last executing test programs: 4m16.478674256s ago: executing program 3 (id=600): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(r0, r1) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x576, 0x1, 0x3, 0xd59f80, 0x4, 0x800005, 0xb, 0x8, 0x5, 0x722, 0x81, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xed}}) 4m15.195569582s ago: executing program 3 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x128200}}, 0x50) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setns(0xffffffffffffffff, 0x24020000) gettid() mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) pipe2(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4m12.4966096s ago: executing program 3 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x2}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) fcntl$setsig(r1, 0xa, 0x21) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0) creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040) syz_io_uring_setup(0xec4, &(0x7f0000000440)={0x0, 0xfffffffb, 0x40, 0x2, 0x78}, &(0x7f0000000400), &(0x7f0000000300)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000080)={@host}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a80fcee92795cdc17bf68e336e9a25c99ed3638229437bb95c9c159933e22ff3b3a26adc135134850f36eefbf8ab733d91fbb72b5a15a2d60462647afc6a6e2c34b9a81d481dbda5b5651dc3c011b6149bd93bb1f19850be562f9d27d75d5afd5676feadc7c8026d8bdee1a3e8fb25d592c16360ab3dbc5a9d211f199024d1ae18e93da519b9bfba3ffe94a5aeedee7919898b1dd36104c"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1010, r2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r7, @ANYRES64=r3, @ANYBLOB="2c726f6f746d6f64653d2030303030303030303030b0303030725f69643d00"/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB="2c00ce4df1bc8ca08efc814e9ac672f1da3d0f736f13de8461265e79f4e196b187efa37bc5fa8be194de364aa9ce88008050c497e20faa6c5de6933b40fb8ee641ceb31bed1c4c2242cfc76e10c4ec73dde22d1a261855e4019262af122fc497090a822991ecaf20b40b3300af2084f6140aab50b85de5a8a72046d5d9f7be7b05c69b99aa8d1c8269b4394e67753d2155c43fc5cd6e65e631ebff86b3f8e9e66e73ed6211c2466fff772a02ca6701771a32803c40f791cd0089cabbf0f55d99000000000000000000", @ANYRESHEX, @ANYRES64, @ANYRESHEX=r8, @ANYRES64=0x0]) (async) read$FUSE(r7, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001200)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x500000}}, 0x50) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) read$FUSE(r8, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r10}, 0x10) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='security.'], 0x0, 0x0) 4m11.649141638s ago: executing program 3 (id=612): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f00009ef000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="0f005f1467f26567dbdb0f2058daa3491f0f12e566b8faa5a7440f23c00f21f86635000002000f23f80f79d30f0012b87d0e8ec8bad004b80000ef", 0x3b}], 0x1, 0x5, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x5500) open_tree(r1, 0x0, 0x1000) 3m55.881721166s ago: executing program 32 (id=612): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f00009ef000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="0f005f1467f26567dbdb0f2058daa3491f0f12e566b8faa5a7440f23c00f21f86635000002000f23f80f79d30f0012b87d0e8ec8bad004b80000ef", 0x3b}], 0x1, 0x5, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x5500) open_tree(r1, 0x0, 0x1000) 3m4.840799391s ago: executing program 4 (id=784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001674c1e16dbe8a8be1ec9eca21506f53e21f7fd9081a3518a99767a683d9cf833cb97bae3f45a61c33a6096d3a4ae2029643e20794ee2650330537ea972d75b42bc18f583965ae2ba48f47d98d37971e462c4377494edb5aa7235670ac1c2ee7d9a871fa1ff1062f702c1a0f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x2e00, &(0x7f0000000040)="61df712bc884fed5722780b605a7", 0x0, 0x10000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xdc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000880)="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"}) 3m3.35601784s ago: executing program 4 (id=792): syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m58.73074161s ago: executing program 4 (id=797): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) ioperm(0x3, 0x8100000001, 0x8006) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x48, 0x0, 0x100000005}]}) io_cancel(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x539170f7a9fcb8ea}, 0x0) ioperm(0x0, 0x5a7c704a, 0xff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x12, 0x3, 0x7, 0x14, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d5, 0x8, 0x9, 0x4c, 0x4, 0x60000001}, @sadb_x_nat_t_type={0x1, 0x14, 0xb3}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3500}, @sadb_key={0x9, 0x8, 0x1e0, 0x0, "3854b3c134e653670bba001c6060e37d40b646bc8c364aa623413dc70db06872f930ebc6a4aef658a98df06309907f44de76731a586089d9755eda2f"}, @sadb_lifetime={0x4, 0x4, 0x8e, 0x1, 0x101, 0x5}]}, 0xa0}}, 0x4040) ioperm(0x5, 0xa60, 0x101) fcntl$setpipe(r1, 0x407, 0x100000000) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) 2m57.552157714s ago: executing program 4 (id=801): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RAUTH(r1, &(0x7f0000000280)={0x14, 0x67, 0x1, {0x20, 0x3}}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f00000006c0)={r0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000180)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={r3, 0xc1, "b01d632d67fb3ad16e0cbf3cba9ad2b5e1babdce6469884a464cff38033308f26ac4b93c1c479277ddec81c32b78f2ccaee89882ba1d0b7aba63df84c3a20e8095bfd5c157496be2b672c51d584f424c6efb0eeceaff66b9193987d262e7ee96464c20257e574747ca62aa99956234fd5bc9923487370c3a8c630cd23779655931b3be3886258b8a059e63d2469691b2c3f385c2c6159ba88e3a4579747b67e606b5b621593d2ef13b8b5b4a2ff9ef97467b3f41302be154c68c24a11a7e373531"}, &(0x7f0000000600)=0xc9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000100), 0xa00003, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000d, 0x4031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) readlinkat(r4, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000400)=""/177, 0xb1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x9000}], 0x1, 0x0, 0x0, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x6, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000002c0)={0x0, 0xac3c, 0x5, 0x6, 0x7, [], [0xa0, 0x6da, 0x5, 0x9], [0x3, 0x2700000, 0x10000007, 0x196a], [0x7fffffff, 0x8, 0x101, 0x6]}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4003, @empty}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x3404c8d4) 2m54.713805735s ago: executing program 4 (id=807): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r2, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x2000, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffe01}, 0x0, &(0x7f0000000240)={0x6d, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xba9, 0x0, 0x5}, &(0x7f0000000280)={0x77359400}, 0x0) 2m54.313094633s ago: executing program 4 (id=809): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') sendfile(r1, r1, &(0x7f0000002200)=0x7, 0xb) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m53.663953794s ago: executing program 33 (id=809): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') sendfile(r1, r1, &(0x7f0000002200)=0x7, 0xb) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m13.109227412s ago: executing program 1 (id=897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4000, 0x1005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) 2m8.557959244s ago: executing program 1 (id=904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001674c1e16dbe8a8be1ec9eca21506f53e21f7fd9081a3518a99767a683d9cf833cb97bae3f45a61c33a6096d3a4ae2029643e20794ee2650330537ea972d75b42bc18f583965ae2ba48f47d98d37971e462c4377494edb5aa7235670ac1c2ee7d9a871fa1ff1062f702c1a0f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x2e00, &(0x7f0000000040)="61df712bc884fed5722780b605a7", 0x0, 0x10000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xdc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 2m7.095955885s ago: executing program 1 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001400), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001401) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) close_range(r4, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20000014) close(r2) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r8, 0x7623ef02ae027311, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2404c884}, 0x8000) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x350, 0xc, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1005}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x949d}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x278, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "79dba9d98a84f9eee0f6bf1ac1b2723c13bb39594de6315b301d90666dcbc97a9acc5bcb585691f401064497aff2f75ada325523e21acba87a34cb067ec226f671d47b92a38f92595cb4a20d42e57c78a85c445aba411c23b73e1a3c87f7346f7ccf0e96c76b61b1cedb75c0d02e25b385e3f96e9650aa7a51a2533c6b11c44a7b2125b415c8ae3ae35d5fbed42fa7868b4485aa2038d20c1b1e8ad7d0af2bb21e7ae39e995eeb3cc646e3a00f487b78a56e666c8051ff78b19aa347c396251e6ed5ab"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x54, 0x1, "34a55b000efa90120e0690f2d7649fcf47ed21a558d4a942c7358e21f7c57bb6f9a4a2be039eaf8b119cf660973a00db7ef5bc43d2c5b4445d9b022ee808fa4c3b3c4023eeb05a29d83116629582c42f"}, @NFTA_DATA_VALUE={0xca, 0x1, "151cf08f11772313499958168695568ae6c46ad9b0d30f15714d8e9991bbb5d098dfcde95a33791417660ccf4fa6866b1cd89c367201e66e8d2e70f0533ec19ecc572f2f13760474f4e96b0c33f523bc17f43606023690e1cb192fd9deb163d8e89ce3705e8eccb40368ed7dcb20ca17932e787093709ae5f665993511c6bfa9c34c2d6cac38145e599a368ab0229268b0ec7dcf3e0f404bd5a59d55f82bb98994f37d03d6ae80bb6d57f2928c8cd3651dd7e4b4cc892646fa59ec434f0b74c511e3629c8504"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0xd8, 0xb, 0xa, 0xc00, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x11}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x68}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x57}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @match={{0xa}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x450}, 0x1, 0x0, 0x0, 0x804}, 0x4000080) 2m2.873129597s ago: executing program 1 (id=916): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x1, @dev, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x40000401}, {}, 0x0, 0x4}) 2m2.448912684s ago: executing program 1 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)="9f18fc86", 0x4}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) read$msr(r0, &(0x7f0000000280)=""/247, 0xf7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) 2m0.744227728s ago: executing program 1 (id=922): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$pagemap(0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0xffefffff) 1m47.750896251s ago: executing program 5 (id=940): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048825) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000380)=0x3) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1aa402e46276b2d9) 1m47.265007053s ago: executing program 5 (id=941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001674c1e16dbe8a8be1ec9eca21506f53e21f7fd9081a3518a99767a683d9cf833cb97bae3f45a61c33a6096d3a4ae2029643e20794ee2650330537ea972d75b42bc18f583965ae2ba48f47d98d37971e462c4377494edb5aa7235670ac1c2ee7d9a871fa1ff1062f702c1a0f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x2e00, &(0x7f0000000040)="61df712bc884fed5722780b605a7", 0x0, 0x10000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xdc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000880)="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"}) 1m47.227224599s ago: executing program 2 (id=943): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000340)=""/93, 0x5d}], 0x4, 0x4, 0x5) 1m47.159268884s ago: executing program 2 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2b) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) 1m45.947468938s ago: executing program 0 (id=945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x0, 0x300050) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000f40)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) process_vm_readv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f0000000580)=""/228, 0xe4}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f00000009c0)=""/214, 0xd6}, {&(0x7f0000000ac0)=""/232, 0xe8}], 0xa, &(0x7f0000000ec0)=[{&(0x7f0000000480)=""/51, 0x33}, {&(0x7f0000000c80)=""/94, 0x5e}, {&(0x7f0000000d00)=""/102, 0x66}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/221, 0xdd}], 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) lgetxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000100)=""/188, 0xbc) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x0, 0x0) 1m45.926198777s ago: executing program 2 (id=946): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1af4b9e2afb08fbfa8795ae198eb98603501824b278e7af60824251a6b1334031aac5f7421d7ea02310f3f6dad9592da87735256880", 0x38}) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x900, 0x0, 0x0, 0x17, 0x9, 0x4f}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) socket(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xfffffffffffffffe, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0xc898, 0xffffffffffffffff, 0xffffffffffffffe7, 0xeb3b, 0x8, 0x4, 0x3, 0x6, 0x9, 0x4], 0x0, 0x99806}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m45.844980035s ago: executing program 6 (id=947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x6, 0x2da3b9f3) setreuid(0x0, 0xee00) setgroups(0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x400000, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x20004, 0x9, 0x0, {0x0, 0x0, 0x7, 0x6, 0x4, 0xfffffffffffffffe, 0x1, 0x0, 0x77, 0x6000, 0xfffffffe, 0x0, r4, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getgroups(0x5, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x3}}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r11, &(0x7f0000000340)={0x90, 0x0, r8, {0x2, 0x0, 0xa, 0x0, 0x800, 0x7, {0x5, 0x6, 0x7ff, 0x5, 0x51b5, 0x4, 0x1, 0x7fffffff, 0xf5, 0x6000, 0x9, r9, r10, 0x6, 0x3e}}}, 0x90) setgroups(0x5, &(0x7f0000000200)=[r4, r5, r6, 0x0, r10]) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) 1m45.772093548s ago: executing program 6 (id=948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r1, &(0x7f0000000280)=[{0x0, 0x51}, {&(0x7f0000000680)='>]', 0x2}], 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0x9cf) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000a671356b391a897e4f499e00000200020000e7ffffffffffffff0200060000000040000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="010000f5"], 0x28}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x424400, 0x20, 0x20}, 0x18) getdents64(r5, &(0x7f0000000180)=""/4, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r9 = dup(0xffffffffffffffff) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='smb3\x00', 0x10, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() 1m45.041205807s ago: executing program 34 (id=922): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$pagemap(0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0xffefffff) 1m44.944474038s ago: executing program 6 (id=950): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0xa0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000580)) r8 = io_uring_setup(0x3909, &(0x7f0000000140)={0x0, 0x2, 0x0, 0xfffff7fc}) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0xff}}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) close_range(r8, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001020000ff2505a1a440000102030109027900020121600e0904000001020d0000052406000105240003000d240f01f8ffffff1a0705008106241a7f000a05240101000c241bc0effcff03080900050c241b05000400ff051000070905810300020008030904010000020d00000904010102020d000009"], &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x0, 0x2, 0x3, 0x8, 0x2}, 0xa4, &(0x7f00000003c0)={0x5, 0xf, 0xa4, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1b, 0x0, 0x0, 0x8000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x98, 0x6, 0x4b, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "9ebbf51c86ab95a0e6b9bf0670f93195"}, @generic={0x76, 0x10, 0x0, "e5e73b7d359d1101a90e8d2bda38903de3f7de4b5060bf5c75f177c73b5b76b0c46cd3327630b91839da57c92aa8f480979ccdda5e4357f66aa807d750b42094adc11bf7d0c41b50b50aebbae1771086ad5e5a3126e9d732a0b5a149d0b01436cfc652991fb693d5336f3d07167b79ccad142b"}, @ptm_cap={0x3}]}, 0x2, [{0x4d, &(0x7f0000000480)=@string={0x4d, 0x3, "4c6a9cdda8950ceece789dd1497cb0df9574e656735cbf56a8e4e04c517921bef3a7a381f168656be72b5ee06ebb429d3f2a081cf964d50d14d42d20ebe51a28dc8d425f30bf0dae54f5dc"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c0a}}]}) 1m44.852800502s ago: executing program 0 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000180)) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000380), 0xa04000, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) 1m44.757236177s ago: executing program 2 (id=952): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x29, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000004780)=[{{&(0x7f00000033c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000003b80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40090}}], 0x2, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x7, 0x133bd74, 0x1000000, 0x20000000}) 1m44.667627038s ago: executing program 0 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x64}, {}, {0x85, 0x0, 0x0, 0xc}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}]}, 0x24}}, 0x840) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendfile(r6, r7, &(0x7f00000000c0)=0x7663, 0x8001) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x201, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (fail_nth: 9) 1m44.434937034s ago: executing program 5 (id=954): recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(r0, 0x0, 0x0, 0x7, 0xc) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0x18}}, 0x10) 1m42.425162411s ago: executing program 2 (id=955): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x2}) landlock_restrict_self(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) fsetxattr$smack_xattr_label(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2700d30304ea672fa5bedf0f82d07e885d9861de5a558efd810d260fc295", @ANYRES8=r1], 0xb, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) 1m42.392107193s ago: executing program 5 (id=956): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)=@random={'os2.', ')a\x00'}, &(0x7f0000000280)='overlay\x00', 0x8, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 1m42.277821149s ago: executing program 0 (id=957): mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') openat$random(0xffffffffffffff9c, 