last executing test programs: 8.802643771s ago: executing program 0 (id=2379): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x25c403, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') unlinkat(r4, &(0x7f00000001c0)='./bus\x00', 0x200) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x18}}, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f00000006c0)=0xe8) statx(r4, &(0x7f0000000700)='./bus/file0\x00', 0x1000, 0x800, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000008c0)='./bus\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002b40)=0x0, &(0x7f0000002b80), &(0x7f0000002bc0)) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) syz_fuse_handle_req(r4, &(0x7f0000000940)="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", 0x2000, &(0x7f0000002e40)={&(0x7f0000000200)={0x50, 0x0, 0x9, {0x7, 0x29, 0x1, 0x1400010, 0x9, 0x9, 0x6, 0x0, 0x0, 0x0, 0x2, 0xb04}}, &(0x7f0000000280)={0x18, 0x0, 0x9, {0x8}}, &(0x7f00000002c0)={0x18, 0x0, 0x9, {0x4}}, &(0x7f0000000300)={0x18, 0x0, 0x5, {0x10001}}, &(0x7f0000000380)={0x18, 0x0, 0x2, {0x6}}, &(0x7f0000000400)={0x28, 0x0, 0x7, {{0x1ff, 0x14e, 0x2, r5}}}, &(0x7f0000000440)={0x60, 0x0, 0x1, {{0x8, 0x9, 0xd, 0x0, 0x0, 0x7ff, 0xb, 0x100}}}, &(0x7f00000004c0)={0x18, 0x0, 0x7, {0xffffffc0}}, &(0x7f0000000500)={0x11, 0x0, 0x8, {'\x00'}}, &(0x7f0000000540)={0x20, 0x0, 0x6, {0x0, 0x2}}, &(0x7f0000000840)={0x78, 0xffffffffffffffda, 0x4, {0x7ff, 0x5, 0x0, {0x5, 0x4, 0x7, 0x9, 0x1, 0x9, 0x3, 0x53f, 0x6, 0xa000, 0x4, r6, r7, 0x3, 0xa4e}}}, &(0x7f00000029c0)={0x90, 0x0, 0x7, {0x4, 0x1, 0x6c08, 0x5ff, 0x800, 0x10001, {0x3, 0x380000000000, 0xb, 0x4, 0x5, 0x7f7, 0xa, 0x3, 0x10000, 0x6000, 0x9199, r8, 0x0, 0x3, 0x7}}}, &(0x7f0000002a80)={0x70, 0x0, 0xfffffffffffffe3d, [{0x2, 0x46, 0x1, 0x3ff, '/'}, {0x2, 0x409, 0x6, 0x3, '[\xb1)($$'}, {0x2, 0x8, 0x4, 0x3, 'GPL\x00'}]}, &(0x7f0000002b00)={0x10, 0x0, 0x4}, &(0x7f0000002c00)={0xa0, 0xfffffffffffffff5, 0x6, {{0x3, 0x3, 0x9, 0x6a, 0xa3, 0xa, {0x4, 0xffffffffffffffff, 0x0, 0x4, 0x8, 0xffffffffad3e8ff6, 0x1, 0x4f73ee0c, 0x2, 0x8000, 0x2, 0xffffffffffffffff, r9, 0xffff46b4, 0x80000000}}, {0x0, 0x9}}}, &(0x7f0000002cc0)={0x20, 0x0, 0x3, {0x3, 0x0, 0x5, 0x7}}, &(0x7f0000002d00)={0x130, 0x0, 0x1f7e, {0xfffffffffc000000, 0xd, 0x0, '\x00', {0x4, 0x3ff, 0xb16e, 0x2, 0xffffffffffffffff, r11, 0x2000, '\x00', 0x5, 0xfffffffffffffffc, 0x9, 0x3, {0x6, 0x1}, {0x0, 0x7fffffff}, {0x4d68, 0x4}, {0x5, 0x9}, 0x1000, 0x8, 0x5, 0xb21}}}}) sendto$inet(r1, &(0x7f0000000680)="af", 0xfdef, 0x0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 8.475780526s ago: executing program 4 (id=2382): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x207645a, 0x2000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x64}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x148, 0x0, 0x6, [{{0x6, 0x400000003, 0x7, 0xf7c, 0xc, 0x400, {0x7, 0x2, 0x18001, 0x369b, 0x23, 0x7, 0x3, 0x1, 0x6, 0x2000, 0x8, r5, r6, 0x40824c39, 0x4}}, {0x3, 0x0, 0x9f, 0x4, 'rkotmo\xb8\xa4ade\x00\xe1\x00\x00\x00\x00\x00\x00\x00\x00\xea;\xff\xc7\xfeXA^\x90\xde\xea|G\xe7\xa0\xca\x1c\xd8dE\xd4\x12\x13\x87\x02\f\xf4p\xfe\x9d\x06\x83f;\x7f\xeb\xc9\xc6\xff\xd2\xb4\x1f\x91V3\xb9\xeb\x13-\xf5\x9e\xd6Zdm\xad\xdd\v\xaf\x1aZZ\x8c\x92\xaa\xd9=t.\x9a0\xac\xae\x92\xc4\x9bx\x83\x1b3\xeeE\x10o\x94\x10\xa2%w>\xe0\x17\x1a\xdc\xe6T\xd3\xbf\xc7\x87J\\A\xa9\x18\x04\xb5\xfa\xf6\x1d\x903\x9e\xb9f\x12\xf7\xca\xea\x82\xeb\xe9v\xc9\xb2\x9c\x9b\xe3\tV\xbeS\xb6\xc62\xd1+\x0f'}}]}, 0x0, 0x0, 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000380)={0x400, 0x4, 0x10001, 0x5, 0x4, 0x8}) 8.154066396s ago: executing program 2 (id=2384): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, 0x0) 8.034706366s ago: executing program 2 (id=2386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060006"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 7.837900147s ago: executing program 0 (id=2387): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {0x0, 0x10}, {0xf}, @result={0x7fff, 0xe4b3}}], 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) mkdir(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x360b, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003640), 0x40401, 0x0) write$binfmt_script(r5, &(0x7f0000005580)={'#! ', './file0', [], 0xa, "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"}, 0xfa6) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 7.83671843s ago: executing program 2 (id=2388): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$nbd(r6, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x3, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xa) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r0, 0x1) 6.966403581s ago: executing program 1 (id=2389): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x1c, 0x1, 0x100000) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r6 = dup(r5) syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) setpgid(0x0, 0x0) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r12, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xc, 0x8c4, 0xf, 0x7, 0x5, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffff7fffffff}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r7, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, r1, 0x23, {0x4, 0x6d4}, 0xf0}, 0x1) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.465297156s ago: executing program 0 (id=2391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x5, 0x7, 0x1, 0x9, 0x3, 0xbf, 0xb9, 0x3, 0xf, 0x5, 0x6}, {0x804, 0x5, 0x1, 0x5, 0x10, 0x2, 0xff, 0x5, 0xa0, 0x6, 0xb, 0x7f, 0x3}, {0x4, 0x6, 0x38, 0x6, 0x84, 0x7, 0x0, 0x50, 0x2, 0x60, 0x3, 0xa, 0x400000000006}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.257510483s ago: executing program 0 (id=2393): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrlimit(0x8dff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.542449074s ago: executing program 1 (id=2394): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (fail_nth: 2) getrlimit(0x8dff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.472170399s ago: executing program 3 (id=2395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0xff7f, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}}, 0x24000010) 5.440390222s ago: executing program 2 (id=2396): socket$inet_udp(0x2, 0x2, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="8b13ca5ceca377ae09508b0a994822bcd5aa1aaba11a3cd6d6ad9cb0280178d7cff6732c46a57872525bf2bf4d297f553e6a9171dbcafd312b93540be13e5d5ac8", 0x41, 0x6, 0x0, 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x84, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe420}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008044}, 0x800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002198230201304230008ec0102030109021b00010000600209048400015a0c00d813ec4a1a928d7e000bf9ae2ea42662a237183f0df20e31ab7beb17"], 0x0) 4.697245564s ago: executing program 0 (id=2397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x4, 0x9, 0x4, 0x70000, 0x6, {}, {0x3, 0xc, 0x6, 0x6, 0x34, 0x10, "3129d16b"}, 0x101, 0x2, {&(0x7f0000000440)=[{0x1, 0x8, {0x0}, 0x7fffffff}, {0x3, 0xfffff463, {0x0}, 0x3}]}, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d39e6908402000d3b3160102030109021b0001000000000904"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) r4 = semget(0x3, 0x3, 0x40) semctl$SETVAL(r4, 0x0, 0x10, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000100)='5\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r8 = getpgid(r1) prlimit64(r8, 0x7, &(0x7f0000000180)={0x200, 0x100000001}, &(0x7f0000000240)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00000000002992b09662bde852e86a6d9de59275539d6ea0475c0dd85b9ddec464716575c24702fdbf5aa2ba84bcc3c8903fa5ecc464d3750f1a1239278a7acc8f76dc10e00d0588dd63210ed6f59dcaba2e25284323733c87ffe73a64855939c16fceb5a2868b72aa7c3c71171d13fa2796c4d212e782dae1bf0bed8a9f3a30f02245e183a206b75516a972e6814c1846bc30d58c"], 0x34}}, 0x0) 4.63466354s ago: executing program 3 (id=2398): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2d, 0x2}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x10000000000000fb) 4.486149928s ago: executing program 1 (id=2399): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x103000, 0x8, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000eb0000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x26315730}}, './file0\x00'}) r3 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 4.276986059s ago: executing program 3 (id=2400): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {0x0, 0x10}, {0xf}, @result={0x7fff, 0xe4b3}}], 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) mkdir(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x360b, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003640), 0x40401, 0x0) write$binfmt_script(r5, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 3.497194876s ago: executing program 1 (id=2401): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) listen(r2, 0xb) landlock_restrict_self(r3, 0x0) listen(r2, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3.031461727s ago: executing program 4 (id=2402): io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfa000, 0x8}) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000c543, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x509340, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d6c7d2d1fb756b0d7b352efd07bd38bedcabb8d856610db17155de5bb0409e3713b2c73464055345b98fe30949e7ee8cddc663f3d5d50881520df8da5115d6d8d81bc62e8dde2460f128365ca184efc5e1b14ff3f4ad1c1f7bad98a9435c0d757ddb9dcd577f5ae33ef675676ba7b44be538aeec0e6ec4973865dc2bb0f0847ded0a131f3b01ac48e070783564cd9031b3b9fcbeafb69dd253e8cbc2c12307f03154573a27f6f00073aae7c4c1701a3f745744c254ddd3b43988c7bbdec9c1e158fda3cdffc887206b78fb1fc943810dc473894738286878513d06aa7f074a11983261f5be648b4b76893a5f733bdafcf42427743534de2bfcf27f014923488c6476dd417344045c747c68c69e3eb5357e69d97a2cfafa44e2547aa21548dfc0739e49321684120c8bdb64448689a3412eebaca2e4b2a2ecf96690f9fec7d569087bc8561cff6012cf5cb14775230226b95a9ded9cccfedafe61c550376adf0b1b59abf9f92da6247e1061afe2eaa9d8f5a28d63db50fca875020da59426501eab6602beb74de33df143ccb60c70f950f5f53f1d5aca6371dfc8dd68cbe7ccfbe0f52e1ff238105dd93d8a3a72da45ce79824d6b091d9c91509cb290afd01f1945b118f2c1c58f17c0b59fbd872412d7d291dcecad019af039375aeee7ddcf36ede82914f64bb41281962c9b10216907c37d06aa5a5b33afe0547c6726ee169779ad6d5cfc5f373f75b234df4ac2007c6db9dc6a0fc3e7e1d2f2658e928c2a854483e6780d69908692d0166ab5334cd5ceb7a69a420803b7ca33e4609f61cfda3b631b54fb81a7473b4bbe2eabc17276f8a009668d634f332fe47fda76a1fae8fe9c3c8962f7ca7a102d5ecd1d6029abb6c422026af6ef277a4c6c21f07121cd8bcce6f1792ea6a628580b478d72b32dd50f59e893bfcf353bea1e2ddbd349c16ccc23bceb8f3b64aa16257eedabadaead30f912bd0e579c0b71e6cd86804fc39a074f94da63f0db97c5f41e38541bf441f49d2751966cc78dacd150ae0b91ffe1f5a117fe494a8b60a17ccfbc780f82f0ea96d8db842e07fb4d68edbe28119a6c2ab72ea15a5ba75ac8193dd7411d9aeece6fc23ac00370c84d7e03990ca3697a0187cc3286e4536ace023ec21389ff08cddb1e9075d1e1b3a98a95720f44e50830ad54fecd437a40f483579c7a5eb40e52e75099d9ada449ba4d0751e44de6edd5e17caa91cfb3bf88bb1e093bd76952c80669845d3cbcde8acf7415ed30ad3a0ff648968d036af2de90f2ab93b250b9386fcba42c1ba01cc951fa1f62ebbb99ad6576d803d29e81ed319350ee0a032bfab9b079ea5a29c66f665ce9ccb6b908593ae2406332c5ac7d11c9b830593576177b2af5d70c65dda56b98448862b75a54b3447534d45e0b5a52edc1a76c97f511030bd261bb1a443e1a38a78973f0781efa9910ebe207457587dbc803e68b2cb985c03c4dfbac440d58c90de66a634c07b13197b9e7d42657fb0537abe475fb56fe24cdcd771d9ac5bcea1c915a77d731d2d16a54885387e034aab6db1718521eeb07b0326d23decd5bba45b311d8617bbfd3afc10923567e8987c95260ab90ba3ff1309273a2a615174d9a33c11bfd393013c314d3df8cf4e584b752c30f54e09a38409a34cdaee74f30547b7dfdb3c48d6b4d5b7346ebcaf7fdbb91d9d45ba303e2ea2736f28301c7b8354bc6f89f58841cb844646a57153c83cd03687d8d3a6b95e93f8abd1218af123ada0de5025d18e4599c8d34cdd8ecf91af7a647c6b43d4704446a104829783ec10b68d95418ddfe8b0dc6552069bd07e4452821317131b7a76887fd792c431e6c07d770926c4e60243d198372482b911d29daac57d92f12d7f471657107a8a910d9abd67bac6eec6e0858e7cf078579621", 0x5c1, 0xfffffffffffffffb) 2.993226703s ago: executing program 3 (id=2403): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009e000040"]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="348dbcae7901ee0000001800010026bd7000000000001d01000015000303000000000000000000050000f7080000000000000000"], 0x34}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001a80), 0x200, 0x0) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000001ac0)={@private1, @local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a30000000080800054000000006140000001000010000000000000000000784000a0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20050800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xa}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r9 = socket(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x3, 0x2, 0x400, 0x8, 0x5, 0x935, 0x80000001, 0x9}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r7, 0x0, 0x2, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) vmsplice(r6, &(0x7f0000000180)=[{&(0x7f00000006c0)="fb", 0x1}], 0x1, 0x0) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[], 0x18c6) r14 = socket$kcm(0x29, 0x0, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x8010, r15, 0x796e5000) sendmsg$kcm(r14, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f0000000000)="40647f1409764d2039623583090cd94e3fb8b7ecfa5a89da0e0a", 0x1a}, {&(0x7f0000000040)="f39771669073be0586713d3e389f1bd882a82a0b897f64cc9dad34b838e9e670509b632b037e1a73dd6009a0727f31ba8ac0b3cf482efb07b01d231f497a513c94c1662d54af5d04c7a306bae1b7d8808b14a7d6d572a240", 0x58}, {&(0x7f0000000100)="c7d6ecaa72429c01d7bd57cd686aa969e331b20cabed391268", 0x19}, {&(0x7f0000000280)="d47f1bf96c99ec4f38f081380dfa19fca0e539a1b29ef4ef6f8230ff55e2067d6f787c8ddea5ffe95ce1e9b3bfe31f1a0676d66f6e2b76b10c323116a7ff1c11c587205efcb6744da8b4ae1da41e46861d017af708cd9918ff064acb624d9d3fa59ae6c29d71f104a186633b0eb57e9b2ebbc5f4661bdb7c3e815be361a45eae", 0x80}, {&(0x7f0000000300)="51ed3b43168cf81916b932b3708ddde8a7ed8828a1cfa3b115f77cb01c4612401057e3e2102e5e71bb664b60e702d93637504a70967f6c31df8122e121b375fe9c8251c6779a61eba633c9a8840cada818dd11b554e24cbd398a95bc4ee86258a8df0b0e27ac3d9bbc77f75f08d2add2aa5506dcc7f53aeeb4d8750d8c7de0d6928ecdf55fc4e7393f575a7c0023d807c07adbebd4b3a98d7439e2e413fbfc2a0b84d384", 0xa4}, {&(0x7f00000003c0)="9a66e983f773011afe3fda0bf4ca9b1a8b87fe0efbb417555149851119918d7204912a641fe7ec881ba7cd3ff40dc9be9559627f452405a845588075751dab2335b8084f01109519e0fe854a83bb8cc5c90067f6dfe9e2069a173e0a9370db1857e173ab8e1f88f668bd0ec9e2f721bea835b6357a4833bd6d4779067e266450ef83adf4032b5e1e6189", 0x8a}, {&(0x7f0000000480)="70999990052becde6dc33076f574ad1a9c9b3b8771430136eb98009537ffb7d4d08374b02a5eea", 0x27}], 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14f0}, 0x4000810) 2.533935007s ago: executing program 4 (id=2404): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="f3a25d88c824", 0x6, 0xfffff9b2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0xd, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) msgget(0x0, 0x20) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r6, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000000)={0x292e, r1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) 2.468352077s ago: executing program 1 (id=2405): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet6(0xa, 0x800000000000802, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8, 0x0) r2 = epoll_create(0x1000003) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)={0x80000000}) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x20, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.750368481s ago: executing program 2 (id=2406): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4000000, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000040085000000930099009565104562caf2898ad72dcd10c580d25841242f20b9d662fb3149d069481fcb2b6730d856048c0429f696c466df93527a5cdf8adbee25fd2a33825deb3f23a4d3283af0d13e1290f1cabc9ed610f27c604a30ec9a5b20e879f1ca42f2d8677e0960ad5bdd5249855f7419d6b3488a1f6c93ccd050489f340aa202205252205dfb02b91cb53dd7e810681c6781a7125ccf21325818ca0245ed53bf49780661f3f325e2f4d448480480b321ba0a11e94e1c144582b0cbb0b4a38fc31ddd3d892449020890c9092b5a32da8fb3cae6b289da7993de658a8163cdf46827d6e7363dada55414350073d4c7b6c4f270a880a507a78e76bf2c6dbfa1a9bb3fa7a6537c338ae7ea95f8d952ec264a4630c63dd6c6c6d70894de5136f1e2c5195585ff0004268e35dc2994fcca"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, @void, @value}, 0x94) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0xe, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f00000000c0)=0x7e6, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000280)=0x7fc, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa2474a19c10b80800450000000000004e2000109078020000000800"/50], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x1000, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0/file0', [{0x20, '\x06hAX\xb1\xef&\x92\xf5\x11\x8c \xc3n\xdeq\x18\xbb\xa8 I%F\x13=\x96\x8cG\xbfH\xab\x84\x13\xc6\xbbw\xb4\xb3W\x16 X[\x88An$z\xcdf\xa0L:6\xcd^\xff\xec\xe3w]#\xe5[\x01>\xe9\xbd\xbcOr\xfd<\xe8\x99#l\xed\x86C\x04\x9c=<\a4\x1e4\xaa]\xecVC\xd4\xbc\xde\x890M\xd0\x1b\xc2\x1d\xa5D\x9a*:ju\x15\x01\xb5\x9a\x8f\x15$\xa4o\a\x0e\x85o6\xddU\x19gB]\x8d\xc5\xbd\x9c\xa8\xc6\x06\xa0\fW&\xb1\x81U\xf8\xd9#\xd7:\x13\xcd\xe3\x01\xa1\x88\xf6\xf1b\x15\x9dZf\xbf\x1e'}, {0x20, '#! '}, {0x20, '\xd9\xbb1\xcbQ\xe9u\xdc\r\xb0N8\xc6\x8e@6\xa2\xeeE1\x81]\x17\xf5\xa8\x86\xe9\xd7K\'=\xa8&\xe3r#|\xd0~dy\xbfy\xf3g\x00\x00\x00\x00\x00'}, {0x20, 'GPL\x00'}]}, 0xf2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.697047711s ago: executing program 3 (id=2407): syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r7 = dup(r6) sendfile(r6, r7, 0x0, 0x80006) (fail_nth: 1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x0, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}, {0x40000, 0x80000}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.609031848s ago: executing program 0 (id=2408): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200), 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, "fd5a44512b7e1b3c20ec2a3ba53b31dd77000000000400"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xbf, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) syz_io_uring_setup(0x24f8, 0x0, 0x0, &(0x7f0000000080)) socket$inet6_dccp(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4"], 0x6f4}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x2, @pix_mp={0x4, 0x7fffffff, 0x30313953, 0x8, 0x5, [{0x60, 0x3}, {0x9, 0xfffffff0}, {0x5}, {0x3, 0x6794}, {0x54, 0x20}, {0x81, 0x7}, {0x698, 0x4}, {0x7fffffff, 0x3}], 0x5, 0x3, 0x8, 0x1}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) socket$phonet_pipe(0x23, 0x5, 0x2) 1.521058427s ago: executing program 4 (id=2409): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4008, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000f41200010412c52bc6c4e9e23f3f0c00000000000000fff5000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000500160002000000"], 0x40}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r4, 0x4, 0x7c00) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000050603"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) io_uring_enter(0xffffffffffffffff, 0x62f, 0x9e70, 0x22, &(0x7f0000000240)={[0x7]}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000005) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 1.122186244s ago: executing program 1 (id=2410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) write$binfmt_script(r1, &(0x7f00000008c0)={'#! ', './file0', [{}, {0x20, '@'}, {0x20, '+'}, {0x20, '\xf2-'}, {0x20, '*@:$,)!