last executing test programs: 11m46.006843151s ago: executing program 2 (id=44): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f00000000c0)='cifs\x00', 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x5, 0x0, 0x4}, &(0x7f0000000080)=0x10) 11m43.039289794s ago: executing program 2 (id=47): syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x145041, 0x0) 11m39.719365304s ago: executing program 2 (id=54): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x35ba, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x14) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0) sendto$inet6(r0, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0x4}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x20040080) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) 11m35.806633671s ago: executing program 2 (id=64): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000640), &(0x7f0000000380)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ptrace$setregs(0xd, 0x0, 0x2f3, &(0x7f0000000200)="44f3e1db428d7b2f2d4b86c3ed023ac354094af8c6aa9d877b753e4ea308d72d456be3f6d0e3fe5995b954898fd1504572c019196514ff31ab399f61040477bfb665422cb91663c301cf5096cfd677ef") dup(r0) 11m34.912035687s ago: executing program 2 (id=67): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x3f) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) socket(0x29, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000090601020000000200000039050001000700000004000980c7154d350a149fc76e0a01006e8d77ea0344fcdcbe080a8365ec149a47bab62345ce4f06e07b5398ff6c8d35de9c4c3bdb921c15573af98c6530aced4e36889dd3ff9c15a9c4c379fa50dff6c8852e20607fb1a978858208c0ad1319dd213b55bd35a8b117f6ef0afc64f1ad9b2a89aaf2ed4cf04b5a339e3d2845"], 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000306010400000000000000000000000000000000000000c2"], 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6b}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) 11m34.003552781s ago: executing program 2 (id=72): r0 = eventfd(0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x80141) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x1000000, 0x8, 0x2013, 0x1}) write$eventfd(r0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01030104000000000000000000fd"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a32000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900010073797a3200000000140000001100010000000000000000000000000a"], 0xac}}, 0x0) 11m33.24127256s ago: executing program 32 (id=72): r0 = eventfd(0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x80141) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x1000000, 0x8, 0x2013, 0x1}) write$eventfd(r0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01030104000000000000000000fd"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a32000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900010073797a3200000000140000001100010000000000000000000000000a"], 0xac}}, 0x0) 9m20.879534845s ago: executing program 0 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 9m17.222853693s ago: executing program 0 (id=443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x2c000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m17.008334091s ago: executing program 0 (id=445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m16.83877861s ago: executing program 0 (id=451): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000480)={0x281, 0x1}) syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000002100)={0x0, 0x5}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f0000000000)=""/167, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4004, r6, 0x2}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_emit_ethernet(0x8a, &(0x7f0000002140)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0xd, 0x4, 0x2, 0x5, 0x7c, 0x67, 0x0, 0xe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x1f, 0x7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x0, 0x0, {0xe, 0x4, 0x3, 0x8, 0x2, 0x64, 0x401, 0x40, 0x88, 0x8, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x24, 0x46, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x11}}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x8}, {@rand_addr=0x64010101, 0x9}]}]}}, "a92a161f8aea2f46"}}}}}, 0x0) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) 9m14.882411513s ago: executing program 0 (id=455): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072011b000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9m14.705299701s ago: executing program 0 (id=458): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500}}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7fff, 0x100) r3 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x8}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x2, 0x0, 0x1000}, {0x4, 0x1, 0x1800}, {0x1, 0x9, 0x1800}], 0x3, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) open(0x0, 0x359002, 0x127) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r6) 8m58.889689553s ago: executing program 33 (id=458): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500}}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7fff, 0x100) r3 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x8}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x2, 0x0, 0x1000}, {0x4, 0x1, 0x1800}, {0x1, 0x9, 0x1800}], 0x3, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) open(0x0, 0x359002, 0x127) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r6) 5m35.489552858s ago: executing program 6 (id=1246): ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x90) r4 = openat(r3, &(0x7f0000000140)='.\x00', 0x0, 0x3b) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0000000000011907800000000e000000100004e20009c907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b27159c7b9f0eceb155f00000000000"], 0x0) 5m32.076005993s ago: executing program 6 (id=1254): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="d40500002000000071101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af5"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x1f0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xe8}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0x0, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'macvlan0\x00', {0xff}, {}, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x98f}, @device_a, @broadcast, @initial, {0x6, 0x4}}, 0x0, 0x2, 0x3e, @val={0x10, 0x1, 0x4}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0xe4a0]}]}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r9, &(0x7f00000000c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e8445a40ca0735a8fa21000000010902120001000060000904"], 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20, 0x0) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) read$msr(r11, &(0x7f00000000c0)=""/113, 0x71) 5m26.307900921s ago: executing program 6 (id=1267): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, &(0x7f0000000400)="000000000000000002b2138373efdc2dd030ea134fba5eeb330a1ab6d4e1e3da33996ee4cc5f7ce1a17d6f9e16d90dda4cfb9245331f7ad24e4e7bf3646d9e43382e8673becd719364f3acf766f30955bb5032302ba9e85b12cc66130fd660ae2ad3f203536e68c026c1", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x0, 0x85, 0x4000069}, 0x2c) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) ioprio_set$pid(0x2, 0x0, 0x0) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) write$FUSE_LK(r7, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c63616368e93d66736361632e844a207981d79b5ee868652c54e1534f0e4ae1b379acb8e523e2e9f800"]) 5m25.691293829s ago: executing program 6 (id=1271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000240)=ANY=[@ANYBLOB="00006d00000000000102020405060708090a0b0c0d0e0f1011ff001415161718190000000000000002222324252627282d2a2b2c4e2f2f303132333435363738393a3b3c3d3e3f40edbdc527e4144fde74df3e8eb08267c527e31fafc9fc2087fd65a263129818e64e491c20bfa932c60b84a1983dc2afe01b756add5e596d97bd079c069904d00f9438fdc9a4f2322cb4f8c34850cdda1c7eebbd6e881ef7a7af3444c039ecd9125bc9f6e84131e8dfb864e6e8da3945b85da48dacb2ed05ce3bca055c11bc35c021ceca6dbab1499180af2d589830"], 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x2, r1}) lseek(r3, 0x0, 0x3) 5m18.856139504s ago: executing program 6 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e08000007000000050000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m18.808124102s ago: executing program 6 (id=1286): pipe(&(0x7f0000000100)) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x1, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x0, 0x2}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x4000000000000004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) mount$bind(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0, 0x11080, 0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x8005c, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) 5m3.286228978s ago: executing program 34 (id=1286): pipe(&(0x7f0000000100)) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x1, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x0, 0x2}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x4000000000000004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) mount$bind(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0, 0x11080, 0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x8005c, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) 1m13.435697519s ago: executing program 3 (id=1984): r0 = socket(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0xb277, 0x2000000400000000, 0x0, 0x0) 1m12.172010459s ago: executing program 3 (id=1990): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000002f80)=""/211, &(0x7f0000003080)=0xd3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040f04fd290b08"], 0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff) 1m11.632981509s ago: executing program 3 (id=1992): r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e800500"], 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a, &(0x7f0000000040), 0x3}, 0x0) 1m10.811760031s ago: executing program 3 (id=1995): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) unshare(0x2040600) ioperm(0x9fda, 0x85, 0x6) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) gettid() syz_io_uring_setup(0x6c11, &(0x7f00000001c0)={0x0, 0x6e82, 0x20, 0x2, 0x2c8, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd_index=0x4, 0xaf18, 0xfffffffffffffff7, 0x7266, 0x1, 0x1, {0x1}}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$unix(0x1, 0x1, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 1m7.531178527s ago: executing program 3 (id=2001): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m6.852939371s ago: executing program 3 (id=2007): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001580)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x20000000}, &(0x7f0000000540)=0x9c) 1m6.411520665s ago: executing program 35 (id=2007): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001580)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x20000000}, &(0x7f0000000540)=0x9c) 32.328780079s ago: executing program 8 (id=2151): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x53, 0xe9, 0xaa, 0x8, 0x14aa, 0x22b, 0xb776, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0xd0, 0x3, [{{0x9, 0x4, 0xd9, 0x98, 0x0, 0xd0, 0x86, 0x2b}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="b7aa3b5cc308"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003000010700000000000000000a00000006fd010017000000"], 0x1c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, &(0x7f0000000280)) 24.540113117s ago: executing program 8 (id=2171): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x413, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x0, 0x0, 0xcc}, {}, 0x0, 0x0, 0x2, 0x4, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000500)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e20, 0x51, @private1, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @remote}], 0x5c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x7a, &(0x7f0000000080)={r9, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYRES32=r11], 0x20) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r12, &(0x7f0000000c80)={&(0x7f0000000000)={0xa, 0x4e20, 0xffff, @local, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hoplimit_2292={{0x18, 0x29, 0x3e, 0x3}}], 0x30}, 0x40800c8) ioctl$SG_EMULATED_HOST(r11, 0x2203, &(0x7f0000000040)) close_range(r0, r10, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r13 = gettid() process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 22.831435316s ago: executing program 8 (id=2176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8020400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 22.741503285s ago: executing program 8 (id=2177): prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0x400420000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x48000) recvmmsg(r0, &(0x7f00000028c0)=[{{&(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/111, 0x6f}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f00000006c0)=""/143, 0x8f}], 0x3}, 0xf78}, {{&(0x7f0000000780)=@can, 0x80, &(0x7f0000001a00)=[{&(0x7f0000002340)=""/219, 0xdb}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/167, 0xa7}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f00000019c0)=""/29, 0x1d}], 0x5}, 0xe5f8}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/168, 0xa8}, 0xb4}, {{&(0x7f0000001e80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001940)=""/63, 0x3f}, {&(0x7f0000001b00)=""/104, 0x68}], 0x2, &(0x7f0000002000)=""/188, 0xbc}, 0x7}, {{&(0x7f0000000800)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000880)=[{&(0x7f0000002440)=""/253, 0xfd}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000002540)=""/210, 0xd2}, {&(0x7f00000008c0)=""/8, 0x8}, {&(0x7f0000001b80)=""/122, 0x7a}, {&(0x7f0000002640)=""/148, 0x94}, {&(0x7f0000002700)=""/217, 0xd9}, {&(0x7f0000002800)=""/128, 0x80}], 0x6, &(0x7f0000001f40)=""/111, 0x6f}, 0x7}], 0x6, 0x100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0x2}, {0x2, 0x4}, {0x16}]}, 0x10) timer_create(0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0xfffc, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000280)='\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='fsi_master_gpio_crc_cmd_error\x00', r3}, 0x18) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e20, 0xaed6, @loopback, 0x7}, {0xa, 0x4e23, 0x8001, @mcast2}, 0x0, {[0x101, 0x8, 0x6, 0x8, 0x8c400, 0x9, 0xfece, 0xfffff3b3]}}, 0x5c) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x2b, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776dd6c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b66ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = dup(r4) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000380)=ANY=[@ANYRES64=r6]) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) 21.673970446s ago: executing program 8 (id=2185): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffd94, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x0) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080)=0x3ff, 0x4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000280), 0x4) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000002a, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xc3, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900673b0000000000000000fe8000000000000000000000000000aae00000010000000000000000000000004e240000000000000a00800000190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/88], 0xb8}}, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[{}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x7, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f00000001c0)={r9}) 21.31502623s ago: executing program 8 (id=2187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8020400) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 11.623693222s ago: executing program 4 (id=2224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000240)=ANY=[@ANYBLOB="00006d00000000000102020405060708090a0b0c0d0e0f1011ff001415161718190000000000000002222324252627282d2a2b2c4e2f2f303132333435363738393a3b3c3d3e3f40edbdc527e4144fde74df3e8eb08267c527e31fafc9fc2087fd65a263129818e64e491c20bfa932c60b84a1983dc2afe01b756add5e596d97bd079c069904d00f9438fdc9a4f2322cb4f8c34850cdda1c7eebbd6e881ef7a7af3444c039ecd9125bc9f6e84131e8dfb864e6e8da3945b85da48dacb2ed05ce3bca055c11bc35c021ceca6dbab1499180af2d589830"], 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x2, r1}) lseek(r3, 0x0, 0x3) 8.44417355s ago: executing program 4 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500000073000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x1200}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x9, 0x32000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0x1ff) sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 7.01161332s ago: executing program 7 (id=2243): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpo']) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x490980) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') open$dir(&(0x7f0000000140)='./file0\x00', 0x82001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='ocfs2\x00', 0x0, &(0x7f0000000400)='usrquota') ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.8891085s ago: executing program 1 (id=2244): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @hci={0x1f, 0x4, 0x3}, @vsock={0x28, 0x0, 0x0, @hyper}, @phonet={0x23, 0x40, 0x2}, 0x5, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='ip6tnl0\x00', 0xa, 0x9, 0xfff}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="4803219e00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x5925e9d1, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@mmap={0x0, 0x1, 0x4, 0x800, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, "00000200"}, 0x0, 0x1, {}, 0x200000}) syz_open_dev$vbi(&(0x7f00000009c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) 6.699754436s ago: executing program 4 (id=2245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='exfat\x00', 0x10808a, 0x0) 6.312580295s ago: executing program 4 (id=2246): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) io_setup(0x4082, &(0x7f0000000380)) 6.229870803s ago: executing program 36 (id=2187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8020400) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 6.220790082s ago: executing program 7 (id=2248): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, {}, 0x0, 0x6e6bb8}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x20000}}, 0xe8) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @host, 0x0, 0x42925, 0x6a, 0x20000009, 0x4}) 5.217890658s ago: executing program 4 (id=2251): memfd_create(&(0x7f0000000000)='+\x00', 0x6) cachestat(0xffffffffffffffff, &(0x7f00000005c0)={0xfffff7fffffffffc, 0x1}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd600805080000fc0000000000000000000000ffff7f000001fc010000000000000f00c847818489a27373000000ff008906644ba3d021438fe28a08c1c8bc165daa1a15f155eac22d7a20adf41f31bccc106eea9283b33da00000000000000000c2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r3, &(0x7f0000000200), 0x53) semop(r3, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x8001, 0xc00}], 0x1) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) semctl$GETZCNT(0x0, 0x5, 0xf, 0x0) semget(0x2, 0x0, 0x100) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) 5.216617416s ago: executing program 7 (id=2252): socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="4eaa0000000000007110670000000000950004000000000006e60b49dff76be3cdafaa565e1857734bbdfef4880f57fef287a7c45090cbc09d767bd4a21815759cafe5511b046090d32b65d7f3cccae5035e4182202e150f0ee0ad1992ce205883148835cea2aaab6911c42671b98a6df3287e49644526e413bf4aef5a633cee5aafab9d21f5331c1b7dfa7b106faabbc4552cfb8a190e808bf354ad46b12b05fb698cf186b7b76b1744b7b5630a6322ae2bd4306c4a37c88306f673cd01fbf9d9694f7921d2c550c44c7a5f6342f3563bd37136613d61e33ed7b3441ea671d141bb9f024bd0d8b92cc1766cbd1b5c7e80862199c0223cde820f74513db1d009ae88d9f56942a42c125d5cc3f457c59818f2ea317dad5ee78fd64835235cc10cb613ed2d009a98656df332d8ac6afff2950283fe74aa6c89d2cb32a2a96176b448488151bccb9e6aec31b0bb8b34c515fde922d5cf39fc4cca7182"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffffffff, 0x2000, 0x595, 0x1fd, 0x1, 0x7ff, 0x0, 0x0, 0x10}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="f8e8766e790cea4eeef926af1c28ba7f0000000000000000000000ebf23d6089774696d2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fallocate(r1, 0x0, 0x0, 0x1000f4) getpid() 4.304023504s ago: executing program 4 (id=2253): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x1, 0x9, 0x4, 0x0, [0x0], [0x98ae, 0x8000, 0x6, 0x4], [0x0, 0x0, 0xc, 0x1], [0x0, 0x0, 0x9970, 0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) fcntl$lock(r4, 0x6, &(0x7f0000000180)={0x0, 0x4, 0x80, 0x400, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r3, 0x80000}) r6 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001680)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c0000000800090581030002000000090401b169020d00010904010102020d0000090582020002000000090503368b"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000005840)=[{{&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="a1", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000f80)="ce", 