0x0, 0x218a01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x18e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xc0020000, 0xe7ffffff, 0xffffffff, 0x54ed}}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x9) timer_create(0x9, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000002600), 0x2000000000000000, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0xc0844123, 0x20000000) chdir(&(0x7f0000000140)='./file1\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000800000008000000080000000119", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200000002000049001000"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 1m40.534744783s ago: executing program 2 (id=958): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r1, 0x4c057000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) getdents(0xffffffffffffffff, 0x0, 0x4d) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req={0xfa, 0x46, 0x80000000, 0x8001}, 0x10) sched_setscheduler(r0, 0x4, &(0x7f00000000c0)=0x6) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = msgget$private(0x0, 0x402) msgrcv(r5, 0x0, 0x0, 0x2, 0x2000) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x24, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m40.512046198s ago: executing program 5 (id=959): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x17, 0x2, 0x0, "b43d70dde5dbbb000000002a32b172b60000c67f00edffffff00"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000000)=@ethtool_channels={0x1, 0xa2f6, 0x56c, 0x7, 0x4, 0x3af0, 0x6, 0x7fffffff, 0xdb}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000100)="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") preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/120, 0x78}], 0x1, 0x4, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) sendmmsg(r9, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="03eaaedd9f682d2a8c2405e461df9e54da7faa50bdfed7d280497187a1d4eb5e67d4b3e57011698b", 0x28}, {&(0x7f0000000280)="56b7887d6077606cd713563ad2130b82f1eff12e32a2d51a9003d5c64e681ccd10a112caa42619280e93648fea9e30e66d6a66b0ccddabf30262293dab4aebdbb812b726a433beee22aa2db49e89f2c8eacc396d18c957ca8cddaae4c1d5abb52fb480ba74aca7489146b4779a98b9a8049b5b5a0bad2e8116d136e4b20bc88168897c3c7dcea68d364ba9c0c3052349", 0x90}, {&(0x7f0000000100)="7d4c55148ef86dd3480caf14c108b9cb4e68393e931e23f043c761e791cffc4981ceac1468419d8f69a035c40e09dbcbc317682a8a041dc2b53d7ef71433f1cd98bf28ea847ce7291766219f28dd82211c2e000ac8954a7220cd5db9a91d5656cf337183caadfb4b8ff51f36ad20ae109c36efc963", 0x75}, {&(0x7f0000000440)="e85aad7097e062b4dd0f06eabfad7056b9d83792700bb3dc802509b74279fdcaf2a201358d3f75344778fb465a32c0510807bc2a4602c67acd66383ca496c152e386380da3c15054a2a8c305f1371cd07a4297e73ee84ec472358f8821bc82be2874bf79b30e319986487db77b2deca04e54936a0666da543f227f46b69518c765ea402bc05e234c7a3da1b96d52c360b80cb9c495a20489ea4babdcb99c01f86e112f2534d6bf2db340b48dcb5330e84b37e4", 0xb3}], 0x4}}], 0x1, 0x0) 1m40.321019485s ago: executing program 0 (id=960): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='svcsock_new_socket\x00', r0, 0x0, 0xf}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @remote}]}, 0x4c}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050040"], 0x24}}, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000100)={{@local, 0x2}, @host, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc}) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=interleave=statc:']) 1m39.050032002s ago: executing program 6 (id=961): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdir(0x0, 0x0) chdir(0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0, 0x2}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) r2 = fanotify_init(0x8, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) fanotify_mark(r2, 0x41, 0x8000038, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000200)="a474b88152f13629b4fd55b5ef7a77372540a1b6") ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "2346f19ca33b451222c062cd4c815411c8c9133cea0cca44cbc1c8254eb62c1dd8a84c9174ab50a08b89b82fa63db13e3f1267ca20e948f0b53dced5b8bdce56", 0x2d}, 0x48, 0xfffffffffffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, r7, 0x0, r9) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) linkat(r1, &(0x7f00000000c0)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x1000) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000181401000000000000000000080001"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) 1m33.925248917s ago: executing program 0 (id=962): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1af4b9e2afb08fbfa8795ae198eb98603501824b278e7af60824251a6b1334031aac5f7421d7ea02310f3f6dad9592da87735256880", 0x38}) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x900, 0x0, 0x0, 0x17, 0x9, 0x4f}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) socket(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xfffffffffffffffe, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0xc898, 0xffffffffffffffff, 0xffffffffffffffe7, 0xeb3b, 0x8, 0x4, 0x3, 0x6, 0x9, 0x4], 0x0, 0x99806}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m29.273032372s ago: executing program 5 (id=963): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$inet(0x2, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) lremovexattr(&(0x7f0000000140)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioperm(0x0, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) 1m29.272844305s ago: executing program 6 (id=964): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x86ea330d3b21118, &(0x7f0000000200)=0xfffffffe, 0x4) 1m24.798504514s ago: executing program 35 (id=958): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r1, 0x4c057000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) getdents(0xffffffffffffffff, 0x0, 0x4d) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req={0xfa, 0x46, 0x80000000, 0x8001}, 0x10) sched_setscheduler(r0, 0x4, &(0x7f00000000c0)=0x6) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = msgget$private(0x0, 0x402) msgrcv(r5, 0x0, 0x0, 0x2, 0x2000) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x24, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m20.227044022s ago: executing program 6 (id=966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x2141) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff0204a400ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f0000000000050036000000000008000200", @ANYRES32=r0], 0x2c}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x80, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xccc1}}]}]}, 0x80}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x30500, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000ac0)={0x4, 0xfffc, 0x9e7, 0x7}) 1m15.764534656s ago: executing program 36 (id=962): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1af4b9e2afb08fbfa8795ae198eb98603501824b278e7af60824251a6b1334031aac5f7421d7ea02310f3f6dad9592da87735256880", 0x38}) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x900, 0x0, 0x0, 0x17, 0x9, 0x4f}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) socket(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xfffffffffffffffe, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0xc898, 0xffffffffffffffff, 0xffffffffffffffe7, 0xeb3b, 0x8, 0x4, 0x3, 0x6, 0x9, 0x4], 0x0, 0x99806}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m9.1747956s ago: executing program 37 (id=963): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$inet(0x2, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) lremovexattr(&(0x7f0000000140)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioperm(0x0, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) 1m1.681877569s ago: executing program 38 (id=966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x2141) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff0204a400ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f0000000000050036000000000008000200", @ANYRES32=r0], 0x2c}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x80, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xccc1}}]}]}, 0x80}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x30500, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000ac0)={0x4, 0xfffc, 0x9e7, 0x7}) 39.623118064s ago: executing program 8 (id=965): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000180)=[@acquire, @enter_looper, @request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="0306251375e80303d90ec8b33f2e82ec4bb4aa9c522bbfd63633539f281116c50a3ad3e679d83dc61cffb3652f4f1991ad532448e28181df0e522c754bbb1db51f9f22c2a31785d130dbd2571fc0ae69b3876a969559e705a23672175d8d8561842d98645b11594e2e82cb65897e55050d2d7b002bb7a22493b8cade7fc41a162701b42796e18f9499a28b3da8d8f1c37d254e679ca4faa6abea3bd6ace33837bb", @ANYRES64=r0, @ANYRESHEX=r1], &(0x7f00000000c0)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1) timer_create(0xa, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000000)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r4 = msgget(0x1, 0x0) msgsnd(r4, &(0x7f00000002c0)={0x2, "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"}, 0x1008, 0x0) 31.38263756s ago: executing program 3 (id=968): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)=@random={'os2.', ')a\x00'}, &(0x7f0000000280)='overlay\x00', 0x8, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=968): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)=@random={'os2.', ')a\x00'}, &(0x7f0000000280)='overlay\x00', 0x8, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): /0x21f0 [ 182.364452][ T6975] ? arch_stack_walk+0xfd/0x150 [ 182.369390][ T6975] ? stack_depot_save_flags+0x37/0x940 [ 182.374907][ T6975] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 182.380764][ T6975] ? mark_lock+0x9a/0x360 [ 182.385158][ T6975] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 182.391080][ T6975] ? __might_fault+0xaa/0x120 [ 182.395780][ T6975] ? __might_fault+0xc6/0x120 [ 182.400483][ T6975] ? _copy_from_user+0x99/0xc0 [ 182.405281][ T6975] ? bpf_test_init+0x15a/0x180 [ 182.410065][ T6975] ? xdp_convert_md_to_buff+0x5b/0x330 [ 182.415556][ T6975] bpf_prog_test_run_xdp+0x805/0x11e0 [ 182.420957][ T6975] ? __pfx_lock_release+0x10/0x10 [ 182.426013][ T6975] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 182.431838][ T6975] ? __fget_files+0x2a/0x410 [ 182.436541][ T6975] ? __fget_files+0x2a/0x410 [ 182.441153][ T6975] ? fput+0x21b/0x290 [ 182.445174][ T6975] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 182.451092][ T6975] bpf_prog_test_run+0x2e4/0x360 [ 182.456054][ T6975] __sys_bpf+0x48d/0x810 [ 182.460314][ T6975] ? __pfx___sys_bpf+0x10/0x10 [ 182.465103][ T6975] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 182.471133][ T6975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.477502][ T6975] ? do_syscall_64+0x100/0x230 [ 182.482297][ T6975] __x64_sys_bpf+0x7c/0x90 [ 182.486741][ T6975] do_syscall_64+0xf3/0x230 [ 182.491275][ T6975] ? clear_bhb_loop+0x35/0x90 [ 182.495971][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.501890][ T6975] RIP: 0033:0x7f4fffd85d29 [ 182.506409][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.526074][ T6975] RSP: 002b:00007f5000bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.534514][ T6975] RAX: ffffffffffffffda RBX: 00007f4ffff75fa0 RCX: 00007f4fffd85d29 [ 182.542524][ T6975] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 182.550514][ T6975] RBP: 00007f5000bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 182.558587][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.566663][ T6975] R13: 0000000000000000 R14: 00007f4ffff75fa0 R15: 00007ffc84fb73c8 [ 182.574669][ T6975] [ 184.334820][ T7002] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 185.914883][ T7025] __nla_validate_parse: 1 callbacks suppressed [ 185.914906][ T7025] netlink: 52 bytes leftover after parsing attributes in process `syz.3.309'. [ 186.500491][ T29] audit: type=1326 audit(1736275978.577:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7013 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 186.527298][ T29] audit: type=1326 audit(1736275978.577:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7013 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 186.851955][ T7033] sctp: [Deprecated]: syz.1.312 (pid 7033) Use of int in max_burst socket option. [ 186.851955][ T7033] Use struct sctp_assoc_value instead [ 186.945887][ T7042] x_tables: duplicate underflow at hook 2 [ 187.409916][ T7046] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 187.436227][ T7046] CIFS mount error: No usable UNC path provided in device string! [ 187.436227][ T7046] [ 187.446823][ T7046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 190.027595][ T7072] netlink: 'syz.1.325': attribute type 3 has an invalid length. [ 190.035540][ T7072] netlink: 48 bytes leftover after parsing attributes in process `syz.1.325'. [ 190.069798][ T7070] dccp_v6_rcv: dropped packet with invalid checksum [ 191.272733][ T29] audit: type=1326 audit(1736275983.367:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7080 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 191.338899][ T29] audit: type=1326 audit(1736275983.397:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7080 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 191.414753][ T7086] netlink: 272 bytes leftover after parsing attributes in process `syz.2.328'. [ 191.437980][ T7086] netlink: 272 bytes leftover after parsing attributes in process `syz.2.328'. [ 191.452475][ T29] audit: type=1326 audit(1736275983.397:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7080 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 191.916104][ T29] audit: type=1326 audit(1736275983.397:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7080 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 193.775204][ T7117] netlink: 'syz.4.337': attribute type 3 has an invalid length. [ 193.816969][ T7117] netlink: 48 bytes leftover after parsing attributes in process `syz.4.337'. [ 195.632854][ T5938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.659783][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'. [ 195.920941][ T7138] netlink: 'syz.0.344': attribute type 9 has an invalid length. [ 196.048128][ T5938] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.057245][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.074904][ T5938] usb 5-1: config 0 descriptor?? [ 196.352920][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 196.394798][ T7145] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 196.428425][ T29] audit: type=1326 audit(1736275988.477:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ced185d29 code=0x7ffc0000 [ 196.469514][ T29] audit: type=1326 audit(1736275988.487:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ced185d29 code=0x7ffc0000 [ 196.539542][ T29] audit: type=1326 audit(1736275988.507:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ced185d29 code=0x7ffc0000 [ 196.640500][ T29] audit: type=1326 audit(1736275988.507:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ced185d29 code=0x7ffc0000 [ 198.129095][ T5938] usb 5-1: USB disconnect, device number 11 [ 200.920060][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.926447][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.170591][ T7218] xt_cgroup: xt_cgroup: no path or classid specified [ 202.868240][ T7224] netlink: 'syz.2.368': attribute type 29 has an invalid length. [ 204.362272][ T7224] netlink: 248 bytes leftover after parsing attributes in process `syz.2.368'. [ 205.769898][ T7245] FAULT_INJECTION: forcing a failure. [ 205.769898][ T7245] name failslab, interval 1, probability 0, space 0, times 0 [ 205.878154][ T7245] CPU: 0 UID: 0 PID: 7245 Comm: syz.0.373 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 205.888885][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.899601][ T7245] Call Trace: [ 205.902920][ T7245] [ 205.905884][ T7245] dump_stack_lvl+0x241/0x360 [ 205.910628][ T7245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.915883][ T7245] ? __pfx__printk+0x10/0x10 [ 205.920539][ T7245] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 205.926574][ T7245] ? __pfx___might_resched+0x10/0x10 [ 205.931932][ T7245] should_fail_ex+0x3b0/0x4e0 [ 205.936665][ T7245] should_failslab+0xac/0x100 [ 205.941406][ T7245] kmem_cache_alloc_node_noprof+0x77/0x380 [ 205.947276][ T7245] ? __alloc_skb+0x1c3/0x440 [ 205.951922][ T7245] __alloc_skb+0x1c3/0x440 [ 205.956423][ T7245] ? __pfx___alloc_skb+0x10/0x10 [ 205.961417][ T7245] ? netlink_autobind+0xd6/0x2f0 [ 205.966408][ T7245] ? netlink_autobind+0x2b0/0x2f0 [ 205.971489][ T7245] netlink_sendmsg+0x638/0xcb0 [ 205.976324][ T7245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.981686][ T7245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.987021][ T7245] __sock_sendmsg+0x221/0x270 [ 205.991761][ T7245] ____sys_sendmsg+0x52a/0x7e0 [ 205.996575][ T7245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.001884][ T7245] ? __fget_files+0x2a/0x410 [ 206.006502][ T7245] ? __fget_files+0x2a/0x410 [ 206.011128][ T7245] __sys_sendmsg+0x269/0x350 [ 206.015749][ T7245] ? __pfx_lock_release+0x10/0x10 [ 206.020794][ T7245] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.025936][ T7245] ? __pfx_vfs_write+0x10/0x10 [ 206.030745][ T7245] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.037096][ T7245] ? do_syscall_64+0x100/0x230 [ 206.041891][ T7245] ? do_syscall_64+0xb6/0x230 [ 206.046591][ T7245] do_syscall_64+0xf3/0x230 [ 206.051117][ T7245] ? clear_bhb_loop+0x35/0x90 [ 206.055811][ T7245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.061726][ T7245] RIP: 0033:0x7fbf9b585d29 [ 206.066158][ T7245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.085817][ T7245] RSP: 002b:00007fbf9c2e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.094254][ T7245] RAX: ffffffffffffffda RBX: 00007fbf9b775fa0 RCX: 00007fbf9b585d29 [ 206.102245][ T7245] RDX: 0000000000000800 RSI: 0000000020000000 RDI: 0000000000000003 [ 206.110236][ T7245] RBP: 00007fbf9c2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 206.118222][ T7245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.126208][ T7245] R13: 0000000000000000 R14: 00007fbf9b775fa0 R15: 00007ffcb0de8a58 [ 206.134253][ T7245] [ 209.985391][ T7285] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 210.216159][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 210.415225][ T7297] Invalid option length (0) for dns_resolver key [ 216.687953][ T7351] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.328090][ T941] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 217.535729][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.548099][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.561697][ T941] usb 4-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 