last executing test programs: 2m55.508491437s ago: executing program 2 (id=2125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x11) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 2m53.232477104s ago: executing program 2 (id=2129): openat$pfkey(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r2, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) close(0x3) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100), 0x3, 0x0, 0xfffffffffffffddf}, 0x40032160) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 2m48.765585633s ago: executing program 2 (id=2140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf, 0x15}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x88}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x20040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000340)) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000500)=[{0x3, 0x1, {0x2, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfd, 0xfd}, {0x2, 0x3, {0x2, 0xff, 0x2}, {0x1, 0x0, 0x8}, 0xfe, 0x2}, {0x3, 0x0, {0x1, 0xe}, {0x0, 0xf, 0x4}, 0xfe, 0x1}], 0x60) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r8, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000085) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r12, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m48.605482273s ago: executing program 3 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8080) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0xd) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) statfs(&(0x7f00000003c0)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000062c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000016910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x3, 0x1, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m48.493056259s ago: executing program 2 (id=2143): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x400) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0xc9100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x520}]}, 0x24}, 0x1, 0x0, 0x0, 0x2f535188992f6c5c}, 0x804) 2m48.443387206s ago: executing program 2 (id=2146): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x553240, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) splice(r1, 0x0, r2, &(0x7f0000000140)=0x6, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00771806372a60c091634efe9f1740000e00000000ffff00e0ffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000000080), 0x72a, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r11, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) sendto$inet6(r8, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 2m46.961632376s ago: executing program 2 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000520000000000000000d4399fc939000000000000000000000000008000"], &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r3, &(0x7f0000000100)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r5 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x1000000000000161) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010005000000340200001c"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ppoll(&(0x7f0000000200)=[{r8, 0x4100}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 2m46.917574717s ago: executing program 3 (id=2149): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000680)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "d663cd75673f3c2fdc000000000000000100", "056980b2e865284992526b3f12744020cdf770280290c865754e85f2769a66bd"}}}}}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m46.386316776s ago: executing program 32 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000520000000000000000d4399fc939000000000000000000000000008000"], &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r3, &(0x7f0000000100)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r5 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x1000000000000161) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010005000000340200001c"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ppoll(&(0x7f0000000200)=[{r8, 0x4100}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 2m46.344555713s ago: executing program 3 (id=2152): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0xa0}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x300, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 2m46.103850959s ago: executing program 3 (id=2153): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) ioperm(0x0, 0xfffc, 0x8005) ptrace(0x10, 0x0) sched_setscheduler(0x0, 0x4, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 2m44.9610062s ago: executing program 3 (id=2155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = socket(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) clock_gettime(0x0, 0x0) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)) (fail_nth: 10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 2m41.60891704s ago: executing program 3 (id=2163): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) syz_open_dev$vcsa(&(0x7f0000000080), 0xd, 0x48000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000380)='fuseblk\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000055200010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a88503e204d8a36b11a07d18b06a733e0e74bed06fb60220d568063e3a03d2022bc5178923588", @ANYRES32=r2], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f00000001c0)=ANY=[]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 2m24.977547035s ago: executing program 33 (id=2163): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) syz_open_dev$vcsa(&(0x7f0000000080), 0xd, 0x48000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000380)='fuseblk\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000055200010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a88503e204d8a36b11a07d18b06a733e0e74bed06fb60220d568063e3a03d2022bc5178923588", @ANYRES32=r2], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f00000001c0)=ANY=[]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 59.362397301s ago: executing program 4 (id=2557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd2d, 0x0, {0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_OIF={0x8, 0x5, r7}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x82}}, 0x20}, 0x1, 0x2}, 0x80) 59.161110054s ago: executing program 4 (id=2559): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 59.108282519s ago: executing program 4 (id=2560): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12040500d3fc03fc0100", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) 58.400736511s ago: executing program 4 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) r2 = gettid() ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000700)={0x8, 'pim6reg\x00', {'veth1_to_bond\x00'}, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r0, @ANYBLOB="f48be99700000000b7080000000000007b8af8ff00000000bfa20000000000000703000500ffffffb703000000000000b704000000001f39654dda9b35b77600dba47566f9f293c62dd74a60b108489a2b51fca0f7835d9c1721a3e9e6ad120968099de65c521f66ca89be93035b85e335816fc09b346550779e227143e274481efca796b01ba4cde618c845c6fce0edc851ced9157b7956aab8566cf7e45b76c0b0002fc7ff3168ead34afa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='kmem_cache_free\x00', r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r8) shutdown(r7, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x7fffffe, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00', {}, {}, 0x0, 0xff03}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f00000002c0), &(0x7f0000000400)=r10}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) tkill(r2, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0xfeb5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.282232767s ago: executing program 4 (id=2585): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="0a000600080211"], 0x34}}, 0x44) 54.061058689s ago: executing program 4 (id=2586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) sync() 38.443194489s ago: executing program 34 (id=2586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) sync() 12.885896536s ago: executing program 7 (id=2730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x10000, 0x1fffc0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.763029032s ago: executing program 5 (id=2731): syz_init_net_socket$rose(0xb, 0x5, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x0]}}}, 0x4e}]}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xcc, &(0x7f00000003c0), &(0x7f0000000080)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.566427787s ago: executing program 0 (id=2732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000fcffffdf000000000000800095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000074d564b00000000f9"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r8, 0x0, 0x2000) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r12, 0x0, 0x31, &(0x7f0000000780)=0x5, 0x4) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r14, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r13, &(0x7f0000000180)='\x00', 0x1001}]) fchown(r13, r10, r11) dup3(r6, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r15 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto(r15, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80) 12.292035863s ago: executing program 1 (id=2733): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000001c0)={0xd, 0x1, 0x5}) r3 = fanotify_init(0x0, 0x1) fanotify_mark(r3, 0x1, 0x8, 0xffffffffffffffff, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) fchownat(r4, &(0x7f00000000c0)='./file0\x00', r6, 0x0, 0x100) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x8000, 0x5b, 0x6, {{0x8, 0x4, 0x3, 0x4, 0x20, 0x64, 0x0, 0xd3, 0x4, 0x0, @private=0xa010102, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x90, 0x3, 0x2, [{@empty, 0xf}]}]}}}}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.280497408s ago: executing program 7 (id=2734): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x0) 11.416857147s ago: executing program 7 (id=2735): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xf17c6ff0a457fbf4) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x800, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 11.415481844s ago: executing program 5 (id=2736): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) signalfd(r0, &(0x7f0000000040)={[0x100000001]}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x88c00, 0x0) socket$kcm(0x10, 0x2, 0x4) 11.086571183s ago: executing program 1 (id=2738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04ec1a7ac18e4fd7517eeee256990224a0461d95bfb784ccaad12b3a459acfb7ffe48b4ae0c588363fa95b4dc0a0f0bddbd688b888e271791315abebd1d13ca0ac7112cead92", 0x46, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4) shutdown(r0, 0x1) 9.877772988s ago: executing program 7 (id=2739): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x3, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x40}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x458, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x2, 0x10a5, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000401) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x228, 0x0, 0xa, 0x9a000000, 0x0, 0x0, 0x190, 0x1f0, 0x1f0, 0x190, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'veth0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e21]}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0xffffffff, 'vcan0\x00', 'geneve1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xfd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 9.549147497s ago: executing program 5 (id=2740): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000400)={0xd}) write$binfmt_script(r2, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1, 0x3, [@broadcast, @random="1efdbe0f1940", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) 9.499093955s ago: executing program 1 (id=2741): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8910, 0xffffffffffff7ffe) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) close(r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x3, r6, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000300)={0x22, r8, r6}) 8.632909406s ago: executing program 0 (id=2742): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, r3, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 8.555088044s ago: executing program 1 (id=2743): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.361193294s ago: executing program 0 (id=2744): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xd7, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.294000041s ago: executing program 5 (id=2746): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x0) 7.008820756s ago: executing program 5 (id=2747): syz_init_net_socket$rose(0xb, 0x5, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x0]}}}, 0x4e}]}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xcc, &(0x7f00000003c0), &(0x7f0000000080)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.847676121s ago: executing program 7 (id=2748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="77b232ec00cb30e8", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600"], 0x44}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) 6.517053566s ago: executing program 0 (id=2749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="77b232ec00cb30e8", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600"], 0x44}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) 6.50733447s ago: executing program 6 (id=2750): sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x6080) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x501602) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) r1 = io_uring_setup(0x1b79, &(0x7f0000000000)={0x0, 0x385f, 0x0, 0x0, 0x46}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1a, 0x20000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x3e, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}, {0xa, 0x4e24, 0x3, @private1, 0xc7}, 0x0, {[0xa, 0xfffffffd, 0x4, 0x6, 0x0, 0x0, 0x6, 0x40]}}, 0x5c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000580)={'syz0\x00', {0x6ec6, 0x6, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x4, 0xf5, 0x9, 0x39, 0x747d5a13, 0x2, 0xfffffb9a, 0xfffffffc, 0x100004, 0xfffffffb, 0x4, 0x3, 0x6, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x623b, 0x0, 0x0, 0x1ff, 0x8000, 0x1, 0x3, 0xd, 0x4, 0xba51, 0x8da8, 0x2, 0x200, 0x4, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0xffffffff, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x8, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x1, 0x1, 0x8, 0x5, 0xfffffffb, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0x6, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7ff, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x7], [0x401, 0xc584, 0xffff, 0xcd2, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x9, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10001, 0x1, 0xf, 0xe57, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x9, 0x8, 0x10004, 0x5, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0x9, 0x401, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x6, 0x5, 0x2, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x4, 0x0, 0x0, 0x4, 0x2, 0xfffffff8, 0x401, 0x1, 0x3ff, 0x200, 0x4edf, 0xfffffffd, 0x7, 0x14e0, 0x2, 0xe, 0x0, 0x4000004, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5.692536797s ago: executing program 5 (id=2751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@v2={0x2000000, [{0x4, 0x1}, {0xc2, 0x3}]}, 0x14, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000700)='\t&', 0x4, 0x24048044, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0xff0f000000000000) 4.415447678s ago: executing program 0 (id=2752): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)={r12, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r13}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 3.819089752s ago: executing program 6 (id=2753): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0x7) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.510172489s ago: executing program 1 (id=2754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.366238828s ago: executing program 6 (id=2755): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.336063193s ago: executing program 0 (id=2756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@v2={0x2000000, [{0x4, 