\xf1)\xcc--%+'}, {0x20, '.]'}], 0xa, "a0627edc9e068146b2da74e927a9473a473709d19ea1ed4efdfd20599067588038828503d6437aa58d12e45a5c31c702b83a922322e45fbb158ae4e1a5beefe9669f9409352c4ca7"}, 0x6d) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)="b9", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) sendfile(r6, r6, 0x0, 0x24002de8) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) recvmmsg(r9, &(0x7f0000000040)=[{{0x0, 0xa, 0x0}}], 0x1, 0x10, 0x0) 698.466136ms ago: executing program 3 (id=2411): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x103000, 0x8, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000eb0000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x26315730}}, './file0\x00'}) r3 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 623.077445ms ago: executing program 2 (id=2412): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @private=0xa010101}, 0x74, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0xc9, 0xf22}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$nbd(r6, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x3, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xa) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r0, 0x1) 545.958023ms ago: executing program 4 (id=2413): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0], 0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000640)={0x100, 0x1, &(0x7f0000000540)=[r3], &(0x7f0000000200)=[0x5], &(0x7f0000000100)=[r3], 0x0}) 0s ago: executing program 4 (id=2414): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a, 0x2000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x64}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r3, &(0x7f0000000380)=""/186, 0xba) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000380)={0x400, 0x4, 0x10001, 0x5, 0x4, 0x8}) kernel console output (not intermixed with test programs): 793706][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.185453][ T5893] usb 4-1: USB disconnect, device number 49 [ 677.197843][T13007] Invalid ELF header magic: != ELF [ 677.661235][T13012] Invalid ELF header magic: != ELF [ 677.878387][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.148259][T13019] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 678.533448][T13026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1955'. [ 679.685706][T13046] netlink: 6233 bytes leftover after parsing attributes in process `syz.0.1960'. [ 679.726611][ T29] audit: type=1400 audit(1737413185.650:907): avc: denied { accept } for pid=13045 comm="syz.0.1960" path="socket:[41099]" dev="sockfs" ino=41099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 680.109228][T13057] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1965'. [ 680.188476][ T29] audit: type=1400 audit(1737413186.110:908): avc: denied { ioctl } for pid=13056 comm="syz.0.1965" path="socket:[40732]" dev="sockfs" ino=40732 ioctlcmd=0x6426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 680.625313][T11724] Bluetooth: hci5: sending frame failed (-49) [ 680.633328][T12547] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 680.640416][ T5864] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 680.685870][T13062] loop6: detected capacity change from 0 to 524287994 [ 680.705872][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.715213][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.726347][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.735543][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.785230][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.794441][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.820081][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.829257][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 680.882489][T13063] loop6: detected capacity change from 524287994 to 524287952 [ 680.902268][T13062] Dev loop6: unable to read RDB block 8 [ 680.915050][T13073] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 680.925235][T13062] loop6: unable to read partition table [ 680.936461][T13062] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´8ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 681.226311][ T5864] usb 2-1: config 2 has an invalid interface number: 226 but max is 0 [ 681.442090][ T5864] usb 2-1: config 2 has no interface number 0 [ 681.443358][T13076] ax25_connect(): syz.4.1968 uses autobind, please contact jreuter@yaina.de [ 681.470916][ T5864] usb 2-1: config 2 interface 226 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 681.605789][ T5864] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 681.706032][ T5864] usb 2-1: config 2 interface 226 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 681.734892][ T5864] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x8B has invalid maxpacket 60280, setting to 8 [ 681.746955][T13082] Invalid ELF header magic: != ELF [ 681.753001][T13080] Invalid ELF header magic: != ELF [ 681.760371][ T5864] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 682.260561][ T5864] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=44.62 [ 682.349934][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.376299][T13060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 682.410016][T13060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 682.430281][T13088] rtc_cmos 00:00: Alarms can be up to one day in the future [ 682.472288][ T5864] kvaser_usb 2-1:2.226: error -ENODEV: Cannot get usb endpoint(s) [ 682.852485][ T5922] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 682.914556][ T51] usb 2-1: USB disconnect, device number 46 [ 683.069910][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 683.086393][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.108571][ T5922] usb 4-1: config 0 has no interfaces? [ 683.122128][ T5922] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 683.143895][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.155184][ T5922] usb 4-1: Product: syz [ 683.159357][ T5922] usb 4-1: Manufacturer: syz [ 683.172754][ T5922] usb 4-1: SerialNumber: syz [ 683.184168][ T5922] usb 4-1: config 0 descriptor?? [ 683.220040][ T5894] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 683.725553][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 683.734147][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 683.752928][ T5894] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 683.765681][ T5894] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 684.292510][ T29] audit: type=1400 audit(1737413189.750:909): avc: denied { accept } for pid=13103 comm="syz.4.1980" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 684.324708][ T5894] usb 3-1: Product: syz [ 684.334039][ T29] audit: type=1400 audit(1737413189.760:910): avc: denied { write } for pid=13103 comm="syz.4.1980" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=37434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 684.492674][ T5894] usb 3-1: Manufacturer: syz [ 684.499017][ T5894] usb 3-1: SerialNumber: syz [ 684.606234][T13113] tipc: Started in network mode [ 684.611362][T13113] tipc: Node identity be018dcc956d, cluster identity 4711 [ 684.619270][T13113] tipc: Enabled bearer , priority 7 [ 684.810640][ T5894] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 685.075301][ T5894] visor 3-1:1.0: probe with driver visor failed with error -110 [ 685.235896][T13108] tipc: Disabling bearer [ 685.442854][T13119] Invalid ELF header magic: != ELF [ 685.489873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.776364][ T5864] usb 4-1: USB disconnect, device number 50 [ 686.147730][T13130] FAULT_INJECTION: forcing a failure. [ 686.147730][T13130] name failslab, interval 1, probability 0, space 0, times 0 [ 686.160756][T13130] CPU: 1 UID: 0 PID: 13130 Comm: syz.4.1986 Not tainted 6.13.0-syzkaller #0 [ 686.169436][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 686.179487][T13130] Call Trace: [ 686.182782][T13130] [ 686.185716][T13130] dump_stack_lvl+0x16c/0x1f0 [ 686.190402][T13130] should_fail_ex+0x497/0x5b0 [ 686.195086][T13130] ? fs_reclaim_acquire+0xae/0x150 [ 686.200204][T13130] should_failslab+0xc2/0x120 [ 686.204889][T13130] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 686.210704][T13130] ? mark_held_locks+0x9f/0xe0 [ 686.215475][T13130] ? __alloc_skb+0x2b1/0x380 [ 686.220080][T13130] ? hlock_class+0x4e/0x130 [ 686.224596][T13130] __alloc_skb+0x2b1/0x380 [ 686.229022][T13130] ? __pfx___alloc_skb+0x10/0x10 [ 686.233972][T13130] ? __pfx___lock_acquire+0x10/0x10 [ 686.239182][T13130] alloc_skb_with_frags+0xe4/0x850 [ 686.244298][T13130] ? release_sock+0x21/0x220 [ 686.248889][T13130] sock_alloc_send_pskb+0x7f1/0x980 [ 686.254095][T13130] ? find_held_lock+0x59/0x110 [ 686.258874][T13130] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 686.264601][T13130] ? __pfx_lock_release+0x10/0x10 [ 686.269629][T13130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 686.275007][T13130] ? lock_acquire+0x2f/0xb0 [ 686.279513][T13130] ? __local_bh_enable_ip+0xa4/0x120 [ 686.284809][T13130] dccp_sendmsg+0x2fb/0xd10 [ 686.289328][T13130] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 686.296094][T13130] ? __pfx_dccp_sendmsg+0x10/0x10 [ 686.301133][T13130] ? __pfx_dccp_sendmsg+0x10/0x10 [ 686.306164][T13130] inet_sendmsg+0x119/0x140 [ 686.310675][T13130] ____sys_sendmsg+0x98c/0xc90 [ 686.315446][T13130] ? copy_msghdr_from_user+0x10b/0x160 [ 686.320905][T13130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.326204][T13130] ___sys_sendmsg+0x135/0x1e0 [ 686.330885][T13130] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.336105][T13130] ? __sys_sendmmsg+0x2c8/0x420 [ 686.340959][T13130] __sys_sendmmsg+0x201/0x420 [ 686.345644][T13130] ? __pfx___sys_sendmmsg+0x10/0x10 [ 686.350851][T13130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 686.356845][T13130] ? fput+0x67/0x440 [ 686.360756][T13130] ? ksys_write+0x1ba/0x250 [ 686.365232][T13130] ? __pfx_ksys_write+0x10/0x10 [ 686.370059][T13130] __x64_sys_sendmmsg+0x9c/0x100 [ 686.374971][T13130] ? lockdep_hardirqs_on+0x7c/0x110 [ 686.380150][T13130] do_syscall_64+0xcd/0x250 [ 686.384631][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.390499][T13130] RIP: 0033:0x7f9064985d29 [ 686.394888][T13130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.414469][T13130] RSP: 002b:00007f90656e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 686.422852][T13130] RAX: ffffffffffffffda RBX: 00007f9064b76160 RCX: 00007f9064985d29 [ 686.430795][T13130] RDX: 0000000000000588 RSI: 0000000020001500 RDI: 0000000000000007 [ 686.438754][T13130] RBP: 00007f90656e5090 R08: 0000000000000000 R09: 0000000000000000 [ 686.446708][T13130] R10: 0000000003000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.454668][T13130] R13: 0000000000000000 R14: 00007f9064b76160 R15: 00007ffe6f5001e8 [ 686.462647][T13130] [ 687.022282][ T5864] usb 3-1: USB disconnect, device number 52 [ 687.138984][T13145] ax25_connect(): syz.0.1989 uses autobind, please contact jreuter@yaina.de [ 687.816236][T13131] nvme_fabrics: missing parameter 'transport=%s' [ 687.849302][T13131] nvme_fabrics: missing parameter 'nqn=%s' [ 688.295182][T13131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1987'. [ 688.389931][T13131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'. [ 688.420156][T13131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1987'. [ 688.439386][T13131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1987'. [ 688.787986][T13165] tipc: Enabled bearer , priority 7 [ 689.411294][T13160] tipc: Disabling bearer [ 689.423958][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 689.455601][T13167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1996'. [ 689.583225][T13169] Invalid ELF header magic: != ELF [ 689.937555][T13174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.948085][T13174] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 690.003627][T13176] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2000'. [ 690.141535][ T5863] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 690.459986][ T5864] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 690.483002][ T5863] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 690.496994][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.508485][ T5863] usb 5-1: config 0 descriptor?? [ 690.619901][ T5893] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 690.641875][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 690.648387][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 690.658778][ T5864] usb 4-1: config 0 has no interface number 0 [ 690.667628][ T5864] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 690.680429][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.693164][ T5864] usb 4-1: Product: syz [ 690.697362][ T5864] usb 4-1: Manufacturer: syz [ 690.709862][ T5864] usb 4-1: SerialNumber: syz [ 690.716240][ T5864] usb 4-1: config 0 descriptor?? [ 690.730032][ T5864] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 690.791258][ T5893] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 690.803589][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.825823][ T5893] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 690.839656][ T5893] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.849254][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=255 [ 690.857723][ T5893] usb 3-1: Product: syz [ 690.862901][ T5893] usb 3-1: Manufacturer: syz [ 690.867773][ T5893] usb 3-1: SerialNumber: syz [ 690.927735][ T5863] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 690.964238][ T5863] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 690.978292][ T5863] asix 5-1:0.0: probe with driver asix failed with error -32 [ 690.990044][ T5863] usb 5-1: USB disconnect, device number 57 [ 691.197389][ T5893] usb 3-1: USB disconnect, device number 53 [ 691.583407][T13190] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 691.595726][T13190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2004'. [ 691.604880][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2004'. [ 691.613965][T13190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2004'. [ 692.150912][T13198] FAULT_INJECTION: forcing a failure. [ 692.150912][T13198] name failslab, interval 1, probability 0, space 0, times 0 [ 692.168127][T13198] CPU: 0 UID: 0 PID: 13198 Comm: syz.1.2008 Not tainted 6.13.0-syzkaller #0 [ 692.176826][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 692.186861][T13198] Call Trace: [ 692.190129][T13198] [ 692.193051][T13198] dump_stack_lvl+0x16c/0x1f0 [ 692.197740][T13198] should_fail_ex+0x497/0x5b0 [ 692.202412][T13198] ? fs_reclaim_acquire+0xae/0x150 [ 692.207523][T13198] should_failslab+0xc2/0x120 [ 692.212201][T13198] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 692.218006][T13198] ? __alloc_skb+0x2b1/0x380 [ 692.222598][T13198] __alloc_skb+0x2b1/0x380 [ 692.227017][T13198] ? __pfx___alloc_skb+0x10/0x10 [ 692.231961][T13198] netlink_ack+0x15f/0xb80 [ 692.236373][T13198] ? avc_has_perm_noaudit+0x61/0x3a0 [ 692.241658][T13198] netlink_rcv_skb+0x348/0x440 [ 692.246415][T13198] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 692.251870][T13198] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.257157][T13198] ? bpf_lsm_capable+0x9/0x10 [ 692.261822][T13198] ? security_capable+0x7e/0x260 [ 692.266748][T13198] ? ns_capable+0xd7/0x110 [ 692.271157][T13198] nfnetlink_rcv+0x1b4/0x430 [ 692.275739][T13198] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 692.280845][T13198] ? netlink_deliver_tap+0x1ae/0xd30 [ 692.286123][T13198] netlink_unicast+0x53c/0x7f0 [ 692.290882][T13198] ? __pfx_netlink_unicast+0x10/0x10 [ 692.296169][T13198] netlink_sendmsg+0x8b8/0xd70 [ 692.300929][T13198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.306213][T13198] ____sys_sendmsg+0xaaf/0xc90 [ 692.310975][T13198] ? copy_msghdr_from_user+0x10b/0x160 [ 692.316418][T13198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.321702][T13198] ___sys_sendmsg+0x135/0x1e0 [ 692.326364][T13198] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.331554][T13198] ? __pfx_lock_release+0x10/0x10 [ 692.336564][T13198] ? trace_lock_acquire+0x14e/0x1f0 [ 692.341760][T13198] ? __fget_files+0x206/0x3a0 [ 692.346443][T13198] __sys_sendmsg+0x16e/0x220 [ 692.351021][T13198] ? __pfx___sys_sendmsg+0x10/0x10 [ 692.356128][T13198] do_syscall_64+0xcd/0x250 [ 692.360625][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.366510][T13198] RIP: 0033:0x7efd0db85d29 [ 692.370911][T13198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.390505][T13198] RSP: 002b:00007efd0e9e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.398904][T13198] RAX: ffffffffffffffda RBX: 00007efd0dd75fa0 RCX: 00007efd0db85d29 [ 692.406861][T13198] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 