0x1}], 0x1}}], 0x2, 0x20000c40) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xb}, 0x18) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1f00, 0x12) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0}) r11 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000004c0)={r10, 0x2, r11, 0x3}) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x4000) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000001580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 3.745782296s ago: executing program 1 (id=2254): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$smackfs_label(0xffffffffffffffff, 0x0, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1a, 0x20000028, r4) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) 3.675092977s ago: executing program 5 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500000073000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x1200}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x9, 0x32000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0x1ff) sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 2.664285605s ago: executing program 1 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) (fail_nth: 1) 2.561381479s ago: executing program 7 (id=2257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180700000200000000000000fcffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000280)={0xf0f022}) inotify_rm_watch(0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback, 0x826f}}}, 0x32) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0xfeedcafe, 0x8, 0x31435641, 0x9, 0x5, 0x98, 0x3, 0x6, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) readv(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x1000, 0xe2, &(0x7f0000000880)="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", &(0x7f0000000100)=""/226, 0x81, 0x0, 0x1000, 0x3, &(0x7f0000001880)="06b8ee92cdafc3499ea51c9fe0511516222ebe4c716c96f189c12a3baf9f98c41a1f4b1f8a9647cb5bff2a918a105e5698306b643edce0b5cbed1956cfeb354e689090003204d2010e5878899757ad64126d5a09366186e993ca6dbda110ab0c96f9f4c16ae41fbe93d8176dc9c4ddf0465189092d56a4cc71c670a65b25d3ad612593ff65a6d5e92658c11f57e39cfca24ae09e8988f99383824e0b6292a2f50f9a572013157b330cf97ea0ff2abe623616d503f6ecfddc2958146308ba45cc2ffd6f07b3c907be8a930cfc93d9011c10c8ae03cf73d7524a5eadfb2b987f2d9cf8257065c8499cfa4d5f00a894f84edb68b0246cbca1cb63cb4d4023d7ea997f7d27c2169530b56e1dd4d271906715778bbed0fff1296cd2975c4f90c8af7b97029f04d3b2f7b281efb70451692661bcebd047b0d109e1e094cb31f1dba612a75a7169da1f3997f62dcb298146975b9de9bc57fda82b9e4dec2dbfa96afec8235c9d158a5c9f2a6362424a5c7116adf2d9893a2d80d0af5ccfa670c1c1089ab96edb041694deb04323f44a3386eb8dd98c2297d756ba52a7fc3cfd05070456a324a5c2a19e9293bf9405458fe8d6b68c92178663faf1529951f17168a58cb25b8445024ddb782f606d546d9b2cb0c1504db8f1f770927a0f17b50ce8676fc5ecf9d5df99813f94d1e8e321bd22e525ceada52752ebccd2bc84d83aba79e32498689861fef60fa6c37ce9b3f44f1b9b54fb985977f13cbc8426c6908f50fb77f05aa63f8aa64e1173ec323b0891bc571febe4906b7cf9bd892b878b56615b3db48f60695349883e7690c920596d56f4056b853056bd49341f80f2f17227e29d138b7b8a07c1f2c944698c0d11be8121f6e1a90f82204d28eb8e9ef1eaf53631cc3df814d0744c2cae876031812017a0cb25d219e1f649aa9e5c7ac33668d5531e6a8d549baa57c9aa1f85d455b36b16c4fd2ddc232888265e2d52a7563bf46caf8053816a83b8842bb1beba364595d304e58e7359f1a8eaf5d014b0926fda12e7e44c1e97cc5ab8d2d1360def8564120fcc985e689315c21720f445b35f18f5bf26cdb93dce1fd8cb3b25d76478dc1a3b6d6b8e4efcd239ffd8dff16e391b4a98c4024c237fb0c74f9122596a916d0b409f5e76b261f9997020e75dd388bf594f445c4a59b518f40be92c2f204faf36a564b3cd26f414ec09c3d1edf84307d5712d2e9cc58772b852f4526382da3c5a29d15c7a7b302dc460a0b81cd6c039192396e57dc17ad3cf18a392ef5b1057f21c9c85a9e6da562cc179b8520d2733bffb3c8eac391a8d40d86985fb09cdc3723cdac28afcc748a4b5d8df2e3e537c8e736113b739c352eb89a077ae196de8e64538ba81023b321554d222807b3ee04f41dfeaa40737a2eb0ee91a47367dfcb49f097b2475511e01b40ecf3c14f3dc0736b58e39fdfa27d4571d66842e8915a488d6ac30b42e21b929bcac8d7df12b389f8070b969c62b32a754457b1e1ffb6b9851b5fabdb5f9c0de059d0bc1da565905157ff8f8f2f5ca815341a580b9ad8d06f56baf352587d578e323e6a90473489e3ec5b2c3369bd868f277c53c13df5cd10a87a58d0243f7de1884e2b47d522db4d011e621c942a0b193dbc1ae92185905082751f9ba375dfb9f2fe851b74e0b817d06d8f26e18ccbd8a9a12c0631c392a816de56a834fadc0ca5bf723ec6bd7feb864c94cee908c0e42e5f0edc07572701c7196d887eb3d79279262a44f9eb5243e4d8af64e68e19db403a3a093dfac7514f9cc9a51e2404788ad51af0cd11a1f2c5e17cecd1bc92139e324f08009a0046492b26185218501a9c4bcbf23f5c524db5817b46db34c6ae777e2d313c4301e2df4c9ab11b02002bb04d8eaf932e250e46f4dc7176dcc9115138c9025ec65269d74e78b0db50cea7599f40499ae6db4d3aea97e55fe52119dba875f861eaeb60acc14ae956f9bb048e4e6fe575e7821d356aa253eca93890172ef73218892cd1346c4471a62b2c199f1af4a6deb689d6252810612ae434627cf4f3701edf36f354a2ccd065a218f8e779256c8398e66581d326ddd3ba2a1122dddd2604794a85b33dff979b3f02cc65fbcb127da990955993210ac5603e10c17ed72fb42bb52a9e733654c7b295b560711cad352dae904c133e62891baaacd83b71f737f0ef4e1b75bde1672d1a2006821786c0f7c02181ccb75b371aa267957de2aa80a3bfedf5d5a52e682071f8c68f321b462060f08d2fc014dfdbe0a1d023b55e6add1eccb09e59fe61821db6052277f6d2c221bb5d772e2b2e20c2950f9c77e1a3d3643600462d79f0e270fbd2b37788bbebd2f26c336dad9c817f0f5c40305fac3f6c9d7ce135f1effa998270c34c9c97b8ea84c0b3eb63de5e406033e7169f7fbf25d091188a68de727266a0e7954ab498c3235e70e6269dec3140654b4a535240a98eefeab35b0d51abb26f4e15a248dfb64ba4255a93c1a658408880d4ec980dfa131a792ed480951a310f468a4c007c4385882d9a27d1939b4f568c774e70d7d5b56e92bb636d6518405c5a6a48a4a7dc658ab034a6ea3801387f056e2eddf7f9973aef45261f1ebd2b8dbfc2dc85d2e794b6a53a9bac820bc232f08870060d81a09d46d4de38d4447b76fb2472701ccfd4ae2d7b2baaf395bbe8543a8890d3186ad6738f70338e3b5ee0db8ea74df62129c78b8d08bec790f86a0fe4b3dbbddeb23ef6e488bfacad2f4cdaefc38dc13db3924952bcdeb91beabb39d5ab52fa22b1c33964c6b49cf59a0f8430b1764afc50cb28fdda4e0f8c5e1f16dff7259ff96ff4996a4d2058f0cf8ec530b03ad45deef9823e9ff435e1b2d156703e3b65a0faa7e8a700cefdcff75b8d27a3a311e41f3b2ada49c8b4f79725f2c6992b477fa83854fe0fd9fa8c82b87be8fad7573d678895608f2d87764b2e29706eb1ef3d9fa38a57cfe5fd0477244a27ebc86e9d532a6bfa1a964d3f7eaa64ef76f83afd8607fcfa024e42376c334fadcd9db4adcdb3cbb96df9e3712ca6f8e25c635f5aeb4a6c1ee248b513ac4e0fdafb706104aa278ddec69ae5e5d0dcc3761f4afde4170f6ca9f53920b06777ac2b3ad43cbe6be20f1bc454a04e8d52f2395aa09c9dfe41ec47b43efc6f111d3330a87d74a57028f15492e7773205367765e484ea810ca6f8a2fecccefb6f0196af9be3089265a35246f6ce9f584d0fcf24dcff9771cac03f842e9a8dc852862de317f715fa71ae934c755f0f5df3ee721ca762c8f27537c583b8cc3b2b987ecb3d7b31ee7ace291e8b9bfc1b3af1ce02df4b4b80e62d523be07dd0c939d58943dbb94e783ad1b4fe1e19663e4d8cf7f936bfe9c271a7cc59307aafb08e3ec524b0ffe33bc085a3a224cb95e9819de8ba8e2e95737a0c607f3f26c31233dd77113187044fb4e59b7f03091a49ed92a1bc3ea8f369f84f897cb3ede5581173809f900be232829acc3a08568734f2e368001c213865dd4ba2b6ed44a8a91bc5787774a96760714c2bbd07e2b7d4b8577547cbc18b85ef7bf3b871982112c622e0c52ea3eab614588833f151b65dc7657ef64a7b49b1cad16c97eb06a37bce9527ff82a29e3d5b141412ec62d7a678739c5bc9361219d7cdab135a011254a95d882f2392f25f29bd9e359fd1b858893abf5eb2631b3b5e6f67836babe4ecdac9b6feb30a1f996fdfaf80dbd4a3c27c1b2c0982172eff62e2ca6bfedd072635991a2facd9d1ddd1bcc2a693092f9747b4218bcddc4752d3f8daa1b1feb6126c4a09c1b56575d2db0291d10e5cae395d5206e77fe37641df686fe34ee8f61eb111dcc997f71780cd12ab83874a3b14d6bbd870069836efc88a97b63c56a8be91263305ddb9e5e62391176c24d73829c5c2be6ad3d7f8c25bcba83aaf50a7db70f65740333c2280301709d28f0c8e06f392e656d47991cedd13b532292a8276b53f119a212ea7f81dacd0785c3fb6e2091197614a234f3c2b9cf05bc72b5f46c785b6ccf436bab79a00bf0fa631885459dfd4ee03b87d836bd0a631246ca0b3b79ac16eeaa56bad90f1c1be7a3a4b3d39ea88ebdbb2a19164200f33bf76627c24f2491f21793d1961017616d14dec652a140b26d70fa2c4430982566f5f344b3fc67f6f070fcab220fd17564dae09f1143a4ce91cf0e65bf02d4e824edf15e81ee695e2a0ce5ba11394568dfca52743abb90b038981b99928996bebfe36fac953abe0896ff9d407656c3cbc81d2302a5c79e0b124732d5fe284004692e7e96bf74cd3ffe1d827bda7e73aab33b99a957e22a285f936a61acfc993bdb06464af8a74228652b6bc2469995dbd98a05f756a1d4f2dbb69848543c063bdccf4e8c2b781890c0ab193c078475a084e8ef0079e3ccd729e8fcc9a338db920a7c7544e773a950391fe6e91dbf404a792eaba682926810bda2467268efd89acc52da609d261da1b9e79e00ca58842fb96971cdaffb15e0255339304d71c14c017f39285b2a2333eb9c96edc81e13f122827a7cd85ff1531d2123b191198807302229ae4badb390ff33c9a463bafbe2a66f2a191f34af027f9cfbdbe83edf0456b03db6cdcb5e8b7ed5b5f9b55eb300ee52dde427d7537be65a75cb7f0401deeab37e4ac74664b9626aa56085284650e93312146ce0e2443d36819f71617ca899439d85ba75afc3a8d10b7733d7b4d1af7fb894b5b52e4392e99a674bef14f9a04316ee09b9d232ce7a14fa8165b3c8894f51eae9575ec5ce40373ef8c1081f968e65a710df58d00beb10ffcb13d50383d35de47e15d91697d33cd4bb581262dc215617fa73ab0b23a822c84d35f75e5ec7c0faf1b69c3243eeda60b99a5d41a16f5edd450a67e52490ffb2d05862bcb019057fc55979046e7374ccaad3822638ed8db6f68475dffd74dcfdc1ad3570aad5d6fc4df33b704b2a4ce0e764ae37d90c96ec6943c5a119126d91ec009f4d19347690570e7dcbfb7902f92a4d831af6e19790e08ece43ebe20698db517a65b8cb52908e6b14f58970d0656359106a3edb929302d63e0d5023f193d8b7ca5c73ecb7d7404a26e75cc36a9e00c99573b51f2b4dce74bec5432f2911be0ebbdc16c446bbb6a8c5e579014f1323c1691cf607e6115eb6965de350bc12bc6c6cbc5a2f37bc893a08b863754dbdfc644fb10ac91d558cc13e3f420295826d5134ecede218acb9cf6687c1bbf077055371d32dac54ec730a475dde5d2ae1e52f3be129906fd7c012e290cd215aa2eaacea6c38255eecf36ea9b323555c918bea1dfb54e39310495e95338244e744ed9a4801c2853573226b94f557e92a17386c9367a04ada46e77e24ebf55243bb03ad4ca1cc535cd2ba7b4169679166cb173e3fa69c715e6ff0d1e1ec650f9497b26358ab88e17a9e3d41fb1328531533205f3cb6da68f4b2c8b2d8bdaa4cfed9d1b8bc200cb0a385a29ed5a4bd11bd20fcb4ca83c59203522521efa41fb8fba916c0eca690950e0d021b6227501f62d53b69115350091b52f141fbd39365f02e74391406fff8b4f13138feb0896eec8094b036fe31c35dd30bba04d029dc6ae172824ad52f04d022668c013501d5b671dcb91bfa237f973d43d1d0169e159b22a2ed4ed16f8e387fb719e2ed7cde2125b6c0b06d409609dc02cd844186602a18ea9e4cfa1cabfb8e84f469b8dca40c347ae4f8a6c98280272abf9dd8e3314ae3b195ad34d6fe2720504f63497cf40514136569fdbad1d3222b3480b0dcdc5e109e996477942a2754f466b1df60420c5545", &(0x7f0000000040)="805ede", 0x0, 0x0, 0x9}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001c00f1ffffff00040000000007000000", @ANYRES32, @ANYBLOB="8000a60006000500010000000a000200bb"], 0x30}}, 0x8008) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, @ethernet={0x306}, @generic={0x21, "db862551d6fa9026a571e3259c78"}, @xdp={0x2c, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x200, &(0x7f00000002c0)='vxcan1\x00', 0x9, 0xa, 0x6}) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[&(0x7f00000191c0)=' \xb1\x16K\x10=\xf9\xdbQ\xb0]\xcf~D\x01c\xd2\xa6\x8c\xf5[\xf2:\xa0\x05\x8b\xe3\x89d~\x9a\x8d\x15\v5F({\xc1\x17\x01\x8b\x15M-\xe9,\xb8K\xf3,>I;:\x13yX|J\xbe%\xd1\"\x14`\x84D', &(0x7f0000000480)='\x1b\xd5\xfc|=\xa8r\x1c3\xe9\x94Z\xd1B+\xb4\xb8\x04\xa4^s:\xa13{\x80wvJ\xbc\xf2)\x89\xaba\x0e\x17\xf7}\xb6\xd0E~a>\x7f9\xf6\x15\xf1T\xea\x00\xc3\x16/p\xa3y\xa0^&\x93\xa64\xf4\xe2\xcf\x96\xbdl\xc5\xd9\xa9x@`\x13s9\x13\xe5\x94\xf8\xd1\xb7\x8b\xfa\x83\x9ab\xf2\x97<\xbcb\x84\x10\xfaG1j\x81\xa92\r\xb4j\x8d\x81\x1a\xd4\x91i\xafaf\x90ZJ\xa2\xd2\xfd\xcc9\x87\xeap\x16,\x0e\xe9\x06\x1d\xdatv\x02']}) 2.382581562s ago: executing program 1 (id=2258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000800)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/47, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) read$FUSE(r3, &(0x7f0000000840)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0xfffffffc, 0x0, {0x1b}}, 0x14}}, 0x48c0) (fail_nth: 1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x24000001) 2.374181698s ago: executing program 5 (id=2259): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noxattr}, {@cache_fscache}, {@aname={'aname', 0x3d, '@'}}, {@noxattr}, {@privport}, {@cachetag={'cachetag', 0x3d, '/dev/ttyS3\x00'}}], [], 0x6b}}) umount2(&(0x7f0000000540)='.\x00', 0x2) 1.70237131s ago: executing program 5 (id=2260): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(0x0, 0x4) syz_clone3(&(0x7f0000000440)={0x40804c00, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x34}, &(0x7f0000000200)=""/173, 0xad, 0x0, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) syz_open_dev$sndctrl(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) fadvise64(r2, 0x80000000, 0xf8d, 0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01022cbd7000ffdbdf250700000014000180060001000a00fcff070005"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) futex(&(0x7f00000004c0)=0x1, 0x8, 0x1, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000580)=0x2, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "240086ddffff0000"}}}}}, 0x0) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000540)=0x1) 1.584277304s ago: executing program 1 (id=2261): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c"], 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = timerfd_create(0x9, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0xc3d33000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+60000}, {0x77359400}}) 1.414984926s ago: executing program 7 (id=2262): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f00000000c0)={0x281, 0x2}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000040)=@arm64) ppoll(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000340)={[0x5]}, 0x8) 945.634339ms ago: executing program 5 (id=2263): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x29b4, 0x4) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040884) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x68, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0x5, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0xfe98, 0x1, r1, 0x0, 0x0, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x81, 0x9}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_io_uring_setup(0x24fb, &(0x7f0000000000)={0x0, 0x200000, 0x400, 0x2, 0x31d}, 0x0, &(0x7f00000000c0)) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x4001) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 787.123902ms ago: executing program 1 (id=2264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x8, 0x1, {}, {}, 0x7fffffffffffffff, 0x714a}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x45) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x7, 0xba, &(0x7f00000006c0)=""/186, 0x41000, 0x10, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xf, 0x6}, 0x10, r5, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x1, 0x5, 0x2, 0x6}], 0x10, 0xfffffffe, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket$igmp(0x2, 0x3, 0x2) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f0000000040), 0x4) 485.571823ms ago: executing program 5 (id=2265): mkdir(0x0, 0x0) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0xc040c10, &(0x7f0000000800)={0xa, 0x0, 0x4, @loopback, 0xfffff000}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1008020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x90a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1000000000000120}}], 0x1, 0x24044001) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1000000000000120}}], 0x1, 0x24044001) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3b000000010001", 0x7) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) close(r4) (async) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b707000000000000000000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d80000800034000000001"], 0xf0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 240.24946ms ago: executing program 7 (id=2266): socket(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) modify_ldt$write(0x1, &(0x7f0000000040)={0x402, 0x0, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 0s ago: executing program 5 (id=2267): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="5deade624bd3ea1b0cc52312d716c4ff1e1a47527563114174306c813220e5ccc649aef89e02b3f70d6ac88588e15ac433d3a3c519520a025d09933457195a2ac9c23d3640d4344a1a92a17d46f2c1bd31e849b8bcce6f298dcafa08c505a722a2d903c0e94852a7525fbd0492b68823d4f59c7f472e6385063a5813f17d0007fa1500a2fafe2a5994fa71cae1027782bc80bea97af9b25d4f56238eeccf86906c527d3f67cc99ff0035e03d61d37cdbbb84a2", @ANYBLOB="e611052897cb0eca8e09a99bf0bb7e6c14b7b659a7d1a19df206b0cb202aaa934c05d1b3a6e36b1c7535df3be10a", @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000814}, 0x20004000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r3, 0x11, 0x6, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xfe8e) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x34}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x46, r6}) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff850000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6c3f71dc50671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c80ffb1817ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffcce, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): p ID (0) [ 534.286363][ T9] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 534.733285][ T5820] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 535.477887][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 535.489474][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 535.804639][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 536.054191][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 536.110859][ T9] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 536.268222][ T5820] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 536.433966][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.714124][ T5820] usb 5-1: config 0 descriptor?? [ 536.717276][ T9] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 536.726914][ T9] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 536.745985][ T9] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 536.768132][ T9] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 536.930454][ T5820] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 536.942812][ T5820] hdpvr 5-1:0.0: device init failed [ 536.944995][ T9] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 536.954863][ T5820] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 537.762665][ T9] usb 8-1: USB disconnect, device number 2 [ 537.819710][ T5905] usb 5-1: USB disconnect, device number 25 [ 538.709587][T11570] netlink: 'syz.7.1444': attribute type 9 has an invalid length. [ 538.723065][T11570] netlink: 'syz.7.1444': attribute type 6 has an invalid length. [ 539.559742][ T9] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 539.631133][T11619] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1454'. [ 539.637561][ T5820] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 540.141266][ T5820] usb 2-1: device descriptor read/64, error -71 [ 540.570993][ T9] usb 4-1: config 0 has an invalid descriptor of length 171, skipping remainder of the config [ 540.593226][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 540.619340][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 540.619911][ T5820] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 540.635291][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.800105][ T5820] usb 2-1: device descriptor read/64, error -71 [ 540.828786][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 540.838345][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.981432][T11637] ALSA: mixer_oss: invalid OSS volume '' [ 540.987442][T11637] ALSA: mixer_oss: invalid OSS volume 'R ' [ 541.040336][ T9] usb 4-1: config 0 descriptor?? [ 541.125255][T11605] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 541.185467][ T9] hso 4-1:0.0: Can't find BULK IN endpoint [ 541.800127][T11636] binder: 11627:11636 ioctl c0306201 20000380 returned -14 [ 541.830905][ T5820] usb usb2-port1: attempt power cycle [ 541.929074][ T9] usb 4-1: USB disconnect, device number 27 [ 542.299571][ T5820] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 542.843721][ T5820] usb 2-1: device descriptor read/8, error -71 [ 543.187092][T11655] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 544.349369][ T5872] IPVS: starting estimator thread 0... [ 544.451611][T11659] IPVS: using max 23 ests per chain, 55200 per kthread [ 545.400878][ T5873] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 545.523074][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 545.672179][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 545.687932][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 545.753545][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 545.780047][ T9] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 545.788112][ T9] usb 8-1: config 0 has no interface number 0 [ 545.834381][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 545.864632][ T9] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 545.893646][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 545.919506][ T9] usb 8-1: New USB device found, idVendor=0664, idProduct=0309, bcdDevice=a4.e3 [ 