217.579381][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.617546][ T941] usb 4-1: config 0 descriptor?? [ 218.287465][ T941] wacom 0003:056A:7A26.0001: Unknown device_type for 'HID 056a:7a26'. Ignoring. [ 219.596058][ T941] usb 4-1: USB disconnect, device number 12 [ 219.804936][ T7373] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 219.911528][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.972243][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.103640][ T7384] overlayfs: failed to resolve './file0': -2 [ 220.287971][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 220.437290][ T7393] netlink: 'syz.0.416': attribute type 3 has an invalid length. [ 220.437350][ T7393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.416'. [ 220.697095][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.714133][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.735616][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.745781][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.807991][ T5873] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 220.829492][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.845177][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.872743][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.953465][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.022761][ T5873] usb 4-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 221.064953][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.122249][ T5873] usb 4-1: Product: syz [ 221.178903][ T5873] usb 4-1: Manufacturer: syz [ 221.281170][ T5873] usb 4-1: SerialNumber: syz [ 221.533173][ T5873] usb 4-1: config 0 descriptor?? [ 221.540301][ T5873] usb 4-1: bad CDC descriptors [ 221.648019][ T7416] fuse: Bad value for 'fd' [ 221.789083][ T7390] warning: `syz.3.417' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.900199][ T5872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 221.925752][ T7390] overlay: Unknown parameter 'appraise_type' [ 221.950839][ T5873] usb 4-1: USB disconnect, device number 13 [ 222.058154][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 222.090831][ T5872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.103777][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.115015][ T5872] usb 2-1: Product: syz [ 222.122526][ T5872] usb 2-1: Manufacturer: syz [ 222.127371][ T5872] usb 2-1: SerialNumber: syz [ 222.142064][ T5872] usb 2-1: config 0 descriptor?? [ 222.354588][ T5872] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.395675][ T5872] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 222.412390][ T7428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.445585][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.458952][ T7428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.471200][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.480527][ T7428] batadv_slave_1: entered promiscuous mode [ 222.586368][ T7428] batadv_slave_1: left promiscuous mode [ 222.767931][ T941] usb 2-1: USB disconnect, device number 7 [ 223.007109][ T7444] FAULT_INJECTION: forcing a failure. [ 223.007109][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 223.020847][ T7444] CPU: 1 UID: 0 PID: 7444 Comm: syz.1.433 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 223.031508][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.041615][ T7444] Call Trace: [ 223.045193][ T7444] [ 223.048164][ T7444] dump_stack_lvl+0x241/0x360 [ 223.052912][ T7444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.058171][ T7444] ? __pfx__printk+0x10/0x10 [ 223.062837][ T7444] should_fail_ex+0x3b0/0x4e0 [ 223.067580][ T7444] should_failslab+0xac/0x100 [ 223.072321][ T7444] ? skb_clone+0x20c/0x390 [ 223.076786][ T7444] kmem_cache_alloc_noprof+0x70/0x380 [ 223.082232][ T7444] skb_clone+0x20c/0x390 [ 223.086532][ T7444] __netlink_deliver_tap+0x3cc/0x7f0 [ 223.091892][ T7444] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.097138][ T7444] netlink_deliver_tap+0x19d/0x1b0 [ 223.102304][ T7444] netlink_unicast+0x7c4/0x990 [ 223.107140][ T7444] ? __pfx_netlink_unicast+0x10/0x10 [ 223.112475][ T7444] ? __virt_addr_valid+0x45f/0x530 [ 223.117769][ T7444] ? __phys_addr_symbol+0x2f/0x70 [ 223.122835][ T7444] ? __check_object_size+0x47a/0x730 [ 223.128240][ T7444] netlink_sendmsg+0x8e4/0xcb0 [ 223.133036][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.138359][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.143667][ T7444] __sock_sendmsg+0x221/0x270 [ 223.148377][ T7444] ____sys_sendmsg+0x52a/0x7e0 [ 223.153172][ T7444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.158479][ T7444] ? __fget_files+0x2a/0x410 [ 223.163094][ T7444] ? __fget_files+0x2a/0x410 [ 223.167709][ T7444] __sys_sendmsg+0x269/0x350 [ 223.172352][ T7444] ? __pfx_lock_release+0x10/0x10 [ 223.177402][ T7444] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.182564][ T7444] ? __pfx_vfs_write+0x10/0x10 [ 223.187394][ T7444] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.193745][ T7444] ? do_syscall_64+0x100/0x230 [ 223.198544][ T7444] ? do_syscall_64+0xb6/0x230 [ 223.203268][ T7444] do_syscall_64+0xf3/0x230 [ 223.207809][ T7444] ? clear_bhb_loop+0x35/0x90 [ 223.212519][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.218449][ T7444] RIP: 0033:0x7f4fffd85d29 [ 223.222885][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.242515][ T7444] RSP: 002b:00007f5000bb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.250956][ T7444] RAX: ffffffffffffffda RBX: 00007f4ffff75fa0 RCX: 00007f4fffd85d29 [ 223.258950][ T7444] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 223.266936][ T7444] RBP: 00007f5000bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 223.274929][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.282922][ T7444] R13: 0000000000000000 R14: 00007f4ffff75fa0 R15: 00007ffc84fb73c8 [ 223.290934][ T7444] [ 223.803676][ T7451] netlink: 68 bytes leftover after parsing attributes in process `syz.1.435'. [ 223.874367][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.436'. [ 223.908080][ T29] audit: type=1326 audit(1736276015.997:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 223.996051][ T29] audit: type=1326 audit(1736276016.027:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 224.072251][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.436'. [ 224.081521][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 224.512200][ T29] audit: type=1326 audit(1736276016.027:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 224.998193][ T29] audit: type=1326 audit(1736276016.027:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 225.083579][ T29] audit: type=1326 audit(1736276016.037:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fffd85d29 code=0x7ffc0000 [ 225.720155][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 225.804913][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 225.814149][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 226.437359][ T29] audit: type=1400 audit(1736276018.527:109): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="y" requested=w pid=7487 comm="syz.3.447" saddr=172.20.20.187 daddr=172.20.20.10 dest=53426 netif=lo [ 227.383983][ T7505] overlayfs: invalid redirect ((null)) [ 228.923699][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 228.990172][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 228.999224][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 229.314912][ T7522] FAULT_INJECTION: forcing a failure. [ 229.314912][ T7522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.328604][ T7522] CPU: 0 UID: 0 PID: 7522 Comm: syz.0.459 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 229.339259][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.349368][ T7522] Call Trace: [ 229.352695][ T7522] [ 229.355664][ T7522] dump_stack_lvl+0x241/0x360 [ 229.360447][ T7522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.365709][ T7522] ? __pfx__printk+0x10/0x10 [ 229.370364][ T7522] ? tomoyo_path_number_perm+0x6f9/0x860 [ 229.376047][ T7522] ? __pfx_lock_release+0x10/0x10 [ 229.381127][ T7522] ? tomoyo_path_number_perm+0x206/0x860 [ 229.386823][ T7522] should_fail_ex+0x3b0/0x4e0 [ 229.391576][ T7522] _copy_from_user+0x2f/0xc0 [ 229.396227][ T7522] video_usercopy+0x378/0x1180 [ 229.401067][ T7522] ? __pfx___video_do_ioctl+0x10/0x10 [ 229.406499][ T7522] ? __pfx_video_usercopy+0x10/0x10 [ 229.411753][ T7522] ? smack_file_ioctl+0x2f7/0x3a0 [ 229.416836][ T7522] ? __fget_files+0x2a/0x410 [ 229.421474][ T7522] ? __fget_files+0x2a/0x410 [ 229.426113][ T7522] v4l2_ioctl+0x189/0x1e0 [ 229.430498][ T7522] ? __pfx_v4l2_ioctl+0x10/0x10 [ 229.435399][ T7522] __se_sys_ioctl+0xf5/0x170 [ 229.440049][ T7522] do_syscall_64+0xf3/0x230 [ 229.444615][ T7522] ? clear_bhb_loop+0x35/0x90 [ 229.449343][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.455394][ T7522] RIP: 0033:0x7fbf9b585d29 [ 229.459852][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.479591][ T7522] RSP: 002b:00007fbf9c2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.488055][ T7522] RAX: ffffffffffffffda RBX: 00007fbf9b775fa0 RCX: 00007fbf9b585d29 [ 229.496065][ T7522] RDX: 00000000200004c0 RSI: 00000000c0585609 RDI: 0000000000000003 [ 229.504189][ T7522] RBP: 00007fbf9c2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.512299][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.520320][ T7522] R13: 0000000000000000 R14: 00007fbf9b775fa0 R15: 00007ffcb0de8a58 [ 229.528451][ T7522] [ 230.617022][ T7548] openvswitch: netlink: EtherType 50a is less than min 600 [ 231.258091][ T941] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 231.428293][ T941] usb 2-1: device descriptor read/64, error -71 [ 231.716344][ T941] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 231.988098][ T941] usb 2-1: device descriptor read/64, error -71 [ 232.118264][ T941] usb usb2-port1: attempt power cycle [ 232.585223][ T941] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 232.605910][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 232.618898][ T941] usb 2-1: device descriptor read/8, error -71 [ 232.867939][ T941] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 232.898731][ T941] usb 2-1: device descriptor read/8, error -71 [ 233.008297][ T941] usb usb2-port1: unable to enumerate USB device [ 233.036118][ T7575] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 233.075750][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.433796][ T7581] netlink: 428 bytes leftover after parsing attributes in process `syz.3.476'. [ 233.468260][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.476'. [ 234.715522][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 234.766688][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'. [ 234.854581][ T941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 235.997948][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 236.006972][ T941] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 236.016302][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.148332][ T941] usb 3-1: Product: syz [ 236.152583][ T941] usb 3-1: Manufacturer: syz [ 236.187931][ T941] usb 3-1: SerialNumber: syz [ 236.222918][ T7611] sp0: Synchronizing with TNC [ 236.322086][ T941] usb 3-1: config 0 descriptor?? [ 236.344111][ T941] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 236.681129][ T7615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.484'. [ 236.847575][ T7617] netlink: 'syz.4.486': attribute type 3 has an invalid length. [ 236.876155][ T7617] netlink: 48 bytes leftover after parsing attributes in process `syz.4.486'. [ 237.678030][ T29] audit: type=1326 audit(1736276029.707:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 237.753019][ T941] gspca_sonixj: reg_w1 err -110 [ 237.768664][ T29] audit: type=1326 audit(1736276029.707:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 237.806605][ T29] audit: type=1326 audit(1736276029.727:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 237.877993][ T29] audit: type=1326 audit(1736276029.727:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 237.901266][ T941] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 238.003081][ T29] audit: type=1326 audit(1736276029.727:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 238.054004][ T29] audit: type=1326 audit(1736276029.727:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 238.083853][ T29] audit: type=1326 audit(1736276029.727:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 238.133027][ T29] audit: type=1326 audit(1736276029.727:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 238.170079][ T29] audit: type=1326 audit(1736276029.727:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 238.212332][ T29] audit: type=1326 audit(1736276029.727:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7622 comm="syz.4.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891cd85d29 code=0x7ffc0000 [ 238.696461][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'. [ 238.842187][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'. [ 238.851298][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 238.860803][ T47] usb 3-1: USB disconnect, device number 5 [ 239.718257][ T7632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.491'. [ 240.265148][ T7623] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 241.084755][ T7658] netlink: 'syz.4.497': attribute type 3 has an invalid length. [ 241.133522][ T7658] netlink: 48 bytes leftover after parsing attributes in process `syz.4.497'. [ 242.057652][ T7663] program syz.3.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.249690][ T7668] FAULT_INJECTION: forcing a failure. [ 242.249690][ T7668] name failslab, interval 1, probability 0, space 0, times 0 [ 242.267931][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.4.499 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 242.276621][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'. [ 242.278574][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.278596][ T7668] Call Trace: [ 242.278606][ T7668] [ 242.278617][ T7668] dump_stack_lvl+0x241/0x360 [ 242.278656][ T7668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.313796][ T7668] ? __pfx__printk+0x10/0x10 [ 242.318447][ T7668] ? ref_tracker_alloc+0x332/0x490 [ 242.323623][ T7668] should_fail_ex+0x3b0/0x4e0 [ 242.328352][ T7668] should_failslab+0xac/0x100 [ 242.333136][ T7668] ? skb_clone+0x20c/0x390 [ 242.337617][ T7668] kmem_cache_alloc_noprof+0x70/0x380 [ 242.343052][ T7668] skb_clone+0x20c/0x390 [ 242.347326][ T7668] __netlink_deliver_tap+0x3cc/0x7f0 [ 242.352641][ T7668] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.357853][ T7668] netlink_deliver_tap+0x19d/0x1b0 [ 242.362987][ T7668] netlink_sendskb+0x68/0x140 [ 242.367698][ T7668] netlink_unicast+0x39d/0x990 [ 242.372497][ T7668] ? __pfx_netlink_unicast+0x10/0x10 [ 242.377828][ T7668] netlink_rcv_skb+0x262/0x430 [ 242.382660][ T7668] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 242.388146][ T7668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.393477][ T7668] ? cap_capable+0x1b4/0x250 [ 242.398094][ T7668] ? safesetid_security_capable+0xb2/0x1d0 [ 242.403923][ T7668] ? bpf_lsm_capable+0x9/0x10 [ 242.408622][ T7668] ? security_capable+0x7e/0x2d0 [ 242.413593][ T7668] nfnetlink_rcv+0x297/0x2ab0 [ 242.418299][ T7668] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 242.424076][ T7668] ? __dev_queue_xmit+0x2f4/0x3f50 [ 242.429213][ T7668] ? __dev_queue_xmit+0x1775/0x3f50 [ 242.434438][ T7668] ? kasan_save_track+0x51/0x80 [ 242.439319][ T7668] ? ____sys_sendmsg+0x52a/0x7e0 [ 242.444282][ T7668] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 242.449421][ T7668] ? __dev_queue_xmit+0x2f4/0x3f50 [ 242.454563][ T7668] ? __pfx___dev_queue_xmit+0x10/0x10 [ 242.459984][ T7668] ? ref_tracker_free+0x643/0x7e0 [ 242.465051][ T7668] ? __asan_memcpy+0x40/0x70 [ 242.469664][ T7668] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.475097][ T7668] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.480317][ T7668] ? skb_clone+0x240/0x390 [ 242.484756][ T7668] ? __pfx_lock_release+0x10/0x10 [ 242.489811][ T7668] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 242.495297][ T7668] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.500522][ T7668] netlink_unicast+0x7f6/0x990 [ 242.505324][ T7668] ? __pfx_netlink_unicast+0x10/0x10 [ 242.510635][ T7668] ? __virt_addr_valid+0x45f/0x530 [ 242.515772][ T7668] ? __phys_addr_symbol+0x2f/0x70 [ 242.520828][ T7668] ? __check_object_size+0x47a/0x730 [ 242.526144][ T7668] netlink_sendmsg+0x8e4/0xcb0 [ 242.530943][ T7668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.536266][ T7668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.541571][ T7668] __sock_sendmsg+0x221/0x270 [ 242.546285][ T7668] ____sys_sendmsg+0x52a/0x7e0 [ 242.551079][ T7668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.556405][ T7668] ? __fget_files+0x2a/0x410 [ 242.561015][ T7668] ? __fget_files+0x2a/0x410 [ 242.565637][ T7668] __sys_sendmsg+0x269/0x350 [ 242.570252][ T7668] ? __pfx_lock_release+0x10/0x10 [ 242.575299][ T7668] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.580440][ T7668] ? __pfx_vfs_write+0x10/0x10 [ 242.585248][ T7668] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.591597][ T7668] ? do_syscall_64+0x100/0x230 [ 242.596399][ T7668] ? do_syscall_64+0xb6/0x230 [ 242.601104][ T7668] do_syscall_64+0xf3/0x230 [ 242.605639][ T7668] ? clear_bhb_loop+0x35/0x90 [ 242.610363][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.616282][ T7668] RIP: 0033:0x7f891cd85d29 [ 242.620854][ T7668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.640495][ T7668] RSP: 002b:00007f891db9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.649062][ T7668] RAX: ffffffffffffffda RBX: 00007f891cf75fa0 RCX: 00007f891cd85d29 [ 242.657063][ T7668] RDX: 0000000000000004 RSI: 0000000020000440 RDI: 0000000000000007 [ 242.665051][ T7668] RBP: 00007f891db9a090 R08: 0000000000000000 R09: 0000000000000000 [ 242.673043][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.681039][ T7668] R13: 0000000000000000 R14: 00007f891cf75fa0 R15: 00007ffe800bb348 [ 242.689048][ T7668] [ 243.855928][ T7664] [U] „ [ 243.994250][ T7686] netlink: 'syz.1.507': attribute type 26 has an invalid length. [ 244.032509][ T7688] input: syz1 as /devices/virtual/input/input13 [ 244.184669][ T7686] netlink: 'syz.1.507': attribute type 4 has an invalid length. [ 244.333601][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 244.343223][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 245.268592][ T7695] netlink: 52 bytes leftover after parsing attributes in process `syz.4.508'. [ 245.376125][ T7698] netlink: 'syz.2.509': attribute type 3 has an invalid length. [ 245.410353][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 