692.414816][T13198] RBP: 00007efd0e9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 692.422772][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.430729][T13198] R13: 0000000000000000 R14: 00007efd0dd75fa0 R15: 00007ffde7ad0ba8 [ 692.438694][T13198] [ 692.441761][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.549109][ T5864] gspca_spca1528: reg_w err -71 [ 692.554221][ T5864] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 692.574654][ T5864] usb 4-1: USB disconnect, device number 51 [ 692.593224][ T5893] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 692.627492][T13204] FAULT_INJECTION: forcing a failure. [ 692.627492][T13204] name failslab, interval 1, probability 0, space 0, times 0 [ 692.640659][T13204] CPU: 0 UID: 0 PID: 13204 Comm: syz.1.2010 Not tainted 6.13.0-syzkaller #0 [ 692.649332][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 692.659363][T13204] Call Trace: [ 692.662631][T13204] [ 692.665561][T13204] dump_stack_lvl+0x16c/0x1f0 [ 692.670241][T13204] should_fail_ex+0x497/0x5b0 [ 692.674898][T13204] ? fs_reclaim_acquire+0xae/0x150 [ 692.680001][T13204] should_failslab+0xc2/0x120 [ 692.684677][T13204] __kmalloc_noprof+0xcb/0x510 [ 692.689434][T13204] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 692.696533][T13204] ? cred_has_capability.isra.0+0x192/0x2f0 [ 692.702419][T13204] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 692.707866][T13204] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 692.713930][T13204] ? bpf_lsm_capable+0x9/0x10 [ 692.718591][T13204] ? security_capable+0x7e/0x260 [ 692.723521][T13204] genl_rcv_msg+0x565/0x800 [ 692.728013][T13204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.733023][T13204] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 692.739091][T13204] netlink_rcv_skb+0x16b/0x440 [ 692.743849][T13204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.748859][T13204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.754153][T13204] ? down_read+0xc9/0x330 [ 692.758474][T13204] ? __pfx_down_read+0x10/0x10 [ 692.763233][T13204] ? netlink_deliver_tap+0x1ae/0xd30 [ 692.768511][T13204] genl_rcv+0x28/0x40 [ 692.772488][T13204] netlink_unicast+0x53c/0x7f0 [ 692.777246][T13204] ? __pfx_netlink_unicast+0x10/0x10 [ 692.782531][T13204] netlink_sendmsg+0x8b8/0xd70 [ 692.787288][T13204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.792572][T13204] ____sys_sendmsg+0xaaf/0xc90 [ 692.797325][T13204] ? copy_msghdr_from_user+0x10b/0x160 [ 692.802771][T13204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.808061][T13204] ___sys_sendmsg+0x135/0x1e0 [ 692.812733][T13204] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.817925][T13204] ? __pfx_lock_release+0x10/0x10 [ 692.822936][T13204] ? trace_lock_acquire+0x14e/0x1f0 [ 692.828136][T13204] ? __fget_files+0x206/0x3a0 [ 692.832807][T13204] __sys_sendmsg+0x16e/0x220 [ 692.837385][T13204] ? __pfx___sys_sendmsg+0x10/0x10 [ 692.842497][T13204] do_syscall_64+0xcd/0x250 [ 692.846995][T13204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.852880][T13204] RIP: 0033:0x7efd0db85d29 [ 692.857282][T13204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.876876][T13204] RSP: 002b:00007efd0e9e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.885277][T13204] RAX: ffffffffffffffda RBX: 00007efd0dd75fa0 RCX: 00007efd0db85d29 [ 692.893236][T13204] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000004 [ 692.901194][T13204] RBP: 00007efd0e9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 692.909152][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.917108][T13204] R13: 0000000000000000 R14: 00007efd0dd75fa0 R15: 00007ffde7ad0ba8 [ 692.925074][T13204] [ 692.928167][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.987985][T13209] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 692.997928][T13209] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 693.021082][ T5893] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 693.030171][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.039519][ T5893] usb 3-1: config 0 descriptor?? [ 693.060045][ T5922] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 693.241286][ T5922] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 693.252830][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.264411][ T5922] usb 5-1: config 0 descriptor?? [ 693.662595][ T29] audit: type=1400 audit(1737413199.590:911): avc: denied { mount } for pid=13222 comm="syz.0.2014" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 693.669321][T13223] FAULT_INJECTION: forcing a failure. [ 693.669321][T13223] name failslab, interval 1, probability 0, space 0, times 0 [ 693.691043][ T5893] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 693.698117][T13223] CPU: 1 UID: 0 PID: 13223 Comm: syz.0.2014 Not tainted 6.13.0-syzkaller #0 [ 693.710782][ T5893] asix 3-1:0.0: probe with driver asix failed with error -32 [ 693.716192][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 693.716206][T13223] Call Trace: [ 693.716214][T13223] [ 693.716223][T13223] dump_stack_lvl+0x16c/0x1f0 [ 693.727016][ T5893] usb 3-1: USB disconnect, device number 54 [ 693.733609][T13223] should_fail_ex+0x497/0x5b0 [ 693.733643][T13223] ? fs_reclaim_acquire+0xae/0x150 [ 693.733664][T13223] should_failslab+0xc2/0x120 [ 693.733687][T13223] __kmalloc_noprof+0xcb/0x510 [ 693.733709][T13223] ? trace_kmalloc+0x2d/0xd0 [ 693.733734][T13223] ? __kmalloc_noprof+0x23b/0x510 [ 693.733759][T13223] tomoyo_realpath_from_path+0xb9/0x720 [ 693.733787][T13223] ? tomoyo_fill_path_info+0x233/0x420 [ 693.733808][T13223] tomoyo_mount_acl+0x1af/0x880 [ 693.733829][T13223] ? hlock_class+0x4e/0x130 [ 693.733854][T13223] ? __lock_acquire+0x15a9/0x3c40 [ 693.733877][T13223] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 693.733904][T13223] ? __pfx___lock_acquire+0x10/0x10 [ 693.815080][T13223] ? stack_trace_save+0x95/0xd0 [ 693.819931][T13223] ? __pfx_lock_release+0x10/0x10 [ 693.824961][T13223] ? trace_lock_acquire+0x14e/0x1f0 [ 693.830157][T13223] ? tomoyo_mount_permission+0x149/0x420 [ 693.835783][T13223] ? lock_acquire+0x2f/0xb0 [ 693.840273][T13223] ? tomoyo_mount_permission+0x149/0x420 [ 693.845902][T13223] tomoyo_mount_permission+0x16e/0x420 [ 693.851351][T13223] ? tomoyo_mount_permission+0x149/0x420 [ 693.856974][T13223] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 693.862954][T13223] ? get_current_fs_domain+0x184/0x1f0 [ 693.868411][T13223] security_sb_mount+0x9b/0x260 [ 693.873258][T13223] path_mount+0x129/0x1f10 [ 693.877665][T13223] ? kmem_cache_free+0x152/0x4c0 [ 693.882589][T13223] ? __pfx_path_mount+0x10/0x10 [ 693.887433][T13223] ? putname+0x13c/0x180 [ 693.891671][T13223] __x64_sys_mount+0x294/0x320 [ 693.896423][T13223] ? __pfx___x64_sys_mount+0x10/0x10 [ 693.901703][T13223] do_syscall_64+0xcd/0x250 [ 693.906202][T13223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.912089][T13223] RIP: 0033:0x7f5cccd85d29 [ 693.916491][T13223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.936098][T13223] RSP: 002b:00007f5ccdc8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 693.944512][T13223] RAX: ffffffffffffffda RBX: 00007f5cccf75fa0 RCX: 00007f5cccd85d29 [ 693.952475][T13223] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 693.960444][T13223] RBP: 00007f5ccdc8b090 R08: 0000000020000040 R09: 0000000000000000 [ 693.968406][T13223] R10: 0000000000080020 R11: 0000000000000246 R12: 0000000000000001 [ 693.976369][T13223] R13: 0000000000000000 R14: 00007f5cccf75fa0 R15: 00007ffd1e1a56d8 [ 693.984337][T13223] [ 693.991273][T13223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 694.030894][ T5922] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 694.041950][ T5922] asix 5-1:0.0: probe with driver asix failed with error -32 [ 694.061449][ T5922] usb 5-1: USB disconnect, device number 58 [ 694.074619][ T6585] udevd[6585]: setting mode of /dev/bus/usb/005/058 to 020664 failed: No such file or directory [ 694.104917][ T6585] udevd[6585]: setting owner of /dev/bus/usb/005/058 to uid=0, gid=0 failed: No such file or directory [ 694.904567][T13240] FAULT_INJECTION: forcing a failure. [ 694.904567][T13240] name failslab, interval 1, probability 0, space 0, times 0 [ 694.938133][T13240] CPU: 0 UID: 0 PID: 13240 Comm: syz.2.2020 Not tainted 6.13.0-syzkaller #0 [ 694.946840][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 694.956902][T13240] Call Trace: [ 694.960188][T13240] [ 694.963120][T13240] dump_stack_lvl+0x16c/0x1f0 [ 694.967809][T13240] should_fail_ex+0x497/0x5b0 [ 694.972494][T13240] ? fs_reclaim_acquire+0xae/0x150 [ 694.977614][T13240] should_failslab+0xc2/0x120 [ 694.982298][T13240] __kmalloc_cache_noprof+0x68/0x410 [ 694.987589][T13240] ? __nla_validate+0x3e/0x50 [ 694.992277][T13240] netlbl_cipsov4_add+0x377/0x2450 [ 694.997396][T13240] ? __nla_parse+0x40/0x60 [ 695.001819][T13240] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 695.007375][T13240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 695.014750][T13240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 695.022134][T13240] genl_family_rcv_msg_doit+0x202/0x2f0 [ 695.027691][T13240] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 695.033774][T13240] ? bpf_lsm_capable+0x9/0x10 [ 695.038460][T13240] ? security_capable+0x7e/0x260 [ 695.042648][T13245] FAULT_INJECTION: forcing a failure. [ 695.042648][T13245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.043395][T13240] genl_rcv_msg+0x565/0x800 [ 695.060890][T13240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.065916][T13240] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 695.071462][T13240] ? __pfx___lock_acquire+0x10/0x10 [ 695.076658][T13240] netlink_rcv_skb+0x16b/0x440 [ 695.081417][T13240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.086432][T13240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.091722][T13240] ? down_read+0xc9/0x330 [ 695.096045][T13240] ? __pfx_down_read+0x10/0x10 [ 695.100803][T13240] ? netlink_deliver_tap+0x1ae/0xd30 [ 695.106087][T13240] genl_rcv+0x28/0x40 [ 695.110066][T13240] netlink_unicast+0x53c/0x7f0 [ 695.114828][T13240] ? __pfx_netlink_unicast+0x10/0x10 [ 695.120121][T13240] netlink_sendmsg+0x8b8/0xd70 [ 695.124894][T13240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.130183][T13240] ____sys_sendmsg+0xaaf/0xc90 [ 695.134940][T13240] ? copy_msghdr_from_user+0x10b/0x160 [ 695.140394][T13240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.145681][T13240] ___sys_sendmsg+0x135/0x1e0 [ 695.150354][T13240] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.155560][T13240] ? __pfx_lock_release+0x10/0x10 [ 695.160573][T13240] ? trace_lock_acquire+0x14e/0x1f0 [ 695.165774][T13240] ? __fget_files+0x206/0x3a0 [ 695.170446][T13240] __sys_sendmsg+0x16e/0x220 [ 695.175031][T13240] ? __pfx___sys_sendmsg+0x10/0x10 [ 695.180148][T13240] do_syscall_64+0xcd/0x250 [ 695.184653][T13240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.190540][T13240] RIP: 0033:0x7f6b46985d29 [ 695.194945][T13240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.214552][T13240] RSP: 002b:00007f6b47881038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.222963][T13240] RAX: ffffffffffffffda RBX: 00007f6b46b75fa0 RCX: 00007f6b46985d29 [ 695.230930][T13240] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 695.238897][T13240] RBP: 00007f6b47881090 R08: 0000000000000000 R09: 0000000000000000 [ 695.246861][T13240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.254822][T13240] R13: 0000000000000000 R14: 00007f6b46b75fa0 R15: 00007ffd7d0a0d18 [ 695.262795][T13240] [ 695.265805][T13245] CPU: 1 UID: 0 PID: 13245 Comm: syz.3.2022 Not tainted 6.13.0-syzkaller #0 [ 695.265915][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.274475][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 695.290486][T13245] Call Trace: [ 695.293754][T13245] [ 695.296672][T13245] dump_stack_lvl+0x16c/0x1f0 [ 695.301347][T13245] should_fail_ex+0x497/0x5b0 [ 695.306018][T13245] _copy_to_user+0x32/0xd0 [ 695.310422][T13245] simple_read_from_buffer+0xd0/0x160 [ 695.315792][T13245] proc_fail_nth_read+0x198/0x270 [ 695.320810][T13245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.326349][T13245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.331888][T13245] vfs_read+0x1df/0xbe0 [ 695.336032][T13245] ? __fget_files+0x1fc/0x3a0 [ 695.340698][T13245] ? __pfx___mutex_lock+0x10/0x10 [ 695.345712][T13245] ? __pfx_vfs_read+0x10/0x10 [ 695.350382][T13245] ? __fget_files+0x206/0x3a0 [ 695.355050][T13245] ksys_read+0x12b/0x250 [ 695.359278][T13245] ? __pfx_ksys_read+0x10/0x10 [ 695.364032][T13245] do_syscall_64+0xcd/0x250 [ 695.368528][T13245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.374414][T13245] RIP: 0033:0x7f7fd358473c [ 695.378813][T13245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 695.398406][T13245] RSP: 002b:00007f7fd4490030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 695.406807][T13245] RAX: ffffffffffffffda RBX: 00007f7fd3775fa0 RCX: 00007f7fd358473c [ 695.414762][T13245] RDX: 000000000000000f RSI: 00007f7fd44900a0 RDI: 0000000000000004 [ 695.422717][T13245] RBP: 00007f7fd4490090 R08: 0000000000000000 R09: 0000000000000000 [ 695.430672][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.438626][T13245] R13: 0000000000000000 R14: 00007f7fd3775fa0 R15: 00007ffdcd32e5f8 [ 695.446592][T13245] [ 695.631567][T13258] __nla_validate_parse: 4 callbacks suppressed [ 695.631584][T13258] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2023'. [ 695.831051][T13262] FAULT_INJECTION: forcing a failure. [ 695.831051][T13262] name failslab, interval 1, probability 0, space 0, times 0 [ 695.849988][ T5894] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 695.852853][T13262] CPU: 0 UID: 0 PID: 13262 Comm: syz.4.2026 Not tainted 6.13.0-syzkaller #0 [ 695.866241][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 695.876295][T13262] Call Trace: [ 695.879573][T13262] [ 695.882507][T13262] dump_stack_lvl+0x16c/0x1f0 [ 695.887205][T13262] should_fail_ex+0x497/0x5b0 [ 695.891886][T13262] ? fs_reclaim_acquire+0xae/0x150 [ 695.896989][T13262] should_failslab+0xc2/0x120 [ 695.901645][T13262] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 695.906996][T13262] ? __mutex_unlock_slowpath+0x164/0x690 [ 695.912610][T13262] ? getname_flags.part.0+0x4c/0x550 [ 695.917876][T13262] getname_flags.part.0+0x4c/0x550 [ 695.922968][T13262] getname_flags+0x93/0xf0 [ 695.927362][T13262] user_path_at+0x24/0x60 [ 695.931667][T13262] do_fchownat+0xfa/0x200 [ 695.935975][T13262] ? __pfx_do_fchownat+0x10/0x10 [ 695.940888][T13262] ? ksys_write+0x1ba/0x250 [ 695.945368][T13262] ? __pfx_ksys_write+0x10/0x10 [ 695.950200][T13262] __x64_sys_lchown+0x7e/0xc0 [ 695.954853][T13262] ? lockdep_hardirqs_on+0x7c/0x110 [ 695.960028][T13262] do_syscall_64+0xcd/0x250 [ 695.964510][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.970382][T13262] RIP: 0033:0x7f9064985d29 [ 695.974772][T13262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.994355][T13262] RSP: 002b:00007f9065706038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 695.999884][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 696.002739][T13262] RAX: ffffffffffffffda RBX: 00007f9064b76080 RCX: 00007f9064985d29 [ 696.009077][ T5894] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 696.015774][T13262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 696.015789][T13262] RBP: 00007f9065706090 R08: 0000000000000000 R09: 0000000000000000 [ 696.015802][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.015813][T13262] R13: 0000000000000000 R14: 00007f9064b76080 R15: 00007ffe6f5001e8 [ 696.015837][T13262] [ 696.015890][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.067139][ T5894] usb 3-1: config 0 has no interface number 0 [ 696.078925][ T5894] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 696.088673][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.089885][ T5863] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 696.097355][ T5894] usb 3-1: Product: syz [ 696.109302][ T5894] usb 3-1: Manufacturer: syz [ 696.114568][ T5894] usb 3-1: SerialNumber: syz [ 696.238500][ T5894] usb 3-1: config 0 descriptor?? [ 696.268573][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 696.276393][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 696.277866][ T5894] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 696.284720][ T5863] usb 4-1: config 0 has no interface number 0 [ 696.309127][ T5863] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 696.318325][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.326617][ T5863] usb 4-1: Product: syz [ 696.331410][ T5863] usb 4-1: Manufacturer: syz [ 696.336161][ T5863] usb 4-1: SerialNumber: syz [ 696.343670][ T5863] usb 4-1: config 0 descriptor?? [ 696.359349][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 696.589480][ T29] audit: type=1400 audit(1737413202.510:912): avc: denied { relabelfrom } for pid=13267 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 696.610048][ T29] audit: type=1400 audit(1737413202.510:913): avc: denied { relabelto } for pid=13267 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 696.839891][ T5862] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 697.009905][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 697.017419][ T5862] usb 5-1: config 150 has an invalid interface number: 204 but max is 0 [ 697.025937][ T5862] usb 5-1: config 150 has no interface number 0 [ 697.032298][ T5862] usb 5-1: config 150 interface 204 has no altsetting 0 [ 697.045599][ T5862] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 697.054751][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.062998][ T5862] usb 5-1: Product: syz [ 697.067186][ T5862] usb 5-1: Manufacturer: syz [ 697.071862][ T5862] usb 5-1: SerialNumber: syz [ 697.075466][ T29] audit: type=1400 audit(1737413203.000:914): avc: denied { connect } for pid=13271 comm="syz.1.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 697.138037][ T29] audit: type=1400 audit(1737413203.060:915): avc: denied { write } for pid=13271 comm="syz.1.