545.928711][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.947101][ T9] usb 8-1: config 0 descriptor?? [ 545.965406][ T5873] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 545.999455][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.007788][ T5873] usb 5-1: Product: syz [ 546.025227][ T5873] usb 5-1: Manufacturer: syz [ 546.041620][ T5873] usb 5-1: SerialNumber: syz [ 546.155330][ T5873] usb 5-1: config 0 descriptor?? [ 546.206226][ T5873] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 546.217194][ T9] usb 8-1: USB disconnect, device number 3 [ 548.164129][ T5873] scsi host1: usb-storage 5-1:0.0 [ 548.180691][ T5873] usb 5-1: USB disconnect, device number 26 [ 548.842753][T11725] Process accounting resumed [ 549.714928][T11740] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1473'. [ 549.778232][T11718] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.348424][ T5873] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 550.495831][T11711] netlink: 'syz.1.1473': attribute type 2 has an invalid length. [ 550.659415][ T5873] usb 4-1: device descriptor read/64, error -71 [ 550.831672][T11752] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 551.845811][ T5873] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 552.529968][ T5873] usb 4-1: device descriptor read/64, error -71 [ 552.703342][T11781] Process accounting resumed [ 553.338006][ T5873] usb usb4-port1: attempt power cycle [ 554.024839][ T46] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 554.479476][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 554.490676][ T46] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.498928][ T46] usb 6-1: config 0 has no interface number 0 [ 554.509039][ T46] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.525735][ T46] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.535671][ T46] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 554.545327][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.557690][ T46] usb 6-1: config 0 descriptor?? [ 556.621716][ T46] usbhid 6-1:0.1: can't add hid device: -71 [ 556.629211][ T46] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 556.991434][ T46] usb 6-1: USB disconnect, device number 10 [ 557.469536][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 557.954779][T11849] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 558.220853][T11863] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.1503'. [ 558.252004][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.273196][T11871] Process accounting resumed [ 558.283482][T11867] batman_adv: batadv0: Adding interface: dummy0 [ 558.309606][T11867] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.406509][T11867] batman_adv: batadv0: Interface activated: dummy0 [ 558.462086][T11863] batadv0: mtu less than device minimum [ 558.472316][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 558.487375][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 558.503717][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 558.589307][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 558.635171][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 558.688113][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 558.734650][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 558.811291][T11863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.228089][T11880] 9pnet: Could not find request transport: fd0x0000000000000003 [ 559.256424][T11883] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1506'. [ 559.276363][T11883] netlink: 'syz.4.1506': attribute type 8 has an invalid length. [ 559.790989][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 561.156436][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 561.170160][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.183492][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 561.193649][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.209868][ T46] usb 5-1: Product: syz [ 561.219926][ T46] usb 5-1: Manufacturer: syz [ 561.234378][ T46] usb 5-1: SerialNumber: syz [ 561.250989][ T46] usb 5-1: config 0 descriptor?? [ 562.070695][ T5905] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 562.884165][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 563.527709][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.552471][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.973930][ T5873] usb 5-1: USB disconnect, device number 27 [ 564.269763][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.310011][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.339465][ T5905] usb 8-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 564.359618][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.669940][ T5905] usb 8-1: config 0 descriptor?? [ 566.106657][ T5905] usbhid 8-1:0.0: can't add hid device: -71 [ 566.112954][ T5905] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 566.208121][ T5905] usb 8-1: USB disconnect, device number 4 [ 566.730337][ T5905] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 566.774256][T11995] net_ratelimit: 11 callbacks suppressed [ 566.780186][T11995] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 567.288096][T11999] Invalid source name [ 567.292313][T11999] UBIFS error (pid: 11999): cannot open "/dev/sg0", error -22 [ 568.009457][ T5905] usb 8-1: Using ep0 maxpacket: 16 [ 568.023424][T12018] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1521'. [ 568.051283][ T5905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.081112][ T5905] usb 8-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 568.129675][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1531'. [ 568.139431][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1531'. [ 568.140991][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.156891][ T5905] usb 8-1: Product: syz [ 568.161310][ T5905] usb 8-1: Manufacturer: syz [ 568.166055][ T5905] usb 8-1: SerialNumber: syz [ 568.454615][ T5905] usb 8-1: config 0 descriptor?? [ 568.492488][ T5905] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 568.922822][T11974] syzkaller1: entered promiscuous mode [ 568.928337][T11974] syzkaller1: entered allmulticast mode [ 569.162813][ T5905] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 569.169878][ T5905] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 569.197422][ T5905] usb 8-1: USB disconnect, device number 5 [ 569.442847][T12046] overlayfs: conflicting lowerdir path [ 570.764265][T12057] Process accounting resumed [ 571.786532][T12079] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 571.844717][T12079] overlayfs: overlapping lowerdir path [ 572.073708][T12084] netlink: 236 bytes leftover after parsing attributes in process `syz.7.1547'. [ 572.627328][ T5905] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 572.817038][T12117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 572.990341][ T5905] usb 8-1: Using ep0 maxpacket: 16 [ 573.254001][ T5905] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 573.306024][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.372363][ T5905] usb 8-1: Product: syz [ 573.385685][ T5905] usb 8-1: Manufacturer: syz [ 573.601875][ T5905] usb 8-1: SerialNumber: syz [ 574.152425][ T5905] r8152-cfgselector 8-1: Unknown version 0x0000 [ 574.162321][ T5905] r8152-cfgselector 8-1: config 0 descriptor?? [ 574.283074][T12151] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 574.297503][T12151] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 574.691299][T12156] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 575.573559][ T5873] r8152-cfgselector 8-1: USB disconnect, device number 6 [ 576.477738][T12167] Process accounting resumed [ 578.247002][T12192] misc userio: No port type given on /dev/userio [ 578.397797][T12185] misc userio: Invalid payload size [ 578.423304][T12185] misc userio: Invalid payload size [ 578.934297][T12204] siw: device registration error -23 [ 580.271618][ T5820] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 580.951941][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 581.049394][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 581.058532][ T5820] usb 6-1: New USB device found, idVendor=0413, idProduct=6029, bcdDevice=b2.3d [ 581.094883][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.022706][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 582.031680][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 582.040726][ T9] usb 8-1: can't read configurations, error -61 [ 582.099115][ T5820] usb 6-1: Product: syz [ 582.103503][ T5820] usb 6-1: Manufacturer: syz [ 582.108119][ T5820] usb 6-1: SerialNumber: syz [ 582.294508][T12218] syz.3.1570: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 582.312879][T12218] CPU: 1 UID: 0 PID: 12218 Comm: syz.3.1570 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 582.323681][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 582.333761][T12218] Call Trace: [ 582.337048][T12218] [ 582.339998][T12218] dump_stack_lvl+0x241/0x360 [ 582.344696][T12218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.349449][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 582.349882][T12218] ? __pfx__printk+0x10/0x10 [ 582.361948][T12218] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 582.368384][T12218] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 582.374891][T12218] warn_alloc+0x278/0x410 [ 582.379223][T12218] ? __pfx_warn_alloc+0x10/0x10 [ 582.384103][T12218] ? vb2_vmalloc_alloc+0xf2/0x340 [ 582.389155][T12218] ? __get_vm_area_node+0x1c8/0x2d0 [ 582.394364][T12218] ? __get_vm_area_node+0x25c/0x2d0 [ 582.399600][T12218] __vmalloc_node_range_noprof+0x62f/0x1380 [ 582.405533][T12218] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 582.411866][T12218] ? __kasan_kmalloc+0x98/0xb0 [ 582.416631][T12218] vmalloc_user_noprof+0x74/0x80 [ 582.421567][T12218] ? vb2_vmalloc_alloc+0xf2/0x340 [ 582.426606][T12218] vb2_vmalloc_alloc+0xf2/0x340 [ 582.431485][T12218] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 582.436954][T12218] __vb2_queue_alloc+0xa0b/0x16f0 [ 582.442001][T12218] vb2_core_reqbufs+0xd2e/0x17c0 [ 582.446956][T12218] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 582.452330][T12218] ? __video_do_ioctl+0x4ea/0xdd0 [ 582.457369][T12218] v4l2_m2m_ioctl_reqbufs+0x14b/0x230 [ 582.462749][T12218] __video_do_ioctl+0xc23/0xdd0 [ 582.467613][T12218] ? __pfx___video_do_ioctl+0x10/0x10 [ 582.472984][T12218] ? smack_log+0x123/0x540 [ 582.477406][T12218] ? __might_fault+0xc6/0x120 [ 582.482086][T12218] video_usercopy+0x89b/0x1180 [ 582.486866][T12218] ? __pfx___video_do_ioctl+0x10/0x10 [ 582.492247][T12218] ? __pfx_video_usercopy+0x10/0x10 [ 582.497445][T12218] ? smack_file_ioctl+0x2f7/0x3a0 [ 582.502472][T12218] ? __fget_files+0x2a/0x410 [ 582.507150][T12218] ? __fget_files+0x2a/0x410 [ 582.511741][T12218] v4l2_ioctl+0x189/0x1e0 [ 582.516067][T12218] ? __pfx_v4l2_ioctl+0x10/0x10 [ 582.520918][T12218] __se_sys_ioctl+0xf5/0x170 [ 582.525508][T12218] do_syscall_64+0xf3/0x230 [ 582.530009][T12218] ? clear_bhb_loop+0x35/0x90 [ 582.534681][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.540572][T12218] RIP: 0033:0x7fb760d85d29 [ 582.544981][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.564846][T12218] RSP: 002b:00007fb761b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.573262][T12218] RAX: ffffffffffffffda RBX: 00007fb760f75fa0 RCX: 00007fb760d85d29 [ 582.581232][T12218] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000008 [ 582.589215][T12218] RBP: 00007fb760e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 582.597182][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.605150][T12218] R13: 0000000000000000 R14: 00007fb760f75fa0 R15: 00007ffe259aafd8 [ 582.613126][T12218] [ 582.622491][T12218] Mem-Info: [ 582.625785][T12218] active_anon:372 inactive_anon:9332 isolated_anon:0 [ 582.625785][T12218] active_file:17724 inactive_file:38466 isolated_file:0 [ 582.625785][T12218] unevictable:768 dirty:97 writeback:0 [ 582.625785][T12218] slab_reclaimable:7144 slab_unreclaimable:103656 [ 582.625785][T12218] mapped:32630 shmem:4334 pagetables:1160 [ 582.625785][T12218] sec_pagetables:0 bounce:0 [ 582.625785][T12218] kernel_misc_reclaimable:0 [ 582.625785][T12218] free:1289200 free_pcp:8857 free_cma:0 [ 582.686883][ T5820] usb 6-1: config 0 descriptor?? [ 582.709332][T12218] Node 0 active_anon:1488kB inactive_anon:37328kB active_file:70820kB inactive_file:153864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130520kB dirty:388kB writeback:0kB shmem:15800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11916kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no [ 582.755705][T12218] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 582.766589][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 582.810569][T12218] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 582.900469][T12218] lowmem_reserve[]: 0 2465 2466 0 0 [ 582.905903][T12218] Node 0 DMA32 free:1269104kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1484kB inactive_anon:25596kB active_file:70028kB inactive_file:153812kB unevictable:1536kB writepending:388kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:13120kB local_pcp:12152kB free_cma:0kB [ 582.914707][ T5820] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 582.945357][ T5820] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 582.976740][T12218] lowmem_reserve[]: 0 0 0 0 0 [ 583.125866][T12218] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.166476][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 583.176778][ T9] usb 8-1: can't read configurations, error -61 [ 583.301403][ T9] usb usb8-port1: attempt power cycle [ 583.383645][T12218] lowmem_reserve[]: 0 0 0 0 0 [ 583.981246][ T5820] usb 6-1: USB disconnect, device number 11 [ 583.988166][T12218] Node 1 Normal free:3908112kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.838512][T12218] lowmem_reserve[]: 0 0 0 0 0 [ 584.843995][T12218] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.858438][T12218] Node 0 DMA32: 14*4kB (ME) 267*8kB (UME) 213*16kB (UME) 294*32kB (UME) 57*64kB (UME) 31*128kB (UME) 21*256kB (UME) 10*512kB (UME) 9*1024kB (ME) 8*2048kB (UME) 293*4096kB (UM) = 1258848kB [ 584.878979][T12218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.891258][T12218] Node 1 Normal: 246*4kB (UM) 65*8kB (UME) 37*16kB (UME) 215*32kB (UME) 96*64kB (UME) 34*128kB (UME) 14*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3908112kB [ 584.911623][T12218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.921637][T12218] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.931576][T12218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.941665][T12218] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.951594][T12218] 60519 total pagecache pages [ 584.957177][T12218] 0 pages in swap cache [ 584.961790][T12218] Free swap = 124332kB [ 584.966305][T12218] Total swap = 124996kB [ 584.970946][T12218] 2097051 pages RAM [ 584.975121][T12218] 0 pages HighMem/MovableOnly [ 584.980236][T12218] 427005 pages reserved [ 584.984739][T12218] 0 pages cma reserved [ 585.490418][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 585.540259][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 585.549762][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 585.557577][ T9] usb 8-1: can't read configurations, error -61 [ 585.725737][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 586.234364][ T9] usb 8-1: device descriptor read/8, error -71 [ 586.451520][ T9] usb usb8-port1: unable to enumerate USB device [ 588.055319][T12277] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 588.080936][T12283] FAULT_INJECTION: forcing a failure. [ 588.080936][T12283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.186606][T12283] CPU: 1 UID: 0 PID: 12283 Comm: syz.1.1587 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 588.197422][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.207502][T12283] Call Trace: [ 588.210791][T12283] [ 588.213723][T12283] dump_stack_lvl+0x241/0x360 [ 588.218410][T12283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.223602][T12283] ? __pfx__printk+0x10/0x10 [ 588.228188][T12283] ? __pfx_lock_release+0x10/0x10 [ 588.233225][T12283] should_fail_ex+0x3b0/0x4e0 [ 588.237942][T12283] _copy_from_user+0x2f/0xc0 [ 588.242529][T12283] memdup_user+0x64/0xc0 [ 588.246764][T12283] strndup_user+0x68/0xc0 [ 588.251114][T12283] __se_sys_fsconfig+0x763/0xf60 [ 588.256077][T12283] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 588.261554][T12283] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.267550][T12283] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.273879][T12283] ? do_syscall_64+0x100/0x230 [ 588.278677][T12283] ? __x64_sys_fsconfig+0x20/0xc0 [ 588.283722][T12283] do_syscall_64+0xf3/0x230 [ 588.288239][T12283] ? clear_bhb_loop+0x35/0x90 [ 588.292921][T12283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.298824][T12283] RIP: 0033:0x7f80c3385d29 [ 588.303254][T12283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.322879][T12283] RSP: 002b:00007f80c40da038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 588.331305][T12283] RAX: ffffffffffffffda RBX: 00007f80c3575fa0 RCX: 00007f80c3385d29 [ 588.339298][T12283] RDX: 0000000020000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 588.347280][T12283] RBP: 00007f80c40da090 R08: 0000000000000000 R09: 0000000000000000 [ 588.355252][T12283] R10: 0000000020005fc0 R11: 0000000000000246 R12: 0000000000000001 [ 588.363227][T12283] R13: 0000000000000000 R14: 00007f80c3575fa0 R15: 00007ffdcb8878c8 [ 588.371207][T12283] [ 589.078616][T12294] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 589.932935][T12317] Process accounting resumed [ 590.549554][T12325] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 590.566557][T12325] infiniband ayz1: RDMA CMA: cma_listen_on_dev, error -98 [ 590.859541][T12319] sp0: Synchronizing with TNC [ 593.483729][T12356] tipc: Started in network mode [ 593.488645][T12356] tipc: Node identity , cluster identity 4711 [ 593.663166][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 593.719522][T12364] netem: invalid attributes len -9 [ 593.738146][T12364] netem: change failed [ 595.311165][ T8058] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 597.524296][T12406] Process accounting resumed [ 598.663632][T12415] netem: incorrect ge model size [ 598.739824][T12415] netem: change failed [ 598.742389][T12420] FAULT_INJECTION: forcing a failure. [ 598.742389][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 598.785079][T12420] CPU: 1 UID: 0 PID: 12420 Comm: syz.5.1621 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 598.795910][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.805998][T12420] Call Trace: [ 598.809299][T12420] [ 598.812250][T12420] dump_stack_lvl+0x241/0x360 [ 598.816963][T12420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.822192][T12420] ? __pfx__printk+0x10/0x10 [ 598.826825][T12420] should_fail_ex+0x3b0/0x4e0 [ 598.831537][T12420] should_failslab+0xac/0x100 [ 598.836246][T12420] ? skb_clone+0x20c/0x390 [ 598.840689][T12420] kmem_cache_alloc_noprof+0x70/0x380 [ 598.846089][T12420] skb_clone+0x20c/0x390 [ 598.850338][T12420] __netlink_deliver_tap+0x3cc/0x7f0 [ 598.855628][T12420] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.860823][T12420] netlink_deliver_tap+0x19d/0x1b0 [ 598.865927][T12420] netlink_unicast+0x7c4/0x990 [ 598.870697][T12420] ? __pfx_netlink_unicast+0x10/0x10 [ 598.875979][T12420] ? __virt_addr_valid+0x45f/0x530 [ 598.881088][T12420] ? __phys_addr_symbol+0x2f/0x70 [ 598.886108][T12420] ? __check_object_size+0x47a/0x730 [ 598.891397][T12420] netlink_sendmsg+0x8e4/0xcb0 [ 598.896164][T12420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.901451][T12420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.906731][T12420] __sock_sendmsg+0x221/0x270 [ 598.911409][T12420] ____sys_sendmsg+0x52a/0x7e0 [ 598.916174][T12420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.921452][T12420] ? __fget_files+0x2a/0x410 [ 598.926037][T12420] ? __fget_files+0x2a/0x410 [ 598.930625][T12420] __sys_sendmsg+0x269/0x350 [ 598.935208][T12420] ? __pfx_lock_release+0x10/0x10 [ 598.940230][T12420] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.945346][T12420] ? __pfx_vfs_write+0x10/0x10 [ 598.950126][T12420] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 598.956450][T12420] ? do_syscall_64+0x100/0x230 [ 598.961214][T12420] ? do_syscall_64+0xb6/0x230 [ 598.965891][T12420] do_syscall_64+0xf3/0x230 [ 598.970391][T12420] ? clear_bhb_loop+0x35/0x90 [ 598.975062][T12420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.980956][T12420] RIP: 0033:0x7f3520985d29 [ 598.985363][T12420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.004964][T12420] RSP: 002b:00007f35216f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.013379][T12420] RAX: ffffffffffffffda RBX: 00007f3520b75fa0 RCX: 00007f3520985d29 [ 599.021343][T12420] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 599.029314][T12420] RBP: 00007f35216f9090 