245.429936][ T7698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.509'. [ 245.499867][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 247.667925][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.879019][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 248.038026][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.313421][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 248.322656][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.347943][ T9] usb 2-1: Product: syz [ 248.365614][ T7737] netlink: 'syz.0.523': attribute type 3 has an invalid length. [ 248.373520][ T9] usb 2-1: Manufacturer: syz [ 248.394398][ T9] usb 2-1: SerialNumber: syz [ 248.414855][ T7737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.523'. [ 248.436517][ T9] usb 2-1: config 0 descriptor?? [ 248.481156][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 248.829002][ T7749] sp0: Synchronizing with TNC [ 249.516490][ T7751] sp0: Found TNC [ 249.549850][ T11] usb 2-1: Failed to submit usb control message: -110 [ 249.599881][ T11] usb 2-1: unable to send the bmi data to the device: -110 [ 249.654242][ T11] usb 2-1: unable to get target info from device [ 249.690667][ T11] usb 2-1: could not get target info (-110) [ 249.734561][ T11] usb 2-1: could not probe fw (-110) [ 249.892693][ T5875] usb 2-1: USB disconnect, device number 12 [ 250.069234][ T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 251.059998][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.069514][ T47] usb 3-1: config 8 has an invalid interface number: 2 but max is 0 [ 251.077595][ T47] usb 3-1: config 8 has no interface number 0 [ 251.089367][ T47] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 251.098648][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.106794][ T47] usb 3-1: Product: syz [ 251.114865][ T47] usb 3-1: Manufacturer: syz [ 251.119981][ T47] usb 3-1: SerialNumber: syz [ 253.519078][ T5872] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 253.604870][ T47] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 253.632235][ T47] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 253.775026][ T47] usb 3-1: USB disconnect, device number 6 [ 253.778816][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 253.942432][ T5874] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.107929][ T5874] usb 5-1: device descriptor read/64, error -71 [ 254.121937][ T7796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.536'. [ 254.187918][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 254.239842][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.250270][ T9] usb 2-1: config 0 has no interfaces? [ 254.348148][ T5874] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 254.388016][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 254.407330][ T9] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 254.416513][ T9] usb 2-1: Product: syz [ 254.427640][ T9] usb 2-1: config 0 descriptor?? [ 254.487948][ T5874] usb 5-1: device descriptor read/64, error -71 [ 254.603160][ T5874] usb usb5-port1: attempt power cycle [ 255.339172][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 255.358719][ T5874] usb 5-1: device descriptor read/8, error -71 [ 255.608052][ T5874] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 255.630450][ T5874] usb 5-1: device descriptor read/8, error -71 [ 255.738534][ T5874] usb usb5-port1: unable to enumerate USB device [ 256.168384][ T5874] usb 2-1: USB disconnect, device number 13 [ 259.178620][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 259.430825][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.452436][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 259.513358][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.559331][ T9] usb 5-1: config 0 descriptor?? [ 261.342782][ T9] wacom 0003:056A:030A.0003: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.4-1/input0 [ 261.359858][ T9] usb 5-1: USB disconnect, device number 16 [ 262.260355][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.279515][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.279984][ T5873] IPVS: starting estimator thread 0... [ 262.514828][ T7859] IPVS: using max 23 ests per chain, 55200 per kthread [ 262.994060][ T941] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 263.078023][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 263.242882][ T941] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.261400][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.366824][ T7879] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 263.376245][ T7879] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 263.788472][ T5874] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 263.963635][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.973533][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.986657][ T5873] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.995850][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.021009][ T5873] usb 3-1: config 0 descriptor?? [ 264.240642][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.251961][ T5874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.269190][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.281356][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.294557][ T7872] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.313260][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.473910][ T5873] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 264.798592][ T5873] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 264.926433][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.564'. [ 265.177087][ C1] hrtimer: interrupt took 101462 ns [ 265.925222][ T5876] usb 5-1: USB disconnect, device number 17 [ 266.417564][ T5874] usb 3-1: USB disconnect, device number 7 [ 269.798936][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 270.141335][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 270.164381][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.203406][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.238436][ T25] usb 2-1: New USB device found, idVendor=1d07, idProduct=0101, bcdDevice= 0.40 [ 270.255327][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.264582][ T25] usb 2-1: Product: syz [ 270.269053][ T25] usb 2-1: Manufacturer: syz [ 270.273898][ T25] usb 2-1: SerialNumber: syz [ 270.802793][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.599363][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.627537][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.636489][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.645622][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.654471][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.663192][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.672031][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.680862][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.689641][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.961916][ T25] usb 2-1: cannot find UAC_HEADER [ 272.007092][ T7977] tmpfs: Group quota block hardlimit too large. [ 272.089519][ T25] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.196224][ T25] usb 2-1: USB disconnect, device number 14 [ 272.201847][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 272.631070][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.956514][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 274.170800][ T25] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.284642][ T8035] fuse: Bad value for 'user_id' [ 274.289725][ T8035] fuse: Bad value for 'user_id' [ 275.398059][ T5874] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 275.484318][ T25] IPVS: starting estimator thread 0... [ 275.559326][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 275.591912][ T8052] IPVS: using max 18 ests per chain, 43200 per kthread [ 275.748845][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.759125][ T5874] usb 5-1: config 0 has no interfaces? [ 275.764668][ T5874] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 275.773949][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.871918][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.883501][ T5874] usb 5-1: config 0 descriptor?? [ 276.279689][ T941] usb 5-1: USB disconnect, device number 18 [ 276.295051][ T8058] netlink: 'syz.1.601': attribute type 10 has an invalid length. [ 276.339172][ T8058] bond0: (slave wlan1): Opening slave failed [ 277.546652][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 277.546675][ T29] audit: type=1326 audit(1736276069.627:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 277.574500][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.581237][ T29] audit: type=1326 audit(1736276069.627:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 277.887974][ T29] audit: type=1326 audit(1736276069.947:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 278.453809][ T29] audit: type=1326 audit(1736276069.947:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 278.981965][ T29] audit: type=1326 audit(1736276069.947:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 279.026400][ T29] audit: type=1326 audit(1736276069.977:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 279.054982][ T29] audit: type=1326 audit(1736276069.977:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 279.368014][ T29] audit: type=1326 audit(1736276069.977:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 279.422130][ T29] audit: type=1326 audit(1736276070.017:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 279.444120][ T29] audit: type=1326 audit(1736276070.017:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8072 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0c985d29 code=0x7ffc0000 [ 284.827965][ T5874] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 285.001205][ T5874] usb 3-1: Invalid ep0 maxpacket: 64 [ 285.177933][ T5874] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 285.958721][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 286.032605][ T8146] binder: 8142:8146 unknown command 0 [ 286.048809][ T8146] binder: 8142:8146 ioctl c0306201 20004a40 returned -22 [ 289.077397][ T5874] usb 3-1: device not accepting address 9, error -71 [ 290.035821][ T5874] usb usb3-port1: attempt power cycle [ 290.478158][ T5874] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 290.511522][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 290.520154][ T5875] IPVS: starting estimator thread 0... [ 290.610600][ T8179] IPVS: using max 20 ests per chain, 48000 per kthread [ 290.643111][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.684136][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.695763][ T5874] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 290.705045][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.969028][ T5874] usb 3-1: config 0 descriptor?? [ 291.578842][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.630'. [ 291.658601][ T8189] fuse: Unknown parameter 'user_id00000000000000000000' [ 292.822387][ T5874] elan 0003:04F3:0755.0007: unknown main item tag 0x3 [ 292.881314][ T5874] elan 0003:04F3:0755.0007: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 292.995771][ T8197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'. [ 293.038202][ T8197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'. [ 293.069466][ T5874] usb 3-1: USB disconnect, device number 10 [ 295.070893][ T8217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.327854][ T8222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.647'. [ 297.130245][ T8227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'. [ 297.139762][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 297.634899][ T8230] FAULT_INJECTION: forcing a failure. [ 297.634899][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 297.649612][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.0.651 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 297.660398][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.670504][ T8230] Call Trace: [ 297.673816][ T8230] [ 297.676775][ T8230] dump_stack_lvl+0x241/0x360 [ 297.681515][ T8230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.686777][ T8230] ? __pfx__printk+0x10/0x10 [ 297.691426][ T8230] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 297.696830][ T8230] ? __pfx___might_resched+0x10/0x10 [ 297.702150][ T8230] ? rcu_is_watching+0x15/0xb0 [ 297.707037][ T8230] should_fail_ex+0x3b0/0x4e0 [ 297.711761][ T8230] should_failslab+0xac/0x100 [ 297.716529][ T8230] __kmalloc_node_noprof+0xe1/0x4d0 [ 297.721787][ T8230] ? __kvmalloc_node_noprof+0x72/0x190 [ 297.727290][ T8230] __kvmalloc_node_noprof+0x72/0x190 [ 297.732608][ T8230] nf_hook_entries_grow+0x288/0x720 [ 297.737833][ T8230] ? __pfx_rhltable_insert_key+0x10/0x10 [ 297.743498][ T8230] __nf_register_net_hook+0x278/0x8d0 [ 297.748920][ T8230] ? nft_pernet+0x23/0x240 [ 297.753375][ T8230] nf_register_net_hook+0xd8/0x190 [ 297.758518][ T8230] nf_tables_newchain+0x2c91/0x3310 [ 297.763756][ T8230] ? __pfx_nf_tables_newchain+0x10/0x10 [ 297.769338][ T8230] ? __pfx_lock_acquire+0x10/0x10 [ 297.774393][ T8230] ? nfnl_pernet+0x23/0x240 [ 297.778935][ T8230] ? __nla_parse+0x40/0x60 [ 297.783377][ T8230] nfnetlink_rcv+0x14e3/0x2ab0 [ 297.788191][ T8230] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 297.793368][ T8230] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.798585][ T8230] ? __pfx_lock_release+0x10/0x10 [ 297.803813][ T8230] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.809035][ T8230] netlink_unicast+0x7f6/0x990 [ 297.813836][ T8230] ? __pfx_netlink_unicast+0x10/0x10 [ 297.819146][ T8230] ? __phys_addr_symbol+0x2f/0x70 [ 297.824189][ T8230] ? __check_object_size+0x47a/0x730 [ 297.829506][ T8230] netlink_sendmsg+0x8e4/0xcb0 [ 297.834300][ T8230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.839614][ T8230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.844922][ T8230] __sock_sendmsg+0x221/0x270 [ 297.849675][ T8230] ____sys_sendmsg+0x52a/0x7e0 [ 297.854486][ T8230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.859815][ T8230] ? __fget_files+0x2a/0x410 [ 297.864439][ T8230] ? __fget_files+0x2a/0x410 [ 297.869063][ T8230] __sys_sendmsg+0x269/0x350 [ 297.873676][ T8230] ? __pfx_lock_release+0x10/0x10 [ 297.878729][ T8230] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.883887][ T8230] ? __pfx_vfs_write+0x10/0x10 [ 297.888737][ T8230] do_syscall_64+0xf3/0x230 [ 297.893271][ T8230] ? clear_bhb_loop+0x35/0x90 [ 297.897976][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.903989][ T8230] RIP: 0033:0x7fbf9b585d29 [ 297.908426][ T8230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.928053][ T8230] RSP: 002b:00007fbf993f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.936490][ T8230] RAX: ffffffffffffffda RBX: 00007fbf9b776080 RCX: 00007fbf9b585d29 [ 297.944484][ T8230] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 297.952562][ T8230] RBP: 00007fbf993f6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.960565][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.968733][ T8230] R13: 0000000000000001 R14: 00007fbf9b776080 R15: 00007ffcb0de8a58 [ 297.976738][ T8230] [ 298.020146][ T5131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.067628][ T5131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.188488][ T5131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.199087][ T5131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.207157][ T5131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.214943][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.572252][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.909831][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.940794][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.951840][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.960046][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.969411][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.088321][ T5131] Bluetooth: hci5: command tx timeout [ 303.152146][ T5131] Bluetooth: hci5: command tx timeout [ 305.333506][ T5131] Bluetooth: hci5: command tx timeout [ 305.716002][ T8275] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 305.724344][ T8275] netlink: 224 bytes leftover after parsing attributes in process `syz.0.660'. [ 306.160223][ T8275] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 306.198536][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 306.293864][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 306.466994][ T8281] binder_alloc: 8272: binder_alloc_buf, no vma [ 306.714174][ T8284] binder: 8282:8284 ioctl c0306201 20000480 returned -14 [ 307.014999][ T8287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.664'. [ 307.397700][ T5834] Bluetooth: hci5: command tx timeout [ 308.325436][ T8101] syz.3.612 (8101) used greatest stack depth: 18608 bytes left [ 308.349196][ T5820] syz-executor (5820) used greatest stack depth: 17264 bytes left [ 310.685868][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.693245][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.702155][ T8231] bridge_slave_0: entered allmulticast mode [ 310.711834][ T8231] bridge_slave_0: entered promiscuous mode [ 310.719690][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.726852][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.734262][ T8231] bridge_slave_1: entered allmulticast mode [ 310.741457][ T8231] bridge_slave_1: entered promiscuous mode [ 310.830403][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.856858][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.904901][ T8325] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.675'. [ 310.927393][ T8325] openvswitch: netlink: Flow actions attr not present in new flow. [ 310.986227][ T8231] team0: Port device team_slave_0 added [ 311.026735][ T8231] team0: Port device team_slave_1 added [ 311.229767][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.236841][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.264009][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.392678][ T8333] usb usb4: usbfs: process 8333 (syz.4.677) did not claim interface 0 before use [ 311.402994][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.476340][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.940763][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.062029][ T8231] hsr_slave_0: entered promiscuous mode [ 312.303335][ T8231] hsr_slave_1: entered promiscuous mode [ 312.329703][ T8231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.337449][ T8231] Cannot create hsr debugfs directory [ 314.445417][ T941] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 314.447405][ T8231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.502566][ T8231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.592976][ T8231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.633297][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.637478][ T8231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.653750][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.687950][ T941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.718014][ T941] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.727295][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.785289][ T941] usb 5-1: config 0 descriptor?? [ 315.092367][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.135567][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.227064][ T941] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 315.250335][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.257639][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.282083][ T941] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 315.306183][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.313575][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.655987][ T5876] usb 5-1: USB disconnect, device number 19 [ 317.733686][ T8393] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.141382][ T8392] tty tty21: ldisc open failed (-12), clearing slot 20 [ 318.170998][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.420077][ T8400] atomic_op ffff88807e1c5998 conn xmit_atomic 0000000000000000 [ 319.053162][ T8413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 319.826532][ T8412] tty tty23: ldisc open failed (-12), clearing slot 22 [ 320.649206][ T8231] veth0_vlan: entered promiscuous mode [ 321.353106][ T8231] veth1_vlan: entered promiscuous mode [ 321.508228][ T8231] veth0_macvtap: entered promiscuous mode [ 321.600514][ T8231] veth1_macvtap: entered promiscuous mode [ 321.649329][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.678136][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.698308][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.717110][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.737858][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.757855][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.780733][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.791443][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.803453][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.813963][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.824582][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.834530][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.845124][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.855046][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.865912][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.876010][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.886821][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.898114][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.910192][ T8231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.919036][ T8231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.927853][ T8231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.936589][ T8231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.954175][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 322.222684][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.230948][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 322.240274][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.254758][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 322.285215][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.290884][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.317886][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.359434][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.395209][ T25] usb 2-1: Product: syz [ 322.410471][ T25] usb 2-1: Manufacturer: syz [ 322.431441][ T25] usb 2-1: SerialNumber: syz [ 322.480240][ T25] usb 2-1: config 0 descriptor?? [ 322.525292][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 322.597103][ T25] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 322.846346][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 322.846369][ T29] audit: type=1400 audit(1736276114.937:179): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=8454 comm="syz.5.649" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 322.998121][ T5874] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 323.151862][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 323.260140][ T5874] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 323.269514][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.292651][ T5874] usb 5-1: config 0 descriptor?? [ 323.700629][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.707441][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.719805][ T8453] netlink: 56 bytes leftover after parsing attributes in process `syz.4.708'. [ 324.561960][ T25] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 324.570604][ T25] em28xx 2-1:0.0: board has no eeprom [ 324.638217][ T25] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 324.654872][ T25] em28xx 2-1:0.0: dvb set to bulk mode. [ 324.728798][ T5875] em28xx 2-1:0.0: Binding DVB extension [ 325.090027][ T5874] usb 5-1: Cannot set autoneg [ 325.105642][ T5874] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 325.268233][ T25] usb 2-1: USB disconnect, device number 15 [ 325.312472][ T8495] syz.2.721 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.337007][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 325.361060][ T5874] usb 5-1: USB disconnect, device number 20 [ 325.573377][ T5875] em28xx 2-1:0.0: Registering input extension [ 325.630295][ T25] em28xx 2-1:0.0: Closing input extension [ 325.690877][ T25] em28xx 2-1:0.0: Freeing device [ 330.126000][ T8528] 9pnet_fd: p9_fd_create_tcp (8528): problem connecting socket to 127.0.0.1 [ 331.443917][ T8558] overlay: ./file0 is not a directory [ 331.567683][ T8559] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 333.280320][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'. [ 335.629136][ T8602] openvswitch: netlink: Missing valid actions attribute. [ 335.636286][ T8602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.477913][ T5876] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 336.608084][ T5876] usb 6-1: device descriptor read/64, error -71 [ 337.317886][ T5876] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 337.319111][ T8624] block device autoloading is deprecated and will be removed. [ 337.447930][ T5876] usb 6-1: device descriptor read/64, error -71 [ 337.546265][ T8635] FAULT_INJECTION: forcing a failure. [ 337.546265][ T8635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.575470][ T5876] usb usb6-port1: attempt power cycle [ 337.620045][ T8635] CPU: 0 UID: 0 PID: 8635 Comm: syz.1.759 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 337.630737][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.640844][ T8635] Call Trace: [ 337.644171][ T8635] [ 337.647150][ T8635] dump_stack_lvl+0x241/0x360 [ 337.651892][ T8635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.657148][ T8635] ? __pfx__printk+0x10/0x10 [ 337.661791][ T8635] ? __pfx_lock_release+0x10/0x10 [ 337.666869][ T8635] should_fail_ex+0x3b0/0x4e0 [ 337.671598][ T8635] _copy_from_iter+0x1e9/0x1c20 [ 337.676605][ T8635] ? __virt_addr_valid+0x183/0x530 [ 337.681787][ T8635] ? __alloc_skb+0x28f/0x440 [ 337.686436][ T8635] ? __pfx__copy_from_iter+0x10/0x10 [ 337.691784][ T8635] ? __virt_addr_valid+0x183/0x530 [ 337.696954][ T8635] ? __virt_addr_valid+0x183/0x530 [ 337.702168][ T8635] ? __virt_addr_valid+0x45f/0x530 [ 337.707360][ T8635] ? __phys_addr_symbol+0x2f/0x70 [ 337.712438][ T8635] ? __check_object_size+0x47a/0x730 [ 337.717802][ T8635] pfkey_sendmsg+0x235/0x1050 [ 337.722525][ T8635] ? smack_socket_sendmsg+0x178/0x540 [ 337.727925][ T8635] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.733106][ T8635] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 337.738907][ T8635] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 337.745345][ T8635] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 337.752140][ T8635] ? __might_fault+0xaa/0x120 [ 337.756944][ T8635] ? __pfx_lock_release+0x10/0x10 [ 337.762010][ T8635] ? __import_iovec+0x590/0x870 [ 337.766888][ T8635] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.772043][ T8635] __sock_sendmsg+0x221/0x270 [ 337.776845][ T8635] ____sys_sendmsg+0x52a/0x7e0 [ 337.781684][ T8635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.787027][ T8635] ? __fget_files+0x2a/0x410 [ 337.791693][ T8635] ? __fget_files+0x2a/0x410 [ 337.796354][ T8635] __sys_sendmsg+0x269/0x350 [ 337.801007][ T8635] ? __pfx_lock_release+0x10/0x10 [ 337.806109][ T8635] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.811339][ T8635] ? __pfx_vfs_write+0x10/0x10 [ 337.816207][ T8635] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.822561][ T8635] ? do_syscall_64+0x100/0x230 [ 337.827355][ T8635] ? do_syscall_64+0xb6/0x230 [ 337.832076][ T8635] do_syscall_64+0xf3/0x230 [ 337.836640][ T8635] ? clear_bhb_loop+0x35/0x90 [ 337.841355][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.847495][ T8635] RIP: 0033:0x7f4fffd85d29 [ 337.851928][ T8635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.871559][ T8635] RSP: 002b:00007f5000bb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.880013][ T8635] RAX: ffffffffffffffda RBX: 00007f4ffff75fa0 RCX: 00007f4fffd85d29 [ 337.888028][ T8635] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 337.896019][ T8635] RBP: 00007f5000bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 337.904037][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.912049][ T8635] R13: 0000000000000000 R14: 00007f4ffff75fa0 R15: 00007ffc84fb73c8 [ 337.920089][ T8635] [ 338.178186][ T941] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 338.368474][ T941] usb 5-1: device descriptor read/64, error -71 [ 338.668228][ T941] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 339.318269][ T8651] overlayfs: failed to resolve 'obj_type=}/$$,/': -2 [ 339.415975][ T5876] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 339.541722][ T941] usb 5-1: device descriptor read/64, error -71 [ 339.658985][ T941] usb usb5-port1: attempt power cycle [ 340.048693][ T5876] usb 6-1: device descriptor read/8, error -71 [ 340.247910][ T5874] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 340.258018][ T941] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 340.288824][ T941] usb 5-1: device descriptor read/8, error -71 [ 340.391180][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.5.767'. [ 340.416033][ T5874] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 340.427920][ T5874] usb 2-1: config 0 has no interface number 0 [ 340.537681][ T5874] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 340.546945][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.556100][ T5874] usb 2-1: Product: syz [ 340.560772][ T5874] usb 2-1: Manufacturer: syz [ 340.565424][ T5874] usb 2-1: SerialNumber: syz [ 340.570244][ T941] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 340.581332][ T5874] usb 2-1: config 0 descriptor?? [ 340.803825][ T941] usb 5-1: device descriptor read/8, error -71 [ 340.918127][ T941] usb usb5-port1: unable to enumerate USB device [ 340.980248][ T5873] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 341.246114][ T5873] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 341.522159][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.554206][ T5873] usb 3-1: config 0 descriptor?? [ 343.152654][ T5874] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 343.214133][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 343.227199][ T5874] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 343.235635][ T5874] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 343.244155][ T5874] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 343.325700][ T5874] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 343.382767][ T5874] usb 2-1: USB disconnect, device number 16 [ 343.463856][ T5874] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 343.579247][ T5874] keyspan 2-1:0.133: device disconnected [ 343.618172][ T941] usb 3-1: USB disconnect, device number 11 [ 348.228515][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 350.080091][ T941] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 351.138230][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 351.145935][ T941] usb 5-1: no configurations [ 351.150650][ T941] usb 5-1: can't read configurations, error -22 [ 352.828051][ T941] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 353.008423][ T8761] netlink: 'syz.1.795': attribute type 2 has an invalid length. [ 353.150905][ T8761] Tq€: entered promiscuous mode [ 353.280205][ T8759] libceph: resolve '0.' (ret=-3): failed [ 353.304916][ T8767] FAULT_INJECTION: forcing a failure. [ 353.304916][ T8767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.324214][ T8767] CPU: 1 UID: 0 PID: 8767 Comm: syz.2.796 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 353.334892][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.344998][ T8767] Call Trace: [ 353.348357][ T8767] [ 353.351331][ T8767] dump_stack_lvl+0x241/0x360 [ 353.356065][ T8767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.361307][ T8767] ? __pfx__printk+0x10/0x10 [ 353.365951][ T8767] ? snprintf+0xda/0x120 [ 353.370237][ T8767] should_fail_ex+0x3b0/0x4e0 [ 353.374960][ T8767] _copy_to_user+0x31/0xb0 [ 353.379405][ T8767] simple_read_from_buffer+0xca/0x150 [ 353.384806][ T8767] proc_fail_nth_read+0x1e9/0x250 [ 353.389904][ T8767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.395496][ T8767] ? rw_verify_area+0x55e/0x6f0 [ 353.400372][ T8767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.406016][ T8767] vfs_read+0x1fc/0xb70 [ 353.410212][ T8767] ? __pfx___mutex_lock+0x10/0x10 [ 353.415260][ T8767] ? __pfx_vfs_read+0x10/0x10 [ 353.420037][ T8767] ? __fget_files+0x2a/0x410 [ 353.424675][ T8767] ? __fget_files+0x395/0x410 [ 353.429394][ T8767] ? __fget_files+0x2a/0x410 [ 353.434010][ T8767] ksys_read+0x18f/0x2b0 [ 353.438274][ T8767] ? __pfx_ksys_read+0x10/0x10 [ 353.443058][ T8767] ? do_syscall_64+0x100/0x230 [ 353.447857][ T8767] ? do_syscall_64+0xb6/0x230 [ 353.452568][ T8767] do_syscall_64+0xf3/0x230 [ 353.457132][ T8767] ? clear_bhb_loop+0x35/0x90 [ 353.461832][ T8767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.467778][ T8767] RIP: 0033:0x7f1b0c98473c [ 353.472237][ T8767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 353.491872][ T8767] RSP: 002b:00007f1b0d7d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.500329][ T8767] RAX: ffffffffffffffda RBX: 00007f1b0cb75fa0 RCX: 00007f1b0c98473c [ 353.508690][ T8767] RDX: 000000000000000f RSI: 00007f1b0d7d90a0 RDI: 0000000000000004 [ 353.516673][ T8767] RBP: 00007f1b0d7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 353.524775][ T8767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.532774][ T8767] R13: 0000000000000000 R14: 00007f1b0cb75fa0 R15: 00007ffd56770668 [ 353.540839][ T8767] [ 354.548899][ T8779] FAULT_INJECTION: forcing a failure. [ 354.548899][ T8779] name failslab, interval 1, probability 0, space 0, times 0 [ 354.562438][ T8779] CPU: 1 UID: 0 PID: 8779 Comm: syz.2.800 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 354.573082][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.583186][ T8779] Call Trace: [ 354.586510][ T8779] [ 354.589479][ T8779] dump_stack_lvl+0x241/0x360 [ 354.594388][ T8779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.599639][ T8779] ? __pfx__printk+0x10/0x10 [ 354.604288][ T8779] ? kmem_cache_alloc_noprof+0x48/0x380 [ 354.609904][ T8779] ? __pfx___might_resched+0x10/0x10 [ 354.615259][ T8779] should_fail_ex+0x3b0/0x4e0 [ 354.619988][ T8779] should_failslab+0xac/0x100 [ 354.624724][ T8779] ? vm_area_alloc+0x24/0x1d0 [ 354.629452][ T8779] kmem_cache_alloc_noprof+0x70/0x380 [ 354.634892][ T8779] vm_area_alloc+0x24/0x1d0 [ 354.639446][ T8779] __mmap_region+0x1961/0x2d30 [ 354.644294][ T8779] ? __pfx___mmap_region+0x10/0x10 [ 354.649549][ T8779] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.655614][ T8779] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.661671][ T8779] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.668053][ T8779] ? irqentry_exit+0x63/0x90 [ 354.672715][ T8779] ? lockdep_hardirqs_on+0x99/0x150 [ 354.678000][ T8779] mmap_region+0x226/0x2c0 [ 354.682477][ T8779] do_mmap+0x97a/0x10d0 [ 354.686702][ T8779] ? __pfx_do_mmap+0x10/0x10 [ 354.691342][ T8779] ? __pfx_down_write_killable+0x10/0x10 [ 354.697283][ T8779] ? __pfx_lock_acquire+0x10/0x10 [ 354.702357][ T8779] vm_mmap_pgoff+0x1dd/0x3d0 [ 354.707008][ T8779] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 354.712172][ T8779] ? __fget_files+0x2a/0x410 [ 354.716808][ T8779] ? __fget_files+0x395/0x410 [ 354.721532][ T8779] ? __fget_files+0x2a/0x410 [ 354.726178][ T8779] ksys_mmap_pgoff+0x4eb/0x720 [ 354.730994][ T8779] ? __x64_sys_mmap+0x7f/0x140 [ 354.735811][ T8779] do_syscall_64+0xf3/0x230 [ 354.740397][ T8779] ? clear_bhb_loop+0x35/0x90 [ 354.745130][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.751087][ T8779] RIP: 0033:0x7f1b0c985d29 [ 354.755549][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.775293][ T8779] RSP: 002b:00007f1b0d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 354.784199][ T8779] RAX: ffffffffffffffda RBX: 00007f1b0cb76160 RCX: 00007f1b0c985d29 [ 354.792222][ T8779] RDX: 000000000000000a RSI: 0000000000004000 RDI: 0000000020ff9000 [ 354.800334][ T8779] RBP: 00007f1b0d797090 R08: 0000000000000006 R09: 0000000061c7c000 [ 354.808347][ T8779] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 354.816447][ T8779] R13: 0000000000000000 R14: 00007f1b0cb76160 R15: 00007ffd56770668 [ 354.824483][ T8779] [ 356.875389][ T8788] afs: Unknown parameter 'dyngroup' [ 357.639499][ T5872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 357.785777][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.828709][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 357.854209][ T5872] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.910844][ T5872] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.937910][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 357.947181][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.268363][ T5872] hub 2-1:4.0: USB hub found [ 358.431246][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.735163][ T5872] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 358.809141][ T5131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.839274][ T5131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.849470][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.858566][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.868345][ T5131] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.887633][ T5131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.043736][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.259430][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.906430][ T12] bridge_slave_1: left allmulticast mode [ 359.977990][ T12] bridge_slave_1: left promiscuous mode [ 359.986538][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.091932][ T12] bridge_slave_0: left allmulticast mode [ 360.164339][ T12] bridge_slave_0: left promiscuous mode [ 360.173814][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.073814][ T5834] Bluetooth: hci1: command tx timeout [ 361.908315][ T5872] usb 2-1: USB disconnect, device number 17 [ 362.285064][ T8835] IPVS: persistence engine module ip_vs_pe_ not found [ 363.146574][ T5834] Bluetooth: hci1: command tx timeout [ 364.854949][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.876890][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.899593][ T12] bond0 (unregistering): Released all slaves [ 364.921458][ T12] bond1 (unregistering): Released all slaves [ 365.030171][ T8809] chnl_net:caif_netlink_parms(): no params data found [ 365.218800][ T5834] Bluetooth: hci1: command tx timeout [ 365.292062][ T12] tipc: Disabling bearer [ 365.362693][ T12] tipc: Disabling bearer [ 365.398145][ T12] tipc: Left network mode [ 365.403823][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.409032][ T8877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.436728][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.457258][ T8809] bridge_slave_0: entered allmulticast mode [ 365.478047][ T8809] bridge_slave_0: entered promiscuous mode [ 365.653550][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.691551][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.718130][ T8809] bridge_slave_1: entered allmulticast mode [ 365.725423][ T8809] bridge_slave_1: entered promiscuous mode [ 365.931667][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.976623][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.136391][ T12] hsr_slave_0: left promiscuous mode [ 366.190211][ T12] hsr_slave_1: left promiscuous mode [ 366.268959][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.299311][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.369271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.376754][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.469598][ T12] veth1_macvtap: left promiscuous mode [ 366.475762][ T12] veth0_macvtap: left promiscuous mode [ 366.532199][ T12] veth1_vlan: left promiscuous mode [ 366.558379][ T12] veth0_vlan: left promiscuous mode [ 366.697941][ T5875] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 366.858157][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 366.867707][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.989941][ T5875] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 367.139440][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.371411][ T5834] Bluetooth: hci1: command tx timeout [ 367.460819][ T5875] usb 6-1: config 0 descriptor?? [ 367.827053][ T5875] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 367.834701][ T8912] FAULT_INJECTION: forcing a failure. [ 367.834701][ T8912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.864216][ T8912] CPU: 1 UID: 0 PID: 8912 Comm: syz.2.829 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 367.874896][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.884979][ T8912] Call Trace: [ 367.888280][ T8912] [ 367.891229][ T8912] dump_stack_lvl+0x241/0x360 [ 367.895943][ T8912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.901262][ T8912] ? __pfx__printk+0x10/0x10 [ 367.905882][ T8912] ? snprintf+0xda/0x120 [ 367.910152][ T8912] should_fail_ex+0x3b0/0x4e0 [ 367.914853][ T8912] _copy_to_user+0x31/0xb0 [ 367.919298][ T8912] simple_read_from_buffer+0xca/0x150 [ 367.924708][ T8912] proc_fail_nth_read+0x1e9/0x250 [ 367.929767][ T8912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.935346][ T8912] ? rw_verify_area+0x55e/0x6f0 [ 367.940217][ T8912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.945790][ T8912] vfs_read+0x1fc/0xb70 [ 367.949972][ T8912] ? __pfx___mutex_lock+0x10/0x10 [ 367.955028][ T8912] ? __pfx_vfs_read+0x10/0x10 [ 367.959731][ T8912] ? __fget_files+0x2a/0x410 [ 367.964344][ T8912] ? __fget_files+0x395/0x410 [ 367.969043][ T8912] ? __fget_files+0x2a/0x410 [ 367.973663][ T8912] ksys_read+0x18f/0x2b0 [ 367.977956][ T8912] ? __pfx_ksys_read+0x10/0x10 [ 367.982776][ T8912] ? do_syscall_64+0x100/0x230 [ 367.987576][ T8912] ? do_syscall_64+0xb6/0x230 [ 367.992283][ T8912] do_syscall_64+0xf3/0x230 [ 367.996901][ T8912] ? clear_bhb_loop+0x35/0x90 [ 368.001606][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.007540][ T8912] RIP: 0033:0x7f1b0c98473c [ 368.011976][ T8912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 368.031695][ T8912] RSP: 002b:00007f1b0d7d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.040138][ T8912] RAX: ffffffffffffffda RBX: 00007f1b0cb75fa0 RCX: 00007f1b0c98473c [ 368.048307][ T8912] RDX: 000000000000000f RSI: 00007f1b0d7d90a0 RDI: 0000000000000007 [ 368.056309][ T8912] RBP: 00007f1b0d7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 368.064482][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.072566][ T8912] R13: 0000000000000000 R14: 00007f1b0cb75fa0 R15: 00007ffd56770668 [ 368.080596][ T8912] [ 368.083739][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.121616][ T8914] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 368.218253][ T25] usb 6-1: USB disconnect, device number 6 [ 370.235685][ T12] team0 (unregistering): Port device team_slave_1 removed [ 370.559788][ T12] team0 (unregistering): Port device team_slave_0 removed [ 371.375238][ T8946] kAFS: No cell specified [ 371.644389][ T8809] team0: Port device team_slave_0 added [ 371.655903][ T8809] team0: Port device team_slave_1 added [ 371.676025][ T8932] team0: No ports can be present during mode change [ 371.806860][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.866257][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.018000][ T8809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.043050][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.057869][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.057983][ T941] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 372.083808][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.084053][ T8809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.347880][ T941] usb 6-1: Using ep0 maxpacket: 8 [ 372.356102][ T8809] hsr_slave_0: entered promiscuous mode [ 372.357420][ T941] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 372.423148][ T8809] hsr_slave_1: entered promiscuous mode [ 372.424772][ T941] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.447228][ T8958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.842'. [ 372.465110][ T941] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 372.500276][ T941] usb 6-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 373.012063][ T941] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 373.034431][ T941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.097945][ T941] usb 6-1: Product: syz [ 373.105083][ T941] usb 6-1: Manufacturer: syz [ 373.111249][ T941] usb 6-1: SerialNumber: syz [ 373.119940][ T8949] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 373.144681][ T941] hso 6-1:6.0: Can't find BULK OUT endpoint [ 373.565119][ T12] IPVS: stop unused estimator thread 0... [ 374.665475][ T5872] usb 6-1: USB disconnect, device number 7 [ 376.567676][ T8971] batadv_slave_1: entered promiscuous mode [ 376.576059][ T8972] batadv_slave_1: left promiscuous mode [ 378.032259][ T8809] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.273792][ T8809] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.435652][ T9006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.850'. [ 378.721472][ T8809] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.789853][ T8809] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.858405][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.5.858'. [ 380.997943][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.5.858'. [ 381.035065][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 385.142843][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.153828][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.185077][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.251426][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.491243][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.498487][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.559875][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.567152][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.284837][ T9060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.862'. [ 387.332969][ T8809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.343524][ T8809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.068394][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.078245][ T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 389.341746][ T47] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 389.380610][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.445602][ T47] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 389.484679][ T47] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 389.514957][ T47] usb 3-1: Manufacturer: syz [ 389.558949][ T8809] veth0_vlan: entered promiscuous mode [ 389.573576][ T47] usb 3-1: config 0 descriptor?? [ 389.804983][ T8809] veth1_vlan: entered promiscuous mode [ 389.901477][ T8809] veth0_macvtap: entered promiscuous mode [ 389.943740][ T8809] veth1_macvtap: entered promiscuous mode [ 389.964137][ T47] rc_core: IR keymap rc-hauppauge not found [ 389.964183][ T47] Registered IR keymap rc-empty [ 389.965621][ T47] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 389.966847][ T47] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 389.990016][ T47] usb 3-1: USB disconnect, device number 12 [ 390.022082][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.022111][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.022125][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.022143][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.022156][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.022173][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.022189][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.022205][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.023180][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.083035][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.083067][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.083080][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.083097][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.083109][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.083126][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.083143][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.083158][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.084227][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.092077][ T8809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.092122][ T8809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.092154][ T8809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.092185][ T8809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.308087][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.308116][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.402329][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.402357][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.688464][ T9135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 392.187906][ T5874] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 392.287412][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 392.287446][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 392.377898][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.538124][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.548171][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.561226][ T5874] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.570383][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.608894][ T5874] usb 7-1: config 0 descriptor?? [ 393.020904][ T5874] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 393.814287][ T5874] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 394.696776][ T5873] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 394.908030][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 394.909856][ T5873] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.909889][ T5873] usb 6-1: config 0 has no interface number 0 [ 394.911931][ T5873] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 394.911967][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.911993][ T5873] usb 6-1: Product: syz [ 394.912011][ T5873] usb 6-1: Manufacturer: syz [ 394.912030][ T5873] usb 6-1: SerialNumber: syz [ 394.914232][ T5873] usb 6-1: config 0 descriptor?? [ 394.917449][ T5873] usb 6-1: selecting invalid altsetting 2 [ 394.917481][ T5873] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 395.140548][ T9] usb 6-1: USB disconnect, device number 8 [ 395.486508][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.886'. [ 395.772508][ T25] usb 7-1: USB disconnect, device number 2 [ 396.140110][ T5874] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 396.478097][ T5874] usb 6-1: device descriptor read/64, error -71 [ 396.736782][ T5874] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 397.408453][ T5874] usb 6-1: device descriptor read/64, error -71 [ 397.775283][ T5874] usb usb6-port1: attempt power cycle [ 398.737904][ T5874] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 398.758723][ T5874] usb 6-1: device descriptor read/8, error -71 [ 400.227962][ T29] audit: type=1800 audit(1736276192.317:180): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.900" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 400.457430][ T29] audit: type=1326 audit(1736276192.507:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5f85d29 code=0x7ffc0000 [ 400.478916][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.539098][ T29] audit: type=1326 audit(1736276192.507:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeb5f85d29 code=0x7ffc0000 [ 400.560528][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.585602][ T29] audit: type=1326 audit(1736276192.517:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5f85d29 code=0x7ffc0000 [ 400.623172][ T29] audit: type=1326 audit(1736276192.517:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5f85d29 code=0x7ffc0000 [ 400.644594][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.776556][ T9244] FAULT_INJECTION: forcing a failure. [ 400.776556][ T9244] name failslab, interval 1, probability 0, space 0, times 0 [ 400.797412][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.6.902 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 400.808077][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.818187][ T9244] Call Trace: [ 400.821504][ T9244] [ 400.824465][ T9244] dump_stack_lvl+0x241/0x360 [ 400.829195][ T9244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.834434][ T9244] ? __pfx__printk+0x10/0x10 [ 400.839069][ T9244] ? __kmalloc_noprof+0xb5/0x4c0 [ 400.844046][ T9244] ? __pfx___might_resched+0x10/0x10 [ 400.849385][ T9244] should_fail_ex+0x3b0/0x4e0 [ 400.854103][ T9244] should_failslab+0xac/0x100 [ 400.858827][ T9244] __kmalloc_noprof+0xdd/0x4c0 [ 400.863625][ T9244] ? cap_capable+0x1b4/0x250 [ 400.868252][ T9244] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 400.874551][ T9244] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 400.880668][ T9244] genl_rcv_msg+0x802/0xec0 [ 400.885225][ T9244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.890323][ T9244] ? __pfx_lock_acquire+0x10/0x10 [ 400.895383][ T9244] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 400.900991][ T9244] ? __pfx___might_resched+0x10/0x10 [ 400.906334][ T9244] netlink_rcv_skb+0x1e3/0x430 [ 400.911141][ T9244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.916212][ T9244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.921568][ T9244] genl_rcv+0x28/0x40 [ 400.925589][ T9244] netlink_unicast+0x7f6/0x990 [ 400.930410][ T9244] ? __pfx_netlink_unicast+0x10/0x10 [ 400.935824][ T9244] ? __virt_addr_valid+0x45f/0x530 [ 400.940989][ T9244] ? __phys_addr_symbol+0x2f/0x70 [ 400.946065][ T9244] ? __check_object_size+0x47a/0x730 [ 400.951407][ T9244] netlink_sendmsg+0x8e4/0xcb0 [ 400.956228][ T9244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.961566][ T9244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.966892][ T9244] __sock_sendmsg+0x221/0x270 [ 400.971671][ T9244] ____sys_sendmsg+0x52a/0x7e0 [ 400.976492][ T9244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.981814][ T9244] ? __fget_files+0x2a/0x410 [ 400.986446][ T9244] ? __fget_files+0x2a/0x410 [ 400.991090][ T9244] __sys_sendmsg+0x269/0x350 [ 400.995724][ T9244] ? __pfx_lock_release+0x10/0x10 [ 401.000791][ T9244] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.005956][ T9244] ? __pfx_vfs_write+0x10/0x10 [ 401.010793][ T9244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 401.017161][ T9244] ? do_syscall_64+0x100/0x230 [ 401.022060][ T9244] ? do_syscall_64+0xb6/0x230 [ 401.026859][ T9244] do_syscall_64+0xf3/0x230 [ 401.031451][ T9244] ? clear_bhb_loop+0x35/0x90 [ 401.036193][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.042156][ T9244] RIP: 0033:0x7ff88a185d29 [ 401.046628][ T9244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.066269][ T9244] RSP: 002b:00007ff88aecf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.074711][ T9244] RAX: ffffffffffffffda RBX: 00007ff88a375fa0 RCX: 00007ff88a185d29 [ 401.082883][ T9244] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 401.090994][ T9244] RBP: 00007ff88aecf090 R08: 0000000000000000 R09: 0000000000000000 [ 401.099029][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.107026][ T9244] R13: 0000000000000000 R14: 00007ff88a375fa0 R15: 00007ffddb749408 [ 401.115028][ T9244] [ 401.118233][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.438100][ T5876] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 401.618112][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 401.642119][ T5876] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.653563][ T5876] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.664272][ T5876] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.674595][ T5876] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.691858][ T5876] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.701302][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.923792][ T5876] usb 7-1: usb_control_msg returned -32 [ 401.929711][ T5876] usbtmc 7-1:16.0: can't read capabilities [ 402.316106][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.325099][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.522664][ T25] usb 7-1: USB disconnect, device number 3 [ 406.305152][ T5873] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 406.500332][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 406.509553][ T5873] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 406.550512][ T5873] usb 6-1: config 6 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.621114][ T5873] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 406.637897][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.667521][ T5873] usb 6-1: Product: syz [ 406.674874][ T5873] usb 6-1: Manufacturer: syz [ 406.695509][ T5873] usb 6-1: SerialNumber: syz [ 406.721107][ T5873] hso 6-1:6.0: Can't find BULK IN endpoint [ 409.377097][ T5873] usb 6-1: USB disconnect, device number 13 [ 409.915034][ T9331] overlayfs: failed to resolve './file1': -2 [ 411.076282][ T9309] syz.6.915: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 411.094952][ T9309] CPU: 1 UID: 0 PID: 9309 Comm: syz.6.915 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 411.105603][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.115767][ T9309] Call Trace: [ 411.119093][ T9309] [ 411.122062][ T9309] dump_stack_lvl+0x241/0x360 [ 411.126819][ T9309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.132094][ T9309] ? __pfx__printk+0x10/0x10 [ 411.136746][ T9309] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 411.143254][ T9309] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 411.149834][ T9309] warn_alloc+0x278/0x410 [ 411.154236][ T9309] ? __pfx_warn_alloc+0x10/0x10 [ 411.159152][ T9309] ? translate_table+0x196/0x21f0 [ 411.164250][ T9309] ? __get_vm_area_node+0x1c8/0x2d0 [ 411.169497][ T9309] ? __get_vm_area_node+0x25c/0x2d0 [ 411.174725][ T9309] __vmalloc_node_range_noprof+0x62f/0x1380 [ 411.180675][ T9309] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 411.186504][ T9309] ? rcu_is_watching+0x15/0xb0 [ 411.191314][ T9309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 411.197676][ T9309] ? rcu_is_watching+0x15/0xb0 [ 411.202486][ T9309] ? trace_kmalloc+0x1f/0xd0 [ 411.207104][ T9309] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 411.212618][ T9309] ? __kvmalloc_node_noprof+0x72/0x190 [ 411.218128][ T9309] __kvmalloc_node_noprof+0x142/0x190 [ 411.223541][ T9309] ? translate_table+0x196/0x21f0 [ 411.228597][ T9309] translate_table+0x196/0x21f0 [ 411.233493][ T9309] ? __pfx___might_resched+0x10/0x10 [ 411.238817][ T9309] ? __might_fault+0xaa/0x120 [ 411.243524][ T9309] ? __pfx_translate_table+0x10/0x10 [ 411.248842][ T9309] ? __virt_addr_valid+0x183/0x530 [ 411.253982][ T9309] ? __might_fault+0xaa/0x120 [ 411.258680][ T9309] ? __might_fault+0xc6/0x120 [ 411.263397][ T9309] ? _copy_from_user+0x99/0xc0 [ 411.268194][ T9309] ? copy_from_sockptr_offset+0x6b/0xb0 [ 411.273774][ T9309] do_arpt_set_ctl+0x101c/0x1650 [ 411.278926][ T9309] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 411.284241][ T9309] ? __pfx___mutex_trylock_common+0x10/0x10 [ 411.290187][ T9309] ? nf_setsockopt+0x240/0x2c0 [ 411.294975][ T9309] ? __pfx_lock_release+0x10/0x10 [ 411.300105][ T9309] ? rcu_is_watching+0x15/0xb0 [ 411.304909][ T9309] ? __mutex_unlock_slowpath+0x21e/0x790 [ 411.310580][ T9309] ? __pfx___mutex_lock+0x10/0x10 [ 411.315640][ T9309] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 411.321678][ T9309] nf_setsockopt+0x295/0x2c0 [ 411.326302][ T9309] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 411.332234][ T9309] do_sock_setsockopt+0x3af/0x720 [ 411.337289][ T9309] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 411.342863][ T9309] ? __fget_files+0x395/0x410 [ 411.347572][ T9309] ? __fget_files+0x2a/0x410 [ 411.352190][ T9309] __x64_sys_setsockopt+0x1ee/0x280 [ 411.357427][ T9309] do_syscall_64+0xf3/0x230 [ 411.361961][ T9309] ? clear_bhb_loop+0x35/0x90 [ 411.366661][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.372585][ T9309] RIP: 0033:0x7ff88a185d29 [ 411.377021][ T9309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.396749][ T9309] RSP: 002b:00007ff88aecf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.405213][ T9309] RAX: ffffffffffffffda RBX: 00007ff88a375fa0 RCX: 00007ff88a185d29 [ 411.413211][ T9309] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 411.421208][ T9309] RBP: 00007ff88a201b08 R08: 0000000000000418 R09: 0000000000000000 [ 411.429291][ T9309] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 411.437282][ T9309] R13: 0000000000000000 R14: 00007ff88a375fa0 R15: 00007ffddb749408 [ 411.445302][ T9309] [ 411.448450][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.456061][ T9309] Mem-Info: [ 411.461339][ T9309] active_anon:3226 inactive_anon:6818 isolated_anon:0 [ 411.461339][ T9309] active_file:20552 inactive_file:37493 isolated_file:0 [ 411.461339][ T9309] unevictable:768 dirty:314 writeback:0 [ 411.461339][ T9309] slab_reclaimable:10295 slab_unreclaimable:102787 [ 411.461339][ T9309] mapped:33064 shmem:7182 pagetables:829 [ 411.461339][ T9309] sec_pagetables:0 bounce:0 [ 411.461339][ T9309] kernel_misc_reclaimable:0 [ 411.461339][ T9309] free:1295064 free_pcp:1278 free_cma:0 [ 411.506973][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.513924][ T9309] Node 0 active_anon:12904kB inactive_anon:27272kB active_file:82132kB inactive_file:149972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132256kB dirty:1256kB writeback:0kB shmem:27192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11408kB pagetables:3316kB sec_pagetables:0kB all_unreclaimable? no [ 411.546757][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.558936][ T9309] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 411.559960][ T9317] netlink: 32 bytes leftover after parsing attributes in process `syz.2.917'. [ 411.708025][ T9309] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 411.863452][ T9309] lowmem_reserve[]: 0 2465 2466 0 0 [ 411.877753][ T9309] Node 0 DMA32 free:1229584kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:12900kB inactive_anon:39936kB active_file:81348kB inactive_file:162920kB unevictable:1536kB writepending:1256kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:6456kB local_pcp:5524kB free_cma:0kB [ 411.908867][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.045830][ T9309] lowmem_reserve[]: 0 0 0 0 0 [ 412.071146][ T9309] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:784kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 412.098123][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.189317][ T9309] lowmem_reserve[]: 0 0 0 0 0 [ 412.222325][ T9309] Node 1 Normal free:3906548kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:2744kB local_pcp:0kB free_cma:0kB [ 412.378230][ T9309] lowmem_reserve[]: 0 0 0 0 0 [ 412.385563][ T9309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.418781][ T9309] Node 0 DMA32: 3*4kB (UE) 15*8kB (UE) 24*16kB (ME) 21*32kB (ME) 15*64kB (ME) 10*128kB (UME) 44*256kB (UME) 67*512kB (UME) 93*1024kB (UME) 41*2048kB (UME) 236*4096kB (UM) = 1194852kB [ 412.478727][ T9309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 412.532616][ T9309] Node 1 Normal: 218*4kB (UME) 58*8kB (UME) 49*16kB (UME) 193*32kB (UME) 97*64kB (UME) 27*128kB (UME) 20*256kB (UME) 11*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3906600kB [ 412.589761][ T9309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.692030][ T9309] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 412.702108][ T9309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.808144][ T9309] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.826795][ T9309] 76057 total pagecache pages [ 412.847865][ T9309] 0 pages in swap cache [ 412.852107][ T9309] Free swap = 124780kB [ 412.886454][ T9309] Total swap = 124996kB [ 412.902755][ T9309] 2097051 pages RAM [ 412.906655][ T9309] 0 pages HighMem/MovableOnly [ 412.922014][ T9309] 427005 pages reserved [ 412.932154][ T9309] 0 pages cma reserved [ 415.969157][ T5876] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 416.167854][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 416.220110][ T5876] usb 7-1: config 0 has an invalid interface number: 97 but max is 0 [ 416.229151][ T5876] usb 7-1: config 0 has no interface number 0 [ 416.298548][ T5876] usb 7-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=da.cf [ 416.307671][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.328200][ T5876] usb 7-1: Product: syz [ 416.332535][ T5876] usb 7-1: Manufacturer: syz [ 416.347995][ T5876] usb 7-1: SerialNumber: syz [ 416.397260][ T5876] usb 7-1: config 0 descriptor?? [ 416.415645][ T5876] rndis_host 7-1:0.97: More than one union descriptor, skipping ... [ 416.436419][ T5876] usb 7-1: bad CDC descriptors [ 416.445339][ T5876] cdc_acm 7-1:0.97: More than one union descriptor, skipping ... [ 416.623186][ T5876] usb 7-1: USB disconnect, device number 4 [ 417.722448][ T5834] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 417.731618][ T5834] Bluetooth: hci5: Injecting HCI hardware error event [ 417.741826][ T5834] Bluetooth: hci5: hardware error 0x00 [ 417.894367][ T9401] overlayfs: failed to resolve './file1': -2 [ 419.862379][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 422.015882][ T9413] ax25_connect(): syz.6.934 uses autobind, please contact jreuter@yaina.de [ 423.446378][ T5874] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 423.588033][ T5874] usb 7-1: device descriptor read/64, error -71 [ 424.460115][ T5874] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 424.637860][ T5874] usb 7-1: device descriptor read/64, error -71 [ 425.039766][ T9451] overlayfs: failed to resolve './file1': -2 [ 425.620958][ T5874] usb usb7-port1: attempt power cycle [ 425.957903][ T5874] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 426.189796][ T5874] usb 7-1: device not accepting address 7, error -71 [ 426.220210][ T9466] CIFS mount error: No usable UNC path provided in device string! [ 426.220210][ T9466] [ 426.291949][ T9466] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 426.478554][ T9476] rtc_cmos 00:00: Alarms can be up to one day in the future [ 427.042704][ T9485] fuse: Unknown parameter 'func' [ 428.568959][ T9402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.589954][ T9402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.599542][ T9402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.607675][ T9402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.683571][ T9502] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 428.702006][ T9502] FAULT_INJECTION: forcing a failure. [ 428.702006][ T9502] name failslab, interval 1, probability 0, space 0, times 0 [ 428.714922][ T9502] CPU: 1 UID: 0 PID: 9502 Comm: syz.0.953 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 428.725574][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.735672][ T9502] Call Trace: [ 428.738980][ T9502] [ 428.741938][ T9502] dump_stack_lvl+0x241/0x360 [ 428.746678][ T9502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.751925][ T9502] ? __pfx__printk+0x10/0x10 [ 428.756554][ T9502] ? kmem_cache_alloc_noprof+0x48/0x380 [ 428.762147][ T9502] ? __pfx___might_resched+0x10/0x10 [ 428.767515][ T9502] should_fail_ex+0x3b0/0x4e0 [ 428.772237][ T9502] should_failslab+0xac/0x100 [ 428.777055][ T9502] ? vm_area_alloc+0x10e/0x1d0 [ 428.781864][ T9502] kmem_cache_alloc_noprof+0x70/0x380 [ 428.787293][ T9502] vm_area_alloc+0x10e/0x1d0 [ 428.791928][ T9502] alloc_bprm+0x374/0xa30 [ 428.796297][ T9502] ? strncpy_from_user+0xab/0x270 [ 428.801403][ T9502] ? strncpy_from_user+0xcc/0x270 [ 428.806477][ T9502] do_execveat_common+0x18c/0x6f0 [ 428.811555][ T9502] __x64_sys_execve+0x92/0xb0 [ 428.816278][ T9502] do_syscall_64+0xf3/0x230 [ 428.820834][ T9502] ? clear_bhb_loop+0x35/0x90 [ 428.825548][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.831489][ T9502] RIP: 0033:0x7fbf9b585d29 [ 428.835975][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.856055][ T9502] RSP: 002b:00007fbf993d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 428.864514][ T9502] RAX: ffffffffffffffda RBX: 00007fbf9b776160 RCX: 00007fbf9b585d29 [ 428.872528][ T9502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 428.880530][ T9502] RBP: 00007fbf993d5090 R08: 0000000000000000 R09: 0000000000000000 [ 428.888534][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.896537][ T9502] R13: 0000000000000000 R14: 00007fbf9b776160 R15: 00007ffcb0de8a58 [ 428.904565][ T9502] [ 428.907695][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.228581][ T5874] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 429.241314][ T9402] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.248847][ T9402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.259257][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 429.269228][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.280404][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.290407][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.303612][ T5874] usb 7-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 429.312970][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.324106][ T5874] usb 7-1: config 0 descriptor?? [ 429.875527][ T9498] chnl_net:caif_netlink_parms(): no params data found [ 430.096231][ T9514] overlayfs: failed to resolve './file0': -2 [ 431.106819][ T9513] tty tty31: ldisc open failed (-12), clearing slot 30 [ 431.378153][ T5834] Bluetooth: hci4: command tx timeout [ 431.414539][ T5874] usbhid 7-1:0.0: can't add hid device: -71 [ 431.420745][ T5874] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 431.430801][ T5874] usb 7-1: USB disconnect, device number 8 [ 433.758144][ T5834] Bluetooth: hci4: command tx timeout [ 435.848991][ T5834] Bluetooth: hci4: command tx timeout [ 435.905044][ T29] audit: type=1400 audit(1736276227.547:185): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=9520 comm="syz.5.959" name="video8" dev="devtmpfs" ino=953 [ 435.924147][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.927840][ T5834] Bluetooth: hci4: command tx timeout [ 437.942413][ T9535] process 'syz.6.961' launched './file0' with NULL argv: empty string added [ 439.488562][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.961'. [ 448.559076][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.565551][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.065679][ T6146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.161985][ T5834] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 470.194408][ T9402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 475.167903][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 478.717963][ T9555] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 478.738720][ T9402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 485.739658][ T9402] Bluetooth: hci1: command 0x0406 tx timeout [ 489.798040][ T5131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 491.237836][ T9402] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 491.245067][ T9402] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 492.776986][ T9566] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 492.784769][ T9402] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 492.795679][ T9566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 493.296806][ T5131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 494.259812][ T9563] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 494.278466][ T5131] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 496.302789][ T9566] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 496.318628][ T5131] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 497.800110][ T5131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 497.827206][ T5131] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 497.835194][ T5131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 498.793773][ T5131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 499.381672][ T9558] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 501.491929][ T5131] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 502.472436][ T9558] Bluetooth: hci7: command tx timeout [ 504.537820][ T5131] Bluetooth: hci8: command tx timeout [ 504.544596][ T5131] Bluetooth: hci7: command tx timeout [ 507.527876][ T9566] Bluetooth: hci7: command tx timeout [ 507.533379][ T9566] Bluetooth: hci8: command tx timeout [ 508.500788][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.507210][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.888000][ T5131] Bluetooth: hci8: command tx timeout [ 509.893489][ T5131] Bluetooth: hci7: command tx timeout [ 511.543978][ T9558] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 511.898087][ T9558] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 511.918889][ T9558] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.511075][ T9558] Bluetooth: hci8: command tx timeout [ 512.548937][ T9402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 512.556751][ T9402] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 512.564773][ T9402] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 512.963441][ T5131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.976977][ T5131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.978546][ T5131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.568217][ T5131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.575404][ T5131] Bluetooth: hci6: command tx timeout [ 517.040569][ T9402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 517.052017][ T9402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 518.047791][ T9566] Bluetooth: hci6: command tx timeout [ 520.048795][ T9566] Bluetooth: hci0: command tx timeout [ 520.097922][ T9566] Bluetooth: hci6: command tx timeout [ 520.607196][ T9402] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 520.637901][ T9402] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 520.647432][ T9402] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 520.655693][ T9402] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 522.627988][ T9402] Bluetooth: hci0: command tx timeout [ 522.633498][ T9402] Bluetooth: hci6: command tx timeout [ 525.087780][ T9402] Bluetooth: hci0: command tx timeout [ 525.093397][ T9566] Bluetooth: hci9: Opcode 0x0c25 failed: -110 [ 526.178261][ T9566] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 526.734712][ T5131] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 527.737850][ T5131] Bluetooth: hci0: command tx timeout [ 527.745289][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 