0x1}, {0xc2, 0x3}]}, 0x14, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000700)='\t&', 0x4, 0x24048044, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0xff0f000000000000) 1.996008644s ago: executing program 1 (id=2757): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100109f38940d2194811715c000000010902"], 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000440)=""/154, 0x9a) 1.801619989s ago: executing program 6 (id=2758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x3, 0x1}}, './bus\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) write(r7, 0x0, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x8800, 0x0) 462.548159ms ago: executing program 6 (id=2759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bd90000000000017d9387af84ac21f51298e70262356000000000095002000000049ce00f85549f333f1890f791d673f012496"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) capset(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pread64(r3, &(0x7f0000000080)=""/181, 0xb5, 0x365) 163.222096ms ago: executing program 6 (id=2760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000fcffffdf000000000000800095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000074d564b00000000f9"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r8, 0x0, 0x2000) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r12, 0x0, 0x31, &(0x7f0000000780)=0x5, 0x4) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r14, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r13, &(0x7f0000000180)='\x00', 0x1001}]) fchown(r13, r10, r11) dup3(r6, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r15 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto(r15, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80) 0s ago: executing program 7 (id=2761): syz_init_net_socket$rose(0xb, 0x5, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x0]}}}, 0x4e}]}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xcc, &(0x7f00000003c0), &(0x7f0000000080)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.981079][T10373] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 829.993136][T10373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 830.004396][T10373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 830.015063][T10373] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 830.043281][T10373] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 830.053089][T10373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 830.061783][T10373] usb 3-1: Product: syz [ 830.066117][T10373] usb 3-1: Manufacturer: syz [ 830.072000][T10373] usb 3-1: SerialNumber: syz [ 830.080237][T10373] usb 3-1: config 0 descriptor?? [ 830.200551][T13364] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 830.532545][T10373] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 830.540715][T10373] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 830.570369][T10373] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 830.578098][T10373] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 830.590525][T10373] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 830.983214][T10373] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 831.435303][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 831.467675][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 831.604237][ T47] usb 1-1: USB disconnect, device number 49 [ 831.957680][T10373] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 831.966430][T10373] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 832.528898][T13402] rtc_cmos 00:00: Alarms can be up to one day in the future [ 832.765181][T13402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2020'. [ 832.996480][T13400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2020'. [ 833.071218][T10373] usb 3-1: USB disconnect, device number 38 [ 833.540918][T13409] FAULT_INJECTION: forcing a failure. [ 833.540918][T13409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.554249][T13409] CPU: 1 UID: 0 PID: 13409 Comm: syz.3.2019 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 833.565060][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 833.575148][T13409] Call Trace: [ 833.578460][T13409] [ 833.581426][T13409] dump_stack_lvl+0x241/0x360 [ 833.586151][T13409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.591397][T13409] ? __pfx__printk+0x10/0x10 [ 833.596030][T13409] ? __pfx_lock_release+0x10/0x10 [ 833.601092][T13409] ? preempt_count_add+0x93/0x190 [ 833.606163][T13409] should_fail_ex+0x3b0/0x4e0 [ 833.610892][T13409] _copy_from_user+0x2f/0xc0 [ 833.615529][T13409] userfaultfd_ioctl+0xd70/0x66f0 [ 833.620592][T13409] ? __kernel_text_address+0xd/0x40 [ 833.625827][T13409] ? unwind_get_return_address+0x4d/0x90 [ 833.631505][T13409] ? arch_stack_walk+0xfd/0x150 [ 833.636403][T13409] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 833.641896][T13409] ? stack_trace_save+0x118/0x1d0 [ 833.646968][T13409] ? __pfx_stack_trace_save+0x10/0x10 [ 833.652393][T13409] ? stack_depot_save_flags+0x37/0x940 [ 833.657897][T13409] ? kasan_save_track+0x51/0x80 [ 833.662785][T13409] ? kasan_save_track+0x3f/0x80 [ 833.667675][T13409] ? kasan_save_free_info+0x40/0x50 [ 833.672903][T13409] ? __kasan_slab_free+0x59/0x70 [ 833.677885][T13409] ? kfree+0x196/0x430 [ 833.681994][T13409] ? tomoyo_path_number_perm+0x679/0x860 [ 833.687653][T13409] ? security_file_ioctl+0xc6/0x2a0 [ 833.692882][T13409] ? __se_sys_ioctl+0x46/0x170 [ 833.697679][T13409] ? do_syscall_64+0xf3/0x230 [ 833.702487][T13409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.708607][T13409] ? do_vfs_ioctl+0xf07/0x2e40 [ 833.713417][T13409] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 833.718485][T13409] ? mark_lock+0x9a/0x360 [ 833.722873][T13409] ? tomoyo_path_number_perm+0x206/0x860 [ 833.728549][T13409] ? __pfx_lock_release+0x10/0x10 [ 833.733799][T13409] ? tomoyo_path_number_perm+0x679/0x860 [ 833.739491][T13409] ? tomoyo_path_number_perm+0x679/0x860 [ 833.745162][T13409] ? tomoyo_path_number_perm+0x6f9/0x860 [ 833.750826][T13409] ? __lock_acquire+0x1397/0x2100 [ 833.755894][T13409] ? tomoyo_path_number_perm+0x206/0x860 [ 833.761646][T13409] ? smack_log+0x123/0x540 [ 833.766105][T13409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 833.772212][T13409] ? __pfx_smack_log+0x10/0x10 [ 833.777014][T13409] ? smk_access+0x4ab/0x4e0 [ 833.781564][T13409] ? smk_tskacc+0x300/0x370 [ 833.786197][T13409] ? smack_file_ioctl+0x2f7/0x3a0 [ 833.791257][T13409] ? __pfx_smack_file_ioctl+0x10/0x10 [ 833.796677][T13409] ? __fget_files+0x2a/0x410 [ 833.801306][T13409] ? __fget_files+0x2a/0x410 [ 833.805932][T13409] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 833.811442][T13409] __se_sys_ioctl+0xf5/0x170 [ 833.816165][T13409] do_syscall_64+0xf3/0x230 [ 833.820705][T13409] ? clear_bhb_loop+0x35/0x90 [ 833.825415][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.831352][T13409] RIP: 0033:0x7fb161985d29 [ 833.835799][T13409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.855466][T13409] RSP: 002b:00007fb16271f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.863964][T13409] RAX: ffffffffffffffda RBX: 00007fb161b76160 RCX: 00007fb161985d29 [ 833.871998][T13409] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000008 [ 833.880024][T13409] RBP: 00007fb16271f090 R08: 0000000000000000 R09: 0000000000000000 [ 833.888047][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.896176][T13409] R13: 0000000000000000 R14: 00007fb161b76160 R15: 00007ffded6ce558 [ 833.904184][T13409] [ 833.907305][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.423321][T13423] macvtap1: entered promiscuous mode [ 835.436838][T13423] macvtap1: entered allmulticast mode [ 835.460511][T13423] vlan0: entered allmulticast mode [ 835.471549][T13423] veth0_vlan: entered allmulticast mode [ 835.491070][T13423] vlan0: entered promiscuous mode [ 835.527964][T13423] team0: Device macvtap1 failed to register rx_handler [ 835.579099][T13423] vlan0: left allmulticast mode [ 835.605451][T13423] veth0_vlan: left allmulticast mode [ 835.624371][T13423] vlan0: left promiscuous mode [ 836.876825][T13436] Invalid option length (0) for dns_resolver key [ 838.692948][T10373] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 838.874558][T10373] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 838.890205][T10373] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.914700][T10373] usb 5-1: config 0 has no interface number 0 [ 838.975698][T10373] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 839.036023][T10373] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.111869][T10373] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 839.125435][T10373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.181544][T13452] syz_tun: entered promiscuous mode [ 839.308661][T13452] batadv_slave_0: entered promiscuous mode [ 839.358613][T10373] usb 5-1: Product: syz [ 839.362855][T10373] usb 5-1: Manufacturer: syz [ 839.367705][T10373] usb 5-1: SerialNumber: syz [ 839.374926][T10373] usb 5-1: config 0 descriptor?? [ 839.385843][T13452] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 839.408745][T13452] Cannot create hsr debugfs directory [ 839.454520][T13452] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 839.476010][T13452] hsr1: entered allmulticast mode [ 839.485486][T13452] syz_tun: entered allmulticast mode [ 839.494954][T13452] batadv_slave_0: entered allmulticast mode [ 839.806805][ T5918] usb 5-1: USB disconnect, device number 47 [ 841.409770][ T5873] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 841.431860][ T5873] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 844.635813][T13516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2054'. [ 844.883645][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 845.427144][ T5873] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 845.618399][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 845.678448][ T5873] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 845.705907][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.737822][ T5873] usb 5-1: Product: syz [ 845.922695][ T5873] usb 5-1: Manufacturer: syz [ 845.927517][ T5873] usb 5-1: SerialNumber: syz [ 845.935481][ T5873] usb 5-1: config 0 descriptor?? [ 845.967092][ T5873] cdc_ether 5-1:0.0: More than one union descriptor, skipping ... [ 845.975166][ T5873] usb 5-1: bad CDC descriptors [ 845.980621][ T5873] usb 5-1: unsupported MDLM descriptors [ 846.202999][ T9] usb 5-1: USB disconnect, device number 48 [ 846.607754][T10373] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 846.797778][T10373] usb 3-1: Using ep0 maxpacket: 8 [ 846.885542][T13551] Invalid source name [ 846.931364][T10373] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 847.110454][T10373] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 847.288585][T10373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 847.410931][T10373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 847.473065][T10373] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.587653][T10373] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 847.644217][T10373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.745505][T13570] binder: BINDER_SET_CONTEXT_MGR already set [ 848.754112][T13570] binder: 13569:13570 ioctl 4018620d 20000040 returned -16 [ 848.788561][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2069'. [ 848.835150][T13570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'. [ 849.254013][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 849.266628][T13547] IPVS: Error joining to the multicast group [ 849.283898][T10373] usb 3-1: usb_control_msg returned -32 [ 849.290118][T10373] usbtmc 3-1:16.0: can't read capabilities [ 849.471598][T10373] usb 3-1: USB disconnect, device number 39 [ 849.617703][ T5918] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 849.617864][ T5873] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 849.701147][T13582] input: syz0 as /devices/virtual/input/input71 [ 849.779887][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 849.828265][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 849.852752][ T5918] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 849.869839][ T5873] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 849.902982][ T5873] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 849.909499][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.918358][ T5873] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 850.002010][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.129813][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.130797][ T5873] usb 4-1: config 250 has no interface number 0 [ 850.230980][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.239945][ T5873] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 850.263253][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 850.272723][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.293654][ T5873] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 850.306390][ T5873] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.320378][ T5873] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 850.332453][ T5873] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 850.354308][ T5873] usb 4-1: config 250 interface 228 has no altsetting 0 [ 850.364392][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 850.384159][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 850.403137][ T5873] usb 4-1: Product: syz [ 850.420058][ T5873] usb 4-1: SerialNumber: syz [ 850.456119][ T5873] hub 4-1:250.228: bad descriptor, ignoring hub [ 850.463583][ T5873] hub 4-1:250.228: probe with driver hub failed with error -5 [ 850.539653][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 850.573875][T13577] IPVS: Error joining to the multicast group [ 850.585840][ T5918] usb 5-1: usb_control_msg returned -32 [ 850.608978][ T5918] usbtmc 5-1:16.0: can't read capabilities [ 850.639074][ T5918] usb 5-1: USB disconnect, device number 49 [ 850.712905][ T5873] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 851.040061][ T5873] usb 4-1: USB disconnect, device number 40 [ 851.068551][ T5873] usblp0: removed [ 851.166471][T13594] sp0: Synchronizing with TNC [ 852.854782][T13607] No such timeout policy "syz0" [ 852.896189][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'. [ 853.023197][T13612] trusted_key: encrypted_key: keylen parameter is missing [ 853.083100][T13617] FAULT_INJECTION: forcing a failure. [ 853.083100][T13617] name failslab, interval 1, probability 0, space 0, times 0 [ 853.111227][T13617] CPU: 0 UID: 0 PID: 13617 Comm: syz.3.2084 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 853.122070][T13617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 853.132173][T13617] Call Trace: [ 853.135501][T13617] [ 853.138479][T13617] dump_stack_lvl+0x241/0x360 [ 853.143217][T13617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.148469][T13617] ? __pfx__printk+0x10/0x10 [ 853.153109][T13617] ? __kmalloc_noprof+0xb5/0x4c0 [ 853.158096][T13617] ? __pfx___might_resched+0x10/0x10 [ 853.163434][T13617] ? rcu_is_watching+0x15/0xb0 [ 853.168383][T13617] should_fail_ex+0x3b0/0x4e0 [ 853.173117][T13617] should_failslab+0xac/0x100 [ 853.177858][T13617] __kmalloc_noprof+0xdd/0x4c0 [ 853.182681][T13617] ? __netlink_dump_start+0x119/0x790 [ 853.188122][T13617] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 853.194391][T13617] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 853.200508][T13617] genl_start+0x182/0x6d0 [ 853.204908][T13617] __netlink_dump_start+0x45c/0x790 [ 853.210171][T13617] genl_rcv_msg+0x88c/0xec0 [ 853.214739][T13617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 853.219827][T13617] ? __pfx_genl_start+0x10/0x10 [ 853.224728][T13617] ? __pfx_genl_dumpit+0x10/0x10 [ 853.229717][T13617] ? __pfx_genl_done+0x10/0x10 [ 853.234557][T13617] ? __pfx_lock_acquire+0x10/0x10 [ 853.239633][T13617] ? __pfx_smcr_nl_get_device+0x10/0x10 [ 853.245285][T13617] ? __pfx___might_resched+0x10/0x10 [ 853.250603][T13617] netlink_rcv_skb+0x1e3/0x430 [ 853.255391][T13617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 853.260441][T13617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.265763][T13617] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 853.271257][T13617] genl_rcv+0x28/0x40 [ 853.275261][T13617] netlink_unicast+0x7f6/0x990 [ 853.280050][T13617] ? __pfx_netlink_unicast+0x10/0x10 [ 853.285345][T13617] ? __virt_addr_valid+0x45f/0x530 [ 853.290472][T13617] ? __phys_addr_symbol+0x2f/0x70 [ 853.295514][T13617] ? __check_object_size+0x47a/0x730 [ 853.300827][T13617] netlink_sendmsg+0x8e4/0xcb0 [ 853.305624][T13617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.310936][T13617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.316236][T13617] __sock_sendmsg+0x221/0x270 [ 853.320935][T13617] ____sys_sendmsg+0x52a/0x7e0 [ 853.325722][T13617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.331044][T13617] ? __fget_files+0x2a/0x410 [ 853.335704][T13617] ? __fget_files+0x2a/0x410 [ 853.340326][T13617] __sys_sendmsg+0x269/0x350 [ 853.344940][T13617] ? __pfx_lock_release+0x10/0x10 [ 853.349984][T13617] ? __pfx___sys_sendmsg+0x10/0x10 [ 853.355128][T13617] ? __pfx_vfs_write+0x10/0x10 [ 853.359936][T13617] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 853.366279][T13617] ? do_syscall_64+0x100/0x230 [ 853.371096][T13617] ? do_syscall_64+0xb6/0x230 [ 853.375798][T13617] do_syscall_64+0xf3/0x230 [ 853.380321][T13617] ? clear_bhb_loop+0x35/0x90 [ 853.385014][T13617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.390932][T13617] RIP: 0033:0x7fb161985d29 [ 853.395358][T13617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.414979][T13617] RSP: 002b:00007fb162761038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.423502][T13617] RAX: ffffffffffffffda RBX: 00007fb161b75fa0 RCX: 00007fb161985d29 [ 853.431486][T13617] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 853.439474][T13617] RBP: 00007fb162761090 R08: 0000000000000000 R09: 0000000000000000 [ 853.447457][T13617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.455442][T13617] R13: 0000000000000000 R14: 00007fb161b75fa0 R15: 00007ffded6ce558 [ 853.463439][T13617] [ 853.971842][T13632] IPv6: NLM_F_CREATE should be specified when creating new route [ 856.004687][T13644] tipc: Enabled bearer , priority 10 [ 856.059240][ T5873] kernel write not supported for file /snd/seq (pid: 5873 comm: kworker/0:4) [ 857.139662][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 857.707651][ T5874] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 857.997530][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 858.175426][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.203969][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.311653][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 858.425107][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 858.516059][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.651496][ T9] usb 1-1: config 0 descriptor?? [ 858.807530][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 858.814366][ T5874] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.838042][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 858.844949][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 858.863843][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.912316][ T5874] usb 5-1: config 0 descriptor?? [ 859.091984][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 859.110415][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 859.128704][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 859.156934][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 859.167542][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 859.175019][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 859.214427][ T9] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 859.240597][T13697] netlink: 'syz.2.2107': attribute type 9 has an invalid length. [ 859.272433][ T9] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 859.392521][ T5874] logitech-djreceiver 0003:046D:C517.001C: hidraw1: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.4-1/input0 [ 859.394896][ T9] usb 1-1: USB disconnect, device number 50 [ 859.730892][ T5874] usb 5-1: USB disconnect, device number 50 [ 861.035823][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 861.035844][ T29] audit: type=1326 audit(1737119788.667:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 861.137577][ T5874] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 861.229127][ T29] audit: type=1326 audit(1737119788.667:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 861.251402][ T29] audit: type=1326 audit(1737119788.677:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 861.347059][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'. [ 862.067721][ T29] audit: type=1326 audit(1737119788.677:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 862.131327][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 862.154272][ T29] audit: type=1326 audit(1737119788.677:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 862.629284][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.655904][ T5874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.659678][ T29] audit: type=1326 audit(1737119788.677:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 862.698219][ T29] audit: type=1326 audit(1737119788.677:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 862.747604][ T5874] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.757599][ T5874] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 862.767689][ T5874] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.780898][ T5874] usb 3-1: config 1 interface 1 has no altsetting 0 [ 862.803030][ T29] audit: type=1326 audit(1737119788.677:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 862.840686][ T29] audit: type=1326 audit(1737119788.677:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 862.875487][ T29] audit: type=1326 audit(1737119788.677:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13713 comm="syz.4.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 862.897356][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.944059][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.955776][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.964061][ T5874] usb 3-1: Product: syz [ 862.968844][ T5874] usb 3-1: Manufacturer: syz [ 862.973601][ T5874] usb 3-1: SerialNumber: syz [ 862.996151][ T5874] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 863.004059][ T5874] cdc_ncm 3-1:1.0: bind() failure [ 863.252750][T13732] sctp: [Deprecated]: syz.3.2117 (pid 13732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 863.252750][T13732] Use struct sctp_sack_info instead [ 863.308844][ T5918] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 863.339284][T13735] netlink: 'syz.3.2117': attribute type 7 has an invalid length. [ 863.476762][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 863.495493][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 864.110372][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.120858][ T5918] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 864.132513][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.132596][T13732] nvme_fabrics: missing parameter 'transport=%s' [ 864.143135][ T5918] usb 5-1: config 0 descriptor?? [ 864.186508][ T5825] usb 3-1: USB disconnect, device number 40 [ 864.323886][T13732] nvme_fabrics: missing parameter 'nqn=%s' [ 866.245076][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 866.251359][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 866.502105][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 866.502127][ T29] audit: type=1326 audit(1737119794.137:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 866.530087][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.725183][ T5918] usb 5-1: USB disconnect, device number 51 [ 866.728462][ T29] audit: type=1326 audit(1737119794.137:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 866.795737][ T29] audit: type=1326 audit(1737119794.137:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 866.817336][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.858111][ T29] audit: type=1326 audit(1737119794.137:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 866.879792][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.912878][T13767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2124'. [ 867.583364][ T29] audit: type=1326 audit(1737119794.137:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 867.728947][ T29] audit: type=1326 audit(1737119794.137:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 867.731271][T13757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 867.925891][ T29] audit: type=1326 audit(1737119794.137:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 867.927784][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 867.947645][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.953547][ T29] audit: type=1326 audit(1737119794.137:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 867.968957][T13757] bond0: (slave bond9): Enslaving as an active interface with an up link [ 867.985227][ T29] audit: type=1326 audit(1737119794.137:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 868.288455][ T29] audit: type=1326 audit(1737119794.137:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.4.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 868.344726][ T9] usb 1-1: config index 0 descriptor too short (expected 72, got 10) [ 868.347869][T13756] delete_channel: no stack [ 868.367627][ T9] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 868.398594][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 868.492361][ T9] usb 1-1: string descriptor 0 read error: -71 [ 868.499226][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 868.503914][T13772] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.517991][T13772] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.527739][T13772] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.536503][T13772] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.566229][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.676444][ T9] usb 1-1: can't set config #1, error -71 [ 868.699728][ T9] usb 1-1: USB disconnect, device number 51 [ 870.687652][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 870.807675][ T47] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 870.837547][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 870.851900][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.879208][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.896828][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 870.914118][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.923208][ T9] usb 1-1: Product: syz [ 870.931208][ T9] usb 1-1: Manufacturer: syz [ 870.938873][ T9] usb 1-1: SerialNumber: syz [ 870.980758][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 870.997210][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 871.014982][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.025059][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 871.034501][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.075474][ T47] usb 4-1: config 0 descriptor?? [ 871.621765][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 871.621794][ T29] audit: type=1326 audit(1737119799.257:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.651671][ T29] audit: type=1326 audit(1737119799.287:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.674627][ T29] audit: type=1326 audit(1737119799.287:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.697273][ T29] audit: type=1326 audit(1737119799.287:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.720554][ T29] audit: type=1326 audit(1737119799.287:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.743516][ T29] audit: type=1326 audit(1737119799.287:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.787025][ T29] audit: type=1326 audit(1737119799.287:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.820501][ T29] audit: type=1326 audit(1737119799.287:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.852573][ T29] audit: type=1326 audit(1737119799.287:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 871.902706][ T29] audit: type=1326 audit(1737119799.287:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13803 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82985d29 code=0x7ffc0000 [ 872.090489][T13808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2137'. [ 872.799728][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 872.811779][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 872.839301][ T47] usb 4-1: USB disconnect, device number 41 [ 873.576783][ T9] usb 1-1: 0:2 : does not exist [ 873.736917][ T47] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 873.761851][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 873.959860][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 874.009166][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.529245][ T47] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 875.008725][ T9] usb 1-1: USB disconnect, device number 52 [ 875.205242][ T47] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 875.214474][ T47] usb 5-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 875.222901][ T47] usb 5-1: Product: syz [ 875.227124][ T47] usb 5-1: Manufacturer: э [ 875.231823][ T47] usb 5-1: SerialNumber: У [ 875.242073][T13836] random: crng reseeded on system resumption [ 875.246208][ T47] usb 5-1: config 0 descriptor?? [ 875.529114][ T5874] usb 5-1: USB disconnect, device number 52 [ 875.638248][ T8055] udevd[8055]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.719906][T13843] binder: 13841:13843 unknown command 0 [ 875.725569][T13843] binder: 13841:13843 ioctl c0306201 20000080 returned -22 [ 875.790325][T13830] Bluetooth: hci0: Frame reassembly failed (-84) [ 876.923713][T13853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 876.993014][T13853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 877.009285][T13856] tipc: Started in network mode [ 877.014431][T13856] tipc: Node identity _, cluster identity 4711 [ 877.024370][T13853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 877.070232][T13853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 877.079405][T13853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 877.086778][T13853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 877.152259][T13860] FAULT_INJECTION: forcing a failure. [ 877.152259][T13860] name failslab, interval 1, probability 0, space 0, times 0 [ 877.167353][T13860] CPU: 1 UID: 0 PID: 13860 Comm: syz.3.2155 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 877.178188][T13860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 877.188265][T13860] Call Trace: [ 877.191555][T13860] [ 877.194503][T13860] dump_stack_lvl+0x241/0x360 [ 877.199316][T13860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.204544][T13860] ? __pfx__printk+0x10/0x10 [ 877.209440][T13860] ? fs_reclaim_acquire+0x93/0x130 [ 877.214586][T13860] ? __pfx___might_resched+0x10/0x10 [ 877.219901][T13860] should_fail_ex+0x3b0/0x4e0 [ 877.224597][T13860] should_failslab+0xac/0x100 [ 877.229307][T13860] __kmalloc_cache_noprof+0x70/0x390 [ 877.234693][T13860] ? netfs_buffer_make_space+0x12b/0x4a0 [ 877.240365][T13860] netfs_buffer_make_space+0x12b/0x4a0 [ 877.245842][T13860] netfs_buffer_append_folio+0xa3/0x390 [ 877.251399][T13860] ? rcu_is_watching+0x15/0xb0 [ 877.256190][T13860] netfs_write_folio+0xb5d/0x1df0 [ 877.261260][T13860] netfs_writepages+0x71a/0x9d0 [ 877.266130][T13860] ? mark_lock+0x9a/0x360 [ 877.270480][T13860] ? __pfx_validate_chain+0x10/0x10 [ 877.275791][T13860] ? __pfx_netfs_writepages+0x10/0x10 [ 877.281197][T13860] ? __pfx_netfs_writepages+0x10/0x10 [ 877.286586][T13860] do_writepages+0x35f/0x880 [ 877.291211][T13860] ? __pfx_do_writepages+0x10/0x10 [ 877.296343][T13860] ? filemap_fdatawrite+0x1e8/0x2a0 [ 877.301557][T13860] ? do_raw_spin_lock+0x14f/0x370 [ 877.306599][T13860] ? __pfx_lock_release+0x10/0x10 [ 877.311648][T13860] ? do_raw_spin_unlock+0x13c/0x8b0 [ 877.316864][T13860] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 877.322860][T13860] filemap_fdatawrite+0x1f3/0x2a0 [ 877.327925][T13860] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 877.333543][T13860] ? v9fs_fid_lookup+0x1b2/0xf30 [ 877.338509][T13860] v9fs_vfs_setattr+0x7e5/0xe20 [ 877.343397][T13860] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 877.348830][T13860] ? security_inode_setattr+0xdb/0x350 [ 877.354307][T13860] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 877.359753][T13860] notify_change+0xbca/0xe90 [ 