R08: 0000000000000000 R09: 0000000000000000 [ 599.037281][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.045245][T12420] R13: 0000000000000000 R14: 00007f3520b75fa0 R15: 00007fff9e3bf348 [ 599.053224][T12420] [ 599.056335][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.990168][T12420] netlink: 'syz.5.1621': attribute type 46 has an invalid length. [ 601.902789][T12458] CIFS mount error: No usable UNC path provided in device string! [ 601.902789][T12458] [ 601.930723][T12458] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 606.959956][T12533] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 607.237965][ T5905] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 607.532720][T12535] syz.5.1648: attempt to access beyond end of device [ 607.532720][T12535] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 607.990732][T12549] ubi0: attaching mtd0 [ 607.995263][T12549] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 608.006957][T12549] x_tables: ip_tables: osf match: only valid for protocol 6 [ 608.107688][T12535] MINIX-fs: unable to read superblock [ 608.633286][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.695380][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.776665][ T5905] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 609.059451][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.107806][ T5905] usb 8-1: config 0 descriptor?? [ 610.117947][ T5905] usb 8-1: can't set config #0, error -71 [ 610.538593][ T5905] usb 8-1: USB disconnect, device number 11 [ 610.926367][T12553] syz.4.1649 (12553): drop_caches: 2 [ 610.932253][T12553] syz.4.1649 (12553): drop_caches: 2 [ 611.754775][T12594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.369740][ T5873] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 613.183658][ T5873] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 613.192381][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.204146][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 613.215327][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 613.226698][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.239710][ T5873] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.248777][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.414447][ T5873] usb 6-1: config 0 descriptor?? [ 613.422987][T12600] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 613.955079][ T5873] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 614.242862][ T5873] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 614.278266][ T5873] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 614.552326][T11990] usb 6-1: USB disconnect, device number 12 [ 614.718330][T12614] kexec: Could not allocate control_code_buffer [ 614.827313][T12625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.171206][T12627] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 615.759374][ T5870] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 615.808015][T12638] bond0: option use_carrier: invalid value (16) [ 615.814714][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 615.946671][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 615.957187][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 616.007685][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.245783][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.286251][ T5870] usb 6-1: can't read configurations, error -71 [ 616.480066][ T9] usb 4-1: New USB device found, idVendor=b5c7, idProduct=5746, bcdDevice=a6.21 [ 616.490414][ T9] usb 4-1: New USB device strings: Mfr=127, Product=212, SerialNumber=3 [ 616.498804][ T9] usb 4-1: Product: syz [ 616.507822][ T9] usb 4-1: Manufacturer: syz [ 616.513402][ T9] usb 4-1: SerialNumber: syz [ 616.529114][ T9] cdc_acm 4-1:1.0: skipping garbage [ 616.534961][ T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 616.548732][T12646] loop7: detected capacity change from 0 to 16384 [ 616.568413][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 616.647187][T12646] loop7: detected capacity change from 16384 to 16383 [ 617.519809][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.528426][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.538417][ T9] usb 4-1: USB disconnect, device number 31 [ 617.596795][T12646] blk_print_req_error: 40 callbacks suppressed [ 617.596817][T12646] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 617.672478][T12646] buffer_io_error: 40 callbacks suppressed [ 617.672497][T12646] Buffer I/O error on dev loop7, logical block 1, async page read [ 617.717374][T12650] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 1 [ 617.736491][T12646] Dev loop7: unable to read RDB block 8 [ 617.736609][T12650] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 617.750007][T12646] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 617.761384][T12646] Buffer I/O error on dev loop7, logical block 3, async page read [ 617.769456][T12646] loop7: unable to read partition table [ 618.351962][T12650] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 1 [ 618.399125][T12646] loop_reread_partitions: partition scan of loop7 (K‹80• #Ð …$qÝZ”©þ•IÛ/çýÎ[†u±@3cÏàôüÏû) failed (rc=-5) [ 618.426308][T12650] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 618.560538][T12650] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 618.576557][T12650] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 618.585137][T12650] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 618.596127][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.641771][T12650] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 618.874327][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.122722][T12650] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 619.342939][T12650] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 619.469405][T11990] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 619.562803][T12677] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.572216][T12677] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.581026][T12677] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.590485][T12677] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.980055][ T5870] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 620.001977][T12679] Process accounting resumed [ 620.144130][T11990] usb 8-1: Using ep0 maxpacket: 32 [ 620.662266][ T5870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.768570][ T5870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.975298][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.002711][T11990] usb 8-1: config 0 has an invalid interface number: 165 but max is 0 [ 621.011096][T11990] usb 8-1: config 0 has no interface number 0 [ 621.016593][ T5870] usb 2-1: Product: syz [ 621.019166][T11990] usb 8-1: New USB device found, idVendor=0bf6, idProduct=f6a6, bcdDevice=b8.34 [ 621.023385][ T5870] usb 2-1: Manufacturer: syz [ 621.035448][ T5870] usb 2-1: SerialNumber: syz [ 621.182272][T11990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.215177][T11990] usb 8-1: Product: syz [ 621.444336][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1686'. [ 621.703645][T11990] usb 8-1: Manufacturer: syz [ 621.708313][T11990] usb 8-1: SerialNumber: syz [ 621.736217][T11990] usb 8-1: config 0 descriptor?? [ 621.760642][T11990] usb 8-1: can't set config #0, error -71 [ 621.800163][T11990] usb 8-1: USB disconnect, device number 12 [ 622.792699][ T5870] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 622.844382][ T5870] cdc_ncm 2-1:1.0: setting tx_max = 32 [ 623.013632][ T5870] cdc_ncm 2-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 624.716354][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.736892][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.745017][T12735] ax25_connect(): syz.7.1692 uses autobind, please contact jreuter@yaina.de [ 624.971054][T12740] Process accounting resumed [ 625.098903][ T5869] usb 2-1: USB disconnect, device number 27 [ 625.105738][ T5869] cdc_ncm 2-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 625.206602][T12744] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1692'. [ 627.117858][T12765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.783070][T12775] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 627.826016][T12771] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 628.418618][T12773] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 628.550272][ T5897] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 630.321032][T12813] fuse: Bad value for 'group_id' [ 630.328388][T12813] fuse: Bad value for 'group_id' [ 630.369565][ T5820] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 630.538186][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 630.553156][ T5820] usb 4-1: config 8 has an invalid interface number: 145 but max is 0 [ 630.585298][ T5820] usb 4-1: config 8 has no interface number 0 [ 630.604834][ T5820] usb 4-1: config 8 interface 145 has no altsetting 0 [ 630.665832][ T5820] usb 4-1: string descriptor 0 read error: -22 [ 630.682051][ T5820] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=83.cc [ 630.695511][ T5820] usb 4-1: New USB device strings: Mfr=77, Product=78, SerialNumber=3 [ 630.789733][T12784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 630.804346][ T5820] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 631.566312][T12824] binder: 12823:12824 ioctl 400c620e 20000140 returned -22 [ 631.713902][T12807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 631.780366][T12834] FAULT_INJECTION: forcing a failure. [ 631.780366][T12834] name failslab, interval 1, probability 0, space 0, times 0 [ 631.806700][T12834] CPU: 1 UID: 0 PID: 12834 Comm: syz.1.1709 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 631.817518][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 631.827629][T12834] Call Trace: [ 631.830928][T12834] [ 631.833853][T12834] dump_stack_lvl+0x241/0x360 [ 631.838523][T12834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.843711][T12834] ? __pfx__printk+0x10/0x10 [ 631.848307][T12834] ? kmem_cache_alloc_noprof+0x48/0x380 [ 631.853867][T12834] ? __pfx___might_resched+0x10/0x10 [ 631.859174][T12834] should_fail_ex+0x3b0/0x4e0 [ 631.863850][T12834] should_failslab+0xac/0x100 [ 631.868539][T12834] ? fuse_get_req+0x469/0xc80 [ 631.873203][T12834] kmem_cache_alloc_noprof+0x70/0x380 [ 631.878583][T12834] fuse_get_req+0x469/0xc80 [ 631.883080][T12834] ? __pfx_fuse_get_req+0x10/0x10 [ 631.888097][T12834] __fuse_simple_request+0x13c/0x1850 [ 631.893461][T12834] ? __pfx___fuse_simple_request+0x10/0x10 [ 631.899261][T12834] ? dget_parent+0x26/0x4c0 [ 631.903765][T12834] ? __pfx_lock_release+0x10/0x10 [ 631.908772][T12834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 631.913966][T12834] ? dget_parent+0x26/0x4c0 [ 631.918452][T12834] ? __kmalloc_cache_noprof+0x243/0x390 [ 631.923983][T12834] fuse_dentry_revalidate+0x529/0xbc0 [ 631.929366][T12834] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 631.935264][T12834] ? do_raw_spin_lock+0x14f/0x370 [ 631.940304][T12834] lookup_one_qstr_excl+0x18c/0x260 [ 631.945492][T12834] do_renameat2+0x706/0x13f0 [ 631.950093][T12834] ? __pfx_do_renameat2+0x10/0x10 [ 631.955107][T12834] ? __virt_addr_valid+0x183/0x530 [ 631.960203][T12834] ? __virt_addr_valid+0x45f/0x530 [ 631.965299][T12834] ? __phys_addr_symbol+0x2f/0x70 [ 631.970309][T12834] ? strncpy_from_user+0x152/0x270 [ 631.975432][T12834] ? getname_flags+0x1e3/0x540 [ 631.980204][T12834] __x64_sys_rename+0x82/0x90 [ 631.984881][T12834] do_syscall_64+0xf3/0x230 [ 631.989388][T12834] ? clear_bhb_loop+0x35/0x90 [ 631.994073][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.999959][T12834] RIP: 0033:0x7f80c3385d29 [ 632.004376][T12834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.024063][T12834] RSP: 002b:00007f80c11d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 632.032478][T12834] RAX: ffffffffffffffda RBX: 00007f80c3576160 RCX: 00007f80c3385d29 [ 632.040438][T12834] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 [ 632.048415][T12834] RBP: 00007f80c11d5090 R08: 0000000000000000 R09: 0000000000000000 [ 632.056371][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.064329][T12834] R13: 0000000000000001 R14: 00007f80c3576160 R15: 00007ffdcb8878c8 [ 632.072302][T12834] [ 632.116218][T12807] overlay: Unknown parameter 'dont_measure' [ 632.346613][ T5870] usb 4-1: USB disconnect, device number 32 [ 635.630875][T12873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.759034][T12877] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 636.306573][T12886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1724'. [ 636.498722][T12894] overlayfs: missing 'lowerdir' [ 636.589705][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 639.525516][T12936] FAULT_INJECTION: forcing a failure. [ 639.525516][T12936] name failslab, interval 1, probability 0, space 0, times 0 [ 639.576771][T12936] CPU: 0 UID: 0 PID: 12936 Comm: syz.4.1734 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 639.587672][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 639.597810][T12936] Call Trace: [ 639.601090][T12936] [ 639.604007][T12936] dump_stack_lvl+0x241/0x360 [ 639.608706][T12936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.613939][T12936] ? __pfx__printk+0x10/0x10 [ 639.618563][T12936] ? bpf_trace_run2+0x1fc/0x540 [ 639.623439][T12936] ? bpf_trace_run2+0x36e/0x540 [ 639.628283][T12936] should_fail_ex+0x3b0/0x4e0 [ 639.632948][T12936] should_failslab+0xac/0x100 [ 639.637616][T12936] kmem_cache_alloc_node_noprof+0x77/0x380 [ 639.643411][T12936] ? __alloc_skb+0x1c3/0x440 [ 639.647994][T12936] ? rcu_is_watching+0x15/0xb0 [ 639.652747][T12936] __alloc_skb+0x1c3/0x440 [ 639.657146][T12936] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 639.663112][T12936] ? __pfx___alloc_skb+0x10/0x10 [ 639.668031][T12936] ? hci_sock_sendmsg+0x617/0x11c0 [ 639.673155][T12936] ? __pfx___mutex_lock+0x10/0x10 [ 639.678210][T12936] hci_mgmt_cmd+0x1c1/0x11d0 [ 639.682844][T12936] hci_sock_sendmsg+0x7b8/0x11c0 [ 639.687813][T12936] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 639.694607][T12936] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 639.700010][T12936] ? get_pid_task+0x23/0x1f0 [ 639.704644][T12936] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 639.710052][T12936] __sock_sendmsg+0x221/0x270 [ 639.714853][T12936] sock_write_iter+0x2d7/0x3f0 [ 639.719653][T12936] ? __pfx_sock_write_iter+0x10/0x10 [ 639.724985][T12936] ? bpf_lsm_file_permission+0x9/0x10 [ 639.730385][T12936] ? security_file_permission+0x74/0x280 [ 639.736056][T12936] vfs_write+0xaeb/0xd30 [ 639.740328][T12936] ? __pfx_sock_write_iter+0x10/0x10 [ 639.745643][T12936] ? __pfx_vfs_write+0x10/0x10 [ 639.750449][T12936] ? __fget_files+0x2a/0x410 [ 639.755077][T12936] ? __fget_files+0x2a/0x410 [ 639.759705][T12936] ksys_write+0x18f/0x2b0 [ 639.764064][T12936] ? __pfx_ksys_write+0x10/0x10 [ 639.768942][T12936] ? do_syscall_64+0x100/0x230 [ 639.773741][T12936] ? do_syscall_64+0xb6/0x230 [ 639.778455][T12936] do_syscall_64+0xf3/0x230 [ 639.782991][T12936] ? clear_bhb_loop+0x35/0x90 [ 639.787698][T12936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.793622][T12936] RIP: 0033:0x7fcf8e585d29 [ 639.798068][T12936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.817703][T12936] RSP: 002b:00007fcf8f3f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 639.826160][T12936] RAX: ffffffffffffffda RBX: 00007fcf8e775fa0 RCX: 00007fcf8e585d29 [ 639.834163][T12936] RDX: 0000000000000008 RSI: 00000000200005c0 RDI: 0000000000000006 [ 639.842165][T12936] RBP: 00007fcf8f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 639.850168][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.858178][T12936] R13: 0000000000000000 R14: 00007fcf8e775fa0 R15: 00007ffc85353b08 [ 639.866196][T12936] [ 640.001069][T12932] netlink: 'syz.7.1731': attribute type 3 has an invalid length. [ 643.110244][T11990] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 644.354115][T11990] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 644.363377][T11990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.371683][T11990] usb 2-1: Product: syz [ 644.376018][T11990] usb 2-1: Manufacturer: syz [ 644.380809][T11990] usb 2-1: SerialNumber: syz [ 644.416931][T11990] usb 2-1: config 0 descriptor?? [ 644.664113][T11990] usb 2-1: interface 1 not found [ 644.761509][T11990] usb 2-1: USB disconnect, device number 28 [ 645.276730][ T5869] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 645.492361][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 645.505605][ T5869] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 645.515201][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.558799][ T5869] usb 6-1: config 0 has no interface number 0 [ 645.576790][ T5869] usb 6-1: too many endpoints for config 0 interface 151 altsetting 95: 106, using maximum allowed: 30 [ 645.652685][ T5869] usb 6-1: config 0 interface 151 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 645.703191][ T5869] usb 6-1: config 0 interface 151 has no altsetting 0 [ 645.734325][ T5869] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 645.747896][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.774559][ T5869] usb 6-1: Product: syz [ 645.778950][ T5869] usb 6-1: Manufacturer: syz [ 645.786425][ T5869] usb 6-1: SerialNumber: syz [ 645.826848][ T5869] usb 6-1: config 0 descriptor?? [ 646.067565][ T5869] gspca_main: etoms-2.14.0 probing 102c:6151 [ 646.161739][T13052] pimreg: entered allmulticast mode [ 646.244868][ T5869] usb 6-1: USB disconnect, device number 15 [ 646.446986][T13061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.737183][T13066] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 647.335345][T13087] FAULT_INJECTION: forcing a failure. [ 647.335345][T13087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.353681][T13087] CPU: 1 UID: 0 PID: 13087 Comm: syz.5.1766 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 647.366586][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.366623][T13087] Call Trace: [ 647.379977][T13087] [ 647.382935][T13087] dump_stack_lvl+0x241/0x360 [ 647.387644][T13087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.392882][T13087] ? __pfx__printk+0x10/0x10 [ 647.397497][T13087] ? snprintf+0xda/0x120 [ 647.401762][T13087] should_fail_ex+0x3b0/0x4e0 [ 647.406454][T13087] _copy_to_user+0x31/0xb0 [ 647.410887][T13087] simple_read_from_buffer+0xca/0x150 [ 647.416267][T13087] proc_fail_nth_read+0x1e9/0x250 [ 647.421299][T13087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.426847][T13087] ? rw_verify_area+0x55e/0x6f0 [ 647.431692][T13087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.437233][T13087] vfs_read+0x1fc/0xb70 [ 647.441391][T13087] ? __pfx___mutex_lock+0x10/0x10 [ 647.446431][T13087] ? __pfx_vfs_read+0x10/0x10 [ 647.451119][T13087] ? __fget_files+0x2a/0x410 [ 647.455717][T13087] ? __fget_files+0x395/0x410 [ 647.460396][T13087] ? __fget_files+0x2a/0x410 [ 647.465167][T13087] ksys_read+0x18f/0x2b0 [ 647.469419][T13087] ? __pfx_ksys_read+0x10/0x10 [ 647.474186][T13087] ? do_syscall_64+0x100/0x230 [ 647.478950][T13087] ? do_syscall_64+0xb6/0x230 [ 647.483627][T13087] do_syscall_64+0xf3/0x230 [ 647.488129][T13087] ? clear_bhb_loop+0x35/0x90 [ 647.492805][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.498696][T13087] RIP: 0033:0x7f352098473c [ 647.503110][T13087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 647.522722][T13087] RSP: 002b:00007f35216f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.531133][T13087] RAX: ffffffffffffffda RBX: 00007f3520b75fa0 RCX: 00007f352098473c [ 647.539110][T13087] RDX: 000000000000000f RSI: 00007f35216f90a0 RDI: 0000000000000004 [ 647.547080][T13087] RBP: 00007f35216f9090 R08: 0000000000000000 R09: 0000000000000000 [ 647.555054][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.563015][T13087] R13: 0000000000000000 R14: 00007f3520b75fa0 R15: 00007fff9e3bf348 [ 647.570994][T13087] [ 647.793441][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1772'. [ 649.109848][ T5869] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 649.357685][ T5869] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 650.299393][ T5870] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 650.339522][ T5869] usb 6-1: can't read configurations, error -22 [ 650.751625][ T5870] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 650.765183][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.776586][ T5870] usb 2-1: config 0 descriptor?? [ 650.802949][ T5870] cp210x 2-1:0.0: cp210x converter detected [ 650.909457][ T5869] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 651.083320][ T5869] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 651.104965][ T5869] usb 6-1: can't read configurations, error -22 [ 651.117720][ T5869] usb usb6-port1: attempt power cycle [ 651.668107][ T5870] usb 2-1: cp210x converter now attached to ttyUSB0 [ 652.077304][ T5869] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 652.193868][ T5869] usb 6-1: device descriptor