last executing test programs: 1h51m42.258408031s ago: executing program 1 (id=1118): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x8, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) (fail_nth: 2) 1h51m32.31080409s ago: executing program 1 (id=1121): socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'nr0\x00', 0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0x10) (async, rerun: 64) r4 = socket$inet(0x2, 0x800, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r5, @in={{0x2, 0x0, @empty}}, 0x500, 0x3, 0x0, 0x2, 0x414d6714bf78e135}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000031c0)={r5, @in={{0x2, 0x4e22, @local}}, 0x8001, 0xc4b4, 0xfffffffa, 0x4, 0xfffffffe}, &(0x7f0000003280)=0x98) (async) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x6, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000340)={"0180000000000000f2e2ad238a7b44a8d886010284ed9208000000affbf514fd", r8}) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') (rerun: 32) preadv(r9, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0x5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000003300)={""/32, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) read$FUSE(r9, &(0x7f0000001180)={0x2020}, 0x2020) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000007000000612200000200000006810400", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00df0000010000000000000000000000000000000439af9f9e1aaf9744a77d945d82cc2448f26b641126374c9ccf57b031045800000000000000b33a6677b5a0bfc552bc5771fdbf910c4bd138fc04c75231a683f29aa0bf71609b20c1df143aecd152417d9e2d572a36c92acab1fead5680a3334234ad2530ba366e47094be5dcb687e7e7a1e93e8e45dcd4bd46f5070bac1860357489ded31f2a37ecff3f", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00', 0x1000000}, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)=ANY=[@ANYBLOB="3c34223c4dce9c47620000000000000000000000d607b8320ed8c0236e9af6a97bb1b9635891d9f0508b8aebdf31ea75f72379c30872cc002f58514e239161e54f834c36d5c10ef800b223f023c006ce31985f3226cee78e7191a7", @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000d0002000000"], 0x3c}}, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 1h51m30.322640677s ago: executing program 1 (id=1122): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept$inet6(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 1h51m25.372433461s ago: executing program 1 (id=1124): r0 = socket$inet6(0xa, 0x80000, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x4b110c9, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000380)={0x200, 0x8, {r4}, {r3}, 0x100000001, 0xb9}) mount$tmpfs(0x0, &(0x7f00000001c0)='\x00', &(0x7f0000000340), 0x2000021, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'root'}}, {@uid_lt={'uid<', r5}}]}) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 1h51m21.514255403s ago: executing program 1 (id=1127): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8c) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x2010, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1h51m16.742850551s ago: executing program 1 (id=1129): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet(0x2, 0x80003, 0x6) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@local, @in6=@private1}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, 0xe8) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmmsg(r3, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYRES16=r4, @ANYRES16=r0], 0x0) 1h51m12.622963311s ago: executing program 32 (id=1129): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet(0x2, 0x80003, 0x6) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@local, @in6=@private1}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, 0xe8) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmmsg(r3, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYRES16=r4, @ANYRES16=r0], 0x0) 13m44.993096036s ago: executing program 2 (id=2954): r0 = socket$kcm(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="684148509594c3b82cfc729d5e4de75d02f027da3f10f0b7bf3d21", 0x1b}, {&(0x7f00000001c0)="af2beb8f782a571c209b24b14bd0f8c7e54019310b8ceee3ca8c7d66e482a87a12bcf50626825147fd3cfc40a93ee1db46bf943fed27a3e0fdef0391863b8c5087ec85ec38c01c0dc59a177867b447e67c7784616ec51b2ef910520b94881a7f92315b1daf183d531906ddf5fa1b28ead950c83bf641a4e8ffeb5c8a0de901d81ae0d6a0fd04473f90e815b5e818549166c3bbaa7d29e782c9da0a37e4ec0c6889c0afdf559540c012ed5815147c91709e0119671ff8e53768fbbb6cb94f610aeac3be1e7db979503fed20577700b3fe387d19361c497c657c62691509dd358253126777beb3d287f155b5bd46aca57eb735fdefd63d7ba46e335cd568", 0xfd}, {&(0x7f0000000100)="53bb20d4e4d57196120665ef1ae07e6a5378426249715a663b6aac56edd2908d1f483c3b1ddb59a6f12f1d707b6a17888477a93a086f0ec99100134381566d35b1b55f032f11b7855182ff0097b7b0985cd37528a042", 0x56}], 0x3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) 13m42.712817122s ago: executing program 2 (id=2956): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x12, 0x0, @void, @value}, 0x28) 13m41.131621188s ago: executing program 2 (id=2957): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xa) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911053000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 13m37.314687888s ago: executing program 2 (id=2958): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async, rerun: 32) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) (async, rerun: 32) read(r0, &(0x7f00000004c0)=""/97, 0x61) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4c00, 0x0) close_range(r0, r1, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfc}, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000380)="cfe795db1455778b3a", 0x5, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xb1, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x80080, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xa, 0x1, 0xd, 0x1, 0x40, r3, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x39, &(0x7f0000000280)=""/57, 0x0, 0x2e, '\x00', r4, @sk_skb=0x4, r5, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x4, 0x5c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000980)=[r3, r3, r6, r3, r3, r3, r3], &(0x7f00000009c0)=[{0x7, 0x5, 0xa, 0xc}, {0x4, 0x2, 0xf, 0xa}, {0x3, 0x2, 0x9, 0x1}, {0x5, 0x3, 0xf}, {0x4, 0x3, 0x2, 0x5}, {0x4, 0x4, 0xf, 0x3}, {0x5, 0x5, 0x6, 0x5}, {0x3, 0x1, 0xc}], 0x10, 0xc, @void, @value}, 0x94) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x19) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r8, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00', 0x272) 13m29.605074611s ago: executing program 2 (id=2959): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58}}]}, 0x88}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x581140, 0x12) ioctl$VT_WAITACTIVE(r3, 0x5607) 13m24.797269621s ago: executing program 2 (id=2960): socket$kcm(0x2, 0x922000000001, 0x106) (async) r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000003080)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x2404c0c5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xa, 0x10013, 0xffffffffffffffff, 0x6169f000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000, &(0x7f0000000180)) 13m21.348092411s ago: executing program 33 (id=2960): socket$kcm(0x2, 0x922000000001, 0x106) (async) r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000003080)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x2404c0c5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xa, 0x10013, 0xffffffffffffffff, 0x6169f000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000, &(0x7f0000000180)) 9m20.438471882s ago: executing program 0 (id=3009): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x2, 0x73) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x60f9f8d9a2f5c36c, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f00000004c0)="a610ab72a3c4652873f4900236e425dcfa1e482336314ee189c582a83376a47c818fbe9582b018f9b1727da41ab12ccef74fe4c614355556b26de7b59d5eb0c3b3815663d69ee8b4db6f17122084a4789b17addfb18e03de6d29fab76a23d27f53f9ad347a1633993ee9210442dd37754deadf180431711b99bcc923137a9b891865d330154a71cefa9de4ec0af18dff717322862cf49e742bc63a6564e19c01a03b56f4bdf1683c490282f5c27abe1e202ae47f9e6edac9a61e91096a71", &(0x7f0000000280)=@tcp6=r2, 0x4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111680000000000180000000000000000000000000000009500001000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9m17.640450493s ago: executing program 0 (id=3011): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r7, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r2, 0x0, r6}) 9m14.464017465s ago: executing program 0 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x5f, 0x61, 0x5f]}}, &(0x7f0000000180)=""/232, 0x39, 0xe8, 0x1, 0xffff, 0x10000, @value}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000002080)=""/167, 0xa7}], 0x2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x3, 0x4, 0x7, 0x80, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x84, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x0, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0x9}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x5, 0x10, 0x7}, {0x5, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x4, 0x1, 0xa}, {0x3, 0x4, 0x6, 0x8}, {0x4, 0x1, 0xb}, {0x3, 0x1, 0xb, 0xc}], 0x10, 0x6, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000002480), 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 7m6.846385813s ago: executing program 0 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x5f, 0x61, 0x5f]}}, &(0x7f0000000180)=""/232, 0x39, 0xe8, 0x1, 0xffff, 0x10000, @value}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000002080)=""/167, 0xa7}], 0x2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x3, 0x4, 0x7, 0x80, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x84, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x0, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0x9}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x5, 0x10, 0x7}, {0x5, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x4, 0x1, 0xa}, {0x3, 0x4, 0x6, 0x8}, {0x4, 0x1, 0xb}, {0x3, 0x1, 0xb, 0xc}], 0x10, 0x6, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000002480), 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 6m51.308543884s ago: executing program 3 (id=3036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0910000000000035090100700000000600007003000000bf98000000000000760800000000000085000000ba000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m44.54274796s