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 697.636746][T13268] syzkaller0: entered promiscuous mode [ 697.660027][T13268] syzkaller0: entered allmulticast mode [ 697.891309][ T5863] gspca_spca1528: reg_w err -71 [ 697.896249][ T5863] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 697.912530][ T5863] usb 4-1: USB disconnect, device number 52 [ 697.930112][ T5862] usb 5-1: USB disconnect, device number 59 [ 698.019402][ T5894] gspca_spca1528: reg_w err -110 [ 698.112272][ T5894] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 698.485337][ T5894] usb 3-1: USB disconnect, device number 55 [ 699.559840][ T29] audit: type=1400 audit(1737413205.480:916): avc: denied { bind } for pid=13298 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.590048][ T29] audit: type=1400 audit(1737413205.480:917): avc: denied { listen } for pid=13298 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.571107][ T29] audit: type=1400 audit(1737413205.490:918): avc: denied { accept } for pid=13298 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.782423][ T29] audit: type=1400 audit(1737413205.490:919): avc: denied { write } for pid=13298 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.820327][ T29] audit: type=1400 audit(1737413205.490:920): avc: denied { read } for pid=13298 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.906527][T13308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.099523][T13310] FAULT_INJECTION: forcing a failure. [ 701.099523][T13310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.118041][T13310] CPU: 1 UID: 0 PID: 13310 Comm: syz.2.2039 Not tainted 6.13.0-syzkaller #0 [ 701.126741][T13310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 701.136809][T13310] Call Trace: [ 701.140088][T13310] [ 701.143020][T13310] dump_stack_lvl+0x16c/0x1f0 [ 701.147713][T13310] should_fail_ex+0x497/0x5b0 [ 701.152404][T13310] _copy_from_user+0x2e/0xd0 [ 701.156991][T13310] copy_msghdr_from_user+0x99/0x160 [ 701.162184][T13310] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 701.167989][T13310] ___sys_sendmsg+0xff/0x1e0 [ 701.172566][T13310] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.177759][T13310] ? __pfx_lock_release+0x10/0x10 [ 701.182769][T13310] ? trace_lock_acquire+0x14e/0x1f0 [ 701.187967][T13310] ? __fget_files+0x206/0x3a0 [ 701.192635][T13310] __sys_sendmsg+0x16e/0x220 [ 701.197211][T13310] ? __pfx___sys_sendmsg+0x10/0x10 [ 701.202322][T13310] do_syscall_64+0xcd/0x250 [ 701.206818][T13310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.212704][T13310] RIP: 0033:0x7f6b46985d29 [ 701.217102][T13310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.236706][T13310] RSP: 002b:00007f6b47881038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.245112][T13310] RAX: ffffffffffffffda RBX: 00007f6b46b75fa0 RCX: 00007f6b46985d29 [ 701.253073][T13310] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 701.261039][T13310] RBP: 00007f6b47881090 R08: 0000000000000000 R09: 0000000000000000 [ 701.269006][T13310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.276984][T13310] R13: 0000000000000000 R14: 00007f6b46b75fa0 R15: 00007ffd7d0a0d18 [ 701.284956][T13310] [ 701.603994][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 704.187436][T13340] FAULT_INJECTION: forcing a failure. [ 704.187436][T13340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.292653][T13340] CPU: 0 UID: 0 PID: 13340 Comm: syz.2.2046 Not tainted 6.13.0-syzkaller #0 [ 704.301369][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 704.311410][T13340] Call Trace: [ 704.314689][T13340] [ 704.317610][T13340] dump_stack_lvl+0x16c/0x1f0 [ 704.322270][T13340] should_fail_ex+0x497/0x5b0 [ 704.326930][T13340] _copy_to_user+0x32/0xd0 [ 704.331334][T13340] simple_read_from_buffer+0xd0/0x160 [ 704.336708][T13340] proc_fail_nth_read+0x198/0x270 [ 704.341723][T13340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.347278][T13340] ? vfs_read+0x159/0xbe0 [ 704.351619][T13340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.357178][T13340] vfs_read+0x1df/0xbe0 [ 704.361338][T13340] ? __fget_files+0x1fc/0x3a0 [ 704.363502][T13345] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2048'. [ 704.366007][T13340] ? __pfx___mutex_lock+0x10/0x10 [ 704.379948][T13340] ? __pfx_vfs_read+0x10/0x10 [ 704.384639][T13340] ? __fget_files+0x206/0x3a0 [ 704.385129][T13345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2048'. [ 704.389316][T13340] ksys_read+0x12b/0x250 [ 704.402461][T13340] ? __pfx_ksys_read+0x10/0x10 [ 704.407239][T13340] do_syscall_64+0xcd/0x250 [ 704.409434][T13345] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2048'. [ 704.411743][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.411775][T13340] RIP: 0033:0x7f6b4698473c [ 704.411791][T13340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 704.411809][T13340] RSP: 002b:00007f6b47860030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.411830][T13340] RAX: ffffffffffffffda RBX: 00007f6b46b76080 RCX: 00007f6b4698473c [ 704.411844][T13340] RDX: 000000000000000f RSI: 00007f6b478600a0 RDI: 0000000000000006 [ 704.411856][T13340] RBP: 00007f6b47860090 R08: 0000000000000000 R09: 0000000000000000 [ 704.411869][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.411881][T13340] R13: 0000000000000000 R14: 00007f6b46b76080 R15: 00007ffd7d0a0d18 [ 704.411906][T13340] [ 704.505410][ T5863] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 704.913567][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 705.371677][ T5863] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 705.380934][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.389104][ T5863] usb 5-1: Product: syz [ 705.399239][ T5863] usb 5-1: Manufacturer: syz [ 705.404432][ T5863] usb 5-1: SerialNumber: syz [ 705.422007][ T5863] usb 5-1: config 0 descriptor?? [ 705.444457][ T5863] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 705.764538][ T5863] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 707.567490][T13375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2051'. [ 707.601695][ T5863] usb 5-1: USB disconnect, device number 60 [ 708.277504][T13391] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 708.287737][T13391] kvm: pic: level sensitive irq not supported [ 708.287885][T13391] kvm: pic: non byte read [ 708.298870][T13391] kvm: pic: level sensitive irq not supported [ 708.298909][T13391] kvm: pic: non byte read [ 708.309486][T13391] kvm: pic: level sensitive irq not supported [ 708.309535][T13391] kvm: pic: non byte read [ 710.138501][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.200116][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.211580][ C0] Unknown status report in ack skb [ 710.217048][ C0] Unknown status report in ack skb [ 710.260161][ T5893] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 710.267820][ T5922] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 710.429879][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 710.436514][ T5893] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 710.483994][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.493651][ T5922] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 710.514103][T13416] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 710.517897][ T5893] usb 4-1: config 0 descriptor?? [ 710.530370][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.549838][ T5922] usb 5-1: Product: syz [ 710.555133][ T5922] usb 5-1: Manufacturer: syz [ 710.565789][ T5922] usb 5-1: SerialNumber: syz [ 710.573725][ T5922] usb 5-1: config 0 descriptor?? [ 710.616906][ T5922] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 710.672270][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 710.681565][T13416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2065'. [ 710.690908][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 710.710030][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 711.308785][ T5893] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 711.321186][T13430] sp0: Synchronizing with TNC [ 711.329209][ T5893] asix 4-1:0.0: probe with driver asix failed with error -32 [ 711.340861][ T5893] usb 4-1: USB disconnect, device number 53 [ 711.358544][T13432] sp0: Found TNC [ 711.372474][T13429] [U] è` [ 711.545134][T13437] Invalid ELF header magic: != ELF [ 711.939887][ T5893] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 711.996737][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 712.093157][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 712.368404][ T5893] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 712.394810][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.419487][ T5893] usb 3-1: Product: syz [ 712.439084][ T5864] usb 5-1: USB disconnect, device number 61 [ 712.459989][ T5893] usb 3-1: Manufacturer: syz [ 712.464610][ T5893] usb 3-1: SerialNumber: syz [ 712.514179][ T5893] usb 3-1: config 0 descriptor?? [ 712.526007][ T5893] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 712.850018][T12547] Bluetooth: hci4: command 0x0405 tx timeout [ 713.017744][T13457] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 713.222067][ T29] audit: type=1400 audit(1737413219.150:921): avc: denied { create } for pid=13461 comm="syz.3.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 713.230209][T13462] syz.3.2080 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 713.305993][T13463] ax25_connect(): syz.0.2079 uses autobind, please contact jreuter@yaina.de [ 713.630650][T13465] FAULT_INJECTION: forcing a failure. [ 713.630650][T13465] name failslab, interval 1, probability 0, space 0, times 0 [ 713.643373][T13465] CPU: 0 UID: 0 PID: 13465 Comm: syz.3.2080 Not tainted 6.13.0-syzkaller #0 [ 713.652050][T13465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 713.662107][T13465] Call Trace: [ 713.665383][T13465] [ 713.668312][T13465] dump_stack_lvl+0x16c/0x1f0 [ 713.673000][T13465] should_fail_ex+0x497/0x5b0 [ 713.677686][T13465] ? fs_reclaim_acquire+0xae/0x150 [ 713.682801][T13465] should_failslab+0xc2/0x120 [ 713.687485][T13465] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 713.693293][T13465] ? finish_task_switch.isra.0+0x217/0xcc0 [ 713.699106][T13465] ? __alloc_skb+0x2b1/0x380 [ 713.703711][T13465] __alloc_skb+0x2b1/0x380 [ 713.708136][T13465] ? __pfx___alloc_skb+0x10/0x10 [ 713.713083][T13465] ? finish_task_switch.isra.0+0x217/0xcc0 [ 713.718902][T13465] tipc_nl_compat_dumpit+0x15d/0x820 [ 713.724203][T13465] tipc_nl_compat_recv+0x8f1/0xc50 [ 713.729326][T13465] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 713.734969][T13465] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 713.740262][T13465] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 713.746162][T13465] ? preempt_schedule_thunk+0x1a/0x30 [ 713.751545][T13465] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 713.758923][T13465] genl_family_rcv_msg_doit+0x202/0x2f0 [ 713.764469][T13465] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 713.770535][T13465] ? genl_get_cmd+0x195/0x580 [ 713.775229][T13465] ? __radix_tree_lookup+0x21f/0x2c0 [ 713.780525][T13465] genl_rcv_msg+0x565/0x800 [ 713.785035][T13465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.790062][T13465] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 713.795716][T13465] netlink_rcv_skb+0x16b/0x440 [ 713.800491][T13465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.805518][T13465] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.810824][T13465] ? down_read+0xc9/0x330 [ 713.815163][T13465] ? __pfx_down_read+0x10/0x10 [ 713.819934][T13465] ? rcu_is_watching+0x12/0xc0 [ 713.824711][T13465] genl_rcv+0x28/0x40 [ 713.828699][T13465] netlink_unicast+0x53c/0x7f0 [ 713.833479][T13465] ? __pfx_netlink_unicast+0x10/0x10 [ 713.838770][T13465] ? __phys_addr+0xc6/0x150 [ 713.843271][T13465] netlink_sendmsg+0x8b8/0xd70 [ 713.848033][T13465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.853313][T13465] ? security_socket_sendmsg+0x29/0x240 [ 713.858846][T13465] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 713.864298][T13465] ____sys_sendmsg+0xaaf/0xc90 [ 713.869054][T13465] ? copy_msghdr_from_user+0x10b/0x160 [ 713.874517][T13465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.879807][T13465] ___sys_sendmsg+0x135/0x1e0 [ 713.884476][T13465] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.889667][T13465] ? __pfx_lock_release+0x10/0x10 [ 713.894680][T13465] ? trace_lock_acquire+0x14e/0x1f0 [ 713.899888][T13465] ? __fget_files+0x206/0x3a0 [ 713.904566][T13465] __sys_sendmsg+0x16e/0x220 [ 713.909143][T13465] ? __pfx___sys_sendmsg+0x10/0x10 [ 713.914253][T13465] do_syscall_64+0xcd/0x250 [ 713.918749][T13465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.924634][T13465] RIP: 0033:0x7f7fd3585d29 [ 713.929035][T13465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.948627][T13465] RSP: 002b:00007f7fd444e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.957027][T13465] RAX: ffffffffffffffda RBX: 00007f7fd3776160 RCX: 00007f7fd3585d29 [ 713.964986][T13465] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 000000000000000b [ 713.972942][T13465] RBP: 00007f7fd444e090 R08: 0000000000000000 R09: 0000000000000000 [ 713.980899][T13465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.988858][T13465] R13: 0000000000000000 R14: 00007f7fd3776160 R15: 00007ffdcd32e5f8 [ 713.996828][T13465] [ 714.102288][T13461] delete_channel: no stack [ 714.756030][T13475] ax25_connect(): syz.4.2083 uses autobind, please contact jreuter@yaina.de [ 715.485198][T13477] Invalid ELF header magic: != ELF [ 715.523392][T13479] FAULT_INJECTION: forcing a failure. [ 715.523392][T13479] name failslab, interval 1, probability 0, space 0, times 0 [ 715.559871][T13479] CPU: 0 UID: 0 PID: 13479 Comm: syz.3.2086 Not tainted 6.13.0-syzkaller #0 [ 715.568582][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 715.578639][T13479] Call Trace: [ 715.581917][T13479] [ 715.584835][T13479] dump_stack_lvl+0x16c/0x1f0 [ 715.589521][T13479] should_fail_ex+0x497/0x5b0 [ 715.594201][T13479] ? fs_reclaim_acquire+0xae/0x150 [ 715.599306][T13479] should_failslab+0xc2/0x120 [ 715.603980][T13479] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 715.609346][T13479] ? skb_clone+0x190/0x3f0 [ 715.613754][T13479] skb_clone+0x190/0x3f0 [ 715.617988][T13479] nfnetlink_rcv_batch+0x1d9/0x24e0 [ 715.623191][T13479] ? __pfx___lock_acquire+0x10/0x10 [ 715.628387][T13479] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 715.634020][T13479] ? find_held_lock+0x2d/0x110 [ 715.638783][T13479] ? avc_has_perm_noaudit+0x119/0x3a0 [ 715.644165][T13479] ? avc_has_perm_noaudit+0x143/0x3a0 [ 715.649534][T13479] ? __asan_memset+0x23/0x50 [ 715.654113][T13479] ? __nla_validate_parse+0x601/0x2880 [ 715.659570][T13479] ? __pfx___nla_validate_parse+0x10/0x10 [ 715.665278][T13479] ? find_held_lock+0x2d/0x110 [ 715.670035][T13479] ? cap_capable+0x1cf/0x240 [ 715.674615][T13479] ? __nla_parse+0x40/0x60 [ 715.679020][T13479] nfnetlink_rcv+0x3c3/0x430 [ 715.683605][T13479] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 715.688715][T13479] netlink_unicast+0x53c/0x7f0 [ 715.693475][T13479] ? __pfx_netlink_unicast+0x10/0x10 [ 715.698758][T13479] netlink_sendmsg+0x8b8/0xd70 [ 715.703517][T13479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.708799][T13479] ____sys_sendmsg+0xaaf/0xc90 [ 715.713555][T13479] ? copy_msghdr_from_user+0x10b/0x160 [ 715.719000][T13479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.724285][T13479] ___sys_sendmsg+0x135/0x1e0 [ 715.728949][T13479] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.734139][T13479] ? __pfx_lock_release+0x10/0x10 [ 715.739158][T13479] ? trace_lock_acquire+0x14e/0x1f0 [ 715.744357][T13479] ? __fget_files+0x206/0x3a0 [ 715.749027][T13479] __sys_sendmsg+0x16e/0x220 [ 715.753605][T13479] ? __pfx___sys_sendmsg+0x10/0x10 [ 715.758714][T13479] do_syscall_64+0xcd/0x250 [ 715.763209][T13479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.769095][T13479] RIP: 0033:0x7f7fd3585d29 [ 715.773498][T13479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.793090][T13479] RSP: 002b:00007f7fd4490038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.801489][T13479] RAX: ffffffffffffffda RBX: 00007f7fd3775fa0 RCX: 00007f7fd3585d29 [ 715.809446][T13479] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 715.817403][T13479] RBP: 00007f7fd4490090 R08: 0000000000000000 R09: 0000000000000000 [ 715.825357][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.833311][T13479] R13: 0000000000000000 R14: 00007f7fd3775fa0 R15: 00007ffdcd32e5f8 [ 715.841276][T13479] [ 716.040859][T13479] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2086'. [ 716.215875][ T5893] usb 3-1: USB disconnect, device number 56 [ 716.502630][T13484] sit0: entered promiscuous mode [ 716.644815][T13496] ax25_connect(): syz.3.2091 uses autobind, please contact jreuter@yaina.de [ 718.917672][T13517] netlink: 'syz.1.2096': attribute type 4 has an invalid length. [ 718.974657][T13512] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 718.989934][T13512] UDF-fs: Scanning with blocksize 512 failed [ 719.010129][T13512] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 719.017625][T13512] UDF-fs: Scanning with blocksize 1024 failed [ 719.095595][T13512] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 719.117611][T13518] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 719.119878][T13512] UDF-fs: Scanning with blocksize 2048 failed [ 719.164234][T13512] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 719.373544][T13512] UDF-fs: Scanning with blocksize 4096 failed [ 719.834340][T13531] Invalid ELF header magic: != ELF [ 721.714094][T13546] ax25_connect(): syz.1.2102 uses autobind, please contact jreuter@yaina.de [ 722.027379][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'. [ 722.966043][T13562] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2105'. [ 723.309897][ T5922] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 723.536627][T13573] Invalid ELF header magic: != ELF [ 723.579866][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 723.591312][ T5922] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 723.619635][ T5922] usb 2-1: config 0 has no interface number 0 [ 723.667111][ T5922] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 723.810886][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.938000][ T5922] usb 2-1: Product: syz [ 724.004018][ T5922] usb 2-1: Manufacturer: syz [ 724.043045][ T5922] usb 2-1: SerialNumber: syz [ 724.152135][ T5922] usb 2-1: config 0 descriptor?? [ 724.169266][ T5922] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 724.885646][ T5922] gspca_spca1528: reg_w err -110 [ 724.910765][ T5922] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 725.381047][T13591] fuse: Bad value for 'fd' [ 725.550089][ T29] audit: type=1400 audit(1737413231.470:922): avc: denied { getopt } for pid=13590 comm="syz.2.