read/8, error -71 [ 652.905621][T13145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1785'. [ 653.167048][ T5870] usb 2-1: USB disconnect, device number 29 [ 653.843422][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 653.851681][ T5870] cp210x 2-1:0.0: device disconnected [ 656.029335][ T29] audit: type=1326 audit(1736404686.446:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13160 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 656.070016][T13163] tipc: Enabling of bearer rejected, failed to enable media [ 656.139337][ T29] audit: type=1326 audit(1736404686.446:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13160 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 656.409374][ T29] audit: type=1326 audit(1736404686.446:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13160 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 657.039658][ T29] audit: type=1326 audit(1736404686.446:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13160 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 657.108601][T13170] syz_tun: entered promiscuous mode [ 657.146951][T13170] veth0_to_bond: entered promiscuous mode [ 657.160015][ T29] audit: type=1326 audit(1736404686.446:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13160 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 657.186455][ T29] audit: type=1326 audit(1736404686.456:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13160 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 657.216972][T13166] veth0_to_bond: left promiscuous mode [ 657.224846][T13166] syz_tun: left promiscuous mode [ 657.236600][ T29] audit: type=1326 audit(1736404686.456:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13160 comm="syz.1.1789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x0 [ 657.428201][T13183] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 658.448456][T13187] fuse: Unknown parameter 'fHHd' [ 658.522569][T13188] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1793'. [ 659.171362][T13199] Process accounting resumed [ 659.869673][ T5870] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 660.034827][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 660.089665][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 660.117611][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 660.142160][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 660.154377][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.172853][T13212] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 660.182271][T13212] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 660.195614][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.413871][ T5870] usb 4-1: USB disconnect, device number 33 [ 661.192367][ T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.659955][ T5870] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 663.810253][ T5870] usb 6-1: too many configurations: 18, using maximum allowed: 8 [ 663.850969][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 663.869369][ T5870] usb 6-1: can't read configurations, error -61 [ 664.033058][ T5870] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 664.379944][ T5870] usb 6-1: too many configurations: 18, using maximum allowed: 8 [ 664.422679][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 664.461566][ T5870] usb 6-1: can't read configurations, error -61 [ 664.516785][ T5870] usb usb6-port1: attempt power cycle [ 665.629460][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 666.289425][ T5870] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 666.323622][ T5870] usb 6-1: too many configurations: 18, using maximum allowed: 8 [ 666.333654][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 666.350530][ T5870] usb 6-1: can't read configurations, error -61 [ 666.365194][T13239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.373847][T13239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.497504][T13270] Process accounting resumed [ 666.499634][ T5870] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 666.531132][ T5870] usb 6-1: too many configurations: 18, using maximum allowed: 8 [ 666.544716][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 666.568264][ T5870] usb 6-1: can't read configurations, error -61 [ 666.584763][ T5870] usb usb6-port1: unable to enumerate USB device [ 667.247160][ T29] audit: type=1400 audit(1736404697.786:107): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13272 comm="syz.4.1812" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0 [ 667.296166][ T29] audit: type=1400 audit(1736404697.786:108): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13272 comm="syz.4.1812" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0 [ 669.288956][T13280] ieee802154 phy0 wpan0: encryption failed: -22 [ 670.172817][T13292] Process accounting resumed [ 671.810495][T13302] fuse: Bad value for 'fd' [ 673.653767][ T11] Bluetooth: hci3: Frame reassembly failed (-84) [ 673.688932][T13330] Process accounting resumed [ 673.880257][T13332] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 673.921414][T13332] FAULT_INJECTION: forcing a failure. [ 673.921414][T13332] name failslab, interval 1, probability 0, space 0, times 0 [ 673.964807][T13332] CPU: 0 UID: 0 PID: 13332 Comm: syz.7.1828 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 673.975630][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 673.985709][T13332] Call Trace: [ 673.989003][T13332] [ 673.991946][T13332] dump_stack_lvl+0x241/0x360 [ 673.996654][T13332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.001877][T13332] ? __pfx__printk+0x10/0x10 [ 674.006486][T13332] ? fs_reclaim_acquire+0x93/0x130 [ 674.011618][T13332] ? __pfx___might_resched+0x10/0x10 [ 674.016966][T13332] should_fail_ex+0x3b0/0x4e0 [ 674.021676][T13332] should_failslab+0xac/0x100 [ 674.026385][T13332] __kmalloc_noprof+0xdd/0x4c0 [ 674.031163][T13332] ? kstrtouint_from_user+0x128/0x190 [ 674.036533][T13332] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 674.042253][T13332] tomoyo_realpath_from_path+0xcf/0x5e0 [ 674.047808][T13332] tomoyo_path_number_perm+0x236/0x860 [ 674.053260][T13332] ? __lock_acquire+0x1397/0x2100 [ 674.058281][T13332] ? tomoyo_path_number_perm+0x206/0x860 [ 674.063909][T13332] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 674.069924][T13332] ? __fget_files+0x2a/0x410 [ 674.074521][T13332] ? __fget_files+0x2a/0x410 [ 674.079124][T13332] security_file_ioctl+0xc6/0x2a0 [ 674.084145][T13332] __se_sys_ioctl+0x46/0x170 [ 674.088773][T13332] do_syscall_64+0xf3/0x230 [ 674.093274][T13332] ? clear_bhb_loop+0x35/0x90 [ 674.097952][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.103844][T13332] RIP: 0033:0x7f1654585d29 [ 674.108252][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.127864][T13332] RSP: 002b:00007f1655428038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.136282][T13332] RAX: ffffffffffffffda RBX: 00007f1654775fa0 RCX: 00007f1654585d29 [ 674.144258][T13332] RDX: 0000000020000040 RSI: 000000004048aec9 RDI: 0000000000000006 [ 674.152234][T13332] RBP: 00007f1655428090 R08: 0000000000000000 R09: 0000000000000000 [ 674.160199][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.168167][T13332] R13: 0000000000000000 R14: 00007f1654775fa0 R15: 00007fff0e654268 [ 674.176174][T13332] [ 674.223964][T13332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 674.459578][ T5869] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 675.360899][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 675.367938][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 143, changing to 11 [ 675.379951][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 8708, setting to 1024 [ 675.466803][ T5869] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 675.632899][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.657853][ T5869] usb 6-1: Product: syz [ 675.669892][ T5828] Bluetooth: hci3: command 0x1003 tx timeout [ 675.676619][ T5823] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 675.686424][ T5869] usb 6-1: Manufacturer: syz [ 675.691173][ T5869] usb 6-1: SerialNumber: syz [ 675.751589][ T5869] usb 6-1: config 0 descriptor?? [ 675.759528][ T5869] hub 6-1:0.0: bad descriptor, ignoring hub [ 675.766313][ T5869] hub 6-1:0.0: probe with driver hub failed with error -5 [ 675.777223][ T5869] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 675.790692][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.296343][ T5869] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 676.478455][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.486094][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.493689][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.501201][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.508656][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.516191][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.523760][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.531260][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.538680][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.546205][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.553892][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.561409][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.568843][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.576414][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.617913][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.625500][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.633148][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.641150][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.648786][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.656545][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.664208][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.671785][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.679308][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.686730][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.694265][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.695688][ T5869] usb 4-1: config 0 has no interfaces? [ 676.701783][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.701817][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.701842][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.701868][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.701894][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.709323][ T5869] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 676.715021][ T5870] hid-generic 0009:0000:0000.000C: unknown main item tag 0x0 [ 676.794216][ T5870] hid-generic 0009:0000:0000.000C: hidraw0: HID v0.01 Device [syz1] on syz0 [ 676.799006][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.920445][T13363] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1837'. [ 676.938733][T13363] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1837'. [ 677.029703][T13366] Process accounting resumed [ 677.659887][ T5869] usb 4-1: config 0 descriptor?? [ 678.169786][ T5873] usb 4-1: USB disconnect, device number 34 [ 679.405330][T13387] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.833423][T13380] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 681.421146][T13408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.629643][T13410] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1849'. [ 681.686341][T13415] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1849'. [ 681.707312][T13411] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 683.031076][T13422] IPv6: NLM_F_REPLACE set, but no existing node found! [ 683.038301][T13422] IPv6: NLM_F_REPLACE set, but no existing node found! [ 686.257733][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.264495][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.348597][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.368789][T13461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1864'. [ 687.397551][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.410293][T13461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1864'. [ 687.514936][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1866'. [ 687.524153][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1866'. [ 687.573196][T10551] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 687.590994][T10551] usb 6-1: device reset changed ep0 maxpacket size! [ 687.636280][ T9] usb 6-1: USB disconnect, device number 24 [ 687.668113][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.704801][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.766437][ T5870] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 687.828538][T13472] (syz.1.1867,13472,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 687.839356][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 687.896783][T13472] (syz.1.1867,13472,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 687.931393][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.943725][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.964568][ T5870] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 687.982734][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.991233][ T9] usb 6-1: device descriptor read/64, error -71 [ 688.013050][ T5870] usb 5-1: config 0 descriptor?? [ 688.106807][T13481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.225299][T13482] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 688.244889][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 688.308067][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.332381][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.786514][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 688.795030][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 688.820997][ T5870] usb 5-1: USB disconnect, device number 28 [ 689.984924][T13471] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 690.831284][ T5872] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 691.868867][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1879'. [ 691.890289][T13515] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.899445][T13515] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.908185][T13515] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.917096][T13515] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.929121][T13515] vxlan0: entered promiscuous mode [ 693.608401][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 693.616123][ T5872] usb 5-1: can't read configurations, error -71 [ 693.686121][T13527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.819699][T13530] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 694.473841][ T8058] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 695.569090][T13548] usb usb9: usbfs: process 13548 (syz.5.1881) did not claim interface 0 before use [ 695.714248][T13548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.746489][T13548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.468389][T13576] xfrm0: entered allmulticast mode [ 697.508918][T13580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.618296][T13581] fuse: Bad value for 'user_id' [ 697.771242][T13581] fuse: Bad value for 'user_id' [ 697.773531][T13583] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 698.215520][T13589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.310378][ T5869] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 698.442055][T13590] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 698.469650][ T5869] usb 6-1: device descriptor read/64, error -71 [ 698.730708][ T5869] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 698.846435][T13592] sp0: Synchronizing with TNC [ 698.920092][ T5869] usb 6-1: device descriptor read/64, error -71 [ 699.029912][ T5869] usb usb6-port1: attempt power cycle [ 699.909466][ T5869] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 699.957820][ T5869] usb 6-1: device descriptor read/8, error -71 [ 700.219466][T13610] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 701.122426][T13624] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1909'. [ 701.493042][T13637] netlink: 'syz.3.1913': attribute type 10 has an invalid length. [ 701.501255][T13637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1913'. [ 702.087299][T13630] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 702.172712][T13649] binder: Unknown parameter 'obj_user' [ 702.230389][T13637] team0: Port device geneve0 added [ 702.330004][T13657] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 702.688957][T13663] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1919'. [ 702.727267][T13663] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1919'. [ 703.672232][T13675] FAULT_INJECTION: forcing a failure. [ 703.672232][T13675] name failslab, interval 1, probability 0, space 0, times 0 [ 703.686171][T13675] CPU: 1 UID: 0 PID: 13675 Comm: syz.5.1923 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 703.696975][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 703.707053][T13675] Call Trace: [ 703.710342][T13675] [ 703.713272][T13675] dump_stack_lvl+0x241/0x360 [ 703.717954][T13675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.723156][T13675] ? __pfx__printk+0x10/0x10 [ 703.727745][T13675] ? __kmalloc_noprof+0xb5/0x4c0 [ 703.732676][T13675] ? __pfx___might_resched+0x10/0x10 [ 703.737960][T13675] should_fail_ex+0x3b0/0x4e0 [ 703.742631][T13675] should_failslab+0xac/0x100 [ 703.747307][T13675] __kmalloc_noprof+0xdd/0x4c0 [ 703.752064][T13675] ? security_prepare_creds+0x26/0x360 [ 703.757521][T13675] ? security_prepare_creds+0x53/0x360 [ 703.762980][T13675] security_prepare_creds+0x53/0x360 [ 703.768266][T13675] prepare_creds+0x467/0x640 [ 703.772872][T13675] lookup_user_key+0x248/0x1500 [ 703.777722][T13675] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 703.783694][T13675] ? __pfx_lookup_user_key+0x10/0x10 [ 703.788976][T13675] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 703.795131][T13675] ? memdup_user+0x71/0xc0 [ 703.799538][T13675] ? __se_sys_request_key+0x1c9/0x3b0 [ 703.804904][T13675] __se_sys_request_key+0x1fe/0x3b0 [ 703.810097][T13675] ? __pfx___se_sys_request_key+0x10/0x10 [ 703.815816][T13675] ? do_syscall_64+0x100/0x230 [ 703.820583][T13675] ? do_syscall_64+0xb6/0x230 [ 703.825267][T13675] do_syscall_64+0xf3/0x230 [ 703.829769][T13675] ? clear_bhb_loop+0x35/0x90 [ 703.834440][T13675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.840329][T13675] RIP: 0033:0x7f3520985d29 [ 703.844736][T13675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.864420][T13675] RSP: 002b:00007f35216f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 703.872828][T13675] RAX: ffffffffffffffda RBX: 00007f3520b75fa0 RCX: 00007f3520985d29 [ 703.880890][T13675] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000080 [ 703.888851][T13675] RBP: 00007f35216f9090 R08: 0000000000000000 R09: 0000000000000000 [ 703.896811][T13675] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 703.904774][T13675] R13: 0000000000000000 R14: 00007f3520b75fa0 R15: 00007fff9e3bf348 [ 703.912747][T13675] [ 704.611081][T13680] binder: 13679:13680 ioctl c0306201 0 returned -14 [ 704.773432][T13690] Process accounting resumed [ 704.845709][ T5870] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 705.389667][ T5870] usb 8-1: Using ep0 maxpacket: 32 [ 705.427258][ T5870] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.497161][ T5870] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.568249][ T5870] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.658195][ T5870] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=3 [ 705.709836][ T5870] usb 8-1: Manufacturer: syz [ 705.714456][ T5870] usb 8-1: SerialNumber: syz [ 705.970459][ T5870] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 706.026663][ T5870] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 706.069459][ T5870] usb 8-1: USB disconnect, device number 13 [ 706.274466][T10862] udevd[10862]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.881860][T13783] FAULT_INJECTION: forcing a failure. [ 712.881860][T13783] name failslab, interval 1, probability 0, space 0, times 0 [ 712.894641][T13783] CPU: 1 UID: 0 PID: 13783 Comm: syz.3.1955 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 712.905428][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 712.915510][T13783] Call Trace: [ 712.918805][T13783] [ 712.921745][T13783] dump_stack_lvl+0x241/0x360 [ 712.926427][T13783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.931627][T13783] ? __pfx__printk+0x10/0x10 [ 712.936219][T13783] ? kmem_cache_alloc_noprof+0x48/0x380 [ 712.941763][T13783] ? __pfx___might_resched+0x10/0x10 [ 712.947046][T13783] should_fail_ex+0x3b0/0x4e0 [ 712.951724][T13783] should_failslab+0xac/0x100 [ 712.956399][T13783] ? getname_flags+0xb7/0x540 [ 712.961068][T13783] kmem_cache_alloc_noprof+0x70/0x380 [ 712.966443][T13783] getname_flags+0xb7/0x540 [ 712.970934][T13783] ? _copy_from_user+0x99/0xc0 [ 712.975697][T13783] user_path_at+0x24/0x60 [ 712.980024][T13783] __se_sys_mount+0x297/0x3c0 [ 