x9/0x190 [ 360.180405][ C1] [ 360.180410][ C1] [ 360.180415][ C1] ? process_scheduled_works+0xa66/0x1840 [ 360.180431][ C1] unwind_next_frame+0xb0/0x22d0 [ 360.180453][ C1] ? cfg80211_wiphy_work+0x2f0/0x490 [ 360.180468][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.180485][ C1] arch_stack_walk+0x11c/0x150 [ 360.180506][ C1] ? process_scheduled_works+0xa66/0x1840 [ 360.180524][ C1] stack_trace_save+0x118/0x1d0 [ 360.180540][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 360.180554][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.180576][ C1] ? lock_release+0xbf/0xa30 [ 360.180597][ C1] kasan_save_stack+0x3f/0x60 [ 360.180619][ C1] ? kasan_save_stack+0x3f/0x60 [ 360.180631][ C1] ? __kasan_record_aux_stack+0xac/0xc0 [ 360.180651][ C1] ? kvfree_call_rcu+0xa9/0x3e0 [ 360.180667][ C1] ? cfg80211_update_known_bss+0xb45/0x1590 [ 360.180688][ C1] ? __cfg80211_bss_update+0x153/0x2030 [ 360.180707][ C1] ? cfg80211_inform_single_bss_data+0xd82/0x2070 [ 360.180728][ C1] ? cfg80211_inform_bss_data+0x3c8/0x5d60 [ 360.180748][ C1] ? cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 360.180768][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 360.180788][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 [ 360.180807][ C1] ? ieee80211_iface_work+0x8dc/0xf90 [ 360.180827][ C1] ? cfg80211_wiphy_work+0x2f0/0x490 [ 360.180841][ C1] ? process_scheduled_works+0xa66/0x1840 [ 360.180869][ C1] ? __phys_addr+0xba/0x170 [ 360.180890][ C1] __kasan_record_aux_stack+0xac/0xc0 [ 360.180910][ C1] kvfree_call_rcu+0xa9/0x3e0 [ 360.180928][ C1] cfg80211_update_known_bss+0xb45/0x1590 [ 360.180952][ C1] ? cmp_bss+0x8c7/0xea0 [ 360.180972][ C1] __cfg80211_bss_update+0x153/0x2030 [ 360.180991][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 360.181007][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 360.181031][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.181045][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.181066][ C1] ? trace_kmalloc+0x1f/0xd0 [ 360.181082][ C1] ? cfg80211_inform_single_bss_data+0xd6e/0x2070 [ 360.181106][ C1] cfg80211_inform_single_bss_data+0xd82/0x2070 [ 360.181130][ C1] ? deref_stack_reg+0x17c/0x210 [ 360.181148][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 360.181177][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 360.181194][ C1] ? cfg80211_inform_bss_data+0x3b0/0x5d60 [ 360.181216][ C1] cfg80211_inform_bss_data+0x3c8/0x5d60 [ 360.181256][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 360.181281][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 360.181305][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.181327][ C1] ? cfg80211_defragment_element+0xc3/0x340 [ 360.181352][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 360.181372][ C1] cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 360.181394][ C1] ? srcu_module_notify+0x142/0x330 [ 360.181417][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 360.181435][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 360.181456][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 360.181476][ C1] ? __pfx_lock_release+0x10/0x10 [ 360.181497][ C1] ? ieee80211_mandatory_rates+0x1bd/0x230 [ 360.181517][ C1] ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 [ 360.181542][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 360.181561][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 360.181581][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.181607][ C1] ? lock_release+0xbf/0xa30 [ 360.181624][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 360.181643][ C1] ? __pfx_lock_release+0x10/0x10 [ 360.181660][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 360.181675][ C1] ? __pfx_lock_release+0x10/0x10 [ 360.181694][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.181714][ C1] ? kcov_remote_start+0x97/0x7d0 [ 360.181732][ C1] ? skb_dequeue+0x113/0x150 [ 360.181750][ C1] ieee80211_iface_work+0x8dc/0xf90 [ 360.181773][ C1] cfg80211_wiphy_work+0x2f0/0x490 [ 360.181788][ C1] ? process_scheduled_works+0x976/0x1840 [ 360.181804][ C1] process_scheduled_works+0xa66/0x1840 [ 360.181829][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.181846][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 360.181861][ C1] ? assign_work+0x364/0x3d0 [ 360.181878][ C1] worker_thread+0x870/0xd30 [ 360.181896][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 360.181912][ C1] ? __kthread_parkme+0x169/0x1d0 [ 360.181930][ C1] ? __pfx_worker_thread+0x10/0x10 [ 360.181947][ C1] kthread+0x7a9/0x920 [ 360.181964][ C1] ? __pfx_kthread+0x10/0x10 [ 360.181983][ C1] ? __pfx_worker_thread+0x10/0x10 [ 360.181999][ C1] ? __pfx_kthread+0x10/0x10 [ 360.182016][ C1] ? __pfx_kthread+0x10/0x10 [ 360.182036][ C1] ? __pfx_kthread+0x10/0x10 [ 360.182053][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.182067][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 360.182083][ C1] ? __pfx_kthread+0x10/0x10 [ 360.182101][ C1] ret_from_fork+0x4b/0x80 [ 360.182118][ C1] ? __pfx_kthread+0x10/0x10 [ 360.182137][ C1] ret_from_fork_asm+0x1a/0x30 [ 360.182157][ C1] [ 360.182933][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 360.897195][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 360.907330][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.917368][ T30] Call Trace: [ 360.920631][ T30] [ 360.923551][ T30] dump_stack_lvl+0x241/0x360 [ 360.928224][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.933442][ T30] ? __pfx__printk+0x10/0x10 [ 360.938022][ T30] ? vscnprintf+0x5d/0x90 [ 360.942333][ T30] panic+0x349/0x880 [ 360.946212][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 360.952352][ T30] ? __pfx_panic+0x10/0x10 [ 360.956750][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 360.962100][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 360.968237][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 360.974370][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 360.980508][ T30] watchdog+0x1035/0x1040 [ 360.984826][ T30] ? watchdog+0x1ea/0x1040 [ 360.989223][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.993877][ T30] kthread+0x7a9/0x920 [ 360.997954][ T30] ? __pfx_kthread+0x10/0x10 [ 361.002530][ T30] ? __pfx_watchdog+0x10/0x10 [ 361.007191][ T30] ? __pfx_kthread+0x10/0x10 [ 361.011759][ T30] ? __pfx_kthread+0x10/0x10 [ 361.016332][ T30] ? __pfx_kthread+0x10/0x10 [ 361.020904][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.026078][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 361.031257][ T30] ? __pfx_kthread+0x10/0x10 [ 361.035828][ T30] ret_from_fork+0x4b/0x80 [ 361.040235][ T30] ? __pfx_kthread+0x10/0x10 [ 361.044827][ T30] ret_from_fork_asm+0x1a/0x30 [ 361.049575][ T30] [ 361.052716][ T30] Kernel Offset: disabled [ 361.057027][ T30] Rebooting in 86400 seconds..