877.364377][T13860] vfs_utimes+0x4b5/0x770 [ 877.368820][T13860] ? __pfx_vfs_utimes+0x10/0x10 [ 877.373691][T13860] ? user_path_at+0x44/0x60 [ 877.378205][T13860] ? kmem_cache_free+0x195/0x410 [ 877.383156][T13860] ? user_path_at+0x44/0x60 [ 877.387687][T13860] __se_sys_utimes+0x194/0x380 [ 877.392466][T13860] ? __pfx___se_sys_utimes+0x10/0x10 [ 877.397774][T13860] ? do_syscall_64+0x100/0x230 [ 877.402553][T13860] ? do_syscall_64+0xb6/0x230 [ 877.407243][T13860] do_syscall_64+0xf3/0x230 [ 877.411756][T13860] ? clear_bhb_loop+0x35/0x90 [ 877.416451][T13860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.422369][T13860] RIP: 0033:0x7fb161985d29 [ 877.426799][T13860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.446432][T13860] RSP: 002b:00007fb162740038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 877.454972][T13860] RAX: ffffffffffffffda RBX: 00007fb161b76080 RCX: 00007fb161985d29 [ 877.462957][T13860] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000180 [ 877.470942][T13860] RBP: 00007fb162740090 R08: 0000000000000000 R09: 0000000000000000 [ 877.478929][T13860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 877.486934][T13860] R13: 0000000000000000 R14: 00007fb161b76080 R15: 00007ffded6ce558 [ 877.494940][T13860] [ 878.136415][ T5826] Bluetooth: hci0: command 0x1003 tx timeout [ 878.601730][ T5823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 879.347508][ T5823] Bluetooth: hci5: command tx timeout [ 880.302119][T13851] chnl_net:caif_netlink_parms(): no params data found [ 880.401288][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 881.427928][ T5823] Bluetooth: hci5: command tx timeout [ 882.311520][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.319514][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.373209][T13851] bridge_slave_0: entered allmulticast mode [ 882.380879][T13851] bridge_slave_0: entered promiscuous mode [ 882.390889][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.401775][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.410440][T13851] bridge_slave_1: entered allmulticast mode [ 882.417912][T13851] bridge_slave_1: entered promiscuous mode [ 882.456584][T13851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.527694][T13851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.527971][ T5873] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 882.637365][T13851] team0: Port device team_slave_0 added [ 882.660437][T13851] team0: Port device team_slave_1 added [ 882.724466][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.756882][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.769005][T13851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.776007][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.803299][ T5873] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 882.813058][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 882.822208][ T5873] usb 5-1: SerialNumber: syz [ 882.825608][T13851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.875337][T13851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.882883][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.910251][T13851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.956091][T13851] hsr_slave_0: entered promiscuous mode [ 882.980731][T13851] hsr_slave_1: entered promiscuous mode [ 882.994131][T13851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.082942][T13851] Cannot create hsr debugfs directory [ 883.337554][T13911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.409630][T13911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.455644][T13911] netlink: 'syz.4.2167': attribute type 2 has an invalid length. [ 883.475804][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 883.507979][ T5823] Bluetooth: hci5: command tx timeout [ 883.644449][ T5873] usb 5-1: 0:2 : does not exist [ 883.766206][ T5873] usb 5-1: USB disconnect, device number 53 [ 883.801274][T13851] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 883.840916][T13851] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 883.883884][T13851] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 883.939045][T13851] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 884.099248][ T8055] udevd[8055]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.274110][T13851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.351576][T13851] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.449479][T11413] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.456642][T11413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.200808][T11413] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.208062][T11413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.617192][ T5823] Bluetooth: hci5: command tx timeout [ 886.805137][T13851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.580360][T13851] veth0_vlan: entered promiscuous mode [ 887.620202][T13851] veth1_vlan: entered promiscuous mode [ 887.726932][T13851] veth0_macvtap: entered promiscuous mode [ 887.760088][T13851] veth1_macvtap: entered promiscuous mode [ 887.817625][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.846242][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.871281][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.909409][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.927466][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.957435][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.967341][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.998116][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.029492][T13851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.050504][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.061192][ T5918] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 888.077721][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.097519][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.127464][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.147870][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.167458][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.177350][T13851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.198480][T13851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.214138][T13851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.227750][T13851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.249249][T13851] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.259438][ T5918] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 888.270775][ T5918] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 888.292664][T13851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.305469][ T5918] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.318522][T13851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.328223][ T5918] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 888.344058][ T5918] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 888.354408][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.502730][T11422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.517706][T11422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.596141][ T5918] ath6kl: Failed to submit usb control message: -71 [ 888.609326][T11409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.609795][ T5918] ath6kl: unable to send the bmi data to the device: -71 [ 888.629431][ T5918] ath6kl: Unable to send get target info: -71 [ 888.639254][ T5918] ath6kl: Failed to init ath6kl core: -71 [ 888.646562][ T5918] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 888.656410][T11409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.663445][ T5918] usb 5-1: USB disconnect, device number 54 [ 889.507747][ T5823] Bluetooth: hci5: command tx timeout [ 889.607145][T13983] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 891.386396][ T2339] pvrusb2: request_firmware fatal error with code=-110 [ 891.393647][ T2339] pvrusb2: Failure uploading firmware1 [ 891.399956][ T2339] pvrusb2: Device initialization was not successful. [ 891.407217][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 891.477320][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 892.507586][ T5836] pvrusb2: Device being rendered inoperable [ 900.050796][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 900.070156][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 900.079547][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 900.088204][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 900.098260][ T5826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 900.105680][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 902.297476][ T5823] Bluetooth: hci0: command tx timeout [ 904.347984][ T5823] Bluetooth: hci0: command tx timeout [ 905.335419][T14064] loop2: detected capacity change from 0 to 7 [ 905.358299][T14064] Dev loop2: unable to read RDB block 7 [ 905.385450][T14064] loop2: AHDI p1 [ 905.405469][T14064] loop2: partition table partially beyond EOD, truncated [ 905.790267][T14038] chnl_net:caif_netlink_parms(): no params data found [ 906.043750][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.086150][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.175071][T14038] bridge_slave_0: entered allmulticast mode [ 906.317417][T14038] bridge_slave_0: entered promiscuous mode [ 906.397487][ T5823] Bluetooth: hci0: command tx timeout [ 906.448620][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.458097][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.472298][T14038] bridge_slave_1: entered allmulticast mode [ 906.515278][T14038] bridge_slave_1: entered promiscuous mode [ 906.930736][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.200800][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.618409][T14038] team0: Port device team_slave_0 added [ 907.629176][T14038] team0: Port device team_slave_1 added [ 907.750488][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.787612][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.621129][ T5823] Bluetooth: hci0: command tx timeout [ 908.653819][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.774449][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.867499][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.893442][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.907533][T13968] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 908.916758][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.187044][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.322987][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.524834][T13968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 909.559474][T13968] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 909.610242][T13968] usb 6-1: can't read configurations, error -71 [ 909.633943][T14038] hsr_slave_0: entered promiscuous mode [ 909.659697][T14038] hsr_slave_1: entered promiscuous mode [ 909.674211][T14038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.697640][T14038] Cannot create hsr debugfs directory [ 909.867554][ T47] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 910.040293][ T47] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 910.066219][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.069805][T14038] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 910.106379][ T47] usb 1-1: config 0 descriptor?? [ 910.146596][T14038] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 910.187305][T14038] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 910.269758][T14038] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 910.482986][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.511092][T14126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2218'. [ 910.532151][T14126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 910.574117][T14120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.586058][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.598058][T14120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.604890][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 910.643578][T11415] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.650794][T11415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.745821][T11415] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.753033][T11415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.309745][ T47] [drm:udl_init] *ERROR* Selecting channel failed [ 911.378650][ T47] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 911.385926][ T47] [drm] Initialized udl on minor 2 [ 911.438107][ T47] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 911.446290][ T47] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 911.473097][ T5836] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 911.515248][ T47] usb 1-1: USB disconnect, device number 53 [ 911.547851][ T5836] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 911.555871][ T5836] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 911.573979][T14139] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 911.843779][T14139] team0: Device veth1_macvtap failed to register rx_handler [ 914.330452][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.319214][T14182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2232'. [ 915.330443][T14182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 915.367482][ T5873] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 915.377845][ T5875] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 915.435300][T14038] veth0_vlan: entered promiscuous mode [ 915.452536][T14038] veth1_vlan: entered promiscuous mode [ 915.493211][T14038] veth0_macvtap: entered promiscuous mode [ 915.505919][T14038] veth1_macvtap: entered promiscuous mode [ 915.517958][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 915.532287][ T5873] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 915.544276][ T5873] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 915.563935][ T5875] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 915.566614][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.584983][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.590895][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.624277][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.626872][ T5875] usb 5-1: config 0 descriptor?? [ 915.637029][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.657453][ T5873] usb 1-1: Product: syz [ 915.666107][ T5873] usb 1-1: Manufacturer: syz [ 915.678757][ T5873] usb 1-1: SerialNumber: syz [ 915.687552][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.698510][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.708795][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.720964][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.733134][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.745681][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.758961][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.769735][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.782864][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.799907][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.821484][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.834362][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.845244][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.873268][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.897175][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.913434][T14185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.921621][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.924317][T14185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.942467][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.952768][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.984158][ T5873] cdc_ncm 1-1:1.0: bind() failure [ 915.994003][ T5873] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 916.005907][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.034657][ T5873] cdc_ncm 1-1:1.1: bind() failure [ 916.060434][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.073107][ T5873] usb 1-1: USB disconnect, device number 54 [ 916.148067][T14038] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.174715][T14038] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.204948][T14038] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.236744][T14038] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.480701][T11429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.509300][T11429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.099446][T11409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.429267][T11409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.547620][ T5875] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 917.548733][T14191] sp0: Synchronizing with TNC [ 917.567485][ T5875] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 917.669474][T14195] input: syz0 as /devices/virtual/input/input78 [ 917.991440][ T5875] [drm:udl_init] *ERROR* Selecting channel failed [ 918.549746][ T5875] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 918.557428][ T5875] [drm] Initialized udl on minor 2 [ 918.575899][ T5875] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 918.585909][ T5875] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 918.611143][ T5836] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 918.840054][ T5836] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 918.855377][ T5836] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 918.864648][ T5875] usb 5-1: USB disconnect, device number 55 [ 920.357541][ T973] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 920.667631][ T47] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 920.697809][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 920.940976][ T973] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 921.033328][ T973] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 921.173811][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.194564][ T973] usb 1-1: Product: syz [ 921.206747][ T973] usb 1-1: Manufacturer: syz [ 921.225248][ T973] usb 1-1: SerialNumber: syz [ 921.253550][ T973] usb 1-1: config 0 descriptor?? [ 921.288230][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 921.336086][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 921.348139][ T973] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 921.450354][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.460471][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 921.470001][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.480888][ T47] usb 5-1: config 0 descriptor?? [ 921.570113][ T5875] usb 1-1: USB disconnect, device number 55 [ 921.581274][T11415] usb 1-1: Failed to submit usb control message: -71 [ 921.590972][T11415] usb 1-1: unable to send the bmi data to the device: -71 [ 921.630199][T11415] usb 1-1: unable to get target info from device [ 921.637269][T11415] usb 1-1: could not get target info (-71) [ 921.677602][T14223] sp0: Synchronizing with TNC [ 921.688801][T11415] usb 1-1: could not probe fw (-71) [ 922.114653][ T5875] usb 5-1: USB disconnect, device number 56 [ 923.137573][T13968] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 923.319534][T13968] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 923.366767][T13968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.221695][T13968] usb 5-1: config 0 descriptor?? [ 924.438302][T14243] input: syz0 as /devices/virtual/input/input79 [ 925.244694][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.275231][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.408047][T14247] input: syz0 as /devices/virtual/input/input80 [ 926.051428][T14234] kexec: Could not allocate control_code_buffer [ 926.411603][T13968] [drm:udl_init] *ERROR* Selecting channel failed [ 926.454773][T13968] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 926.639224][T13968] [drm] Initialized udl on minor 2 [ 926.779710][T13968] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 926.817841][T13968] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 926.869015][ T5873] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 926.877047][ T5873] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 926.884520][T13968] usb 5-1: USB disconnect, device number 57 [ 927.235973][T14261] netlink: 'syz.6.2252': attribute type 5 has an invalid length. [ 928.027570][T13968] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 928.177580][T13968] usb 7-1: Using ep0 maxpacket: 16 [ 928.185968][T13968] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 928.376529][T13968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.532504][T13968] usb 7-1: Product: syz [ 928.536752][T13968] usb 7-1: Manufacturer: syz [ 928.573109][T13968] usb 7-1: SerialNumber: syz [ 928.594125][T13968] usb 7-1: config 0 descriptor?? [ 928.608307][T13968] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 928.620864][T13968] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 928.811161][T13968] usb 7-1: USB disconnect, device number 2 [ 930.658995][T13968] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 930.980978][T13968] usb 6-1: Using ep0 maxpacket: 32 [ 931.897420][T13968] usb 6-1: config 4 has an invalid interface number: 201 but max is 0 [ 931.905814][T13968] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 931.916591][T13968] usb 6-1: config 4 has no interface number 0 [ 931.927457][T13968] usb 6-1: config 4 interface 201 has no altsetting 0 [ 931.949322][ T973] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 931.973764][T13968] usb 6-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 931.987622][T13968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.988317][T14296] tmpfs: Bad value for 'mpol' [ 932.007362][T13968] usb 6-1: Product: syz [ 932.191349][T13968] usb 6-1: Manufacturer: syz [ 932.196836][T13968] usb 6-1: SerialNumber: syz [ 932.209494][ T973] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 932.219132][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.231975][ T973] usb 5-1: config 0 descriptor?? [ 932.542742][T14302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.605476][T14302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.823461][T13968] usb 6-1: bad CDC descriptors [ 932.833776][T13968] usb 6-1: USB disconnect, device number 4 [ 933.813061][ T973] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 933.821747][ T973] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 933.832475][ T973] [drm:udl_init] *ERROR* Selecting channel failed [ 933.842975][ T973] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 933.849978][ T973] [drm] Initialized udl on minor 2 [ 934.346332][ T973] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 934.354689][ T973] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 934.364613][ T5873] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 934.372983][ T5873] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 934.380203][ T973] usb 5-1: USB disconnect, device number 58 [ 934.617575][T14308] FAULT_INJECTION: forcing a failure. [ 934.617575][T14308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.667177][T14308] CPU: 0 UID: 0 PID: 14308 Comm: syz.1.2264 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 934.678032][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 934.688223][T14308] Call Trace: [ 934.691548][T14308] [ 934.694526][T14308] dump_stack_lvl+0x241/0x360 [ 934.699273][T14308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.704520][T14308] ? __pfx__printk+0x10/0x10 [ 934.709161][T14308] ? __pfx_lock_release+0x10/0x10 [ 934.714254][T14308] should_fail_ex+0x3b0/0x4e0 [ 934.719075][T14308] _copy_from_user+0x2f/0xc0 [ 934.723728][T14308] __snd_timer_user_ioctl+0x2d9/0x5390 [ 934.729264][T14308] ? __pfx___snd_timer_user_ioctl+0x10/0x10 [ 934.735231][T14308] ? __mutex_trylock_common+0x183/0x2e0 [ 934.740844][T14308] ? __pfx___might_resched+0x10/0x10 [ 934.746207][T14308] ? __pfx___mutex_trylock_common+0x10/0x10 [ 934.752174][T14308] ? rcu_is_watching+0x15/0xb0 [ 934.756991][T14308] ? trace_contention_end+0x3c/0x120 [ 934.762330][T14308] ? __mutex_lock+0x37f/0xee0 [ 934.767058][T14308] ? smk_tskacc+0x300/0x370 [ 934.771637][T14308] ? snd_timer_user_ioctl+0x4f/0x90 [ 934.776888][T14308] ? __pfx___mutex_lock+0x10/0x10 [ 934.781990][T14308] ? __fget_files+0x2a/0x410 [ 934.786629][T14308] ? __fget_files+0x2a/0x410 [ 934.791262][T14308] snd_timer_user_ioctl+0x5f/0x90 [ 934.796324][T14308] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 934.802099][T14308] __se_sys_ioctl+0xf5/0x170 [ 934.806749][T14308] do_syscall_64+0xf3/0x230 [ 934.811289][T14308] ? clear_bhb_loop+0x35/0x90 [ 934.816010][T14308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.821973][T14308] RIP: 0033:0x7fc915585d29 [ 934.826429][T14308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.846085][T14308] RSP: 002b:00007fc9162ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.854555][T14308] RAX: ffffffffffffffda RBX: 00007fc915775fa0 RCX: 00007fc915585d29 [ 934.862573][T14308] RDX: 00000000200000c0 RSI: 0000000040505412 RDI: 0000000000000003 [ 934.870609][T14308] RBP: 00007fc9162ff090 R08: 0000000000000000 R09: 0000000000000000 [ 934.878638][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.886696][T14308] R13: 0000000000000000 R14: 00007fc915775fa0 R15: 00007ffe1a210598 [ 934.894729][T14308] [ 939.606265][T14344] FAULT_INJECTION: forcing a failure. [ 939.606265][T14344] name failslab, interval 1, probability 0, space 0, times 0 [ 939.620432][T14344] CPU: 0 UID: 0 PID: 14344 Comm: syz.4.2276 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 939.631254][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 939.641339][T14344] Call Trace: [ 939.644637][T14344] [ 939.647592][T14344] dump_stack_lvl+0x241/0x360 [ 939.652302][T14344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 939.657527][T14344] ? __pfx__printk+0x10/0x10 [ 939.662138][T14344] ? fs_reclaim_acquire+0x93/0x130 [ 939.667295][T14344] ? __pfx___might_resched+0x10/0x10 [ 939.672606][T14344] should_fail_ex+0x3b0/0x4e0 [ 939.677324][T14344] should_failslab+0xac/0x100 [ 939.682042][T14344] __kmalloc_noprof+0xdd/0x4c0 [ 939.686820][T14344] ? kstrtouint_from_user+0x128/0x190 [ 939.692212][T14344] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 939.697974][T14344] tomoyo_realpath_from_path+0xcf/0x5e0 [ 939.703552][T14344] tomoyo_path_number_perm+0x236/0x860 [ 939.709025][T14344] ? __lock_acquire+0x1397/0x2100 [ 939.714066][T14344] ? tomoyo_path_number_perm+0x206/0x860 [ 939.722579][T14344] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 939.728630][T14344] ? __fget_files+0x2a/0x410 [ 939.733238][T14344] ? __fget_files+0x2a/0x410 [ 939.737864][T14344] security_file_ioctl+0xc6/0x2a0 [ 939.742911][T14344] __se_sys_ioctl+0x46/0x170 [ 939.747534][T14344] do_syscall_64+0xf3/0x230 [ 939.752062][T14344] ? clear_bhb_loop+0x35/0x90 [ 939.756754][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.762679][T14344] RIP: 0033:0x7f4a82985d29 [ 939.767112][T14344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.786794][T14344] RSP: 002b:00007f4a83852038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.795244][T14344] RAX: ffffffffffffffda RBX: 00007f4a82b75fa0 RCX: 00007f4a82985d29 [ 939.803331][T14344] RDX: 0000000020000000 RSI: 000000000000541c RDI: 0000000000000008 [ 939.811315][T14344] RBP: 00007f4a83852090 R08: 0000000000000000 R09: 0000000000000000 [ 939.819296][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.827280][T14344] R13: 0000000000000000 R14: 00007f4a82b75fa0 R15: 00007ffece32a4e8 [ 939.835299][T14344] [ 939.847698][T14344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 940.077439][ T5875] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 940.207461][ T5873] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 940.261698][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 940.282021][ T5875] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.315586][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 940.344165][ T5875] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 940.370097][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.375914][ T5873] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 940.418165][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.428197][ T5875] usb 6-1: config 0 descriptor?? [ 940.474894][ T5873] usb 7-1: config 0 descriptor?? [ 940.506132][ T5873] cp210x 7-1:0.0: cp210x converter detected [ 940.776475][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 940.858822][T14356] tmpfs: Bad value for 'mpol' [ 940.874018][ T5875] logitech-djreceiver 0003:046D:C517.001E: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.5-1/input0 [ 941.717734][ T5875] usb 6-1: USB disconnect, device number 5 [ 942.001245][T14369] FAULT_INJECTION: forcing a failure. [ 942.001245][T14369] name failslab, interval 1, probability 0, space 0, times 0 [ 942.057974][T14369] CPU: 1 UID: 0 PID: 14369 Comm: syz.1.2284 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 942.068817][T14369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 942.078927][T14369] Call Trace: [ 942.082243][T14369] [ 942.085221][T14369] dump_stack_lvl+0x241/0x360 [ 942.089957][T14369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 942.095193][T14369] ? __pfx__printk+0x10/0x10 [ 942.099841][T14369] ? fs_reclaim_acquire+0x93/0x130 [ 942.105000][T14369] ? __pfx___might_resched+0x10/0x10 [ 942.110368][T14369] should_fail_ex+0x3b0/0x4e0 [ 942.115191][T14369] should_failslab+0xac/0x100 [ 942.119948][T14369] __kmalloc_noprof+0xdd/0x4c0 [ 942.124787][T14369] ? kstrtouint_from_user+0x128/0x190 [ 942.130197][T14369] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 942.135956][T14369] tomoyo_realpath_from_path+0xcf/0x5e0 [ 942.141546][T14369] tomoyo_path_number_perm+0x236/0x860 [ 942.147133][T14369] ? __lock_acquire+0x1397/0x2100 [ 942.152238][T14369] ? tomoyo_path_number_perm+0x206/0x860 [ 942.157921][T14369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 942.164058][T14369] ? __fget_files+0x2a/0x410 [ 942.168677][T14369] ? __fget_files+0x2a/0x410 [ 942.173325][T14369] security_file_ioctl+0xc6/0x2a0 [ 942.178375][T14369] __se_sys_ioctl+0x46/0x170 [ 942.182989][T14369] do_syscall_64+0xf3/0x230 [ 942.187509][T14369] ? clear_bhb_loop+0x35/0x90 [ 942.192217][T14369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.198139][T14369] RIP: 0033:0x7fc915585d29 [ 942.202578][T14369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.222259][T14369] RSP: 002b:00007fc9162ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.230697][T14369] RAX: ffffffffffffffda RBX: 00007fc915775fa0 RCX: 00007fc915585d29 [ 942.238689][T14369] RDX: 0000000020000000 RSI: 000000000000541c RDI: 0000000000000004 [ 942.246675][T14369] RBP: 00007fc9162ff090 R08: 0000000000000000 R09: 0000000000000000 [ 942.254661][T14369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.262651][T14369] R13: 0000000000000000 R14: 00007fc915775fa0 R15: 00007ffe1a210598 [ 942.270655][T14369] [ 942.337863][T14369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 942.396118][T14370] overlayfs: failed to resolve './file1': -2 [ 943.518726][ T5873] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 943.526862][ T5873] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 943.538292][ T5873] usb 7-1: cp210x converter now attached to ttyUSB0 [ 943.546984][ T5873] usb 7-1: USB disconnect, device number 3 [ 943.558366][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 943.566695][ T5873] cp210x 7-1:0.0: device disconnected [ 944.911549][T14395] sp0: Synchronizing with TNC [ 945.915608][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 945.915629][ T29] audit: type=1326 audit(1737119873.547:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 945.969803][T14416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2294'. [ 946.071420][ T29] audit: type=1326 audit(1737119873.547:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.093285][ T29] audit: type=1326 audit(1737119873.587:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.115291][ T29] audit: type=1326 audit(1737119873.587:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.131598][T14421] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2294'. [ 946.137430][ T29] audit: type=1326 audit(1737119873.587:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.168402][ T29] audit: type=1326 audit(1737119873.587:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.190972][ T29] audit: type=1326 audit(1737119873.587:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.213336][ T29] audit: type=1326 audit(1737119873.587:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.235483][ T29] audit: type=1326 audit(1737119873.587:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.257640][ T29] audit: type=1326 