712.984690][T13783] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 712.990665][T13783] ? __pfx___se_sys_mount+0x10/0x10 [ 712.995859][T13783] ? do_syscall_64+0x100/0x230 [ 713.000622][T13783] ? __x64_sys_mount+0x20/0xc0 [ 713.005378][T13783] do_syscall_64+0xf3/0x230 [ 713.009882][T13783] ? clear_bhb_loop+0x35/0x90 [ 713.014563][T13783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.020460][T13783] RIP: 0033:0x7fb760d85d29 [ 713.024869][T13783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.044517][T13783] RSP: 002b:00007fb761b66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 713.052932][T13783] RAX: ffffffffffffffda RBX: 00007fb760f75fa0 RCX: 00007fb760d85d29 [ 713.060896][T13783] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000000 [ 713.068861][T13783] RBP: 00007fb761b66090 R08: 0000000000000000 R09: 0000000000000000 [ 713.076828][T13783] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001 [ 713.084795][T13783] R13: 0000000000000000 R14: 00007fb760f75fa0 R15: 00007ffe259aafd8 [ 713.092769][T13783] [ 714.179650][ T5820] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 714.273853][T13818] binder: 13808:13818 ioctl c0306201 20000580 returned -14 [ 714.364326][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 714.519408][ T5820] usb 6-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 714.528539][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.536793][ T5820] usb 6-1: Product: syz [ 714.541046][ T5820] usb 6-1: Manufacturer: syz [ 714.545665][ T5820] usb 6-1: SerialNumber: syz [ 714.570247][ T5820] usb 6-1: config 0 descriptor?? [ 714.581798][ T5820] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 716.390726][T11990] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 716.895984][T13846] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 716.903730][T13846] overlayfs: failed to set xattr on upper [ 716.909660][T13846] overlayfs: ...falling back to redirect_dir=nofollow. [ 716.916578][T13846] overlayfs: ...falling back to index=off. [ 716.922525][T13846] overlayfs: ...falling back to uuid=null. [ 717.540849][T11990] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 717.572429][ T5820] input: sonixj as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 717.584255][T11990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 717.679477][T11990] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 717.688627][T11990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.720491][T11990] usb 2-1: config 0 descriptor?? [ 717.729999][T11990] usb 2-1: can't set config #0, error -71 [ 717.750089][T11990] usb 2-1: USB disconnect, device number 30 [ 717.946842][ T29] audit: type=1326 audit(1736404748.486:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 718.022720][ T29] audit: type=1326 audit(1736404748.516:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 718.079158][ T29] audit: type=1326 audit(1736404748.516:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 718.123981][ T29] audit: type=1326 audit(1736404748.516:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 718.288736][ T29] audit: type=1326 audit(1736404748.516:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb760d85d63 code=0x7ffc0000 [ 718.450916][ T29] audit: type=1326 audit(1736404748.516:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb760d85d63 code=0x7ffc0000 [ 718.454725][ T9] usb 6-1: USB disconnect, device number 31 [ 718.473932][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.707086][ T29] audit: type=1326 audit(1736404748.516:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 718.729836][ T29] audit: type=1326 audit(1736404748.526:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 718.748282][T13862] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1979'. [ 718.751762][ T29] audit: type=1326 audit(1736404748.526:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 718.782638][ T29] audit: type=1326 audit(1736404748.526:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13853 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 720.482161][T13878] geneve0: entered allmulticast mode [ 721.392338][T13888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.631522][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 721.782730][T13889] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 721.925525][T13895] syz_tun: entered promiscuous mode [ 721.989225][ T5823] Bluetooth: hci1: unexpected event for opcode 0x080b [ 722.019932][T13895] syz_tun: left promiscuous mode [ 722.109144][T13904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1992'. [ 722.579976][T11990] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 722.903656][T11990] usb 2-1: Using ep0 maxpacket: 8 [ 723.142983][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 723.143002][ T29] audit: type=1326 audit(1736404753.496:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 723.150115][T11990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.172348][ T29] audit: type=1326 audit(1736404753.496:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 723.212380][ T29] audit: type=1326 audit(1736404753.496:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 723.212738][T11990] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 723.244015][ T29] audit: type=1326 audit(1736404753.496:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 724.232091][ T29] audit: type=1326 audit(1736404753.496:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 724.269149][T11990] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.518632][T11990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 724.527014][T11990] usb 2-1: SerialNumber: syz [ 724.533275][ T29] audit: type=1326 audit(1736404753.496:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 724.555308][ T29] audit: type=1326 audit(1736404753.496:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 724.577061][ T29] audit: type=1326 audit(1736404753.496:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 724.703490][ T29] audit: type=1326 audit(1736404753.496:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 724.725743][ T29] audit: type=1326 audit(1736404753.496:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb760d85d29 code=0x7ffc0000 [ 724.789325][T11990] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 724.919722][ T5905] usb 2-1: USB disconnect, device number 31 [ 725.012279][ T5820] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 725.959331][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 725.968069][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.980425][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.049668][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 726.107745][ T5820] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 726.116301][ T5820] usb 6-1: can't read configurations, error -71 [ 726.459482][ T5820] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 726.469975][ T1107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 726.643436][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 726.672396][ T5820] usb 6-1: not running at top speed; connect to a high speed hub [ 726.711513][ T5820] usb 6-1: config 8 has an invalid interface number: 24 but max is 0 [ 726.735198][ T5820] usb 6-1: config 8 has no interface number 0 [ 726.760874][ T5820] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 726.792108][ T5820] usb 6-1: config 8 interface 24 has no altsetting 0 [ 726.818921][ T5820] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 726.840744][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.848787][ T5820] usb 6-1: Product: syz [ 726.874409][ T5820] usb 6-1: Manufacturer: syz [ 726.879061][ T5820] usb 6-1: SerialNumber: syz [ 726.913538][T13941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 727.139968][T13941] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 727.146849][T13941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 727.178520][T13941] vhci_hcd vhci_hcd.0: Device attached [ 727.186443][T13953] vhci_hcd: connection closed [ 727.197023][ T6457] vhci_hcd: stop threads [ 727.224023][ T6457] vhci_hcd: release socket [ 727.242113][ T6457] vhci_hcd: disconnect device [ 727.272669][ T5820] vmk80xx 6-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 727.301211][ T5820] usb 6-1: USB disconnect, device number 33 [ 727.582338][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 727.595488][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 727.605176][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 727.614511][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 727.623800][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 727.631546][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 728.089542][ T9] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 728.269199][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.281780][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 728.573999][T13960] chnl_net:caif_netlink_parms(): no params data found [ 728.587890][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 728.599541][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.609512][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 728.622974][ T9] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 728.632225][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.649870][ T9] usb 6-1: config 0 descriptor?? [ 729.040282][T13960] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.047623][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.067931][T13960] bridge_slave_0: entered allmulticast mode [ 729.088079][T13960] bridge_slave_0: entered promiscuous mode [ 729.113857][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.123904][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.134892][T13960] bridge_slave_1: entered allmulticast mode [ 729.156816][T13960] bridge_slave_1: entered promiscuous mode [ 729.170724][ T9] hid-u2fzero 0003:20A0:4287.000D: hidraw0: USB HID vff.fd Device [HID 20a0:4287] on usb-dummy_hcd.5-1/input0 [ 729.199958][ T9] hid-u2fzero 0003:20A0:4287.000D: NitroKey U2F LED initialised [ 729.210378][ T9] hid-u2fzero 0003:20A0:4287.000D: NitroKey U2F RNG initialised [ 729.238209][T13960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.296498][T13995] overlayfs: failed to clone upperpath [ 729.297790][T13960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.333937][T14000] netlink: 656 bytes leftover after parsing attributes in process `syz.1.2022'. [ 729.359728][T14000] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 729.388451][T13960] team0: Port device team_slave_0 added [ 729.411027][T13960] team0: Port device team_slave_1 added [ 729.421533][T11990] usb 6-1: USB disconnect, device number 34 [ 729.489032][T13960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.497594][T13960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.542812][T13960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.557070][T13960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.564663][T13960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.604838][T13960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.650854][T13960] hsr_slave_0: entered promiscuous mode [ 729.657990][T13960] hsr_slave_1: entered promiscuous mode [ 729.669067][T13960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.669555][ T5828] Bluetooth: hci1: command tx timeout [ 729.729893][T13960] Cannot create hsr debugfs directory [ 730.566713][T14006] Process accounting resumed [ 730.917709][T14014] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2025'. [ 731.422954][T14018] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 731.779805][ T5828] Bluetooth: hci1: command tx timeout [ 731.804981][T13960] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 731.831056][T13960] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 731.876946][T13960] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 731.955724][T13960] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 732.172770][T13960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.312600][T13960] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.412809][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.419972][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.476395][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.483611][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.949562][ T5828] Bluetooth: hci1: command tx timeout [ 735.418549][T13960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.669619][ T5872] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 735.841318][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.867073][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 735.921598][ T5872] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 735.965972][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.989504][ T5828] Bluetooth: hci1: command tx timeout [ 735.997477][ T5872] usb 5-1: config 0 descriptor?? [ 736.030088][T13960] veth0_vlan: entered promiscuous mode [ 736.100843][T13960] veth1_vlan: entered promiscuous mode [ 736.149154][T13960] veth0_macvtap: entered promiscuous mode [ 736.178777][T13960] veth1_macvtap: entered promiscuous mode [ 736.205769][T14095] FAULT_INJECTION: forcing a failure. [ 736.205769][T14095] name failslab, interval 1, probability 0, space 0, times 0 [ 736.234387][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.250976][T14095] CPU: 0 UID: 0 PID: 14095 Comm: syz.5.2048 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 736.261797][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 736.271885][T14095] Call Trace: [ 736.275193][T14095] [ 736.278136][T14095] dump_stack_lvl+0x241/0x360 [ 736.282856][T14095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.288089][T14095] ? __pfx__printk+0x10/0x10 [ 736.292783][T14095] should_fail_ex+0x3b0/0x4e0 [ 736.297486][T14095] should_failslab+0xac/0x100 [ 736.302196][T14095] ? skb_clone+0x20c/0x390 [ 736.306633][T14095] kmem_cache_alloc_noprof+0x70/0x380 [ 736.312040][T14095] skb_clone+0x20c/0x390 [ 736.316303][T14095] __netlink_deliver_tap+0x3cc/0x7f0 [ 736.321592][T14095] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.326788][T14095] netlink_deliver_tap+0x19d/0x1b0 [ 736.331902][T14095] netlink_dump+0x8c6/0xe10 [ 736.336411][T14095] ? __pfx_netlink_dump+0x10/0x10 [ 736.341425][T14095] ? cap_capable+0x1b4/0x250 [ 736.346023][T14095] ? ns_capable+0x8a/0xf0 [ 736.350350][T14095] ? __inet_diag_dump_start+0x8c9/0xa50 [ 736.355916][T14095] __netlink_dump_start+0x5a2/0x790 [ 736.361128][T14095] inet_diag_handler_cmd+0x1de/0x2b0 [ 736.366416][T14095] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 736.372218][T14095] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 736.377939][T14095] ? __pfx_inet_diag_dump+0x10/0x10 [ 736.383136][T14095] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 736.388771][T14095] ? sock_diag_lock_handler+0x19/0x280 [ 736.394244][T14095] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 736.400069][T14095] sock_diag_rcv_msg+0x3dc/0x5f0 [ 736.405020][T14095] netlink_rcv_skb+0x1e3/0x430 [ 736.409791][T14095] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 736.415251][T14095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.420548][T14095] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.425749][T14095] netlink_unicast+0x7f6/0x990 [ 736.430604][T14095] ? __pfx_netlink_unicast+0x10/0x10 [ 736.435884][T14095] ? __virt_addr_valid+0x45f/0x530 [ 736.441008][T14095] ? __phys_addr_symbol+0x2f/0x70 [ 736.446024][T14095] ? __check_object_size+0x47a/0x730 [ 736.451310][T14095] netlink_sendmsg+0x8e4/0xcb0 [ 736.456067][T14095] ? mark_lock+0x9a/0x360 [ 736.460503][T14095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.465803][T14095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.471089][T14095] __sock_sendmsg+0x221/0x270 [ 736.475775][T14095] sock_write_iter+0x2d7/0x3f0 [ 736.480571][T14095] ? __pfx_sock_write_iter+0x10/0x10 [ 736.485871][T14095] do_iter_readv_writev+0x600/0x880 [ 736.491078][T14095] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 736.496798][T14095] ? bpf_lsm_file_permission+0x9/0x10 [ 736.502164][T14095] ? security_file_permission+0x74/0x280 [ 736.507799][T14095] ? rw_verify_area+0x1c3/0x6f0 [ 736.512650][T14095] vfs_writev+0x376/0xba0 [ 736.516980][T14095] ? __pfx_lock_acquire+0x10/0x10 [ 736.522007][T14095] ? __pfx_vfs_writev+0x10/0x10 [ 736.526890][T14095] ? __pfx_vfs_write+0x10/0x10 [ 736.531714][T14095] ? __fget_files+0x2a/0x410 [ 736.536309][T14095] ? __fget_files+0x395/0x410 [ 736.540982][T14095] ? __fget_files+0x2a/0x410 [ 736.545585][T14095] do_writev+0x1b6/0x360 [ 736.549829][T14095] ? __pfx_do_writev+0x10/0x10 [ 736.554586][T14095] ? do_syscall_64+0x100/0x230 [ 736.559359][T14095] ? do_syscall_64+0xb6/0x230 [ 736.564046][T14095] do_syscall_64+0xf3/0x230 [ 736.568547][T14095] ? clear_bhb_loop+0x35/0x90 [ 736.573219][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.579114][T14095] RIP: 0033:0x7f3520985d29 [ 736.583555][T14095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.603157][T14095] RSP: 002b:00007f35216f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 736.611568][T14095] RAX: ffffffffffffffda RBX: 00007f3520b75fa0 RCX: 00007f3520985d29 [ 736.619533][T14095] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 000000000000000a [ 736.627496][T14095] RBP: 00007f35216f9090 R08: 0000000000000000 R09: 0000000000000000 [ 736.635460][T14095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.643422][T14095] R13: 0000000000000000 R14: 00007f3520b75fa0 R15: 00007fff9e3bf348 [ 736.651399][T14095] [ 736.656121][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.686082][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.696932][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.706842][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.717400][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.728407][T13960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.747309][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.758096][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.770563][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.809036][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.820801][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.831770][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.842132][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.853278][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.864737][T13960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.881549][T13960] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.893925][T13960] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.903391][T13960] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.914115][T13960] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.959982][T14101] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 737.022589][T14101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.075145][ T8798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.132434][ T8798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.186818][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.220719][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.081123][T14115] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 738.089911][T14115] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 738.100078][T14115] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 738.600628][T14117] autofs: Unknown parameter '3' [ 738.871710][T11990] usb 5-1: USB disconnect, device number 31 [ 741.720629][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 741.720643][ T29] audit: type=1326 audit(1736404772.266:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 741.807776][ T29] audit: type=1326 audit(1736404772.286:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 741.917998][ T29] audit: type=1326 audit(1736404772.296:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 741.947353][ T29] audit: type=1326 audit(1736404772.296:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 742.968231][ T29] audit: type=1326 audit(1736404772.296:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 743.057265][ T29] audit: type=1326 audit(1736404772.296:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 743.143581][ T29] audit: type=1326 audit(1736404772.296:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 743.285712][ T29] audit: type=1326 audit(1736404772.296:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3520985d29 code=0x7ffc0000 [ 743.307932][ T29] audit: type=1326 audit(1736404772.296:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3520985d63 code=0x7ffc0000 [ 743.329681][ T29] audit: type=1326 audit(1736404772.296:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3520985d63 code=0x7ffc0000 [ 743.621153][T14191] overlayfs: failed to clone upperpath [ 743.891973][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 743.911280][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2075'. [ 743.920896][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 