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 725.630851][T13597] ax25_connect(): syz.3.2116 uses autobind, please contact jreuter@yaina.de [ 725.875160][ T5862] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 726.164136][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 726.234613][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.320317][ T5862] usb 5-1: config 0 has no interfaces? [ 726.325921][ T5862] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 726.335630][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.353954][ T5862] usb 5-1: config 0 descriptor?? [ 727.206585][ T5863] usb 2-1: USB disconnect, device number 47 [ 727.240763][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 727.380578][T13614] Invalid ELF header magic: != ELF [ 728.793824][T13627] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2125'. [ 728.975895][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'. [ 729.070461][ T5862] usb 5-1: string descriptor 0 read error: -71 [ 729.107988][ T5862] usb 5-1: USB disconnect, device number 62 [ 731.570081][ T5893] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 732.091301][ T5893] usb 4-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 732.101743][ T5893] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 732.111412][ T5893] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 732.132754][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.153837][ T5893] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 732.169717][ T5893] usb 4-1: no configuration chosen from 1 choice [ 734.047338][ T5862] usb 4-1: USB disconnect, device number 54 [ 735.511841][T13700] FAULT_INJECTION: forcing a failure. [ 735.511841][T13700] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 735.589865][T13700] CPU: 0 UID: 0 PID: 13700 Comm: syz.2.2142 Not tainted 6.13.0-syzkaller #0 [ 735.598585][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 735.608645][T13700] Call Trace: [ 735.611925][T13700] [ 735.614861][T13700] dump_stack_lvl+0x16c/0x1f0 [ 735.619553][T13700] should_fail_ex+0x497/0x5b0 [ 735.624245][T13700] ? fs_reclaim_acquire+0xae/0x150 [ 735.629359][T13700] should_fail_alloc_page+0xe7/0x130 [ 735.634656][T13700] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 735.640832][T13700] __alloc_pages_noprof+0x190/0x25b0 [ 735.646133][T13700] ? hlock_class+0x4e/0x130 [ 735.649895][ T29] audit: type=1400 audit(1737413241.560:923): avc: denied { mount } for pid=13701 comm="syz.1.2145" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 735.650632][T13700] ? __lock_acquire+0xcc5/0x3c40 [ 735.677617][T13700] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 735.683349][T13700] ? hlock_class+0x4e/0x130 [ 735.687863][T13700] ? mark_lock+0xb5/0xc60 [ 735.692202][T13700] ? hlock_class+0x4e/0x130 [ 735.696715][T13700] ? mark_lock+0xb5/0xc60 [ 735.701053][T13700] ? lock_acquire.part.0+0x11b/0x380 [ 735.706347][T13700] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 735.712252][T13700] ? policy_nodemask+0xea/0x4e0 [ 735.717117][T13700] alloc_pages_mpol_noprof+0x2c8/0x620 [ 735.722593][T13700] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 735.728582][T13700] ? __lock_acquire+0xcc5/0x3c40 [ 735.733529][T13700] ? find_held_lock+0x2d/0x110 [ 735.738310][T13700] folio_alloc_mpol_noprof+0x36/0xd0 [ 735.743605][T13700] vma_alloc_folio_noprof+0xee/0x1b0 [ 735.748905][T13700] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 735.754818][T13700] ? __pfx___lock_acquire+0x10/0x10 [ 735.760029][T13700] do_wp_page+0x105a/0x4670 [ 735.764546][T13700] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 735.770185][T13700] ? __pfx_do_wp_page+0x10/0x10 [ 735.775041][T13700] ? rcu_is_watching+0x12/0xc0 [ 735.779825][T13700] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 735.785209][T13700] ? lock_acquire+0x2f/0xb0 [ 735.789719][T13700] ? __handle_mm_fault+0xdfa/0x2a40 [ 735.794920][T13700] __handle_mm_fault+0x1ade/0x2a40 [ 735.800027][T13700] ? __pfx___handle_mm_fault+0x10/0x10 [ 735.805489][T13700] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 735.811141][T13700] ? find_vma+0xc0/0x140 [ 735.815383][T13700] ? __pfx_find_vma+0x10/0x10 [ 735.820061][T13700] handle_mm_fault+0x3fa/0xaa0 [ 735.824826][T13700] do_user_addr_fault+0x7a3/0x13f0 [ 735.829917][T13700] exc_page_fault+0x5c/0xc0 [ 735.834418][T13700] asm_exc_page_fault+0x26/0x30 [ 735.839248][T13700] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 735.845030][T13700] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 735.864629][T13700] RSP: 0018:ffffc9000440fc90 EFLAGS: 00050206 [ 735.870703][T13700] RAX: 0000000000000001 RBX: 00000000001ff000 RCX: 00000000001fd000 [ 735.878677][T13700] RDX: 0000000000000000 RSI: ffff888047402000 RDI: 0000000020002000 [ 735.886647][T13700] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed1008ebfdff [ 735.894619][T13700] R10: ffff8880475fefff R11: 0000000000000000 R12: ffff888047400000 [ 735.902588][T13700] R13: 00000000201ff000 R14: 00007ffffffff000 R15: 0000000000000000 [ 735.910579][T13700] _copy_to_user+0xbb/0xd0 [ 735.915008][T13700] __sys_bpf+0x2597/0x49c0 [ 735.919448][T13700] ? __pfx___sys_bpf+0x10/0x10 [ 735.924227][T13700] ? vfs_write+0x306/0x1150 [ 735.928747][T13700] ? __mutex_unlock_slowpath+0x164/0x690 [ 735.934408][T13700] ? fput+0x67/0x440 [ 735.938312][T13700] ? ksys_write+0x1ba/0x250 [ 735.942821][T13700] ? __pfx_ksys_write+0x10/0x10 [ 735.947680][T13700] __x64_sys_bpf+0x78/0xc0 [ 735.952131][T13700] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.957339][T13700] do_syscall_64+0xcd/0x250 [ 735.961855][T13700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.967757][T13700] RIP: 0033:0x7f6b46985d29 [ 735.972171][T13700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.991787][T13700] RSP: 002b:00007f6b47860038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.000207][T13700] RAX: ffffffffffffffda RBX: 00007f6b46b76080 RCX: 00007f6b46985d29 [ 736.008183][T13700] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000004 [ 736.016158][T13700] RBP: 00007f6b47860090 R08: 0000000000000000 R09: 0000000000000000 [ 736.024131][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.032104][T13700] R13: 0000000000000001 R14: 00007f6b46b76080 R15: 00007ffd7d0a0d18 [ 736.040092][T13700] [ 737.623432][T13725] rtc_cmos 00:00: Alarms can be up to one day in the future [ 738.405999][ T29] audit: type=1400 audit(1737413244.330:924): avc: denied { read } for pid=13734 comm="syz.2.2155" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 738.439872][ T5863] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 738.448125][T13735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2155'. [ 738.449851][ T29] audit: type=1400 audit(1737413244.330:925): avc: denied { open } for pid=13734 comm="syz.2.2155" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 738.479532][T13735] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 738.500702][T13735] pim6reg0: owner set to 1 [ 738.535317][ T29] audit: type=1400 audit(1737413244.330:926): avc: denied { ioctl } for pid=13734 comm="syz.2.2155" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 738.610452][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 738.618361][ T5863] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 738.640030][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.658223][ T5863] usb 5-1: Product: syz [ 738.694986][ T5863] usb 5-1: Manufacturer: syz [ 738.755927][ T5863] usb 5-1: SerialNumber: syz [ 739.216384][T13743] Invalid ELF header magic: != ELF [ 739.731615][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2154'. [ 740.155569][T13755] FAULT_INJECTION: forcing a failure. [ 740.155569][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 740.168762][T13755] CPU: 1 UID: 0 PID: 13755 Comm: syz.2.2159 Not tainted 6.13.0-syzkaller #0 [ 740.177446][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 740.187498][T13755] Call Trace: [ 740.190771][T13755] [ 740.193703][T13755] dump_stack_lvl+0x16c/0x1f0 [ 740.198403][T13755] should_fail_ex+0x497/0x5b0 [ 740.203101][T13755] ? fs_reclaim_acquire+0xae/0x150 [ 740.208231][T13755] should_failslab+0xc2/0x120 [ 740.212935][T13755] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 740.218668][T13755] ? __d_alloc+0x31/0xaa0 [ 740.223018][T13755] __d_alloc+0x31/0xaa0 [ 740.227180][T13755] ? __raw_spin_lock_init+0x3a/0x110 [ 740.232478][T13755] d_alloc_pseudo+0x1c/0xc0 [ 740.236989][T13755] alloc_file_pseudo+0xdc/0x210 [ 740.241849][T13755] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 740.247328][T13755] ioctx_alloc+0x596/0x1fc0 [ 740.251853][T13755] ? __might_fault+0x13b/0x190 [ 740.256624][T13755] ? __pfx_lock_release+0x10/0x10 [ 740.261652][T13755] ? trace_lock_acquire+0x14e/0x1f0 [ 740.266870][T13755] ? __pfx_ioctx_alloc+0x10/0x10 [ 740.271819][T13755] ? lock_acquire+0x2f/0xb0 [ 740.276328][T13755] ? __might_fault+0xe3/0x190 [ 740.281023][T13755] __x64_sys_io_setup+0xc9/0x210 [ 740.285972][T13755] do_syscall_64+0xcd/0x250 [ 740.290489][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.296390][T13755] RIP: 0033:0x7f6b46985d29 [ 740.300806][T13755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.320420][T13755] RSP: 002b:00007f6b47860038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 740.328837][T13755] RAX: ffffffffffffffda RBX: 00007f6b46b76080 RCX: 00007f6b46985d29 [ 740.336808][T13755] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000004082 [ 740.344775][T13755] RBP: 00007f6b47860090 R08: 0000000000000000 R09: 0000000000000000 [ 740.352749][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.360724][T13755] R13: 0000000000000001 R14: 00007f6b46b76080 R15: 00007ffd7d0a0d18 [ 740.368712][T13755] [ 740.633516][T13763] netlink: 1608 bytes leftover after parsing attributes in process `syz.1.2160'. [ 740.829705][ T5863] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 740.838711][ T5863] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 740.850696][ T5863] usb 5-1: USB disconnect, device number 63 [ 742.216431][T13779] loop7: detected capacity change from 0 to 16384 [ 743.049262][T13794] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Q00000000000000000005 [ 743.944544][T13805] NILFS (loop1): device size too small [ 744.996572][T13814] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 745.070834][T13814] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 745.824670][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 746.131237][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 746.838797][ T29] audit: type=1400 audit(1737413252.760:927): avc: denied { listen } for pid=13845 comm="syz.0.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 746.970722][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.222061][T13872] syzkaller0: entered promiscuous mode [ 748.239807][T13872] syzkaller0: entered allmulticast mode [ 748.771852][ T51] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 748.949888][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 748.970130][ T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.014486][ T51] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 749.044062][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.066713][ T51] usb 5-1: Product: syz [ 749.094459][ T51] usb 5-1: Manufacturer: syz [ 749.110946][ T51] usb 5-1: SerialNumber: syz [ 749.140683][ T51] usb 5-1: config 0 descriptor?? [ 749.373569][ T51] msi2500 5-1:0.0: Registered as swradio24 [ 749.379420][ T51] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 749.401205][ T29] audit: type=1400 audit(1737413255.320:928): avc: denied { ioctl } for pid=13875 comm="syz.4.2194" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 749.434201][ T5864] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 749.802340][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 749.820611][ T5864] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 749.841936][ T5864] usb 3-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 749.862942][ T5864] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.881442][ T5864] usb 3-1: config 1 has no interface number 1 [ 749.913745][ T5864] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 749.956273][ T5864] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1536, setting to 1024 [ 750.032755][ T5864] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.559496][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.568249][ T5864] usb 3-1: Product: syz [ 750.572678][ T5864] usb 3-1: Manufacturer: syz [ 750.577341][ T5864] usb 3-1: SerialNumber: syz [ 751.685979][T13895] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 751.739550][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2196'. [ 751.748945][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2196'. [ 751.758067][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2196'. [ 751.767318][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2196'. [ 752.490455][ T5863] usb 5-1: USB disconnect, device number 64 [ 752.590756][ T5864] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 752.598606][ T5864] usb 3-1: 2:1 : sample bitwidth 127 in over sample bytes 4 [ 752.641622][ T5864] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 752.689634][ T5864] usb 3-1: USB disconnect, device number 57 [ 752.723400][ T29] audit: type=1400 audit(1737413258.640:929): avc: denied { execute } for pid=13913 comm="syz.3.2201" name="file0" dev="ramfs" ino=44522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 752.741100][T13909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 752.756140][T13909] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 752.809875][ T29] audit: type=1400 audit(1737413258.640:930): avc: denied { execute_no_trans } for pid=13913 comm="syz.3.2201" path="/file0" dev="ramfs" ino=44522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 752.983235][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.185988][T13923] netlink: 'syz.2.2202': attribute type 10 has an invalid length. [ 753.315071][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.331789][T13923] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 753.849886][T11724] Bluetooth: hci4: command 0x0405 tx timeout [ 756.096233][T13949] Invalid ELF header magic: != ELF [ 757.068027][ T29] audit: type=1400 audit(1737413262.990:931): avc: denied { ioctl } for pid=13963 comm="syz.1.2212" path="socket:[44785]" dev="sockfs" ino=44785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 759.622098][ T29] audit: type=1400 audit(1737413265.540:932): avc: denied { create } for pid=13989 comm="syz.2.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 760.446002][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2218'. [ 760.781948][ T29] audit: type=1400 audit(1737413266.710:933): avc: denied { setopt } for pid=14002 comm="syz.3.2221" lport=35287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 761.040011][ T5864] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 761.059919][ T5865] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 761.205025][ T5864] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 761.210979][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.237095][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.245238][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 761.255398][ T5864] usb 4-1: Product: syz [ 761.271083][ T5864] usb 4-1: Manufacturer: syz [ 761.277292][ T5864] usb 4-1: SerialNumber: syz [ 761.278727][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 761.293423][ T5864] usb 4-1: config 0 descriptor?? [ 761.312340][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 761.312959][T14015] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 761.322772][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 761.337555][T14015] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 761.346526][ T5865] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 761.366574][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 761.375054][ T5865] usb 5-1: Product: syz [ 761.379236][ T5865] usb 5-1: Manufacturer: syz [ 761.384436][ T5865] usb 5-1: SerialNumber: syz [ 761.390620][ T5865] usb 5-1: config 0 descriptor?? [ 761.504738][ T29] audit: type=1400 audit(1737413267.430:934): avc: denied { connect } for pid=14002 comm="syz.3.2221" lport=35287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 761.511860][T14003] 9pnet_fd: Insufficient options for proto=fd [ 761.528992][ T51] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 761.542526][ T29] audit: type=1400 audit(1737413267.430:935): avc: denied { name_connect } for pid=14002 comm="syz.3.2221" dest=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 761.559164][ T5864] hso 4-1:0.0: Can't find BULK IN endpoint [ 761.565545][ T29] audit: type=1400 audit(1737413267.430:936): avc: denied { read } for pid=14002 comm="syz.3.2221" dev="sockfs" ino=44894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 761.571856][ T5864] usb-storage 4-1:0.0: USB Mass Storage device detected [ 761.604108][T14005] trusted_key: encrypted_key: insufficient parameters specified [ 761.615695][ T5865] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 761.624933][ T5865] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 761.729926][ T51] usb 3-1: device descriptor read/64, error -71 [ 761.824889][ T5864] usb 4-1: USB disconnect, device number 55 [ 761.848529][T14024] ipvlan2: entered promiscuous mode [ 761.855013][T14024] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 761.970257][ T51] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 762.017935][ T5865] radio-si470x 5-1:0.0: software version 8, hardware version 37 [ 762.025921][ T5865] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 762.110176][ T51] usb 3-1: device descriptor read/64, error -71 [ 762.255487][ T51] usb usb3-port1: attempt power cycle [ 762.262915][ T5865] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 762.311827][ T5865] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 762.325303][ T5865] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 762.368453][ T5865] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 762.394267][ T5865] usb 5-1: USB disconnect, device number 65 [ 762.479636][ T29] audit: type=1400 audit(1737413268.400:937): avc: denied { map } for pid=14031 comm="syz.3.2230" path="socket:[46092]" dev="sockfs" ino=46092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 762.606723][ T29] audit: type=1400 audit(1737413268.400:938): avc: denied { read } for pid=14031 comm="syz.3.2230" path="socket:[46092]" dev="sockfs" ino=46092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 762.632472][ T51] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 762.727181][ T51] usb 3-1: device descriptor read/8, error -71 [ 762.884088][ T29] audit: type=1400 audit(1737413268.560:939): avc: denied { map } for pid=14035 comm="syz.1.2229" path="socket:[45412]" dev="sockfs" ino=45412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 762.931305][ T29] audit: type=1400 audit(1737413268.560:940): avc: denied { append } for pid=14035 comm="syz.1.2229" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 763.070984][ T51] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 763.989881][ T51] usb 3-1: device descriptor read/8, error -71 [ 764.104584][ T51] usb usb3-port1: unable to enumerate USB device [ 764.316643][T14050] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2233'. [ 764.401742][T14054] FAULT_INJECTION: forcing a failure. [ 764.401742][T14054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.960040][ T51] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 765.042287][T14054] CPU: 1 UID: 0 PID: 14054 Comm: syz.0.2235 Not tainted 6.13.0-syzkaller #0 [ 765.051003][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 765.061061][T14054] Call Trace: [ 765.064339][T14054] [ 765.067270][T14054] dump_stack_lvl+0x16c/0x1f0 [ 765.071962][T14054] should_fail_ex+0x497/0x5b0 [ 765.076656][T14054] _copy_to_user+0x32/0xd0 [ 765.081076][T14054] simple_read_from_buffer+0xd0/0x160 [ 765.086462][T14054] proc_fail_nth_read+0x198/0x270 [ 765.091497][T14054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.097059][T14054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.102614][T14054] vfs_read+0x1df/0xbe0 [ 765.106783][T14054] ? __pfx___mutex_lock+0x10/0x10 [ 765.111824][T14054] ? __pfx_vfs_read+0x10/0x10 [ 765.116488][T14054] ? rcu_is_watching+0x12/0xc0 [ 765.121260][T14054] ? __rcu_read_unlock+0x2b4/0x580 [ 765.126370][T14054] ? __fget_files+0x206/0x3a0 [ 765.131044][T14054] ksys_read+0x12b/0x250 [ 765.135276][T14054] ? __pfx_ksys_read+0x10/0x10 [ 765.140038][T14054] do_syscall_64+0xcd/0x250 [ 765.144549][T14054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.150445][T14054] RIP: 0033:0x7f5cccd8473c [ 765.154846][T14054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 765.174441][T14054] RSP: 002b:00007f5ccdc8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.182845][T14054] RAX: ffffffffffffffda RBX: 00007f5cccf75fa0 RCX: 00007f5cccd8473c [ 765.190808][T14054] RDX: 000000000000000f RSI: 00007f5ccdc8b0a0 RDI: 0000000000000003 [ 765.198772][T14054] RBP: 00007f5ccdc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 765.206734][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.214695][T14054] R13: 0000000000000000 R14: 00007f5cccf75fa0 R15: 00007ffd1e1a56d8 [ 765.222675][T14054] [ 765.938132][ T51] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 766.013156][ T51] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 766.040115][ T5865] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 766.113776][ T51] usb 2-1: config 0 has no interface number 0 [ 766.187764][ T51] usb 2-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice=e4.f5 [ 766.209941][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 766.223451][ T5865] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.278139][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.297433][ T5865] usb 4-1: config 0 has no interface number 0 [ 766.329032][ T51] usb 2-1: Product: syz [ 766.335331][ T51] usb 2-1: Manufacturer: syz [ 766.340333][ T5865] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 766.354029][ T51] usb 2-1: SerialNumber: syz [ 766.359290][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.368199][T14065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 766.368660][ T51] usb 2-1: config 0 descriptor?? [ 766.383095][ T5865] usb 4-1: Product: syz [ 766.387258][ T5865] usb 4-1: Manufacturer: syz [ 766.392277][ T5865] usb 4-1: SerialNumber: syz [ 766.405498][ T5865] usb 4-1: config 0 descriptor?? [ 766.413952][ T5865] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 766.422317][T14065] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 767.125303][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 767.136348][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2241'. [ 767.145764][T14076] netlink: 'syz.4.2241': attribute type 6 has an invalid length. [ 767.154582][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 767.902792][ T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 767.947468][ T51] snd-usb-audio 2-1:0.20: probe with driver snd-usb-audio failed with error -2 [ 767.985663][ T51] usb 2-1: USB disconnect, device number 48 [ 768.161256][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.20/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.214081][ T5865] gspca_spca1528: reg_w err -71 [ 768.219002][ T5865] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 768.228965][ T5865] usb 4-1: USB disconnect, device number 56 [ 802.444098][T14092] FAULT_INJECTION: forcing a failure. [ 802.444098][T14092] name failslab, interval 1, probability 0, space 0, times 0 [ 802.457583][T14092] CPU: 0 UID: 0 PID: 14092 Comm: syz.4.2247 Not tainted 6.13.0-syzkaller #0 [ 802.466283][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 802.476344][T14092] Call Trace: [ 802.479632][T14092] [ 802.482569][T14092] dump_stack_lvl+0x16c/0x1f0 [ 802.487266][T14092] should_fail_ex+0x497/0x5b0 [ 802.492393][T14092] ? fs_reclaim_acquire+0xae/0x150 [ 802.497513][T14092] should_failslab+0xc2/0x120 [ 802.502202][T14092] __kmalloc_cache_noprof+0x68/0x410 [ 802.507502][T14092] ip_set_create+0x33f/0x14d0 [ 802.512193][T14092] ? __pfx_ip_set_create+0x10/0x10 [ 802.517340][T14092] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 802.522388][T14092] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 802.527862][T14092] ? __pfx___lock_acquire+0x10/0x10 [ 802.533096][T14092] ? lock_acquire+0x2f/0xb0 [ 802.537606][T14092] ? avc_has_perm_noaudit+0x61/0x3a0 [ 802.542915][T14092] netlink_rcv_skb+0x16b/0x440 [ 802.547699][T14092] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 802.553169][T14092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 802.558475][T14092] ? bpf_lsm_capable+0x9/0x10 [ 802.563147][T14092] ? security_capable+0x7e/0x260 [ 802.568082][T14092] ? ns_capable+0xd7/0x110 [ 802.572509][T14092] nfnetlink_rcv+0x1b4/0x430 [ 802.577106][T14092] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 802.582217][T14092] ? netlink_deliver_tap+0x1ae/0xd30 [ 802.587510][T14092] netlink_unicast+0x53c/0x7f0 [ 802.592278][T14092] ? __pfx_netlink_unicast+0x10/0x10 [ 802.597570][T14092] netlink_sendmsg+0x8b8/0xd70 [ 802.602351][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.607640][T14092] ____sys_sendmsg+0xaaf/0xc90 [ 802.612421][T14092] ? copy_msghdr_from_user+0x10b/0x160 [ 802.617870][T14092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 802.623155][T14092] ___sys_sendmsg+0x135/0x1e0 [ 802.627821][T14092] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.633016][T14092] ? __pfx_lock_release+0x10/0x10 [ 802.638030][T14092] ? trace_lock_acquire+0x14e/0x1f0 [ 802.643229][T14092] ? __fget_files+0x206/0x3a0 [ 802.647898][T14092] __sys_sendmsg+0x16e/0x220 [ 802.652477][T14092] ? __pfx___sys_sendmsg+0x10/0x10 [ 802.657590][T14092] do_syscall_64+0xcd/0x250 [ 802.662091][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.667976][T14092] RIP: 0033:0x7f9064985d29 [ 802.672378][T14092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.691979][T14092] RSP: 002b:00007f9065727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.700381][T14092] RAX: ffffffffffffffda RBX: 00007f9064b75fa0 RCX: 00007f9064985d29 [ 802.708340][T14092] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 802.716299][T14092] RBP: 00007f9065727090 R08: 0000000000000000 R09: 0000000000000000 [ 802.724258][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.732218][T14092] R13: 0000000000000000 R14: 00007f9064b75fa0 R15: 00007ffe6f5001e8 [ 802.740190][T14092] [ 804.809189][T14103] trusted_key: encrypted_key: master key parameter 'dHfault' is invalid [ 805.326963][ T29] audit: type=1400 audit(1737413311.250:941): avc: denied { connect } for pid=14120 comm="syz.4.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 805.356201][ T29] audit: type=1400 audit(1737413311.250:942): avc: denied { write } for pid=14120 comm="syz.4.2252" path="socket:[46310]" dev="sockfs" ino=46310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 805.411834][T14122] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 805.423506][T14122] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 805.434459][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 805.445925][T14131] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2255'. [ 805.449803][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 805.465695][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 805.680891][ T5863] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 805.770319][ T5865] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 805.930082][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 805.931414][ T5863] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.936904][ T5865] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.943514][ T5863] usb 5-1: config 0 has no interface number 0 [ 806.205864][ T5865] usb 4-1: config 0 has no interface number 0 [ 806.214608][ T5865] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 806.218279][ T5863] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 806.223857][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.243792][ T5865] usb 4-1: Product: syz [ 806.246281][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.261960][ T5865] usb 4-1: Manufacturer: syz [ 806.266656][ T5863] usb 5-1: Product: syz [ 806.270954][ T5865] usb 4-1: SerialNumber: syz [ 806.279274][ T5863] usb 5-1: Manufacturer: syz [ 806.335462][ T5865] usb 4-1: config 0 descriptor?? [ 806.339845][ T5863] usb 5-1: SerialNumber: syz [ 806.343852][ T5865] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 806.432962][ T5863] usb 5-1: config 0 descriptor?? [ 806.540780][T14145] FAULT_INJECTION: forcing a failure. [ 806.540780][T14145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.553987][T14145] CPU: 0 UID: 0 PID: 14145 Comm: syz.1.2258 Not tainted 6.13.0-syzkaller #0 [ 806.562670][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 806.572726][T14145] Call Trace: [ 806.576006][T14145] [ 806.578940][T14145] dump_stack_lvl+0x16c/0x1f0 [ 806.583631][T14145] should_fail_ex+0x497/0x5b0 [ 806.588319][T14145] _copy_to_user+0x32/0xd0 [ 806.592740][T14145] simple_read_from_buffer+0xd0/0x160 [ 806.598125][T14145] proc_fail_nth_read+0x198/0x270 [ 806.603161][T14145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 806.608719][T14145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 806.614272][T14145] vfs_read+0x1df/0xbe0 [ 806.618435][T14145] ? __fget_files+0x1fc/0x3a0 [ 806.623119][T14145] ? __pfx___mutex_lock+0x10/0x10 [ 806.628154][T14145] ? __pfx_vfs_read+0x10/0x10 [ 806.632840][T14145] ? __fget_files+0x206/0x3a0 [ 806.637527][T14145] ksys_read+0x12b/0x250 [ 806.641771][T14145] ? __pfx_ksys_read+0x10/0x10 [ 806.646544][T14145] do_syscall_64+0xcd/0x250 [ 806.651060][T14145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.656987][T14145] RIP: 0033:0x7efd0db8473c [ 806.661404][T14145] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 806.681019][T14145] RSP: 002b:00007efd0e9a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 806.689439][T14145] RAX: ffffffffffffffda RBX: 00007efd0dd76160 RCX: 00007efd0db8473c [ 806.697415][T14145] RDX: 000000000000000f RSI: 00007efd0e9a40a0 RDI: 0000000000000007 [ 806.705390][T14145] RBP: 00007efd0e9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 806.713363][T14145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.721332][T14145] R13: 0000000000000000 R14: 00007efd0dd76160 R15: 00007ffde7ad0ba8 [ 806.729318][T14145] [ 806.743898][ T5863] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 806.770797][ T5863] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 806.786614][ T5863] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 806.795072][ T5863] usb 5-1: media controller created [ 806.831596][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 806.859931][ T5922] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 807.101330][ T5922] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 807.109526][ T5922] usb 3-1: config 0 has no interface number 0 [ 807.126130][ T5922] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 807.136791][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.198511][ T5922] usb 3-1: Product: syz [ 807.226202][ T5922] usb 3-1: Manufacturer: syz [ 807.257630][ T5922] usb 3-1: SerialNumber: syz [ 807.297580][ T5922] usb 3-1: config 0 descriptor?? [ 807.350247][ T5922] cdc_acm 3-1:0.123: More than one union descriptor, skipping ... [ 807.407656][ T5922] cdc_acm 3-1:0.123: skipping garbage [ 807.637573][ T29] audit: type=1400 audit(1737413313.560:943): avc: denied { bind } for pid=14143 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 807.660253][T14144] netlink: 'syz.2.2259': attribute type 10 has an invalid length. [ 807.725728][T14121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.873267][T14144] syz_tun: entered promiscuous mode [ 807.889104][T14121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.922999][T14144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 808.195804][ T5863] usb 5-1: USB disconnect, device number 66 [ 808.391361][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.438217][ T29] audit: type=1400 audit(1737413314.360:944): avc: denied { write } for pid=14157 comm="syz.0.2263" name="mouse0" dev="devtmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 808.530730][ T29] audit: type=1400 audit(1737413314.390:945): avc: denied { ioctl } for pid=14157 comm="syz.0.2263" path="/dev/input/mouse0" dev="devtmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 808.647808][T14161] overlayfs: disabling nfs_export due to verity=on [ 808.706329][ T5865] gspca_spca1528: reg_w err -71 [ 808.711337][ T5865] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 808.744173][ T5865] usb 4-1: USB disconnect, device number 57 [ 808.753157][T14168] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2266'. [ 808.907157][ T29] audit: type=1400 audit(1737413314.830:946): avc: denied { read } for pid=14169 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 809.919480][T14182] tipc: Enabled bearer , priority 7 [ 810.452168][ T5865] usb 3-1: USB disconnect, device number 62 [ 810.491091][T14177] tipc: Disabling bearer [ 810.742352][T14194] Invalid ELF header magic: != ELF [ 811.178962][T14198] FAULT_INJECTION: forcing a failure. [ 811.178962][T14198] name failslab, interval 1, probability 0, space 0, times 0 [ 811.191784][T14198] CPU: 1 UID: 0 PID: 14198 Comm: syz.2.2275 Not tainted 6.13.0-syzkaller #0 [ 811.200436][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 811.210467][T14198] Call Trace: [ 811.213721][T14198] [ 811.216631][T14198] dump_stack_lvl+0x16c/0x1f0 [ 811.221292][T14198] should_fail_ex+0x497/0x5b0 [ 811.225949][T14198] ? fs_reclaim_acquire+0xae/0x150 [ 811.231040][T14198] should_failslab+0xc2/0x120 [ 811.235694][T14198] __kmalloc_cache_noprof+0x68/0x410 [ 811.240956][T14198] ? kasan_save_track+0x14/0x30 [ 811.245785][T14198] sctp_add_bind_addr+0x9a/0x3d0 [ 811.250707][T14198] sctp_copy_one_addr.part.0+0xd6/0x120 [ 811.256248][T14198] sctp_bind_addr_copy+0x1b4/0x530 [ 811.261350][T14198] sctp_connect_new_asoc+0x1d8/0x790 [ 811.266617][T14198] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 811.272400][T14198] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 811.278189][T14198] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 811.283724][T14198] sctp_sendmsg+0x1610/0x1eb0 [ 811.288398][T14198] ? avc_has_perm+0x11b/0x1c0 [ 811.293067][T14198] ? __pfx_sctp_sendmsg+0x10/0x10 [ 811.298074][T14198] ? __pfx_sock_has_perm+0x10/0x10 [ 811.303167][T14198] ? import_ubuf+0x1b6/0x220 [ 811.307837][T14198] ? __pfx_sctp_sendmsg+0x10/0x10 [ 811.312854][T14198] inet_sendmsg+0x119/0x140 [ 811.317346][T14198] ____sys_sendmsg+0x98c/0xc90 [ 811.322113][T14198] ? copy_msghdr_from_user+0x10b/0x160 [ 811.327550][T14198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.332814][T14198] ? __lock_acquire+0xcc5/0x3c40 [ 811.337737][T14198] ___sys_sendmsg+0x135/0x1e0 [ 811.342394][T14198] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.347577][T14198] ? trace_lock_acquire+0x14e/0x1f0 [ 811.352770][T14198] __sys_sendmmsg+0x201/0x420 [ 811.357426][T14198] ? __pfx___sys_sendmmsg+0x10/0x10 [ 811.362608][T14198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 811.368577][T14198] ? fput+0x67/0x440 [ 811.372459][T14198] ? ksys_write+0x1ba/0x250 [ 811.376941][T14198] ? __pfx_ksys_write+0x10/0x10 [ 811.381774][T14198] __x64_sys_sendmmsg+0x9c/0x100 [ 811.386700][T14198] ? lockdep_hardirqs_on+0x7c/0x110 [ 811.391892][T14198] do_syscall_64+0xcd/0x250 [ 811.396392][T14198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.402273][T14198] RIP: 0033:0x7f6b46985d29 [ 811.406666][T14198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.426253][T14198] RSP: 