audit(1737119873.587:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 946.462304][T14418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2298'. [ 946.500273][T14423] trusted_key: encrypted_key: insufficient parameters specified [ 946.607704][ T5873] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 946.889207][T14428] input: syz0 as /devices/virtual/input/input81 [ 947.027649][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 947.127632][ T5873] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.148934][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 947.155637][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 947.175669][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2302'. [ 947.181704][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.184919][T14437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 947.578182][ T5873] usb 1-1: config 0 descriptor?? [ 948.134513][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 948.142270][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 948.217168][ T5873] usb 1-1: USB disconnect, device number 56 [ 948.358763][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 948.394662][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 948.417570][ T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 948.601206][T14450] netlink: 'syz.1.2307': attribute type 10 has an invalid length. [ 948.617617][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 948.626114][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 948.637814][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.647927][ T47] usb 7-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 948.659487][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.693399][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2303'. [ 948.704196][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2303'. [ 948.768978][ T47] usb 7-1: config 0 descriptor?? [ 949.037111][ T973] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 949.050253][T14454] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 949.190401][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 949.232193][ T973] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 949.277516][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.289437][T13969] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 949.306270][ T973] usb 5-1: Product: syz [ 949.316718][ T973] usb 5-1: Manufacturer: syz [ 949.342184][ T973] usb 5-1: SerialNumber: syz [ 949.356626][ T973] usb 5-1: config 0 descriptor?? [ 949.518199][T13969] usb 1-1: Using ep0 maxpacket: 32 [ 949.538663][T13969] usb 1-1: config index 0 descriptor too short (expected 4132, got 36) [ 949.641586][T13969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.682680][T13969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.778131][T13969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 949.979513][T13969] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 949.999673][T14444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.070146][T13969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.088212][T14444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.151320][T13969] usb 1-1: config 0 descriptor?? [ 950.158090][ T973] viperboard 5-1:0.0: version 0.00 found at bus 005 address 059 [ 950.192843][ T5873] usb 7-1: USB disconnect, device number 4 [ 950.211509][ T973] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 950.245505][ T973] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 950.278333][ T973] usb 5-1: USB disconnect, device number 59 [ 950.573386][T13969] usbhid 1-1:0.0: can't add hid device: -71 [ 950.579628][T13969] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 950.617843][T13969] usb 1-1: USB disconnect, device number 57 [ 951.926990][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2315'. [ 951.991133][T14484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 952.479164][T13968] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 952.504179][T14483] IPVS: Scheduler module ip_vs_sip not found [ 952.783553][T13968] usb 6-1: Using ep0 maxpacket: 16 [ 952.813174][T13968] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 952.840508][T13968] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 952.868339][T13968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.889628][T13968] usb 6-1: Product: syz [ 952.897975][T13968] usb 6-1: Manufacturer: syz [ 952.902736][T13968] usb 6-1: SerialNumber: syz [ 952.929652][T13968] usb 6-1: config 0 descriptor?? [ 952.976068][T13968] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 953.115156][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2322'. [ 953.224209][T13968] usb 6-1: USB disconnect, device number 6 [ 953.264210][T11423] usb 6-1: Failed to submit usb control message: -71 [ 953.296777][T11423] usb 6-1: unable to send the bmi data to the device: -71 [ 953.368730][T11423] usb 6-1: unable to get target info from device [ 953.389866][T11423] usb 6-1: could not get target info (-71) [ 953.416946][T11423] usb 6-1: could not probe fw (-71) [ 953.418332][ T5836] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 953.671843][ T5836] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 953.687171][ T5836] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 953.751756][ T5836] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 953.844219][ T5836] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 953.936721][ T5836] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 953.977168][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.014289][ T5836] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 954.032895][ T5836] usb 5-1: invalid MIDI out EP 0 [ 954.151368][ T5836] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 954.228394][ T5836] usb 5-1: USB disconnect, device number 60 [ 955.473871][ T8059] udevd[8059]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.559631][T14497] Invalid source name [ 955.567218][T14497] UBIFS error (pid: 14497): cannot open "/dev/sg0", error -22 [ 955.895031][T14522] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2320'. [ 957.859587][T13968] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 957.927372][ T5873] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 958.034503][T13968] usb 2-1: Using ep0 maxpacket: 8 [ 958.049422][T13968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.093932][T13968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.110868][ T5873] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 958.112023][T14540] syz.6.2332[14540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.119658][T14540] syz.6.2332[14540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.120861][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.147546][T14540] syz.6.2332[14540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.996309][T13968] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 959.022048][T13968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.031475][ T5873] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 959.046495][T13968] usb 2-1: config 0 descriptor?? [ 959.051668][ T5873] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 959.060797][ T5873] usb 1-1: Manufacturer: syz [ 959.091060][ T5873] usb 1-1: config 0 descriptor?? [ 959.229651][T14548] bridge1: entered promiscuous mode [ 959.247347][T14548] bridge1: entered allmulticast mode [ 959.247395][ T5873] rc_core: IR keymap rc-hauppauge not found [ 959.287762][ T5873] Registered IR keymap rc-empty [ 959.310605][ T5873] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 959.343156][ T5873] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input82 [ 959.534288][T13968] wacom 0003:056A:003F.0020: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0 [ 959.614064][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 55 [ 959.661904][T14564] loop7: detected capacity change from 0 to 16384 [ 959.711104][T14530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.743898][T14530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.794390][T14530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.822640][T13969] usb 1-1: USB disconnect, device number 58 [ 959.827806][T14530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.903400][T13968] usb 2-1: USB disconnect, device number 42 [ 959.997108][T14571] xt_hashlimit: size too large, truncated to 1048576 [ 962.861840][T14606] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2347'. [ 962.905459][T14606] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2347'. [ 963.351946][T14606] geneve2: entered allmulticast mode [ 963.777674][T14639] tmpfs: Unknown parameter '])-!\^:' [ 964.332188][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 964.332211][ T29] audit: type=1326 audit(1737119891.967:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.5.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 964.397539][ T29] audit: type=1326 audit(1737119891.967:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.5.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 964.477326][ T29] audit: type=1326 audit(1737119891.977:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.5.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 964.586240][ T29] audit: type=1326 audit(1737119891.977:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.5.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 964.675559][ T29] audit: type=1326 audit(1737119891.977:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.5.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 965.897725][T14702] netlink: 'syz.4.2374': attribute type 16 has an invalid length. [ 965.905628][T14702] netlink: 'syz.4.2374': attribute type 17 has an invalid length. [ 966.110080][T14702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.073315][T14729] serio: Serial port ptm0 [ 968.060134][T14765] overlayfs: failed to resolve './file0': -2 [ 968.200475][ T29] audit: type=1326 audit(1737120151.833:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 968.282391][ T29] audit: type=1326 audit(1737120151.863:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 968.358809][ T29] audit: type=1326 audit(1737120151.863:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 968.455416][ T29] audit: type=1326 audit(1737120151.863:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 968.537812][ T29] audit: type=1326 audit(1737120151.863:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c56385d29 code=0x7ffc0000 [ 970.199574][T14807] block device autoloading is deprecated and will be removed. [ 970.376484][T14831] netlink: 'syz.0.2430': attribute type 3 has an invalid length. [ 970.792449][T14848] binfmt_misc: register: failed to install interpreter file ./file2 [ 971.297564][T14869] xt_hashlimit: size too large, truncated to 1048576 [ 971.630967][T14881] syz.0.2450[14881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.631082][T14881] syz.0.2450[14881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.701368][T14881] syz.0.2450[14881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 973.507751][T14918] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2466'. [ 973.893186][T14926] rtc_cmos 00:00: Alarms can be up to one day in the future [ 977.159813][T14997] overlayfs: overlapping lowerdir path [ 977.227170][T15001] syz.4.2502[15001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 977.227354][T15001] syz.4.2502[15001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 977.277626][T15001] syz.4.2502[15001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.065236][T15031] bridge0: port 3(vlan2) entered blocking state [ 978.091642][T15031] bridge0: port 3(vlan2) entered disabled state [ 978.101556][T15031] vlan2: entered allmulticast mode [ 978.114570][T15031] vlan2: left allmulticast mode [ 978.498018][T15049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 979.456062][T15081] overlayfs: overlapping lowerdir path [ 980.705883][T15105] xt_hashlimit: size too large, truncated to 1048576 [ 982.640697][T15142] syz_tun (unregistering): left promiscuous mode [ 982.693698][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'. [ 983.658772][T15160] syz.6.2564[15160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.658879][T15160] syz.6.2564[15160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.745087][T15160] syz.6.2564[15160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 984.780930][T15186] netlink: 'syz.1.2573': attribute type 16 has an invalid length. [ 984.964275][T15186] netlink: 'syz.1.2573': attribute type 17 has an invalid length. [ 985.161080][T15186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 985.392464][T15159] warn_alloc: 1 callbacks suppressed [ 985.392491][T15159] syz.4.2565: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 985.417137][T15159] CPU: 0 UID: 0 PID: 15159 Comm: syz.4.2565 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 985.427959][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 985.438058][T15159] Call Trace: [ 985.441353][T15159] [ 985.444309][T15159] dump_stack_lvl+0x241/0x360 [ 985.449018][T15159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 985.454413][T15159] ? __pfx__printk+0x10/0x10 [ 985.459035][T15159] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 985.465510][T15159] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 985.472345][T15159] warn_alloc+0x278/0x410 [ 985.476793][T15159] ? __pfx_warn_alloc+0x10/0x10 [ 985.481678][T15159] ? translate_table+0x196/0x21f0 [ 985.486727][T15159] ? __get_vm_area_node+0x1c8/0x2d0 [ 985.492002][T15159] ? __get_vm_area_node+0x25c/0x2d0 [ 985.497235][T15159] __vmalloc_node_range_noprof+0x62f/0x1380 [ 985.503160][T15159] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 985.508928][T15159] ? rcu_is_watching+0x15/0xb0 [ 985.513708][T15159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 985.520145][T15159] ? rcu_is_watching+0x15/0xb0 [ 985.524935][T15159] ? trace_kmalloc+0x1f/0xd0 [ 985.529538][T15159] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 985.535015][T15159] ? __kvmalloc_node_noprof+0x72/0x190 [ 985.540501][T15159] __kvmalloc_node_noprof+0x142/0x190 [ 985.545895][T15159] ? translate_table+0x196/0x21f0 [ 985.550941][T15159] translate_table+0x196/0x21f0 [ 985.555861][T15159] ? __pfx___might_resched+0x10/0x10 [ 985.561197][T15159] ? __might_fault+0xaa/0x120 [ 985.565893][T15159] ? __pfx_translate_table+0x10/0x10 [ 985.571206][T15159] ? __virt_addr_valid+0x183/0x530 [ 985.576337][T15159] ? __might_fault+0xaa/0x120 [ 985.581036][T15159] ? __might_fault+0xc6/0x120 [ 985.585735][T15159] ? _copy_from_user+0x99/0xc0 [ 985.590529][T15159] ? copy_from_sockptr_offset+0x6b/0xb0 [ 985.596102][T15159] do_arpt_set_ctl+0x101c/0x1650 [ 985.601083][T15159] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 985.606389][T15159] ? __pfx___mutex_trylock_common+0x10/0x10 [ 985.612308][T15159] ? nf_setsockopt+0x240/0x2c0 [ 985.617088][T15159] ? __pfx_lock_release+0x10/0x10 [ 985.622150][T15159] ? rcu_is_watching+0x15/0xb0 [ 985.626954][T15159] ? __mutex_unlock_slowpath+0x21e/0x790 [ 985.632704][T15159] ? __pfx___mutex_lock+0x10/0x10 [ 985.637757][T15159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 985.643779][T15159] nf_setsockopt+0x295/0x2c0 [ 985.648390][T15159] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 985.654316][T15159] do_sock_setsockopt+0x3af/0x720 [ 985.659365][T15159] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 985.664957][T15159] ? __fget_files+0x395/0x410 [ 985.669650][T15159] ? __fget_files+0x2a/0x410 [ 985.674368][T15159] __x64_sys_setsockopt+0x1ee/0x280 [ 985.679604][T15159] do_syscall_64+0xf3/0x230 [ 985.684231][T15159] ? clear_bhb_loop+0x35/0x90 [ 985.688928][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.694856][T15159] RIP: 0033:0x7f4a82985d29 [ 985.699289][T15159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.718934][T15159] RSP: 002b:00007f4a83852038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 985.727432][T15159] RAX: ffffffffffffffda RBX: 00007f4a82b75fa0 RCX: 00007f4a82985d29 [ 985.735489][T15159] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 985.743498][T15159] RBP: 00007f4a82a01b08 R08: 0000000000000438 R09: 0000000000000000 [ 985.751490][T15159] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.759475][T15159] R13: 0000000000000000 R14: 00007f4a82b75fa0 R15: 00007ffece32a4e8 [ 985.767572][T15159] [ 