744.048424][T14203] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2078'. [ 746.489897][T14230] netlink: 'syz.7.2085': attribute type 21 has an invalid length. [ 746.534462][T14230] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2085'. [ 746.554292][T14230] netlink: 'syz.7.2085': attribute type 5 has an invalid length. [ 746.562449][T14230] netlink: 'syz.7.2085': attribute type 6 has an invalid length. [ 746.570308][T14230] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2085'. [ 747.644626][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.652714][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.807704][T14234] netlink: zone id is out of range [ 747.855294][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.865285][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.909493][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 747.909509][ T29] audit: type=1804 audit(1736404778.456:208): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.2093" name="/newroot/7/bus/file0" dev="overlay" ino=63 res=1 errno=0 [ 747.948447][T14257] tmpfs: Unknown parameter 'mpo' [ 747.957886][T14257] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 748.234394][T14258] (syz.4.2094,14258,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 748.244605][T14258] (syz.4.2094,14258,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 748.406505][T14258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.682490][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 749.905139][T14280] CIFS mount error: No usable UNC path provided in device string! [ 749.905139][T14280] [ 749.929143][T14280] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 750.208770][ T29] audit: type=1804 audit(1736404780.746:209): pid=14292 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2105" name="/newroot/374/bus/file0" dev="overlay" ino=2018 res=1 errno=0 [ 750.524307][T14301] FAULT_INJECTION: forcing a failure. [ 750.524307][T14301] name failslab, interval 1, probability 0, space 0, times 0 [ 750.605483][T14301] CPU: 1 UID: 0 PID: 14301 Comm: syz.5.2107 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 750.616306][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 750.626390][T14301] Call Trace: [ 750.629690][T14301] [ 750.632638][T14301] dump_stack_lvl+0x241/0x360 [ 750.637348][T14301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.642577][T14301] ? __pfx__printk+0x10/0x10 [ 750.647182][T14301] ? kmem_cache_alloc_noprof+0x48/0x380 [ 750.652731][T14301] ? __pfx___might_resched+0x10/0x10 [ 750.658013][T14301] ? lockdep_hardirqs_on+0x99/0x150 [ 750.663214][T14301] should_fail_ex+0x3b0/0x4e0 [ 750.667907][T14301] should_failslab+0xac/0x100 [ 750.672600][T14301] ? __kernfs_new_node+0xd8/0x870 [ 750.677730][T14301] kmem_cache_alloc_noprof+0x70/0x380 [ 750.683112][T14301] __kernfs_new_node+0xd8/0x870 [ 750.687973][T14301] ? __pfx___kernfs_new_node+0x10/0x10 [ 750.693436][T14301] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.699426][T14301] kernfs_new_node+0x137/0x240 [ 750.704189][T14301] __kernfs_create_file+0x49/0x2e0 [ 750.709317][T14301] sysfs_add_file_mode_ns+0x24a/0x310 [ 750.714700][T14301] sysfs_create_file_ns+0x197/0x2a0 [ 750.719897][T14301] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 750.725606][T14301] ? device_create_file+0x39/0x1c0 [ 750.730712][T14301] ? device_create_file+0xf2/0x1c0 [ 750.735820][T14301] device_add+0x522/0xbf0 [ 750.740149][T14301] ? device_initialize+0x266/0x460 [ 750.745252][T14301] iommufd_test+0x20c7/0x4270 [ 750.749932][T14301] ? __pfx_iommufd_test+0x10/0x10 [ 750.754954][T14301] ? __pfx___might_resched+0x10/0x10 [ 750.760270][T14301] ? __might_fault+0xaa/0x120 [ 750.764939][T14301] ? __pfx_lock_release+0x10/0x10 [ 750.769965][T14301] ? __might_fault+0xc6/0x120 [ 750.774639][T14301] iommufd_fops_ioctl+0x4d6/0x5a0 [ 750.779667][T14301] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 750.785225][T14301] ? smack_file_ioctl+0x294/0x3a0 [ 750.790251][T14301] ? security_file_ioctl+0xf2/0x2a0 [ 750.795447][T14301] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 750.800991][T14301] __se_sys_ioctl+0xf5/0x170 [ 750.805580][T14301] do_syscall_64+0xf3/0x230 [ 750.810087][T14301] ? clear_bhb_loop+0x35/0x90 [ 750.814765][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.820657][T14301] RIP: 0033:0x7f3520985d29 [ 750.825067][T14301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.844674][T14301] RSP: 002b:00007f35216f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.853088][T14301] RAX: ffffffffffffffda RBX: 00007f3520b75fa0 RCX: 00007f3520985d29 [ 750.861057][T14301] RDX: 0000000020000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 750.869022][T14301] RBP: 00007f35216f9090 R08: 0000000000000000 R09: 0000000000000000 [ 750.876985][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.885036][T14301] R13: 0000000000000000 R14: 00007f3520b75fa0 R15: 00007fff9e3bf348 [ 750.893017][T14301] [ 751.361577][T14315] x_tables: duplicate underflow at hook 3 [ 751.976813][ T29] audit: type=1804 audit(1736404782.516:210): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2117" name="/newroot/432/bus/file0" dev="overlay" ino=2352 res=1 errno=0 [ 753.685066][T14350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.915219][T14350] batadv_slave_1: entered promiscuous mode [ 753.994063][ T29] audit: type=1326 audit(1736404784.516:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.086597][ T29] audit: type=1326 audit(1736404784.516:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.184347][ T29] audit: type=1326 audit(1736404784.516:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.420763][ T29] audit: type=1326 audit(1736404784.516:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.442586][ T29] audit: type=1326 audit(1736404784.516:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.464409][ T29] audit: type=1326 audit(1736404784.516:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.486253][ T29] audit: type=1326 audit(1736404784.516:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.508061][ T29] audit: type=1326 audit(1736404784.516:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.530457][ T29] audit: type=1326 audit(1736404784.516:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.552760][ T29] audit: type=1326 audit(1736404784.516:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e585d29 code=0x7ff00000 [ 754.735669][T14375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.484311][T14393] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 755.708716][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2134'. [ 756.180634][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2136'. [ 757.910821][T14412] pimreg3: entered allmulticast mode [ 758.111923][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 759.966141][T14435] dccp_xmit_packet: Payload too large (65475) for featneg. [ 760.894397][T14446] fuse: Unknown parameter 'fd0x0000000000000004' [ 761.809552][T11990] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 761.979578][T11990] usb 9-1: Using ep0 maxpacket: 8 [ 762.293923][T11990] usb 9-1: config 252 has an invalid interface number: 217 but max is 0 [ 762.320385][T11990] usb 9-1: config 252 has no interface number 0 [ 762.326706][T11990] usb 9-1: config 252 interface 217 has no altsetting 0 [ 762.455807][T14463] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2152'. [ 763.223018][T11990] usb 9-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b7.76 [ 763.232194][T11990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.309842][T11990] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 763.327647][T11990] dvb-usb: bulk message failed: -22 (2/0) [ 763.545033][T11990] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 763.558918][T11990] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 763.571133][T11990] usb 9-1: media controller created [ 763.578585][T11990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.602210][T11990] usb 9-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 763.618657][T11990] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 765.229934][T11990] rc_core: IR keymap rc-dtt200u not found [ 765.235755][T11990] Registered IR keymap rc-empty [ 765.242505][T11990] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 765.258896][T11990] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input31 [ 765.280509][T11990] dvb-usb: schedule remote query interval to 300 msecs. [ 765.287725][T11990] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 766.159389][T11990] dvb-usb: bulk message failed: -22 (1/0) [ 766.165517][T11990] dvb-usb: error -22 while querying for an remote control event. [ 766.559511][ T5869] dvb-usb: bulk message failed: -22 (1/0) [ 766.567197][ T5869] dvb-usb: error -22 while querying for an remote control event. [ 767.041695][ T5869] dvb-usb: bulk message failed: -22 (1/0) [ 767.047603][ T5869] dvb-usb: error -22 while querying for an remote control event. [ 767.359629][ T5869] dvb-usb: bulk message failed: -22 (1/0) [ 767.404707][ T5869] dvb-usb: error -22 while querying for an remote control event. [ 767.414490][ T5905] usb 9-1: USB disconnect, device number 2 [ 769.335628][T14527] syz.5.2172 (14527): /proc/14527/oom_adj is deprecated, please use /proc/14527/oom_score_adj instead. [ 769.353615][ T5905] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 769.488698][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 769.579226][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.611569][T14531] sctp: [Deprecated]: syz.8.2171 (pid 14531) Use of int in max_burst socket option. [ 769.611569][T14531] Use struct sctp_assoc_value instead [ 769.647049][T14529] dummy0: entered promiscuous mode [ 769.748571][T14529] batadv_slave_0: entered promiscuous mode [ 770.130383][T14543] input: syz1 as /devices/virtual/input/input32 [ 773.502598][T14589] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 775.329749][T14614] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 775.591805][T14619] overlayfs: failed to clone upperpath [ 775.685311][T14620] lo speed is unknown, defaulting to 1000 [ 775.703425][T14620] lo speed is unknown, defaulting to 1000 [ 775.712023][T14620] lo speed is unknown, defaulting to 1000 [ 776.140670][T14621] lo speed is unknown, defaulting to 1000 [ 776.146766][T14621] lo speed is unknown, defaulting to 1000 [ 776.157751][T14621] lo speed is unknown, defaulting to 1000 [ 776.206639][T14621] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 776.219696][T14615] »»»»»»: renamed from lo (while UP) [ 776.313879][T14621] »»»»»» speed is unknown, defaulting to 1000 [ 776.322899][T14621] »»»»»» speed is unknown, defaulting to 1000 [ 776.330240][T14621] »»»»»» speed is unknown, defaulting to 1000 [ 776.337376][T14621] »»»»»» speed is unknown, defaulting to 1000 [ 776.344645][T14621] »»»»»» speed is unknown, defaulting to 1000 [ 776.351816][T14621] »»»»»» speed is unknown, defaulting to 1000 [ 776.358540][T14620] infiniband sz1: set active [ 776.363567][T14620] infiniband sz1: added »»»»»» [ 776.380401][ T9] »»»»»» speed is unknown, defaulting to 1000 [ 776.407206][T14620] RDS/IB: sz1: added [ 776.412739][T14620] smc: adding ib device sz1 with port count 1 [ 776.418941][T14620] smc: ib device sz1 port 1 has pnetid [ 776.427299][T14620] »»»»»» speed is unknown, defaulting to 1000 [ 776.505141][T14620] »»»»»» speed is unknown, defaulting to 1000 [ 776.564392][T14620] »»»»»» speed is unknown, defaulting to 1000 [ 776.622610][T14620] »»»»»» speed is unknown, defaulting to 1000 [ 776.679644][T14620] »»»»»» speed is unknown, defaulting to 1000 [ 776.737834][T14620] »»»»»» speed is unknown, defaulting to 1000 [ 776.850622][T11990] »»»»»» speed is unknown, defaulting to 1000 [ 776.948687][T14625] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2201'. [ 776.970277][T14627] netlink: 'syz.1.2203': attribute type 8 has an invalid length. [ 776.995711][T14630] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 777.349527][T14259] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 777.479644][T14259] usb 5-1: device descriptor read/64, error -71 [ 777.909204][T14259] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 778.005265][T14651] overlayfs: failed to clone upperpath [ 778.679707][T14259] usb 5-1: device descriptor read/64, error -71 [ 778.847933][T14259] usb usb5-port1: attempt power cycle [ 779.380181][T14666] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 780.263882][T14259] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 781.376840][T14259] usb 5-1: device descriptor read/8, error -71 [ 782.261899][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2222'. [ 783.389185][T14712] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 783.614456][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2227'. [ 783.817750][T14723] futex_wake_op: syz.7.2229 tries to shift op by -1; fix this program [ 784.642470][T14741] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 784.723256][T14746] netlink: 'syz.7.2236': attribute type 10 has an invalid length. [ 784.729416][T14741] overlayfs: missing 'lowerdir' [ 784.859136][T14746] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 784.871239][T14758] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 784.892323][T14743] syz_tun: entered promiscuous mode [ 785.003206][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 785.096319][T14742] syz_tun: left promiscuous mode [ 786.990329][T14777] tmpfs: Unknown parameter 'mpo' [ 787.329919][T14777] overlayfs: failed to clone upperpath [ 787.535004][T14792] Cache volume key already in use (9p,(null),;dev;ttyS3) [ 788.442777][T14794] Process accounting resumed [ 788.662839][T14801] overlayfs: failed to clone upperpath [ 788.718099][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.756978][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.773616][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 788.788424][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 789.618207][ T5823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 789.626649][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 790.069477][ T5869] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 790.915563][ T7530] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 791.013235][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 791.022756][ T5869] usb 5-1: config 1 has no interface number 0 [ 791.028885][ T5869] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.260684][ T5869] usb 5-1: too many endpoints for config 1 interface 1 altsetting 177: 105, using maximum allowed: 30 [ 791.333520][ T5869] usb 5-1: config 1 interface 1 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 791.441492][ T5869] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 139 [ 791.565628][T14751] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.717442][ T5869] usb 5-1: config 1 interface 1 has no altsetting 2 [ 791.753728][ T5823] Bluetooth: hci3: command tx timeout [ 791.864096][T14800] »»»»»» speed is unknown, defaulting to 1000 [ 791.884556][T14829] 9pnet_fd: Insufficient options for proto=fd [ 791.950661][ T5869] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.960055][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.968273][ T5869] usb 5-1: Product: syz [ 791.972770][ T5869] usb 5-1: Manufacturer: syz [ 791.978318][ T5869] usb 5-1: SerialNumber: syz [ 792.045609][T14751] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.118275][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 792.140695][T14840] netlink: 'syz.5.2260': attribute type 5 has an invalid length. [ 792.231430][ T29] kauditd_printk_skb: 1437 callbacks suppressed [ 792.231448][ T29] audit: type=1326 audit(1736404822.776:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 792.261210][T14815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 792.381306][ T29] audit: type=1326 audit(1736404822.826:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 792.433720][T14751] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.481714][ T29] audit: type=1326 audit(1736404822.826:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 792.579188][T14800] »»»»»» speed is unknown, defaulting to 1000 [ 792.599866][ T29] audit: type=1326 audit(1736404822.826:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 792.766633][ T29] audit: type=1326 audit(1736404822.826:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 792.830340][T14751] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.886041][ T29] audit: type=1326 audit(1736404822.826:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80c3384690 code=0x7ffc0000 [ 792.977202][ T29] audit: type=1326 audit(1736404822.826:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 793.076115][ T29] audit: type=1326 audit(1736404822.826:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 793.250387][T14815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 793.260122][ T5869] cdc_ncm 5-1:1.1: bind() failure [ 793.319823][ T29] audit: type=1326 audit(1736404822.826:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 793.410443][ T29] audit: type=1326 audit(1736404822.826:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14841 comm="syz.1.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f80c3385d29 code=0x7ffc0000 [ 793.615408][ T5905] usb 5-1: USB disconnect, device number 36 [ 793.980121][ T5823] Bluetooth: hci3: command tx timeout [ 899.369277][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 899.376282][ C1] rcu: 0-...!: (1 ticks this GP) idle=85bc/1/0x4000000000000000 softirq=60452/60452 fqs=1 [ 899.388572][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5487/2:b..l P14852/1:b..l P14745/1:b..l [ 899.398991][ C1] rcu: (detected by 1, t=10502 jiffies, g=53589, q=238 ncpus=2) [ 899.406736][ C1] Sending NMI from CPU 1 to CPUs 0: [ 899.406768][ C0] NMI backtrace for cpu 0 [ 899.406781][ C0] CPU: 0 UID: 0 PID: 5193 Comm: udevd Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 899.406800][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 899.406810][ C0] RIP: 0010:check_preemption_disabled+0x49/0x120 [ 899.406839][ C0] Code: 74 65 8b 05 41 cc 42 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b <41> 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 [ 899.406852][ C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00000086 [ 899.406866][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ad690 [ 899.406877][ C0] RDX: 0000000000000000 RSI: ffffffff8c5edcc0 RDI: ffffffff8c5edc80 [ 899.406889][ C0] RBP: ffffc90000007b30 R08: ffffffff90185777 R09: 1ffffffff2030aee [ 899.406901][ C0] R10: dffffc0000000000 R11: fffffbfff2030aef R12: 1ffff92000000f4c [ 899.406913][ C0] R13: ffffffff84c0c7b7 R14: ffffc90000007b60 R15: dffffc0000000000 [ 899.406925][ C0] FS: 00007f693192fc80(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 899.406940][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.406951][ C0] CR2: 00007ffcfe994b98 CR3: 000000002ef78000 CR4: 00000000003526f0 [ 899.406966][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 899.406975][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 899.406986][ C0] Call Trace: [ 899.406995][ C0] [ 899.407002][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 899.407019][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 899.407038][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 899.407055][ C0] ? nmi_handle+0x2a/0x5a0 [ 899.407078][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 899.407098][ C0] ? nmi_handle+0x14f/0x5a0 [ 899.407114][ C0] ? nmi_handle+0x2a/0x5a0 [ 899.407130][ C0] ? check_preemption_disabled+0x49/0x120 [ 899.407149][ C0] ? default_do_nmi+0x63/0x160 [ 899.407165][ C0] ? exc_nmi+0x123/0x1f0 [ 899.407187][ C0] ? end_repeat_nmi+0xf/0x53 [ 899.407202][ C0] ? debug_object_activate+0x3f7/0x580 [ 899.407224][ C0] ? lock_release+0xb0/0xa30 [ 899.407240][ C0] ? check_preemption_disabled+0x49/0x120 [ 899.407260][ C0] ? check_preemption_disabled+0x49/0x120 [ 899.407281][ C0] ? check_preemption_disabled+0x49/0x120 [ 899.407301][ C0] [ 899.407306][ C0] [ 899.407312][ C0] rcu_is_watching+0x15/0xb0 [ 899.407332][ C0] lock_release+0xbf/0xa30 [ 899.407351][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 899.407370][ C0] ? __pfx_lock_release+0x10/0x10 [ 899.407387][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 899.407410][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 899.407429][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 899.407452][ C0] debug_object_activate+0x3f7/0x580 [ 899.407474][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 899.407493][ C0] ? advance_sched+0xa02/0xca0 [ 899.407513][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 899.407529][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 899.407549][ C0] enqueue_hrtimer+0x30/0x3c0 [ 899.407569][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 899.407595][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 899.407612][ C0] ? sched_clock+0x4a/0x70 [ 