527.754425][ T5131] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 527.763371][ T5131] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 527.788247][ T5131] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 528.818036][ T9580] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 530.831952][ T5131] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 535.818257][ T9402] Bluetooth: hci10: command tx timeout [ 538.867508][ T9402] Bluetooth: hci10: command tx timeout [ 541.885858][ T9402] Bluetooth: hci10: command tx timeout [ 544.273103][ T9402] Bluetooth: hci10: command tx timeout [ 555.066994][ T9558] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 555.079321][ T9558] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 555.470918][ T9570] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 555.483670][ T9570] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 556.514562][ T9569] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 557.043305][ T9570] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 557.470561][ T9570] Bluetooth: hci4: command 0x0406 tx timeout [ 557.479674][ T9569] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 557.489219][ T9570] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 557.496813][ T9570] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 559.488321][ T9558] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 559.530049][ T9558] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 560.487936][ T9558] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 560.495291][ T9570] Bluetooth: hci11: command tx timeout [ 563.569533][ T9402] Bluetooth: hci11: command tx timeout [ 563.588682][ T9558] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 564.599160][ T9558] Bluetooth: hci9: command tx timeout [ 565.088014][ T9570] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 565.138337][ T9558] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 565.146834][ T9570] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 565.155353][ T9570] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 565.163667][ T9570] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 566.137867][ T9570] Bluetooth: hci11: command tx timeout [ 566.602259][ T9570] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 567.198450][ T9402] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 567.207481][ T9402] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 567.568513][ T9570] Bluetooth: hci9: command tx timeout [ 568.188601][ T9402] Bluetooth: hci11: command tx timeout [ 568.199566][ T9402] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 568.207431][ T9402] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 568.215148][ T9402] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 569.594298][ T9558] Bluetooth: hci12: command tx timeout [ 569.608635][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.615107][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.183703][ T9402] Bluetooth: hci9: command tx timeout [ 572.178425][ T9402] Bluetooth: hci12: command tx timeout [ 572.184107][ T9402] Bluetooth: hci13: command tx timeout [ 572.574073][ T9558] Bluetooth: hci9: command tx timeout [ 574.638906][ T9558] Bluetooth: hci13: command tx timeout [ 574.644516][ T9558] Bluetooth: hci12: command tx timeout [ 576.677861][ T9402] Bluetooth: hci12: command tx timeout [ 576.683458][ T9402] Bluetooth: hci13: command tx timeout [ 579.324988][ T9402] Bluetooth: hci13: command tx timeout [ 588.781972][ T9402] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 589.784894][ T9402] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 589.808481][ T9402] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 590.520990][ T9402] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 590.529104][ T9402] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 590.536664][ T9402] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 594.560801][ T9402] Bluetooth: hci14: command tx timeout [ 596.587848][ T9558] Bluetooth: hci14: command tx timeout [ 599.807667][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 599.814694][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9522/1:b..l [ 599.823327][ C0] rcu: (detected by 0, t=10503 jiffies, g=36393, q=169892 ncpus=2) [ 599.831471][ C0] task:syz.2.958 state:R running task stack:24896 pid:9522 tgid:9519 ppid:5832 flags:0x00004006 [ 599.844961][ C0] Call Trace: [ 599.848297][ C0] [ 599.851277][ C0] __schedule+0x17fb/0x4be0 [ 599.855847][ C0] ? __pfx_validate_chain+0x10/0x10 [ 599.861113][ C0] ? __schedule+0x1803/0x4be0 [ 599.865858][ C0] ? __pfx___schedule+0x10/0x10 [ 599.870774][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.876827][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 599.882173][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 599.887345][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 599.893177][ C0] irqentry_exit+0x5e/0x90 [ 599.897658][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.903709][ C0] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 599.909496][ C0] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 599.929253][ C0] RSP: 0018:ffffc9000c54f1f8 EFLAGS: 00000206 [ 599.935346][ C0] RAX: 192ce4f53cf89600 RBX: 0000000000000000 RCX: ffff88802f1dda00 [ 599.943324][ C0] RDX: ffff88802f1dda00 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5edce0 [ 599.951305][ C0] RBP: 0000000000000002 R08: ffffffff8bbe97a7 R09: 1ffffffff284e310 [ 599.959285][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: 0000000000000246 [ 599.967280][ C0] R13: ffff88802f1dda00 R14: 00000000ffffffff R15: ffff888023497018 [ 599.975287][ C0] ? xas_load+0x187/0x5c0 [ 599.979665][ C0] xas_load+0x19c/0x5c0 [ 599.983840][ C0] xa_load+0x1fc/0x350 [ 599.987914][ C0] ? xa_load+0x147/0x350 [ 599.992162][ C0] ? __pfx_xa_load+0x10/0x10 [ 599.996779][ C0] page_cache_ra_unbounded+0x25b/0x720 [ 600.002385][ C0] do_sync_mmap_readahead+0x499/0x970 [ 600.007772][ C0] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 600.013759][ C0] ? count_memcg_event_mm+0x90/0x420 [ 600.019055][ C0] ? __filemap_get_folio+0x848/0x940 [ 600.024454][ C0] ? filemap_map_pages+0x231/0x1900 [ 600.029687][ C0] filemap_fault+0x8a9/0x1490 [ 600.034389][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 600.039530][ C0] ? handle_pte_fault+0x295a/0x5ed0 [ 600.044757][ C0] ? pte_alloc_one+0x44e/0x510 [ 600.049551][ C0] ? __pfx_lock_release+0x10/0x10 [ 600.054626][ C0] __do_fault+0x135/0x390 [ 600.058974][ C0] ? handle_pte_fault+0x295a/0x5ed0 [ 600.064209][ C0] handle_pte_fault+0x39eb/0x5ed0 [ 600.069299][ C0] ? mark_lock+0x9a/0x360 [ 600.073641][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 600.079026][ C0] ? __lock_acquire+0x1397/0x2100 [ 600.084084][ C0] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 600.090005][ C0] handle_mm_fault+0x1053/0x1ad0 [ 600.094968][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 600.100280][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 600.105584][ C0] exc_page_fault+0x2b9/0x8b0 [ 600.110297][ C0] asm_exc_page_fault+0x26/0x30 [ 600.115166][ C0] RIP: 0010:__se_sys_pselect6+0xb8/0x3f0 [ 600.120932][ C0] Code: 31 ff 48 89 de e8 68 f3 84 ff 48 85 db 4c 89 74 24 58 74 31 48 b8 00 f0 ff ff ff 7f 00 00 48 39 d8 48 19 c0 48 09 d8 0f 01 cb <48> 8b 08 48 8b 40 08 48 89 44 24 18 48 89 4c 24 20 e8 52 ee 84 ff [ 600.140571][ C0] RSP: 0018:ffffc9000c54fde0 EFLAGS: 00050206 [ 600.146652][ C0] RAX: 00000000200001c0 RBX: 00000000200001c0 RCX: ffff88802f1dda00 [ 600.154631][ C0] RDX: ffffc900054f9000 RSI: 00000000200001c0 RDI: 0000000000000000 [ 600.162614][ C0] RBP: ffffc9000c54ff00 R08: ffffffff821a8548 R09: 00000000200001c0 [ 600.170684][ C0] R10: dffffc0000000000 R11: fffffbfff2030aef R12: 1ffff920018a9fc8 [ 600.178663][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.186650][ C0] ? __se_sys_pselect6+0x98/0x3f0 [ 600.191712][ C0] ? __pfx___se_sys_pselect6+0x10/0x10 [ 600.197202][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 600.203542][ C0] ? do_syscall_64+0x100/0x230 [ 600.208325][ C0] ? __x64_sys_pselect6+0x21/0xf0 [ 600.213385][ C0] do_syscall_64+0xf3/0x230 [ 600.217925][ C0] ? clear_bhb_loop+0x35/0x90 [ 600.222607][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.228515][ C0] RIP: 0033:0x7f1b0c985d29 [ 600.232934][ C0] RSP: 002b:00007f1b0d7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 600.241356][ C0] RAX: ffffffffffffffda RBX: 00007f1b0cb75fa0 RCX: 00007f1b0c985d29 [ 600.249337][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.257317][ C0] RBP: 00007f1b0ca01b08 R08: 0000000000000000 R09: 00000000200001c0 [ 600.265385][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.273432][ C0] R13: 0000000000000000 R14: 00007f1b0cb75fa0 R15: 00007ffd56770668 [ 600.281436][ C0] [ 600.284474][ C0] rcu: rcu_preempt kthread starved for 233 jiffies! g36393 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 600.284644][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.295506][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 600.311524][ C0] rcu: RCU grace-period kthread stack dump: [ 600.317555][ C0] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 600.329469][ C0] Call Trace: [ 600.332791][ C0] [ 600.335764][ C0] __schedule+0x17fb/0x4be0 [ 600.340349][ C0] ? __pfx___schedule+0x10/0x10 [ 600.345277][ C0] ? __pfx_lock_release+0x10/0x10 [ 600.350367][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 600.356763][ C0] ? schedule+0x90/0x320 [ 600.361065][ C0] schedule+0x14b/0x320 [ 600.365289][ C0] schedule_timeout+0x15a/0x290 [ 600.370227][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 600.375667][ C0] ? __pfx_process_timeout+0x10/0x10 [ 600.381026][ C0] ? prepare_to_swait_event+0x330/0x350 [ 600.386630][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 600.391530][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 600.396787][ C0] ? rcu_gp_init+0x1256/0x1630 [ 600.401615][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 600.406652][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 600.412866][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 600.418207][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 600.424173][ C0] ? finish_swait+0xd4/0x1e0 [ 600.428822][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 600.433469][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 600.438720][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 600.444677][ C0] ? __kthread_parkme+0x169/0x1d0 [ 600.449762][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 600.455016][ C0] kthread+0x2f0/0x390 [ 600.459140][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 600.464514][ C0] ? __pfx_kthread+0x10/0x10 [ 600.469192][ C0] ret_from_fork+0x4b/0x80 [ 600.473659][ C0] ? __pfx_kthread+0x10/0x10 [ 600.478312][ C0] ret_from_fork_asm+0x1a/0x30 [ 600.483248][ C0] [ 600.486483][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 600.492857][ C0] Sending NMI from CPU 0 to CPUs 1: [ 600.498123][ C1] NMI backtrace for cpu 1 [ 600.498141][ C1] CPU: 1 UID: 0 PID: 9527 Comm: syz.2.958 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 600.498162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.498173][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 600.498201][ C1] Code: 14 25 80 d4 03 00 65 8b 05 60 5c 64 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 [ 600.498217][ C1] RSP: 0018:ffffc90003755c68 EFLAGS: 00000046 [ 600.498233][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffff8880276b9e00 [ 600.498246][ C1] RDX: ffff8880276b9e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 600.498259][ C1] RBP: 1ffff920006eabd2 R08: ffffffff8bbeaf6f R09: 1ffffd40002e7d80 [ 600.498273][ C1] R10: dffffc0000000000 R11: fffff940002e7d81 R12: 0000000000000003 [ 600.498286][ C1] R13: ffffc90003755e80 R14: 0000000000000001 R15: ffffc90003755e90 [ 600.498300][ C1] FS: 00007f1b0d7976c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 600.498316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.498329][ C1] CR2: 00007f7faac21f0b CR3: 000000004c186000 CR4: 00000000003526f0 [ 600.498345][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 600.498356][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 600.498368][ C1] Call Trace: [ 600.498375][ C1] [ 600.498382][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 600.498405][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 600.498426][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 600.498446][ C1] ? nmi_handle+0x2a/0x5a0 [ 600.498474][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 600.498501][ C1] ? nmi_handle+0x14f/0x5a0 [ 600.498528][ C1] ? nmi_handle+0x2a/0x5a0 [ 600.498548][ C1] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 600.498568][ C1] ? default_do_nmi+0x63/0x160 [ 600.498588][ C1] ? exc_nmi+0x123/0x1f0 [ 600.498607][ C1] ? end_repeat_nmi+0xf/0x53 [ 600.498627][ C1] ? xas_create+0xff/0x1ae0 [ 600.498655][ C1] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 600.498675][ C1] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 600.498695][ C1] ? __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 600.498715][ C1] [ 600.498721][ C1] [ 600.498727][ C1] xas_create+0xff/0x1ae0 [ 600.498751][ C1] ? __mod_memcg_lruvec_state+0x2f7/0x4d0 [ 600.498780][ C1] xas_store+0x98/0x1890 [ 600.498805][ C1] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 600.498829][ C1] __filemap_remove_folio+0x4e9/0x670 [ 600.498857][ C1] ? __pfx___filemap_remove_folio+0x10/0x10 [ 600.498881][ C1] ? __pfx_workingset_update_node+0x10/0x10 [ 600.498901][ C1] ? workingset_eviction+0x5f1/0x7f0 [ 600.498924][ C1] __remove_mapping+0x86f/0xad0 [ 600.498944][ C1] shrink_folio_list+0x2caf/0x57e0 [ 600.498984][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 600.499003][ C1] ? __pfx_validate_chain+0x10/0x10 [ 600.499026][ C1] ? mark_lock+0x9a/0x360 [ 600.499048][ C1] ? __lock_acquire+0x1397/0x2100 [ 600.499067][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 600.499095][ C1] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 600.499128][ C1] ? rcu_is_watching+0x15/0xb0 [ 600.499150][ C1] ? __mod_memcg_lruvec_state+0x2f7/0x4d0 [ 600.499169][ C1] ? __pfx_lock_release+0x10/0x10 [ 600.499193][ C1] ? __mod_zone_page_state+0xda/0x150 [ 600.499233][ C1] ? mark_lock+0x9a/0x360 [ 600.499264][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.499286][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 600.499311][ C1] shrink_lruvec+0x16db/0x2f30 [ 600.499350][ C1] ? __pfx_shrink_lruvec+0x10/0x10 [ 600.499390][ C1] ? mem_cgroup_iter+0x3d/0x420 [ 600.499410][ C1] shrink_node+0x12a4/0x2e10 [ 600.499454][ C1] ? __pfx_shrink_node+0x10/0x10 [ 600.499479][ C1] do_try_to_free_pages+0x69d/0x1b20 [ 600.499516][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 600.499535][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 600.499557][ C1] try_to_free_mem_cgroup_pages+0x4b8/0xaf0 [ 600.499579][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 600.499597][ C1] ? psi_memstall_enter+0x38f/0x530 [ 600.499631][ C1] ? cgroup_file_notify+0x111/0x190 [ 600.499657][ C1] try_charge_memcg+0x8c7/0x1150 [ 600.499685][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 600.499718][ C1] charge_memcg+0x9f/0x170 [ 600.499743][ C1] __mem_cgroup_charge+0x27/0x80 [ 600.499767][ C1] filemap_add_folio+0xb7/0x380 [ 600.499790][ C1] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 600.499817][ C1] ? __pfx_filemap_add_folio+0x10/0x10 [ 600.499846][ C1] page_cache_ra_unbounded+0x32c/0x720 [ 600.499880][ C1] do_sync_mmap_readahead+0x499/0x970 [ 600.499902][ C1] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 600.499919][ C1] ? count_memcg_event_mm+0x90/0x420 [ 600.499939][ C1] ? __filemap_get_folio+0x848/0x940 [ 600.499966][ C1] ? filemap_map_pages+0x231/0x1900 [ 600.499985][ C1] filemap_fault+0x8a9/0x1490 [ 600.500008][ C1] ? __pfx_filemap_fault+0x10/0x10 [ 600.500024][ C1] ? handle_pte_fault+0x295a/0x5ed0 [ 600.500048][ C1] ? pte_alloc_one+0x44e/0x510 [ 600.500065][ C1] ? __pfx_lock_release+0x10/0x10 [ 600.500090][ C1] __do_fault+0x135/0x390 [ 600.500113][ C1] ? handle_pte_fault+0x295a/0x5ed0 [ 600.500137][ C1] handle_pte_fault+0x39eb/0x5ed0 [ 600.500168][ C1] ? mark_lock+0x9a/0x360 [ 600.500188][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 600.500206][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 600.500230][ C1] ? __lock_acquire+0x1397/0x2100 [ 600.500267][ C1] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 600.500300][ C1] handle_mm_fault+0x1053/0x1ad0 [ 600.500333][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 600.500364][ C1] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 600.500386][ C1] exc_page_fault+0x2b9/0x8b0 [ 600.500411][ C1] ? __might_fault+0xaa/0x120 [ 600.500433][ C1] asm_exc_page_fault+0x26/0x30 [ 600.500460][ C1] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 600.500481][ C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 600.500495][ C1] RSP: 0018:ffffc90003757d08 EFLAGS: 00050202 [ 600.500517][ C1] RAX: 0000000000000001 RBX: 00000000200001c0 RCX: 000000000000000c [ 600.500529][ C1] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: ffff8880126ecca0 [ 600.500541][ C1] RBP: ffff8880126ecca0 R08: 0000000000000003 R09: ffffed10024dd995 [ 600.500554][ C1] R10: dffffc0000000000 R11: ffffed10024dd995 R12: 00000000200001c0 [ 600.500567][ C1] R13: 000000000000000c R14: ffff8880126ecca0 R15: 000000000000000c [ 600.500588][ C1] _copy_from_user+0x7f/0xc0 [ 600.500616][ C1] sctp_setsockopt+0xcc/0x11c0 [ 600.500639][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 600.500666][ C1] do_sock_setsockopt+0x3af/0x720 [ 600.500690][ C1] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 600.500713][ C1] ? __fget_files+0x395/0x410 [ 600.500731][ C1] ? __fget_files+0x2a/0x410 [ 600.500752][ C1] __x64_sys_setsockopt+0x1ee/0x280 [ 600.500776][ C1] do_syscall_64+0xf3/0x230 [ 600.500802][ C1] ? clear_bhb_loop+0x35/0x90 [ 600.500820][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.500846][ C1] RIP: 0033:0x7f1b0c985d29 [ 600.500862][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.500877][ C1] RSP: 002b:00007f1b0d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.500895][ C1] RAX: ffffffffffffffda RBX: 00007f1b0cb76160 RCX: 00007f1b0c985d29 [ 600.500908][ C1] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000004 [ 600.500920][ C1] RBP: 00007f1b0ca01b08 R08: 000000000000000c R09: 0000000000000000 [ 600.500931][ C1] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 600.500943][ C1] R13: 0000000000000001 R14: 00007f1b0cb76160 R15: 00007ffd56770668 [ 600.500964][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 603.744992][ T9558] Bluetooth: hci14: command tx timeout [ 605.807841][ T9402] Bluetooth: hci14: command tx timeout