002b:00007f6b47881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 811.434643][T14198] RAX: ffffffffffffffda RBX: 00007f6b46b75fa0 RCX: 00007f6b46985d29 [ 811.442596][T14198] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000006 [ 811.450555][T14198] RBP: 00007f6b47881090 R08: 0000000000000000 R09: 0000000000000000 [ 811.458520][T14198] R10: 0000000034000811 R11: 0000000000000246 R12: 0000000000000001 [ 811.466471][T14198] R13: 0000000000000000 R14: 00007f6b46b75fa0 R15: 00007ffd7d0a0d18 [ 811.474440][T14198] [ 812.759953][ T5864] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 812.873744][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 812.889829][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 812.931247][ T5864] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 812.939536][ T5864] usb 2-1: config 179 has no interface number 0 [ 812.959864][ T5864] usb 2-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 812.999802][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 813.049316][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 813.085496][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 813.146582][ T5864] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 813.218972][ T5864] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 813.295253][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.358602][T14215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 813.368055][T14223] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2281'. [ 813.662312][T14230] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 814.468599][T14237] Invalid ELF header magic: != ELF [ 815.046511][ T5922] usb 2-1: USB disconnect, device number 49 [ 815.421941][ T5864] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 815.619997][ T5864] usb 4-1: device descriptor read/64, error -71 [ 816.379855][ T5864] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 816.506086][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 816.548200][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 816.571166][ T5864] usb 4-1: device descriptor read/64, error -71 [ 816.682589][ T5864] usb usb4-port1: attempt power cycle [ 817.550122][ T5864] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 817.729421][ T5864] usb 4-1: device descriptor read/8, error -71 [ 818.292818][T14281] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2297'. [ 819.825185][ T5863] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 820.130343][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 820.218539][ T5863] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 820.250114][ T5894] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 820.255882][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.301990][ T5863] usb 2-1: config 0 descriptor?? [ 820.315270][ T5863] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 820.413783][ T5894] usb 3-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 820.457893][ T5894] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 820.667312][T14289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.695526][ T5894] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 820.699995][T14289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.752213][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.786421][ T5863] gspca_nw80x: reg_w err -71 [ 820.790890][ T5894] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 820.799896][ T5863] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 820.807171][ T5894] usb 3-1: no configuration chosen from 1 choice [ 820.815697][ T5863] usb 2-1: USB disconnect, device number 50 [ 820.945478][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 820.956416][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 822.222080][ T5863] usb 3-1: USB disconnect, device number 63 [ 822.692519][T14326] netlink: 6233 bytes leftover after parsing attributes in process `syz.0.2309'. [ 823.331833][T14338] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2312'. [ 823.780652][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 823.806406][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2318'. [ 823.992211][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 824.005438][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 824.209975][ T5894] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 824.499852][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 824.506249][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 824.515273][ T5894] usb 5-1: config 0 has no interface number 0 [ 824.523673][ T5894] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.534754][ T5894] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.544878][ T5894] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 824.553943][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.564347][ T5894] usb 5-1: config 0 descriptor?? [ 824.704028][T14367] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 824.716087][T14367] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 826.188916][T14393] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2331'. [ 826.267335][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 826.291446][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2332'. [ 827.037592][ T5894] usbhid 5-1:0.1: can't add hid device: -71 [ 827.103869][ T5894] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 827.156360][ T5894] usb 5-1: USB disconnect, device number 67 [ 827.635649][T14412] Invalid ELF header magic: != ELF [ 828.572929][T14424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.610664][T14424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.408266][T11724] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 831.770321][ T29] audit: type=1400 audit(1737413337.700:947): avc: denied { ioctl } for pid=14455 comm="syz.3.2350" path="socket:[48161]" dev="sockfs" ino=48161 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 831.928619][ T29] audit: type=1400 audit(1737413337.740:948): avc: denied { append } for pid=14455 comm="syz.3.2350" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 831.956490][T14450] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 832.062464][T14466] FAULT_INJECTION: forcing a failure. [ 832.062464][T14466] name failslab, interval 1, probability 0, space 0, times 0 [ 832.090989][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2347'. [ 832.100231][T14466] CPU: 1 UID: 0 PID: 14466 Comm: syz.3.2351 Not tainted 6.13.0-syzkaller #0 [ 832.108921][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 832.118986][T14466] Call Trace: [ 832.122269][T14466] [ 832.125202][T14466] dump_stack_lvl+0x16c/0x1f0 [ 832.129894][T14466] should_fail_ex+0x497/0x5b0 [ 832.134591][T14466] should_failslab+0xc2/0x120 [ 832.139299][T14466] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 832.146818][T14466] ? sidtab_sid2str_get+0x17a/0x680 [ 832.146854][T14466] kmemdup_noprof+0x29/0x60 [ 832.156535][T14466] sidtab_sid2str_get+0x17a/0x680 [ 832.161581][T14466] sidtab_entry_to_string+0x33/0x110 [ 832.166888][T14466] security_sid_to_context_core+0x35c/0x640 [ 832.172804][T14466] avc_audit_post_callback+0x10b/0x8c0 [ 832.178287][T14466] ? audit_log_format+0xe9/0x130 [ 832.183238][T14466] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 832.189236][T14466] ? skb_put+0x138/0x1b0 [ 832.193498][T14466] ? audit_log_n_string+0x253/0x540 [ 832.198713][T14466] ? audit_log_n_untrustedstring+0xf2/0x100 [ 832.204621][T14466] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 832.210615][T14466] common_lsm_audit+0x33f/0x2250 [ 832.215565][T14466] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 832.221567][T14466] ? __pfx_common_lsm_audit+0x10/0x10 [ 832.226949][T14466] ? find_held_lock+0x2d/0x110 [ 832.231827][T14466] ? avc_denied+0x434/0x780 [ 832.236345][T14466] ? __pfx_lock_release+0x10/0x10 [ 832.241378][T14466] ? __pfx_avc_node_free+0x10/0x10 [ 832.246501][T14466] ? rcu_is_watching+0x12/0xc0 [ 832.251295][T14466] ? slow_avc_audit+0x17d/0x210 [ 832.256163][T14466] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 832.261984][T14466] slow_avc_audit+0x17d/0x210 [ 832.266678][T14466] ? __pfx_slow_avc_audit+0x10/0x10 [ 832.271901][T14466] ? avc_has_perm_noaudit+0x2fa/0x3a0 [ 832.277292][T14466] avc_has_perm+0x18d/0x1c0 [ 832.281810][T14466] ? __pfx_avc_has_perm+0x10/0x10 [ 832.286857][T14466] ? __pfx___lock_acquire+0x10/0x10 [ 832.292069][T14466] sock_has_perm+0x253/0x2f0 [ 832.296665][T14466] ? __pfx_sock_has_perm+0x10/0x10 [ 832.301795][T14466] ? __pfx___lock_acquire+0x10/0x10 [ 832.307002][T14466] ? trace_lock_acquire+0x14e/0x1f0 [ 832.312220][T14466] selinux_socket_bind+0xec/0xa30 [ 832.317250][T14466] ? find_held_lock+0x2d/0x110 [ 832.322029][T14466] ? __pfx_selinux_socket_bind+0x10/0x10 [ 832.327665][T14466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 832.333568][T14466] ? tomoyo_socket_bind_permission+0x14e/0x350 [ 832.339739][T14466] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 832.346265][T14466] security_socket_bind+0xc6/0x240 [ 832.351382][T14466] __sys_bind+0x13f/0x260 [ 832.355719][T14466] ? __pfx___sys_bind+0x10/0x10 [ 832.360576][T14466] ? __fget_files+0x206/0x3a0 [ 832.365266][T14466] ? __pfx_ksys_write+0x10/0x10 [ 832.370125][T14466] __x64_sys_bind+0x72/0xb0 [ 832.374634][T14466] ? lockdep_hardirqs_on+0x7c/0x110 [ 832.379841][T14466] do_syscall_64+0xcd/0x250 [ 832.384355][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.390258][T14466] RIP: 0033:0x7f7fd3585d29 [ 832.394673][T14466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.414281][T14466] RSP: 002b:00007f7fd4490038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 832.422687][T14466] RAX: ffffffffffffffda RBX: 00007f7fd3775fa0 RCX: 00007f7fd3585d29 [ 832.430645][T14466] RDX: 0000000000000014 RSI: 00000000200003c0 RDI: 0000000000000004 [ 832.438596][T14466] RBP: 00007f7fd4490090 R08: 0000000000000000 R09: 0000000000000000 [ 832.446549][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.454515][T14466] R13: 0000000000000000 R14: 00007f7fd3775fa0 R15: 00007ffdcd32e5f8 [ 832.462476][T14466] [ 832.473402][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2347'. [ 832.484778][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2347'. [ 832.519343][ T29] audit: type=1400 audit(1737413337.990:949): avc: denied { bind } for pid=14464 comm="syz.3.2351" ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 832.557587][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2347'. [ 832.630260][T14474] Invalid ELF header magic: != ELF [ 833.270484][T14485] 9pnet_virtio: no channels available for device syz [ 834.076322][ T5922] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 834.240930][ T5922] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 834.284947][T14495] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50643 sclass=netlink_xfrm_socket pid=14495 comm=syz.3.2358 [ 834.389782][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 834.406611][ T5922] usb 5-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 834.455765][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.547677][ T5922] usb 5-1: config 0 descriptor?? [ 834.650208][T12547] Bluetooth: hci4: command 0x0405 tx timeout [ 834.840755][T14500] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2358'. [ 835.132379][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 835.139627][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 835.327608][T14501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.447300][T14510] tipc: Enabled bearer , priority 7 [ 835.918758][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 835.926275][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 835.938934][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 835.959109][T14501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.977347][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 836.019628][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 836.139977][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 836.149272][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 836.150137][T14504] tipc: Disabling bearer [ 836.172289][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 836.179924][ T5922] viewsonic 0003:0543:E621.0007: unknown main item tag 0x0 [ 836.545024][ T5922] viewsonic 0003:0543:E621.0007: hidraw0: USB HID v0.08 Device [HID 0543:e621] on usb-dummy_hcd.4-1/input0 [ 836.676264][ T29] audit: type=1400 audit(1737413342.600:950): avc: denied { write } for pid=14523 comm="syz.3.2367" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 836.707629][ T5922] usb 5-1: USB disconnect, device number 68 [ 837.160053][ T5922] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 837.441896][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 837.450092][ T5922] usb 5-1: not running at top speed; connect to a high speed hub [ 837.458851][ T5922] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.471727][ T5922] usb 5-1: config 1 interface 0 has no altsetting 0 [ 837.480874][ T5922] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 837.496840][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.505090][ T5922] usb 5-1: Product: syz [ 837.509316][ T5922] usb 5-1: Manufacturer: syz [ 837.514013][ T5922] usb 5-1: SerialNumber: syz [ 837.585799][T14522] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 838.044125][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.132555][T14522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2365'. [ 838.154802][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.254661][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2365'. [ 838.274146][T14522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2365'. [ 838.282725][ T5922] usbhid 5-1:1.0: can't add hid device: -71 [ 838.285421][T14522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2365'. [ 838.289026][ T5922] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 838.372666][ T5922] usb 5-1: USB disconnect, device number 69 [ 838.424649][T14539] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 839.605721][T14551] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 839.682759][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 839.695883][T14555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2375'. [ 839.711637][T14556] netlink: 6233 bytes leftover after parsing attributes in process `syz.0.2374'. [ 840.042142][T14571] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 840.091291][ T5862] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 840.340299][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 840.347568][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.358125][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.372592][ T5862] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.381885][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.407224][ T5862] usb 4-1: Product: syz [ 840.419570][ T5862] usb 4-1: Manufacturer: syz [ 840.434610][ T5862] usb 4-1: SerialNumber: syz [ 840.695546][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 840.709619][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2386'. [ 840.716451][ T5862] usb 4-1: 0:2 : does not exist [ 840.731738][ T5862] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 841.004846][ T5862] usb 4-1: USB disconnect, device number 62 [ 842.279102][T14607] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 842.329927][T14592] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 843.336317][T14624] FAULT_INJECTION: forcing a failure. [ 843.336317][T14624] name failslab, interval 1, probability 0, space 0, times 0 [ 843.349817][T14624] CPU: 0 UID: 0 PID: 14624 Comm: syz.1.2394 Not tainted 6.13.0-syzkaller #0 [ 843.358487][T14624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 843.368528][T14624] Call Trace: [ 843.371792][T14624] [ 843.374710][T14624] dump_stack_lvl+0x16c/0x1f0 [ 843.379385][T14624] should_fail_ex+0x497/0x5b0 [ 843.384058][T14624] ? __pfx_lock_release+0x10/0x10 [ 843.389074][T14624] should_failslab+0xc2/0x120 [ 843.393761][T14624] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 843.399557][T14624] ? percpu_ref_put_many.constprop.0+0x2e/0x2a0 [ 843.405810][T14624] ? zswap_store+0x85a/0x26c0 [ 843.410477][T14624] zswap_store+0x85a/0x26c0 [ 843.414972][T14624] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 843.420334][T14624] ? swap_swapcount+0x18e/0x220 [ 843.425193][T14624] ? __pfx_zswap_store+0x10/0x10 [ 843.430118][T14624] ? _raw_spin_unlock+0x28/0x50 [ 843.434958][T14624] ? swap_swapcount+0x13c/0x220 [ 843.439801][T14624] ? __pfx_swap_swapcount+0x10/0x10 [ 843.444994][T14624] ? swp_swap_info+0xcf/0x130 [ 843.449663][T14624] ? __pfx_swp_swap_info+0x10/0x10 [ 843.454769][T14624] swap_writepage+0x3b6/0x1120 [ 843.459530][T14624] ? folio_clear_dirty_for_io+0x112/0x800 [ 843.465245][T14624] pageout+0x3b2/0xaa0 [ 843.469309][T14624] ? __pfx_pageout+0x10/0x10 [ 843.473918][T14624] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 843.479210][T14624] ? on_each_cpu_cond_mask+0x5a/0x90 [ 843.484489][T14624] ? arch_tlbbatch_flush+0x16e/0x320 [ 843.489774][T14624] shrink_folio_list+0x3025/0x42d0 [ 843.494888][T14624] ? __pfx_shrink_folio_list+0x10/0x10 [ 843.500339][T14624] ? hlock_class+0x4e/0x130 [ 843.504835][T14624] ? hlock_class+0x4e/0x130 [ 843.509330][T14624] ? mark_lock+0xb5/0xc60 [ 843.513650][T14624] ? hlock_class+0x4e/0x130 [ 843.518158][T14624] ? __lock_acquire+0x15a9/0x3c40 [ 843.523174][T14624] ? hlock_class+0x4e/0x130 [ 843.527675][T14624] ? hlock_class+0x4e/0x130 [ 843.532170][T14624] ? mark_lock+0xb5/0xc60 [ 843.536487][T14624] ? hlock_class+0x4e/0x130 [ 843.540984][T14624] ? mark_lock+0xb5/0xc60 [ 843.545322][T14624] ? __pfx_mark_lock+0x10/0x10 [ 843.550076][T14624] ? __lock_acquire+0x15a9/0x3c40 [ 843.555116][T14624] reclaim_folio_list+0xd8/0x5e0 [ 843.560054][T14624] ? __pfx___lock_acquire+0x10/0x10 [ 843.565242][T14624] ? __pfx_reclaim_folio_list+0x10/0x10 [ 843.570781][T14624] ? hlock_class+0x4e/0x130 [ 843.575292][T14624] ? reclaim_pages+0x3a9/0x650 [ 843.580052][T14624] reclaim_pages+0x481/0x650 [ 843.584637][T14624] ? __pfx_reclaim_pages+0x10/0x10 [ 843.589745][T14624] ? folio_isolate_lru+0xa2/0x8e0 [ 843.594771][T14624] madvise_cold_or_pageout_pte_range+0x13ae/0x20d0 [ 843.601282][T14624] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 843.608126][T14624] ? find_held_lock+0x2d/0x110 [ 843.612888][T14624] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 843.619729][T14624] walk_pgd_range+0xc7b/0x1a70 [ 843.624499][T14624] ? mt_find+0x4c8/0xa20 [ 843.628741][T14624] ? __pfx_walk_pgd_range+0x10/0x10 [ 843.633936][T14624] __walk_page_range+0x161/0x820 [ 843.638869][T14624] ? find_vma+0xc0/0x140 [ 843.643098][T14624] ? __pfx_find_vma+0x10/0x10 [ 843.647763][T14624] ? walk_page_test+0x9b/0x180 [ 843.652521][T14624] walk_page_range_mm+0x55a/0x940 [ 843.657541][T14624] ? __pfx_walk_page_range_mm+0x10/0x10 [ 843.663098][T14624] ? mlock_drain_local+0x22d/0x4f0 [ 843.668213][T14624] walk_page_range+0x63/0x90 [ 843.672814][T14624] madvise_pageout+0x326/0x820 [ 843.677575][T14624] ? __pfx_madvise_pageout+0x10/0x10 [ 843.682865][T14624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 843.688755][T14624] madvise_vma_behavior+0x44a/0x1da0 [ 843.694038][T14624] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 843.699754][T14624] ? find_vma_prev+0xdb/0x160 [ 843.704426][T14624] ? __pfx_find_vma_prev+0x10/0x10 [ 843.709537][T14624] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 843.715074][T14624] ? do_madvise+0x25b/0x770 [ 843.719573][T14624] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 843.725286][T14624] madvise_walk_vmas+0x1cf/0x2c0 [ 843.730219][T14624] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 843.735677][T14624] do_madvise+0x30e/0x770 [ 843.740002][T14624] ? __pfx_do_madvise+0x10/0x10 [ 843.744853][T14624] ? ksys_write+0x1ba/0x250 [ 843.749350][T14624] ? __pfx_ksys_write+0x10/0x10 [ 843.754193][T14624] __x64_sys_madvise+0xa9/0x110 [ 843.759039][T14624] ? lockdep_hardirqs_on+0x7c/0x110 [ 843.764230][T14624] do_syscall_64+0xcd/0x250 [ 843.768729][T14624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.774616][T14624] RIP: 0033:0x7efd0db85d29 [ 843.779019][T14624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.798632][T14624] RSP: 002b:00007efd0e9a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 843.807034][T14624] RAX: ffffffffffffffda RBX: 00007efd0dd76160 RCX: 00007efd0db85d29 [ 843.815008][T14624] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000000020000000 [ 843.822970][T14624] RBP: 00007efd0e9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 843.830928][T14624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.838886][T14624] R13: 0000000000000000 R14: 00007efd0dd76160 R15: 00007ffde7ad0ba8 [ 843.846855][T14624] [ 843.849876][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.929535][T14626] tipc: Cannot configure node identity twice [ 844.268227][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 844.299939][ T5922] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 844.548473][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 844.555105][ T5922] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 844.568830][ T5922] usb 3-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 845.585372][ T5922] usb 3-1: config 0 has no interface number 0 [ 845.591729][ T5922] usb 3-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.608019][ T5922] usb 3-1: New USB device found, idVendor=0413, idProduct=0023, bcdDevice=ec.08 [ 845.617237][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.625267][ T5922] usb 3-1: Product: syz [ 845.629617][ T5922] usb 3-1: Manufacturer: syz [ 845.660095][ T5922] usb 3-1: SerialNumber: syz [ 845.673329][ T5922] usb 3-1: config 0 descriptor?? [ 845.993588][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 846.001657][ T5922] usb 3-1: USB disconnect, device number 64 [ 846.085046][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 846.099235][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 846.108567][T14647] netlink: 'syz.3.2403': attribute type 12 has an invalid length. [ 846.550224][ T29] audit: type=1400 audit(1737413352.470:951): avc: denied { map } for pid=14645 comm="syz.3.2403" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 847.234445][T14670] FAULT_INJECTION: forcing a failure. [ 847.234445][T14670] name failslab, interval 1, probability 0, space 0, times 0 [ 847.247198][T14670] CPU: 0 UID: 0 PID: 14670 Comm: syz.3.2407 Not tainted 6.13.0-syzkaller #0 [ 847.255880][T14670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 847.265937][T14670] Call Trace: [ 847.269219][T14670] [ 847.272177][T14670] dump_stack_lvl+0x16c/0x1f0 [ 847.276867][T14670] should_fail_ex+0x497/0x5b0 [ 847.281559][T14670] ? fs_reclaim_acquire+0xae/0x150 [ 847.286672][T14670] should_failslab+0xc2/0x120 [ 847.291358][T14670] __kmalloc_cache_noprof+0x68/0x410 [ 847.296656][T14670] alloc_pipe_info+0x10e/0x590 [ 847.301434][T14670] splice_direct_to_actor+0x793/0xa40 [ 847.306825][T14670] ? __pfx_direct_splice_actor+0x10/0x10 [ 847.312465][T14670] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 847.318372][T14670] ? __pfx___might_resched+0x10/0x10 [ 847.323676][T14670] do_splice_direct+0x178/0x250 [ 847.328537][T14670] ? __pfx_do_splice_direct+0x10/0x10 [ 847.333924][T14670] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 847.339833][T14670] ? bpf_lsm_file_permission+0x9/0x10 [ 847.345213][T14670] ? security_file_permission+0x71/0x210 [ 847.350862][T14670] do_sendfile+0xaed/0xe30 [ 847.355290][T14670] ? __pfx_do_sendfile+0x10/0x10 [ 847.360227][T14670] ? __pfx___schedule+0x10/0x10 [ 847.365084][T14670] ? __fget_files+0x206/0x3a0 [ 847.369770][T14670] __x64_sys_sendfile64+0x1da/0x220 [ 847.374972][T14670] ? ksys_write+0x1ba/0x250 [ 847.379475][T14670] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 847.385207][T14670] do_syscall_64+0xcd/0x250 [ 847.389722][T14670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.395623][T14670] RIP: 0033:0x7f7fd3585d29 [ 847.400040][T14670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.419654][T14670] RSP: 002b:00007f7fd444e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 847.428071][T14670] RAX: ffffffffffffffda RBX: 00007f7fd3776160 RCX: 00007f7fd3585d29 [ 847.436048][T14670] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 847.444019][T14670] RBP: 00007f7fd444e090 R08: 0000000000000000 R09: 0000000000000000 [ 847.451990][T14670] R10: 0000000000080006 R11: 0000000000000246 R12: 0000000000000001 [ 847.459949][T14670] R13: 0000000000000000 R14: 00007f7fd3776160 R15: 00007ffdcd32e5f8 [ 847.467918][T14670] [ 847.471898][T14665] xt_limit: Overflow, try lower: 262144/524288 [ 847.877041][ T29] audit: type=1400 audit(1737413353.800:952): avc: denied { create } for pid=14668 comm="syz.4.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 848.123342][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 848.670226][T14692] [ 848.672590][T14692] ====================================================== [ 848.679587][T14692] WARNING: possible circular locking dependency detected [ 848.686583][T14692] 6.13.0-syzkaller #0 Not tainted [ 848.691583][T14692] ------------------------------------------------------ [ 848.698576][T14692] syz.1.2410/14692 is trying to acquire lock: [ 848.704632][T14692] ffff888025a8d538 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x407/0x8c0 [ 848.714543][T14692] [ 848.714543][T14692] but task is already holding lock: [ 848.721909][T14692] ffff888025a8cee8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x8f5/0x18b0 [ 848.731602][T14692] [ 848.731602][T14692] which lock already depends on the new lock. [ 848.731602][T14692] [ 848.742007][T14692] [ 848.742007][T14692] the existing dependency chain (in reverse order) is: [ 848.751013][T14692] [ 848.751013][T14692] -> #6 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 848.759601][T14692] blk_mq_submit_bio+0x1fb6/0x24c0 [ 848.765229][T14692] __submit_bio+0x384/0x540 [ 848.770238][T14692] submit_bio_noacct_nocheck+0x698/0xd70 [ 848.776374][T14692] submit_bio_noacct+0x93a/0x1e20 [ 848.781910][T14692] mpage_readahead+0x41d/0x590 [ 848.787181][T14692] read_pages+0x1a8/0xdc0 [ 848.792018][T14692] page_cache_ra_unbounded+0x3dc/0x750 [ 848.797978][T14692] force_page_cache_ra+0x24b/0x340 [ 848.803590][T14692] page_cache_sync_ra+0x110/0x9c0 [ 848.809120][T14692] filemap_get_pages+0xd7b/0x1be0 [ 848.814737][T14692] filemap_read+0x3ca/0xd70 [ 848.819748][T14692] blkdev_read_iter+0x187/0x480 [ 848.825104][T14692] vfs_read+0x87f/0xbe0 [ 848.829766][T14692] ksys_read+0x12b/0x250 [ 848.834519][T14692] do_syscall_64+0xcd/0x250 [ 848.839530][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.845933][T14692] [ 848.845933][T14692] -> #5 (mapping.invalidate_lock#2){++++}-{4:4}: [ 848.854434][T14692] down_read+0x9a/0x330 [ 848.859119][T14692] filemap_fault+0x62c/0x2820 [ 848.864312][T14692] __do_fault+0x10a/0x490 [ 848.869152][T14692] do_pte_missing+0x1a8/0x3e00 [ 848.874423][T14692] __handle_mm_fault+0x103c/0x2a40 [ 848.880038][T14692] handle_mm_fault+0x3fa/0xaa0 [ 848.885307][T14692] do_user_addr_fault+0x60d/0x13f0 [ 848.890920][T14692] exc_page_fault+0x5c/0xc0 [ 848.895927][T14692] asm_exc_page_fault+0x26/0x30 [ 848.901286][T14692] [ 848.901286][T14692] -> #4 (&vma->vm_lock->lock){++++}-{4:4}: [ 848.909259][T14692] down_write+0x93/0x200 [ 848.914011][T14692] vma_link+0x26d/0x4a0 [ 848.918671][T14692] insert_vm_struct+0x197/0x3f0 [ 848.924024][T14692] alloc_bprm+0x6e0/0xc90 [ 848.928855][T14692] kernel_execve+0xb0/0x3b0 [ 848.933874][T14692] kernel_init+0x14a/0x2b0 [ 848.938803][T14692] ret_from_fork+0x45/0x80 [ 848.943737][T14692] ret_from_fork_asm+0x1a/0x30 [ 848.949020][T14692] [ 848.949020][T14692] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 848.956565][T14692] __might_fault+0x11b/0x190 [ 848.961671][T14692] _copy_from_user+0x29/0xd0 [ 848.966765][T14692] __blk_trace_setup+0xa8/0x180 [ 848.972127][T14692] blk_trace_setup+0x47/0x70 [ 848.977232][T14692] sg_ioctl+0x65e/0x2750 [ 848.981985][T14692] __x64_sys_ioctl+0x190/0x200 [ 848.987265][T14692] do_syscall_64+0xcd/0x250 [ 848.992278][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.998680][T14692] [ 848.998680][T14692] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 849.006483][T14692] __mutex_lock+0x19b/0xa60 [ 849.011496][T14692] blk_mq_init_sched+0x42b/0x640 [ 849.016948][T14692] elevator_init_mq+0x2cd/0x420 [ 849.022304][T14692] add_disk_fwnode+0x113/0x1300 [ 849.027659][T14692] sd_probe+0xa86/0x1000 [ 849.032414][T14692] really_probe+0x23e/0xa90 [ 849.037431][T14692] __driver_probe_device+0x1de/0x440 [ 849.043242][T14692] driver_probe_device+0x4c/0x1b0 [ 849.048789][T14692] __device_attach_driver+0x1df/0x310 [ 849.054680][T14692] bus_for_each_drv+0x157/0x1e0 [ 849.060039][T14692] __device_attach_async_helper+0x1d3/0x290 [ 849.066532][T14692] async_run_entry_fn+0x9c/0x530 [ 849.071988][T14692] process_one_work+0x9c5/0x1ba0 [ 849.077435][T14692] worker_thread+0x6c8/0xf00 [ 849.082530][T14692] kthread+0x2c1/0x3a0 [ 849.087107][T14692] ret_from_fork+0x45/0x80 [ 849.092048][T14692] ret_from_fork_asm+0x1a/0x30 [ 849.097323][T14692] [ 849.097323][T14692] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 849.106169][T14692] blk_queue_enter+0x50f/0x640 [ 849.111446][T14692] blk_mq_alloc_request+0x59b/0x950 [ 849.117158][T14692] scsi_execute_cmd+0x1da/0xf40 [ 849.122515][T14692] read_capacity_16+0x213/0xe10 [ 849.127893][T14692] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 849.134211][T14692] sd_probe+0x904/0x1000 [ 849.138990][T14692] really_probe+0x23e/0xa90 [ 849.144001][T14692] __driver_probe_device+0x1de/0x440 [ 849.149804][T14692] driver_probe_device+0x4c/0x1b0 [ 849.155334][T14692] __device_attach_driver+0x1df/0x310 [ 849.161214][T14692] bus_for_each_drv+0x157/0x1e0 [ 849.166570][T14692] __device_attach_async_helper+0x1d3/0x290 [ 849.172970][T14692] async_run_entry_fn+0x9c/0x530 [ 849.178420][T14692] process_one_work+0x9c5/0x1ba0 [ 849.183863][T14692] worker_thread+0x6c8/0xf00 [ 849.188974][T14692] kthread+0x2c1/0x3a0 [ 849.193574][T14692] ret_from_fork+0x45/0x80 [ 849.198504][T14692] ret_from_fork_asm+0x1a/0x30 [ 849.203784][T14692] [ 849.203784][T14692] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 849.211419][T14692] __lock_acquire+0x249e/0x3c40 [ 849.216782][T14692] lock_acquire.part.0+0x11b/0x380 [ 849.222403][T14692] __mutex_lock+0x19b/0xa60 [ 849.227419][T14692] loop_reconfigure_limits+0x407/0x8c0 [ 849.233393][T14692] lo_ioctl+0x901/0x18b0 [ 849.238147][T14692] blkdev_ioctl+0x276/0x6d0 [ 849.243169][T14692] __x64_sys_ioctl+0x190/0x200 [ 849.248446][T14692] do_syscall_64+0xcd/0x250 [ 849.253463][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.259867][T14692] [ 849.259867][T14692] other info that might help us debug this: [ 849.259867][T14692] [ 849.270077][T14692] Chain exists of: [ 849.270077][T14692] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#24 [ 849.270077][T14692] [ 849.284930][T14692] Possible unsafe locking scenario: [ 849.284930][T14692] [ 849.292357][T14692] CPU0 CPU1 [ 849.297701][T14692] ---- ---- [ 849.303045][T14692] lock(&q->q_usage_counter(io)#24); [ 849.308406][T14692] lock(mapping.invalidate_lock#2); [ 849.316196][T14692] lock(&q->q_usage_counter(io)#24); [ 849.324074][T14692] lock(&q->limits_lock); [ 849.328472][T14692] [ 849.328472][T14692] *** DEADLOCK *** [ 849.328472][T14692] [ 849.336682][T14692] 3 locks held by syz.1.2410/14692: [ 849.341859][T14692] #0: ffff888025b83360 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x771/0x18b0 [ 849.350811][T14692] #1: ffff888025a8cee8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x8f5/0x18b0 [ 849.360894][T14692] #2: ffff888025a8cf20 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x8f5/0x18b0 [ 849.371147][T14692] [ 849.371147][T14692] stack backtrace: [ 849.377022][T14692] CPU: 0 UID: 0 PID: 14692 Comm: syz.1.2410 Not tainted 6.13.0-syzkaller #0 [ 849.385676][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 849.395712][T14692] Call Trace: [ 849.398988][T14692] [ 849.401902][T14692] dump_stack_lvl+0x116/0x1f0 [ 849.406571][T14692] print_circular_bug+0x419/0x5d0 [ 849.411585][T14692] check_noncircular+0x31a/0x400 [ 849.416591][T14692] ? __pfx_check_noncircular+0x10/0x10 [ 849.422037][T14692] ? add_lock_to_list+0x17d/0x390 [ 849.427054][T14692] __lock_acquire+0x249e/0x3c40 [ 849.431890][T14692] ? __pfx___lock_acquire+0x10/0x10 [ 849.437072][T14692] ? __pfx_lock_release+0x10/0x10 [ 849.442078][T14692] ? trace_lock_acquire+0x14e/0x1f0 [ 849.447266][T14692] lock_acquire.part.0+0x11b/0x380 [ 849.452360][T14692] ? loop_reconfigure_limits+0x407/0x8c0 [ 849.457980][T14692] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 849.463615][T14692] ? rcu_is_watching+0x12/0xc0 [ 849.468366][T14692] ? trace_lock_acquire+0x14e/0x1f0 [ 849.473555][T14692] ? avc_has_perm+0x11b/0x1c0 [ 849.478222][T14692] ? loop_reconfigure_limits+0x407/0x8c0 [ 849.483844][T14692] ? lock_acquire+0x2f/0xb0 [ 849.488333][T14692] ? loop_reconfigure_limits+0x407/0x8c0 [ 849.493958][T14692] __mutex_lock+0x19b/0xa60 [ 849.498450][T14692] ? loop_reconfigure_limits+0x407/0x8c0 [ 849.504069][T14692] ? __pfx_mark_lock+0x10/0x10 [ 849.508817][T14692] ? loop_reconfigure_limits+0x407/0x8c0 [ 849.514439][T14692] ? selinux_sb_statfs+0x1e6/0x2b0 [ 849.519558][T14692] ? __pfx___mutex_lock+0x10/0x10 [ 849.524573][T14692] ? shmem_statfs+0x1bb/0x3f0 [ 849.529235][T14692] ? vfs_statfs.part.0.isra.0+0x208/0x270 [ 849.534948][T14692] ? loop_reconfigure_limits+0x407/0x8c0 [ 849.540568][T14692] loop_reconfigure_limits+0x407/0x8c0 [ 849.546017][T14692] ? hlock_class+0x4e/0x130 [ 849.550511][T14692] ? mark_lock+0xb5/0xc60 [ 849.554824][T14692] ? __pfx___lock_acquire+0x10/0x10 [ 849.560008][T14692] ? __pfx_mark_lock+0x10/0x10 [ 849.564754][T14692] ? lock_acquire.part.0+0x11b/0x380 [ 849.570023][T14692] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 849.575998][T14692] ? lo_ioctl+0x8f5/0x18b0 [ 849.580408][T14692] lo_ioctl+0x901/0x18b0 [ 849.584643][T14692] ? __pfx_lo_ioctl+0x10/0x10 [ 849.589310][T14692] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 849.595194][T14692] ? tomoyo_path_number_perm+0x298/0x590 [ 849.600821][T14692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 849.606702][T14692] ? blkdev_common_ioctl+0x1d9/0x2220 [ 849.612158][T14692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 849.618038][T14692] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 849.623660][T14692] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 849.628677][T14692] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 849.635175][T14692] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 849.641682][T14692] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 849.648522][T14692] ? __pfx_lock_release+0x10/0x10 [ 849.653968][T14692] ? __pfx_lo_ioctl+0x10/0x10 [ 849.658639][T14692] blkdev_ioctl+0x276/0x6d0 [ 849.663132][T14692] ? __pfx_blkdev_ioctl+0x10/0x10 [ 849.668154][T14692] ? selinux_file_ioctl+0x180/0x270 [ 849.673345][T14692] ? selinux_file_ioctl+0xb4/0x270 [ 849.678444][T14692] ? __pfx_blkdev_ioctl+0x10/0x10 [ 849.683457][T14692] __x64_sys_ioctl+0x190/0x200 [ 849.688214][T14692] do_syscall_64+0xcd/0x250 [ 849.692710][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.698592][T14692] RIP: 0033:0x7efd0db85d29 [ 849.702990][T14692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.722583][T14692] RSP: 002b:00007efd0e983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.730982][T14692] RAX: ffffffffffffffda RBX: 00007efd0dd76240 RCX: 00007efd0db85d29 [ 849.738935][T14692] RDX: 0000000000000000 RSI: 0000000000004c09 RDI: 0000000000000008 [ 849.746890][T14692] RBP: 00007efd0dc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 849.754844][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.762800][T14692] R13: 0000000000000001 R14: 00007efd0dd76240 R15: 00007ffde7ad0ba8 [ 849.770759][T14692] [ 849.912034][T14696] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 849.955411][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2412'. [ 849.964496][T14693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2412'. [ 849.973530][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2412'. [ 849.983030][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2412'.