985.772442][T15159] Mem-Info: [ 985.778070][T15159] active_anon:11826 inactive_anon:6729 isolated_anon:0 [ 985.778070][T15159] active_file:22635 inactive_file:38929 isolated_file:0 [ 985.778070][T15159] unevictable:768 dirty:37 writeback:1 [ 985.778070][T15159] slab_reclaimable:9117 slab_unreclaimable:109426 [ 985.778070][T15159] mapped:37394 shmem:14081 pagetables:1058 [ 985.778070][T15159] sec_pagetables:0 bounce:0 [ 985.778070][T15159] kernel_misc_reclaimable:0 [ 985.778070][T15159] free:1260459 free_pcp:1249 free_cma:0 [ 985.824559][T15159] Node 0 active_anon:47304kB inactive_anon:26936kB active_file:90468kB inactive_file:155716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149544kB dirty:156kB writeback:4kB shmem:54788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12128kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no [ 985.826260][T15191] xt_hashlimit: max too large, truncated to 1048576 [ 985.858909][T15159] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 985.858985][T15159] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 985.859057][T15159] lowmem_reserve[]: 0 2465 2466 0 0 [ 985.859113][T15159] Node 0 DMA32 free:1122420kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:47300kB inactive_anon:26904kB active_file:89676kB inactive_file:155664kB unevictable:1536kB writepending:160kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:4924kB local_pcp:3960kB free_cma:0kB [ 985.859187][T15159] lowmem_reserve[]: 0 0 0 0 0 [ 985.859241][T15159] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 985.859306][T15159] lowmem_reserve[]: 0 [ 985.948598][T15193] syz.0.2574[15193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 985.993480][T15159] 0 0 0 0 [ 985.993535][T15159] Node 1 Normal free:3904076kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 985.993606][T15159] lowmem_reserve[]: 0 0 0 0 0 [ 985.993658][T15159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 985.993828][T15159] Node 0 DMA32: 71*4kB (UME) 127*8kB (UME) 227*16kB (UME) 364*32kB (UME) 231*64kB (UME) 91*128kB (ME) 44*256kB (UME) 33*512kB (UM) 11*1024kB (ME) 16*2048kB (UM) 246*4096kB (UME) = 1122820kB [ 986.080828][T15159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 986.092628][T15159] Node 1 Normal: 223*4kB (UME) 84*8kB (UME) 57*16kB (UME) 193*32kB (UME) 100*64kB (UME) 31*128kB (UME) 20*256kB (UME) 8*512kB (UME) 7*1024kB (UME) 3*2048kB (U) 943*4096kB (M) = 3904076kB [ 986.108473][T15193] syz.0.2574[15193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 986.111554][T15159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 986.132753][T15159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 986.142494][T15159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 986.152722][T15159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 986.162133][T15159] 75645 total pagecache pages [ 986.167347][T15159] 0 pages in swap cache [ 986.171552][T15159] Free swap = 124564kB [ 986.175732][T15159] Total swap = 124996kB [ 986.180140][T15159] 2097051 pages RAM [ 986.184102][T15159] 0 pages HighMem/MovableOnly [ 986.184926][T15193] syz.0.2574[15193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 986.188871][T15159] 427006 pages reserved [ 986.188888][T15159] 0 pages cma reserved [ 986.493565][T15201] xt_hashlimit: size too large, truncated to 1048576 [ 987.733519][T15215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2585'. [ 988.244563][T15221] syz.4.2586[15221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.244678][T15221] syz.4.2586[15221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.267893][T15221] syz.4.2586[15221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.645699][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 991.645721][ T29] audit: type=1326 audit(1737120175.273:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 991.747418][ T29] audit: type=1326 audit(1737120175.323:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 991.827480][ T29] audit: type=1326 audit(1737120175.323:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 991.860598][ T29] audit: type=1326 audit(1737120175.323:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 991.905209][ T29] audit: type=1326 audit(1737120175.323:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 991.971099][ T29] audit: type=1326 audit(1737120175.323:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 992.051452][ T29] audit: type=1326 audit(1737120175.323:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 992.103429][ T29] audit: type=1326 audit(1737120175.323:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 992.154389][T15288] kvm: kvm [15287]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6200000000 [ 992.197785][ T29] audit: type=1326 audit(1737120175.323:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 992.283035][ T29] audit: type=1326 audit(1737120175.323:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15285 comm="syz.1.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 992.551613][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2618'. [ 993.767495][T15314] wireguard0: entered promiscuous mode [ 993.788401][T15314] wireguard0: entered allmulticast mode [ 994.118496][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1000.223473][T15373] binder: 15367:15373 ioctl c0306201 0 returned -14 [ 1001.607664][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2647'. [ 1002.408471][ T29] audit: type=1326 audit(1737120186.043:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15403 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 1002.460927][ T29] audit: type=1326 audit(1737120186.073:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15403 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 1002.532029][ T29] audit: type=1326 audit(1737120186.073:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15403 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 1002.621693][ T29] audit: type=1326 audit(1737120186.073:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15403 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 1002.698167][ T29] audit: type=1326 audit(1737120186.073:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15403 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 1002.847794][ T29] audit: type=1326 audit(1737120186.073:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15403 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 1003.042089][ T29] audit: type=1326 audit(1737120186.073:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15403 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc915585d29 code=0x7ffc0000 [ 1003.908034][ T5836] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1004.019005][ T973] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1004.077516][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 1004.084766][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.097629][ T5836] usb 2-1: New USB device found, idVendor=0a5c, idProduct=bd27, bcdDevice=5d.72 [ 1004.107916][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.130650][ T5836] usb 2-1: Product: syz [ 1004.142181][ T5836] usb 2-1: Manufacturer: syz [ 1004.146852][ T5836] usb 2-1: SerialNumber: syz [ 1004.189003][ T5836] usb 2-1: config 0 descriptor?? [ 1004.197408][ T973] usb 7-1: Using ep0 maxpacket: 16 [ 1004.212448][ T973] usb 7-1: config 1 has an invalid interface number: 9 but max is 2 [ 1004.227382][ T973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.277497][ T973] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1004.307348][ T973] usb 7-1: config 1 has no interface number 1 [ 1004.313551][ T973] usb 7-1: config 1 interface 9 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.377317][ T973] usb 7-1: config 1 interface 9 has no altsetting 0 [ 1004.389430][ T973] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1004.404851][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.418343][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1004.431499][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1004.440741][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1004.450895][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1004.458311][ T973] usb 7-1: Product: syz [ 1004.462735][ T973] usb 7-1: Manufacturer: syz [ 1004.469010][ T973] usb 7-1: SerialNumber: syz [ 1004.474003][ T5826] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1004.485000][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1004.485023][T15411] Bluetooth: MGMT ver 1.23 [ 1004.612385][ T5836] usb 2-1: USB disconnect, device number 43 [ 1004.711544][ T973] usb 7-1: 0:2 : does not exist [ 1004.730453][ T973] hub 7-1:1.9: bad descriptor, ignoring hub [ 1004.743765][ T973] hub 7-1:1.9: probe with driver hub failed with error -5 [ 1004.792155][ T973] usb 7-1: USB disconnect, device number 5 [ 1004.846359][ T8058] udevd[8058]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1005.020441][T15421] chnl_net:caif_netlink_parms(): no params data found [ 1005.057924][ T8055] udevd[8055]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.170079][T15421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.187679][T15421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.201205][T15421] bridge_slave_0: entered allmulticast mode [ 1005.230809][T15421] bridge_slave_0: entered promiscuous mode [ 1005.262684][T15430] 9pnet_fd: Insufficient options for proto=fd [ 1005.275392][T15421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.307377][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.314759][T15421] bridge_slave_1: entered allmulticast mode [ 1005.374863][T15421] bridge_slave_1: entered promiscuous mode [ 1005.518687][T15421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.570311][T15421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.700310][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1006.374375][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.437165][T15421] team0: Port device team_slave_0 added [ 1006.489927][T15421] team0: Port device team_slave_1 added [ 1006.586816][ T5826] Bluetooth: hci6: command tx timeout [ 1006.820031][T15421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.837615][T15421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.917737][T15421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.935095][T15421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.282020][T15421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.606042][T15421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.024916][T15421] hsr_slave_0: entered promiscuous mode [ 1008.088102][T15421] hsr_slave_1: entered promiscuous mode [ 1008.868336][T15421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1008.875953][T15421] Cannot create hsr debugfs directory [ 1008.891584][ T5826] Bluetooth: hci6: command tx timeout [ 1010.788752][ T29] audit: type=1326 audit(1737120193.693:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f85d29 code=0x7ffc0000 [ 1011.014620][ T29] audit: type=1326 audit(1737120193.703:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2fc2f85d29 code=0x7ffc0000 [ 1011.027729][T13853] Bluetooth: hci5: command 0x0406 tx timeout [ 1011.039204][ T29] audit: type=1326 audit(1737120193.703:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f85d29 code=0x7ffc0000 [ 1011.043854][T13853] Bluetooth: hci6: command tx timeout [ 1011.396399][ T29] audit: type=1326 audit(1737120193.713:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fc2f84690 code=0x7ffc0000 [ 1011.755435][ T29] audit: type=1326 audit(1737120193.723:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2fc2f87557 code=0x7ffc0000 [ 1011.827782][ T29] audit: type=1326 audit(1737120193.723:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fc2f85d29 code=0x7ffc0000 [ 1011.943833][ T29] audit: type=1326 audit(1737120193.733:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2fc2f87557 code=0x7ffc0000 [ 1012.027328][ T29] audit: type=1326 audit(1737120193.733:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2fc2f8498a code=0x7ffc0000 [ 1012.147618][ T29] audit: type=1326 audit(1737120193.743:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f85d29 code=0x7ffc0000 [ 1012.185604][ T29] audit: type=1326 audit(1737120193.753:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fc2f85d29 code=0x7ffc0000 [ 1012.280866][T15421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1013.061011][T15421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1013.109394][ T5826] Bluetooth: hci6: command tx timeout [ 1013.138206][T15421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1013.256412][T15421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1013.285689][T15500] Non-string source [ 1013.734053][T15421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.770766][T15421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.816249][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.823503][T11417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.869393][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.876647][T11417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.902593][T15421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1015.561297][T15421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.118055][ T5875] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1017.617437][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 1017.658092][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.591845][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.602484][ T5875] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1018.612246][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.661603][ T5875] usb 6-1: config 0 descriptor?? [ 1018.920205][T15421] veth0_vlan: entered promiscuous mode [ 1018.956545][ T5875] usb 6-1: can't set config #0, error -71 [ 1018.986619][ T5875] usb 6-1: USB disconnect, device number 7 [ 1019.009336][T15421] veth1_vlan: entered promiscuous mode [ 1019.188474][T15421] veth0_macvtap: entered promiscuous mode [ 1019.240994][T15421] veth1_macvtap: entered promiscuous mode [ 1019.307702][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.358553][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.402685][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.433550][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.457004][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.469171][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.498552][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.513112][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.538167][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.553356][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.770174][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.800790][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.864267][T15421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.877614][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.889878][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.907452][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.925965][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.936371][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.957531][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.972407][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.987431][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.008257][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.025284][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.037612][T15421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.057595][T15421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.100377][T15421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.399947][T15421] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.421852][T15421] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.442773][T15421] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.451651][T15421] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.489327][T11415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.797405][T11415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.008502][T11429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.759524][T11429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.196159][T15603] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2707'. [ 1023.644439][T15605] kvm: kvm [15604]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1023.659080][T15605] kvm: kvm [15604]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1023.668826][T15605] kvm: kvm [15604]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1023.699893][T15605] kvm: kvm [15604]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1024.678766][ T5875] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1024.957811][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 1025.032732][ T5875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1025.084473][ T5875] usb 2-1: config 255 has an invalid interface number: 6 but max is 0 [ 1025.187699][ T5875] usb 2-1: config 255 has no interface number 0 [ 1025.194086][ T5875] usb 2-1: config 255 interface 6 has no altsetting 0 [ 1025.253315][ T5875] usb 2-1: New USB device found, idVendor=19d2, idProduct=0005, bcdDevice=3e.a8 [ 1025.274483][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.293544][ T5875] usb 2-1: Product: syz [ 1025.298132][ T5875] usb 2-1: Manufacturer: syz [ 1025.303300][ T5875] usb 2-1: SerialNumber: syz [ 1026.082310][ T5875] option 2-1:255.6: GSM modem (1-port) converter detected [ 1026.095369][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 1026.192582][ T5875] usb 2-1: USB disconnect, device number 44 [ 1026.243272][ T5875] option 2-1:255.6: device disconnected [ 1026.271092][T15647] batadv_slave_1: entered promiscuous mode [ 1028.397369][ T5873] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1028.993661][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.037383][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.080345][ T5873] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1029.100890][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.207094][ T5873] usb 7-1: config 0 descriptor?? [ 1029.341222][T15647] batadv_slave_1: left promiscuous mode [ 1029.396235][T15682] tmpfs: Bad value for 'mpol' [ 1029.812999][ T5873] usbhid 7-1:0.0: can't add hid device: -71 [ 1029.842173][ T5873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1030.302479][ T5873] usb 7-1: USB disconnect, device number 6 [ 1033.278926][T15728] Cannot find add_set index 0 as target [ 1033.747633][T13969] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1033.957408][T13969] usb 2-1: Using ep0 maxpacket: 16 [ 1033.972003][T13969] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.547301][T13969] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1034.564590][T13969] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 1034.628188][T13969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.674958][T13969] usb 2-1: config 0 descriptor?? [ 1035.124416][T15741] tmpfs: Bad value for 'mpol' [ 1035.142394][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1035.151995][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1035.387023][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1035.395432][T13969] usbhid 2-1:0.0: can't add hid device: -32 [ 1035.401585][T13969] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1035.602673][T13969] usb 2-1: USB disconnect, device number 45 [ 1036.004700][T15748] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2748'. [ 1036.434176][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1036.450807][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1036.651579][T15755] bond2: entered promiscuous mode [ 1036.656872][T15755] bond2: entered allmulticast mode [ 1036.663730][T15755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1037.592297][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2748'. [ 1039.316674][T15748] bond1: entered promiscuous mode [ 1039.322935][T15772] Falling back ldisc for ttyS3. [ 1039.608564][T15748] bond1: entered allmulticast mode [ 1039.614118][T15748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.751816][T15793] Invalid source name [ 1041.607339][T13969] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1041.758931][T13969] usb 2-1: config 0 has no interfaces? [ 1041.764493][T13969] usb 2-1: New USB device found, idVendor=19d2, idProduct=1148, bcdDevice=5c.71 [ 1041.774012][T13969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.799666][T13969] usb 2-1: config 0 descriptor?? [ 1041.928041][ T30] INFO: task syz-executor:5822 blocked for more than 144 seconds. [ 1041.935935][ T30] Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 1042.061554][T13968] usb 2-1: USB disconnect, device number 46 [ 1042.065990][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1042.081778][ T30] task:syz-executor state:D stack:19864 pid:5822 tgid:5822 ppid:1 flags:0x00004006 [ 1042.112233][ T30] Call Trace: [ 1042.117612][ T30] [ 1042.120615][ T30] __schedule+0x17fb/0x4be0 [ 1042.125207][ T30] ? __pfx___schedule+0x10/0x10 [ 1042.130307][T15801] tmpfs: Bad value for 'mpol' [ 1042.137992][ T30] ? __pfx_lock_release+0x10/0x10 [ 1042.259859][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.286593][ T30] ? schedule+0x90/0x320 [ 1042.302353][ T30] schedule+0x14b/0x320 [ 1042.321988][ T30] io_schedule+0x8d/0x110 [ 1042.340336][ T30] ? folio_wait_bit_common+0x850/0xee0 [ 1042.361123][ T30] folio_wait_bit_common+0x839/0xee0 [ 1042.377557][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1042.384085][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1042.390420][ T30] ? __pfx___might_resched+0x10/0x10 [ 1042.396328][ T30] ? rcu_is_watching+0x15/0xb0 [ 1042.402546][ T30] folio_wait_writeback+0xb0/0x100 [ 1042.420728][ T30] truncate_inode_pages_range+0xc90/0x10e0 [ 1042.426847][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1042.952352][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1042.986119][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1043.010683][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1043.047358][ T30] v9fs_evict_inode+0x1fd/0x360 [ 1043.060537][ T30] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1043.081256][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 1043.099407][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.117791][ T30] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1043.137052][ T30] evict+0x4e8/0x9a0 [ 1043.158961][ T30] ? __pfx_evict+0x10/0x10 [ 1043.173392][ T30] ? iput+0x713/0xa50 [ 1043.183757][ T30] __dentry_kill+0x20d/0x630 [ 1043.189303][ T30] ? dput+0x37/0x2b0 [ 1043.193264][ T30] dput+0x19f/0x2b0 [ 1043.197646][ T30] shrink_dcache_for_umount+0xb4/0x180 [ 1043.203182][ T30] generic_shutdown_super+0x6a/0x2d0 [ 1043.208663][ T30] kill_anon_super+0x3b/0x70 [ 1043.213336][ T30] v9fs_kill_super+0x4c/0x90 [ 1043.218985][ T30] deactivate_locked_super+0xc4/0x130 [ 1043.224574][ T30] cleanup_mnt+0x41f/0x4b0 [ 1043.229150][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1043.234435][ T30] task_work_run+0x24f/0x310 [ 1043.239314][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1043.244491][ T30] ? __x64_sys_umount+0x123/0x170 [ 1043.250363][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1043.256347][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 1043.262243][ T30] do_syscall_64+0x100/0x230 [ 1043.267007][ T30] ? clear_bhb_loop+0x35/0x90 [ 1043.274756][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.280864][ T30] RIP: 0033:0x7fb161987057 [ 1043.285406][ T30] RSP: 002b:00007ffded6cd7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1043.294154][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb161987057 [ 1043.302268][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffded6cd8b0 [ 1043.311992][ T30] RBP: 00007ffded6cd8b0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.320370][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffded6ce930 [ 1043.328847][ T30] R13: 00007fb161a018f4 R14: 00007ffded6ce970 R15: 00000000000001b9 [ 1043.337082][ T30] [ 1043.340754][ T30] [ 1043.340754][ T30] Showing all locks held in the system: [ 1043.348948][ T30] 1 lock held by khungtaskd/30: [ 1043.353874][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1043.369176][ T30] 2 locks held by getty/5574: [ 1043.374011][ T30] #0: ffff88814d9ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1043.385747][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1043.396102][ T30] 1 lock held by syz-executor/5822: [ 1043.407062][ T30] #0: ffff88805b1320e0 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 1043.419263][ T30] 2 locks held by kworker/u8:38/11429: [ 1043.425563][ T30] 1 lock held by syz.4.2586/15222: [ 1043.430901][ T30] #0: ffff88805b1320e0 (&type->s_umount_key#58){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 1043.440933][ T30] 1 lock held by syz.6.2760/15796: [ 1043.446076][ T30] #0: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1043.456304][ T30] [ 1043.458766][ T30] ============================================= [ 1043.458766][ T30] [ 1043.467636][ T30] NMI backtrace for cpu 1 [ 1043.472043][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 1043.482588][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1043.492671][ T30] Call Trace: [ 1043.495967][ T30] [ 1043.498913][ T30] dump_stack_lvl+0x241/0x360 [ 1043.503617][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.508837][ T30] ? __pfx__printk+0x10/0x10 [ 1043.513454][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1043.518417][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1043.523902][ T30] ? _printk+0xd5/0x120 [ 1043.528085][ T30] ? __pfx__printk+0x10/0x10 [ 1043.532703][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1043.537605][ T30] ? __pfx__printk+0x10/0x10 [ 1043.542215][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1043.547255][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1043.553263][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1043.559307][ T30] watchdog+0xff6/0x1040 [ 1043.563568][ T30] ? watchdog+0x1ea/0x1040 [ 1043.568036][ T30] ? __pfx_watchdog+0x10/0x10 [ 1043.572759][ T30] kthread+0x2f0/0x390 [ 1043.576847][ T30] ? __pfx_watchdog+0x10/0x10 [ 1043.581561][ T30] ? __pfx_kthread+0x10/0x10 [ 1043.586181][ T30] ret_from_fork+0x4b/0x80 [ 1043.590622][ T30] ? __pfx_kthread+0x10/0x10 [ 1043.595234][ T30] ret_from_fork_asm+0x1a/0x30 [ 1043.600036][ T30] [ 1043.604542][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1043.610548][ C0] NMI backtrace for cpu 0 [ 1043.610565][ C0] CPU: 0 UID: 0 PID: 11417 Comm: kworker/u8:27 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 1043.610588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1043.610601][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1043.610636][ C0] RIP: 0010:preempt_count_add+0x76/0x190 [ 1043.610666][ C0] Code: c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00 00 00 83 3d bd 07 ca 18 00 75 11 65 8b 05 7c 52 96 7e 0f b6 c0 3d f5 00 00 00 73 5e <65> 8b 05 6b 52 96 7e 25 ff ff ff 7f 39 d8 75 44 4c 8b 74 24 18 4c [ 1043.610683][ C0] RSP: 0018:ffffc90004657510 EFLAGS: 00000293 [ 1043.610699][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff9a378903 [ 1043.610713][ C0] RDX: dffffc0000000000 RSI: ffffffff816ad810 RDI: 0000000000000001 [ 1043.610727][ C0] RBP: ffffc90004657638 R08: 0000000000000009 R09: ffffc900046576f0 [ 1043.610741][ C0] R10: ffffc90004657650 R11: ffffffff818b3aa0 R12: dffffc0000000000 [ 1043.610755][ C0] R13: ffffc90004657600 R14: ffffffff816ad810 R15: dffffc0000000000 [ 1043.610770][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1043.610786][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1043.610799][ C0] CR2: 00007fc91574a338 CR3: 000000003279c000 CR4: 00000000003526f0 [ 1043.610816][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1043.610828][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1043.610840][ C0] Call Trace: [ 1043.610848][ C0] [ 1043.610856][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1043.610880][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1043.610903][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1043.610926][ C0] ? nmi_handle+0x2a/0x5a0 [ 1043.610955][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1043.610982][ C0] ? nmi_handle+0x14f/0x5a0 [ 1043.611002][ C0] ? nmi_handle+0x2a/0x5a0 [ 1043.611023][ C0] ? preempt_count_add+0x76/0x190 [ 1043.611049][ C0] ? default_do_nmi+0x63/0x160 [ 1043.611071][ C0] ? exc_nmi+0x123/0x1f0 [ 1043.611092][ C0] ? end_repeat_nmi+0xf/0x53 [ 1043.611111][ C0] ? kthread+0x2f0/0x390 [ 1043.611132][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1043.611162][ C0] ? kthread+0x2f0/0x390 [ 1043.611182][ C0] ? preempt_count_add+0x76/0x190 [ 1043.611209][ C0] ? preempt_count_add+0x76/0x190 [ 1043.611236][ C0] ? preempt_count_add+0x76/0x190 [ 1043.611262][ C0] [ 1043.611269][ C0] [ 1043.611276][ C0] ? kthread+0x2f0/0x390 [ 1043.611296][ C0] unwind_next_frame+0xb0/0x22d0 [ 1043.611321][ C0] ? worker_thread+0x870/0xd30 [ 1043.611340][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1043.611369][ C0] arch_stack_walk+0x11c/0x150 [ 1043.611394][ C0] ? kthread+0x2f0/0x390 [ 1043.611417][ C0] stack_trace_save+0x118/0x1d0 [ 1043.611445][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1043.611475][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.611498][ C0] kasan_save_track+0x3f/0x80 [ 1043.611521][ C0] ? kasan_save_track+0x3f/0x80 [ 1043.611549][ C0] ? kasan_save_free_info+0x40/0x50 [ 1043.611568][ C0] ? __kasan_slab_free+0x59/0x70 [ 1043.611591][ C0] ? kfree+0x196/0x430 [ 1043.611617][ C0] ? skb_release_data+0x6a0/0x8a0 [ 1043.611638][ C0] ? consume_skb+0x9f/0xf0 [ 1043.611656][ C0] ? nsim_dev_trap_report_work+0x7cc/0xb50 [ 1043.611681][ C0] ? process_scheduled_works+0xa66/0x1840 [ 1043.611708][ C0] ? worker_thread+0x870/0xd30 [ 1043.611725][ C0] ? kthread+0x2f0/0x390 [ 1043.611767][ C0] kasan_save_free_info+0x40/0x50 [ 1043.611786][ C0] __kasan_slab_free+0x59/0x70 [ 1043.611810][ C0] ? skb_release_data+0x6a0/0x8a0 [ 1043.611830][ C0] kfree+0x196/0x430 [ 1043.611855][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1043.611880][ C0] ? skb_release_data+0x6a0/0x8a0 [ 1043.611904][ C0] skb_release_data+0x6a0/0x8a0 [ 1043.611930][ C0] consume_skb+0x9f/0xf0 [ 1043.611950][ C0] nsim_dev_trap_report_work+0x7cc/0xb50 [ 1043.611984][ C0] ? process_scheduled_works+0x976/0x1840 [ 1043.612012][ C0] process_scheduled_works+0xa66/0x1840 [ 1043.612054][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.612086][ C0] ? assign_work+0x364/0x3d0 [ 1043.612115][ C0] worker_thread+0x870/0xd30 [ 1043.612140][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1043.612161][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.612178][ C0] kthread+0x2f0/0x390 [ 1043.612198][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1043.612215][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.612236][ C0] ret_from_fork+0x4b/0x80 [ 1043.612252][ C0] ? __pfx_kthread+0x10/0x10 [ 1043.612272][ C0] ret_from_fork_asm+0x1a/0x30 [ 1043.612308][ C0] [ 1043.616433][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1044.070622][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 1044.081136][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1044.091234][ T30] Call Trace: [ 1044.094537][ T30] [ 1044.097491][ T30] dump_stack_lvl+0x241/0x360 [ 1044.102242][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.107463][ T30] ? __pfx__printk+0x10/0x10 [ 1044.112068][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.118069][ T30] ? vscnprintf+0x5d/0x90 [ 1044.122420][ T30] panic+0x349/0x880 [ 1044.126369][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1044.132541][ T30] ? __pfx_panic+0x10/0x10 [ 1044.136977][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1044.142372][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1044.147958][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1044.153343][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1044.159538][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1044.165735][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1044.171913][ T30] watchdog+0x1035/0x1040 [ 1044.176257][ T30] ? watchdog+0x1ea/0x1040 [ 1044.180687][ T30] ? __pfx_watchdog+0x10/0x10 [ 1044.185374][ T30] kthread+0x2f0/0x390 [ 1044.189456][ T30] ? __pfx_watchdog+0x10/0x10 [ 1044.194143][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.198762][ T30] ret_from_fork+0x4b/0x80 [ 1044.203200][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.207813][ T30] ret_from_fork_asm+0x1a/0x30 [ 1044.212606][ T30] [ 1044.215970][ T30] Kernel Offset: disabled [ 1044.220348][ T30] Rebooting in 86400 seconds..