899.407632][ C0] ? read_tsc+0x9/0x20 [ 899.407649][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 899.407668][ C0] hrtimer_interrupt+0x403/0xa40 [ 899.407697][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 899.407715][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 899.407734][ C0] [ 899.407739][ C0] [ 899.407745][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 899.407766][ C0] RIP: 0010:unwind_next_frame+0x6f6/0x22d0 [ 899.407783][ C0] Code: 00 00 fc ff df 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c 0f 46 f1 48 8d 43 fc 48 0f 47 e8 4c 0f 46 e3 <49> 39 ee 76 a9 e9 55 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 7c cd [ 899.407795][ C0] RSP: 0018:ffffc900031e7050 EFLAGS: 00000216 [ 899.407809][ C0] RAX: ffffffff903367e4 RBX: ffffffff903367e8 RCX: ffffffff903367ec [ 899.407821][ C0] RDX: 00000000000b0001 RSI: ffffffff90ade580 RDI: ffffffff814ba930 [ 899.407832][ C0] RBP: ffffffff903367e4 R08: 0000000000000006 R09: ffffc900031e7210 [ 899.407843][ C0] R10: ffffc900031e7170 R11: ffffffff818b39c0 R12: ffffffff903367e4 [ 899.407855][ C0] R13: ffffffff903367e4 R14: ffffffff903367e8 R15: ffffffff8203451f [ 899.407867][ C0] ? kasan_save_free_info+0x3f/0x50 [ 899.407885][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 899.407906][ C0] ? unwind_next_frame+0xb0/0x22d0 [ 899.407927][ C0] ? kasan_save_free_info+0x40/0x50 [ 899.407946][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 899.407966][ C0] arch_stack_walk+0x11c/0x150 [ 899.407985][ C0] ? kasan_save_free_info+0x40/0x50 [ 899.408003][ C0] stack_trace_save+0x118/0x1d0 [ 899.408024][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 899.408046][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 899.408065][ C0] kasan_save_track+0x3f/0x80 [ 899.408082][ C0] ? kasan_save_track+0x3f/0x80 [ 899.408099][ C0] ? kasan_save_free_info+0x40/0x50 [ 899.408138][ C0] kasan_save_free_info+0x40/0x50 [ 899.408153][ C0] __kasan_slab_free+0x59/0x70 [ 899.408171][ C0] ? smk_fetch+0x109/0x140 [ 899.408194][ C0] kfree+0x196/0x430 [ 899.408213][ C0] ? smk_fetch+0x109/0x140 [ 899.408232][ C0] smk_fetch+0x109/0x140 [ 899.408250][ C0] smack_d_instantiate+0x8af/0xa50 [ 899.408267][ C0] ? kernfs_iop_lookup+0x2fd/0x390 [ 899.408290][ C0] ? __pfx_smack_d_instantiate+0x10/0x10 [ 899.408307][ C0] ? __pfx___up_read+0x10/0x10 [ 899.408325][ C0] ? _raw_spin_unlock+0x28/0x50 [ 899.408343][ C0] security_d_instantiate+0x107/0x1f0 [ 899.408363][ C0] d_splice_alias+0x6f/0x330 [ 899.408382][ C0] __lookup_slow+0x28c/0x3f0 [ 899.408399][ C0] ? __pfx___lookup_slow+0x10/0x10 [ 899.408414][ C0] ? __d_lookup+0x64/0x7b0 [ 899.408439][ C0] lookup_slow+0x53/0x70 [ 899.408455][ C0] link_path_walk+0x99b/0xea0 [ 899.408478][ C0] path_openat+0x266/0x3590 [ 899.408499][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 899.408527][ C0] ? __pfx_path_openat+0x10/0x10 [ 899.408552][ C0] do_filp_open+0x27f/0x4e0 [ 899.408570][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 899.408586][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 899.408621][ C0] do_sys_openat2+0x13e/0x1d0 [ 899.408637][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 899.408658][ C0] __x64_sys_openat+0x247/0x2a0 [ 899.408674][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 899.408691][ C0] ? do_syscall_64+0x100/0x230 [ 899.408711][ C0] ? do_syscall_64+0xb6/0x230 [ 899.408731][ C0] do_syscall_64+0xf3/0x230 [ 899.408749][ C0] ? clear_bhb_loop+0x35/0x90 [ 899.408764][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.408783][ C0] RIP: 0033:0x7f69315169a4 [ 899.408798][ C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 899.408810][ C0] RSP: 002b:00007ffcfe991710 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 899.408825][ C0] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f69315169a4 [ 899.408836][ C0] RDX: 0000000000080000 RSI: 00007ffcfe991848 RDI: 00000000ffffff9c [ 899.408847][ C0] RBP: 00007ffcfe991848 R08: 0000000000000008 R09: 0000000000000001 [ 899.408857][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 899.408867][ C0] R13: 000055fbdb005b42 R14: 0000000000000001 R15: 0000000000000000 [ 899.408885][ C0] [ 899.409762][ C1] task:kworker/u8:15 state:R running task stack:22288 pid:14745 tgid:14745 ppid:2 flags:0x00004000 [ 900.150503][ C1] Workqueue: bat_events batadv_nc_worker [ 900.156156][ C1] Call Trace: [ 900.159442][ C1] [ 900.162383][ C1] __schedule+0x17fb/0x4be0 [ 900.166929][ C1] ? __pfx___schedule+0x10/0x10 [ 900.171795][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 900.177812][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 900.183109][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 900.188230][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 900.193974][ C1] irqentry_exit+0x5e/0x90 [ 900.198400][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.204394][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 900.209689][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0a 9c 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 900.229299][ C1] RSP: 0018:ffffc90003e9f9e0 EFLAGS: 00000206 [ 900.235382][ C1] RAX: 0000000000000001 RBX: 1ffff920007d3f48 RCX: ffff8880317de4d8 [ 900.243391][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5edce0 [ 900.251369][ C1] RBP: ffffc90003e9fb40 R08: ffffffff94271887 R09: 1ffffffff284e310 [ 900.259346][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: 1ffff920007d3f44 [ 900.267412][ C1] R13: dffffc0000000000 R14: ffffc90003e9fa40 R15: 0000000000000246 [ 900.275416][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 900.280454][ C1] ? batadv_nc_worker+0xcb/0x610 [ 900.285404][ C1] ? __pfx_lock_release+0x10/0x10 [ 900.290440][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 900.296435][ C1] batadv_nc_worker+0xec/0x610 [ 900.301208][ C1] ? batadv_nc_worker+0xcb/0x610 [ 900.306158][ C1] ? batadv_nc_worker+0xcb/0x610 [ 900.311111][ C1] ? process_scheduled_works+0x976/0x1840 [ 900.316849][ C1] process_scheduled_works+0xa66/0x1840 [ 900.322434][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 900.328432][ C1] ? assign_work+0x364/0x3d0 [ 900.333038][ C1] worker_thread+0x870/0xd30 [ 900.337651][ C1] ? __kthread_parkme+0x169/0x1d0 [ 900.342683][ C1] ? __pfx_worker_thread+0x10/0x10 [ 900.347808][ C1] kthread+0x2f0/0x390 [ 900.351892][ C1] ? __pfx_worker_thread+0x10/0x10 [ 900.357014][ C1] ? __pfx_kthread+0x10/0x10 [ 900.361613][ C1] ret_from_fork+0x4b/0x80 [ 900.366036][ C1] ? __pfx_kthread+0x10/0x10 [ 900.370634][ C1] ret_from_fork_asm+0x1a/0x30 [ 900.375424][ C1] [ 900.378452][ C1] task:syz.4.2253 state:R running task stack:25936 pid:14852 tgid:14813 ppid:5818 flags:0x00004000 [ 900.390213][ C1] Call Trace: [ 900.393496][ C1] [ 900.396438][ C1] __schedule+0x17fb/0x4be0 [ 900.400972][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 900.406965][ C1] ? __pfx___schedule+0x10/0x10 [ 900.411855][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 900.417091][ C1] ? preempt_schedule+0xe1/0xf0 [ 900.421960][ C1] preempt_schedule_common+0x84/0xd0 [ 900.427268][ C1] preempt_schedule+0xe1/0xf0 [ 900.431967][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 900.437351][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 900.443274][ C1] preempt_schedule_thunk+0x1a/0x30 [ 900.448490][ C1] _raw_spin_unlock+0x3e/0x50 [ 900.453178][ C1] unmap_page_range+0x36c3/0x4040 [ 900.458218][ C1] ? __lock_acquire+0x1397/0x2100 [ 900.463286][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 900.468681][ C1] ? mas_next_slot+0xdc6/0xea0 [ 900.473465][ C1] ? uprobe_munmap+0x183/0x460 [ 900.478248][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 900.483293][ C1] unmap_vmas+0x3cc/0x5f0 [ 900.487646][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 900.492524][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 900.497998][ C1] exit_mmap+0x275/0xc20 [ 900.502265][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 900.507052][ C1] ? __pfx_exit_aio+0x10/0x10 [ 900.511750][ C1] ? uprobe_clear_state+0x271/0x290 [ 900.516958][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 900.522252][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 900.527466][ C1] __mmput+0x115/0x3b0 [ 900.531551][ C1] exit_mm+0x220/0x310 [ 900.535630][ C1] ? __pfx_exit_mm+0x10/0x10 [ 900.540228][ C1] ? taskstats_exit+0x326/0xa60 [ 900.545095][ C1] do_exit+0x9ad/0x28e0 [ 900.549275][ C1] ? __pfx_do_exit+0x10/0x10 [ 900.553898][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 900.559286][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 900.565363][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 900.571702][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 900.576829][ C1] do_group_exit+0x207/0x2c0 [ 900.581525][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 900.586732][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 900.591942][ C1] get_signal+0x16b2/0x1750 [ 900.596478][ C1] ? __pfx_get_signal+0x10/0x10 [ 900.601351][ C1] arch_do_signal_or_restart+0x96/0x860 [ 900.606913][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 900.613084][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 900.619089][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 900.624843][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 900.630407][ C1] do_syscall_64+0x100/0x230 [ 900.635010][ C1] ? clear_bhb_loop+0x35/0x90 [ 900.639697][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.645607][ C1] RIP: 0033:0x7fcf8e585d29 [ 900.650029][ C1] RSP: 002b:00007fcf8f3d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 900.658457][ C1] RAX: fffffffffffffe00 RBX: 00007fcf8e776088 RCX: 00007fcf8e585d29 [ 900.666443][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf8e776088 [ 900.674423][ C1] RBP: 00007fcf8e776080 R08: 0000000000000000 R09: 0000000000000000 [ 900.682403][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf8e77608c [ 900.690382][ C1] R13: 0000000000000000 R14: 00007ffc85353a20 R15: 00007ffc85353b08 [ 900.698379][ C1] [ 900.701407][ C1] task:dhcpcd state:R running task stack:20608 pid:5487 tgid:5487 ppid:5486 flags:0x00000002 [ 900.713167][ C1] Call Trace: [ 900.716477][ C1] [ 900.719420][ C1] __schedule+0x17fb/0x4be0 [ 900.723964][ C1] ? __pfx___schedule+0x10/0x10 [ 900.728834][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 900.734838][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 900.740137][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 900.745265][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 900.751017][ C1] irqentry_exit+0x5e/0x90 [ 900.755444][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.761437][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 900.766731][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0a 9c 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 900.786348][ C1] RSP: 0018:ffffc90003407020 EFLAGS: 00000206 [ 900.792431][ C1] RAX: 0000000000000001 RBX: 1ffff92000680e10 RCX: ffff888030ba46d8 [ 900.800411][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5edce0 [ 900.808391][ C1] RBP: ffffc90003407168 R08: ffffffff94271887 R09: 1ffffffff284e310 [ 900.816371][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: 1ffff92000680e0c [ 900.824349][ C1] R13: dffffc0000000000 R14: ffffc90003407080 R15: 0000000000000246 [ 900.832354][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 900.837392][ C1] ? xa_find+0x17f/0x420 [ 900.841645][ C1] ? __pfx_lock_release+0x10/0x10 [ 900.846688][ C1] ? xas_find+0x14c/0x960 [ 900.851053][ C1] xa_find+0x1a0/0x420 [ 900.855130][ C1] ? xa_find+0x17f/0x420 [ 900.859386][ C1] ? xa_find+0x17f/0x420 [ 900.863638][ C1] ? __pfx_xa_find+0x10/0x10 [ 900.868240][ C1] ? in_dev_dump_addr+0x380/0x430 [ 900.873285][ C1] inet_dump_ifaddr+0x5a2/0x1330 [ 900.878233][ C1] ? inet_dump_ifaddr+0x243/0x1330 [ 900.883356][ C1] ? trace_contention_end+0x3c/0x120 [ 900.888664][ C1] ? __pfx_inet_dump_ifaddr+0x10/0x10 [ 900.894047][ C1] ? __mutex_lock+0x37f/0xee0 [ 900.898749][ C1] ? rcu_is_watching+0x15/0xb0 [ 900.903535][ C1] ? trace_kmalloc+0x1f/0xd0 [ 900.908132][ C1] ? rtnl_dumpit+0x99/0x200 [ 900.912660][ C1] ? __pfx_inet_dump_ifaddr+0x10/0x10 [ 900.918044][ C1] rtnl_dump_all+0x300/0x520 [ 900.922661][ C1] ? __pfx_rtnl_dump_all+0x10/0x10 [ 900.927790][ C1] rtnl_dumpit+0xa9/0x200 [ 900.932137][ C1] netlink_dump+0x64d/0xe10 [ 900.936661][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 900.941712][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 900.946768][ C1] __netlink_dump_start+0x5a2/0x790 [ 900.951982][ C1] ? __pfx_rtnl_dump_all+0x10/0x10 [ 900.957103][ C1] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 900.962063][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 900.967536][ C1] ? __pfx_rtnl_dumpit+0x10/0x10 [ 900.972486][ C1] ? __pfx_rtnl_dump_all+0x10/0x10 [ 900.977619][ C1] netlink_rcv_skb+0x1e3/0x430 [ 900.982396][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 900.987891][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 900.993225][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 900.998445][ C1] netlink_unicast+0x7f6/0x990 [ 901.003259][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 901.008581][ C1] ? __virt_addr_valid+0x45f/0x530 [ 901.013804][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 901.018856][ C1] ? __check_object_size+0x47a/0x730 [ 901.024172][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 901.028959][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.034262][ C1] ? __might_fault+0xaa/0x120 [ 901.038957][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.044249][ C1] __sock_sendmsg+0x221/0x270 [ 901.048943][ C1] __sys_sendto+0x363/0x4c0 [ 901.053461][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 901.058519][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 901.064516][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 901.070860][ C1] __x64_sys_sendto+0xde/0x100 [ 901.075636][ C1] do_syscall_64+0xf3/0x230 [ 901.080158][ C1] ? clear_bhb_loop+0x35/0x90 [ 901.084856][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.090763][ C1] RIP: 0033:0x7fa946fa9ad7 [ 901.095187][ C1] RSP: 002b:00007ffe66fe0e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 901.103617][ C1] RAX: ffffffffffffffda RBX: 00007ffe66fe1fc0 RCX: 00007fa946fa9ad7 [ 901.111597][ C1] RDX: 0000000000000014 RSI: 00007ffe66fe1ee0 RDI: 000000000000003c [ 901.119579][ C1] RBP: 00007ffe66fe1f50 R08: 00007ffe66fe1ec4 R09: 000000000000000c [ 901.127559][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 901.135538][ C1] R13: 00007ffe66fe1ec4 R14: 00007ffe66fe1ee0 R15: 0000000000000105 [ 901.143538][ C1] [ 901.146568][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g53589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 901.157766][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 901.167748][ C1] rcu: RCU grace-period kthread stack dump: [ 901.173636][ C1] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 901.185414][ C1] Call Trace: [ 901.188712][ C1] [ 901.191662][ C1] __schedule+0x17fb/0x4be0 [ 901.196211][ C1] ? __pfx___schedule+0x10/0x10 [ 901.201078][ C1] ? __pfx_lock_release+0x10/0x10 [ 901.206121][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 901.212460][ C1] ? schedule+0x90/0x320 [ 901.216718][ C1] schedule+0x14b/0x320 [ 901.220887][ C1] schedule_timeout+0x15a/0x290 [ 901.225749][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 901.231161][ C1] ? __pfx_process_timeout+0x10/0x10 [ 901.236466][ C1] ? prepare_to_swait_event+0x330/0x350 [ 901.242032][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 901.246892][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 901.252113][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 901.258019][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 901.263312][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 901.269225][ C1] ? finish_swait+0xd4/0x1e0 [ 901.273828][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 901.278432][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.283640][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 901.289549][ C1] ? __kthread_parkme+0x169/0x1d0 [ 901.294585][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.299791][ C1] kthread+0x2f0/0x390 [ 901.303869][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.309076][ C1] ? __pfx_kthread+0x10/0x10 [ 901.313680][ C1] ret_from_fork+0x4b/0x80 [ 901.318103][ C1] ? __pfx_kthread+0x10/0x10 [ 901.322700][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.327492][ C1] [ 901.330518][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 901.336845][ C1] CPU: 1 UID: 0 PID: 9846 Comm: kworker/u8:14 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 901.347783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 901.357847][ C1] Workqueue: events_unbound toggle_allocation_gate [ 901.364370][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 901.371145][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 901.390759][ C1] RSP: 0018:ffffc9000421f6e0 EFLAGS: 00000293 [ 901.396843][ C1] RAX: ffffffff81938eeb RBX: 1ffff110170c8c65 RCX: ffff888030003c00 [ 901.404821][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 901.412798][ C1] RBP: ffffc9000421f8e0 R08: ffffffff81938eba R09: 1ffffffff284e310 [ 901.420775][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 901.428755][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 901.436874][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 901.445826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.452426][ C1] CR2: 00007f16552a56c0 CR3: 000000000e736000 CR4: 00000000003526f0 [ 901.460412][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 901.468394][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 901.476378][ C1] Call Trace: [ 901.479664][ C1] [ 901.482522][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 901.488874][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 901.494534][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 901.500378][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 901.506636][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 901.512031][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 901.517690][ C1] ? update_process_times+0x242/0x2f0 [ 901.523075][ C1] ? tick_nohz_handler+0x37c/0x500 [ 901.528201][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 901.533682][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 901.539088][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 901.544908][ C1] ? sched_clock+0x4a/0x70 [ 901.549340][ C1] ? read_tsc+0x9/0x20 [ 901.553425][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 901.559508][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 901.564671][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 901.570838][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 901.576669][ C1] [ 901.579604][ C1] [ 901.582540][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 901.588716][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 901.594883][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 901.601047][ C1] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 901.607224][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 901.612270][ C1] ? __pfx___text_poke+0x10/0x10 [ 901.617217][ C1] ? process_scheduled_works+0x976/0x1840 [ 901.622960][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 901.629301][ C1] ? __pfx___might_resched+0x10/0x10 [ 901.634599][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 901.640504][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 901.645540][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 901.650671][ C1] text_poke_bp_batch+0x352/0xb30 [ 901.655709][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 901.661703][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 901.667872][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 901.673434][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 901.679692][ C1] ? process_scheduled_works+0x976/0x1840 [ 901.685425][ C1] text_poke_finish+0x30/0x50 [ 901.690118][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 901.696109][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 901.702016][ C1] static_key_enable+0x1a/0x20 [ 901.706790][ C1] toggle_allocation_gate+0xbc/0x260 [ 901.712089][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 901.717995][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 901.724346][ C1] process_scheduled_works+0xa66/0x1840 [ 901.729928][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 901.735931][ C1] ? assign_work+0x364/0x3d0 [ 901.740551][ C1] worker_thread+0x870/0xd30 [ 901.745161][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 901.751072][ C1] ? __kthread_parkme+0x169/0x1d0 [ 901.756112][ C1] ? __pfx_worker_thread+0x10/0x10 [ 901.761233][ C1] kthread+0x2f0/0x390 [ 901.765310][ C1] ? __pfx_worker_thread+0x10/0x10 [ 901.770429][ C1] ? __pfx_kthread+0x10/0x10 [ 901.775030][ C1] ret_from_fork+0x4b/0x80 [ 901.779454][ C1] ? __pfx_kthread+0x10/0x10 [ 901.784058][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.788848][ C1]