ago: executing program 3 (id=3037): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4007) syz_clone(0x80001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000600000088480800"/33], 0x20}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x7) 6m38.220796713s ago: executing program 3 (id=3038): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) write$P9_RREAD(r0, &(0x7f0000000680)={0x676, 0x75, 0x0, {0x66b, "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"}}, 0x676) write$P9_RSTATFS(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000c80)={{0x107, 0x9, 0x2, 0x43, 0x3f, 0x8001, 0x106, 0xc96}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x820) setresgid(0xee01, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, r1, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vnet(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x12, 0x101, 0x4, 0x40000009, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x19, 0x4}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x4004556a, &(0x7f00000003c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) 6m27.085207056s ago: executing program 3 (id=3039): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/47, 0x2f}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 6m19.303228971s ago: executing program 3 (id=3040): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13581}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000bda000/0x3000)=nil, 0x3000, 0x65) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 6m10.116834717s ago: executing program 3 (id=3041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fcntl$setlease(r1, 0x403, 0x0) r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x400002) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet(r6, &(0x7f0000000300)="f27ab49ae322fe831dd66bb6b87b050dd0e6ee13a998f2d021dcee66378eaa55c5e24a9f9aed942157f8c58a0535575a20852c08acb92683d8fd449480e7daf464e0e3e389f7537b5e256209c6e878bf3e2cbcbd41bc7af720f4894a2a13d6e870406878a2c4a5448ef8ec8d39ab0efe0991c8e25ec9d74f7c6d1e303bd252f0485d3e08a2c19ce03d316da17141c034101baa32c93b600ea4b63eb9db45facf0f146d1e986134acefab4139db70a596ca050a0cd6e6bf3d62e93c06206b2db3d831791f333d8ccd6791d53566c68d4b26508ee9b3e7b49ca9f16b37fde2d54dcf9277d9a61e7cd51d6bafcb", 0xec, 0x8001, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000880)=0x0) syz_clone3(&(0x7f00000007c0)={0x100210200, &(0x7f00000001c0), &(0x7f0000000540), &(0x7f0000000580)=0x0, {0x34}, &(0x7f0000000600)=""/191, 0xbf, &(0x7f0000000700)=""/83, &(0x7f0000000780)=[0x0, r10, 0xffffffffffffffff, r10, 0xffffffffffffffff, r10, r10, 0x0, r10], 0x9, {r6}}, 0x58) sched_setscheduler(r11, 0x2, &(0x7f0000000840)=0x43c) ioctl$TCGETA(r9, 0x541a, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4007ac4", @ANYRES16=r7, @ANYBLOB="00042dbd7000ffdbdf2507000000080005000700000008000500030000005800028006000b000a0000000800080002000000080006001219000005000d000000000006000b000200000006000e004e23000008000700040000000800070001000000140001007f0000010000000000000000000000005000028006000b000200000014000100e00000010000000000000000000000000800070005000000080009000900000008000400ff030000080009001d030000080008000b02000006000f000300000008000600c3000000"], 0xd4}}, 0x404c010) 5m23.383327222s ago: executing program 34 (id=3041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fcntl$setlease(r1, 0x403, 0x0) r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x400002) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet(r6, &(0x7f0000000300)="f27ab49ae322fe831dd66bb6b87b050dd0e6ee13a998f2d021dcee66378eaa55c5e24a9f9aed942157f8c58a0535575a20852c08acb92683d8fd449480e7daf464e0e3e389f7537b5e256209c6e878bf3e2cbcbd41bc7af720f4894a2a13d6e870406878a2c4a5448ef8ec8d39ab0efe0991c8e25ec9d74f7c6d1e303bd252f0485d3e08a2c19ce03d316da17141c034101baa32c93b600ea4b63eb9db45facf0f146d1e986134acefab4139db70a596ca050a0cd6e6bf3d62e93c06206b2db3d831791f333d8ccd6791d53566c68d4b26508ee9b3e7b49ca9f16b37fde2d54dcf9277d9a61e7cd51d6bafcb", 0xec, 0x8001, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000880)=0x0) syz_clone3(&(0x7f00000007c0)={0x100210200, &(0x7f00000001c0), &(0x7f0000000540), &(0x7f0000000580)=0x0, {0x34}, &(0x7f0000000600)=""/191, 0xbf, &(0x7f0000000700)=""/83, &(0x7f0000000780)=[0x0, r10, 0xffffffffffffffff, r10, 0xffffffffffffffff, r10, r10, 0x0, r10], 0x9, {r6}}, 0x58) sched_setscheduler(r11, 0x2, &(0x7f0000000840)=0x43c) ioctl$TCGETA(r9, 0x541a, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4007ac4", @ANYRES16=r7, @ANYBLOB="00042dbd7000ffdbdf2507000000080005000700000008000500030000005800028006000b000a0000000800080002000000080006001219000005000d000000000006000b000200000006000e004e23000008000700040000000800070001000000140001007f0000010000000000000000000000005000028006000b000200000014000100e00000010000000000000000000000000800070005000000080009000900000008000400ff030000080009001d030000080008000b02000006000f000300000008000600c3000000"], 0xd4}}, 0x404c010) 3m30.183544687s ago: executing program 0 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x5f, 0x61, 0x5f]}}, &(0x7f0000000180)=""/232, 0x39, 0xe8, 0x1, 0xffff, 0x10000, @value}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000002080)=""/167, 0xa7}], 0x2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x3, 0x4, 0x7, 0x80, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x84, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x0, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0x9}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x5, 0x10, 0x7}, {0x5, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x4, 0x1, 0xa}, {0x3, 0x4, 0x6, 0x8}, {0x4, 0x1, 0xb}, {0x3, 0x1, 0xb, 0xc}], 0x10, 0x6, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000002480), 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m23.333252455s ago: executing program 4 (id=3042): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file1\x00'}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sr0, r2, &(0x7f0000000140)='./file1\x00') 1m16.312908572s ago: executing program 4 (id=3043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000040)=""/250, 0xfa}], 0x1, 0x126, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x270bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x48}}, 0x20040054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) r6 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r6, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) (async) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) clock_settime(0x1f3808b11266dde, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x3c}}, 0x0) 1m6.436038223s ago: executing program 4 (id=3044): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="000000000072a6307296fb58c0fab84dfe230dee", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07c5b80115a8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') write$FUSE_ATTR(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x330, 0x220, 0x330, 0x110, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @empty, @private}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local, @dev, @local}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) read$FUSE(r5, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200900, 0x139) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') flock(r12, 0x8) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) pwrite64(r5, &(0x7f00000001c0)="97d75e1512102374178e60b0ef831ff9f575953c5abfabba28083c963d501b2c0b258f08626419ebda88cb7490f7dcc0264626ba4b87eb0564c608d8ba4bacb6354393de198fe7fcdca9abb76969b2b5cdf80bf27efbe974b555a39e2c449d", 0x5f, 0x7) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r13, 0x4058534c, &(0x7f0000000040)={0xd4, 0x6, 0xfffffffc, 0xfffffc01, 0xfffffbff, 0x19}) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x14, &(0x7f0000001980)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r10, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRES64=r12], &(0x7f0000000600)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) 58.697733781s ago: executing program 4 (id=3045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) read$FUSE(r3, 0x0, 0x0) write$vhost_msg(r3, &(0x7f0000000080)={0x1, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0x48) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000001140)=0x10000000) r7 = dup3(0xffffffffffffffff, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, 0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) 9.435432042s ago: executing program 35 (id=3045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) read$FUSE(r3, 0x0, 0x0) write$vhost_msg(r3, &(0x7f0000000080)={0x1, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0x48) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000001140)=0x10000000) r7 = dup3(0xffffffffffffffff, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, 0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x5f, 0x61, 0x5f]}}, &(0x7f0000000180)=""/232, 0x39, 0xe8, 0x1, 0xffff, 0x10000, @value}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000002080)=""/167, 0xa7}], 0x2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x3, 0x4, 0x7, 0x80, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x84, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x0, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0x9}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x5, 0x10, 0x7}, {0x5, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x4, 0x1, 0xa}, {0x3, 0x4, 0x6, 0x8}, {0x4, 0x1, 0xb}, {0x3, 0x1, 0xb, 0xc}], 0x10, 0x6, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000002480), 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) kernel console output (not intermixed with test programs): vice number 59 using dummy_hcd [ 6477.376223][T13879] usb 1-1: device descriptor read/8, error -71 [ 6477.697793][T13879] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 6477.780073][T13879] usb 1-1: device descriptor read/8, error -71 [ 6477.922241][T13879] usb usb1-port1: unable to enumerate USB device [ 6478.236925][T13923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6478.284031][T13923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6487.153675][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 6490.167608][T12946] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 6490.400305][T12946] usb 1-1: Using ep0 maxpacket: 32 [ 6490.478016][T12946] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 6490.481829][T12946] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 6490.488041][T12946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 6490.490550][T12946] usb 1-1: config 1 has no interface number 0 [ 6490.493126][T12946] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 6490.496898][T12946] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 6490.503128][T12946] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 6490.509307][T12946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6490.805093][T12946] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 6491.219434][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 6491.320735][T12946] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 6493.575914][ T9781] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 6505.319359][T10396] usb 1-1: USB disconnect, device number 61 [ 6505.401605][T10396] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 6506.720528][T13984] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 6507.046262][T10396] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 6507.238361][T10396] usb 1-1: device descriptor read/64, error -71 [ 6507.597979][T10396] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 6507.797908][T10396] usb 1-1: device descriptor read/64, error -71 [ 6507.918169][T10396] usb usb1-port1: attempt power cycle [ 6508.468292][T10396] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 6508.547025][T10396] usb 1-1: device descriptor read/8, error -71 [ 6508.869111][T10396] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 6508.943734][T10396] usb 1-1: device descriptor read/8, error -71 [ 6509.062300][T10396] usb usb1-port1: unable to enumerate USB device [ 6519.621191][T14005] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1810'. [ 6519.721895][T14005] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 6523.996843][T14009] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1812'. [ 6524.296442][T14009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6524.408547][T14009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6529.420322][T14016] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 6537.951583][T14025] cgroup: name respecified [ 6544.967939][T14034] netlink: 'syz.0.1815': attribute type 4 has an invalid length. [ 6550.773596][T14048] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 6550.835531][T14048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6550.877591][T14048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6558.907169][T14061] cgroup: Need name or subsystem set [ 6566.117733][T14071] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 6567.585716][T14076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1824'. [ 6567.768279][T14072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1824'. [ 6568.037589][T14072] input: syz0 as /devices/virtual/input/input23 [ 6579.563575][T14128] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1830'. [ 6579.588245][T14127] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1830'. [ 6579.746082][T14127] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1830'. [ 6586.250923][T14136] usb usb1: usbfs: process 14136 (syz.0.1832) did not claim interface 0 before use [ 6592.354970][T14143] netlink: 'syz.2.1835': attribute type 21 has an invalid length. [ 6592.357423][T14143] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1835'. [ 6592.359154][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 6594.669631][T14147] fuse: Bad value for 'rootmode' [ 6600.988150][T14152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6601.038027][T14152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6612.240462][T14168] netlink: 'syz.2.1842': attribute type 9 has an invalid length. [ 6620.618924][T14183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6620.636935][T14183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6626.452090][ T34] audit: type=1326 audit(6625.937:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.0.1847" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 6628.616157][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6628.657292][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6630.281967][T14203] veth1_to_bridge: left promiscuous mode [ 6630.298987][T14203] veth1_to_bridge: left allmulticast mode [ 6645.656674][T14239] netlink: 'syz.2.1859': attribute type 4 has an invalid length. [ 6647.096818][T14242] netlink: 'syz.2.1859': attribute type 4 has an invalid length. [ 6648.558655][T14239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6648.563118][T14239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6648.953446][T14239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6648.991064][T14239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6660.279514][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 6660.636031][T14263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6660.677264][T14263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6669.842797][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6669.911955][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6670.430795][ T34] audit: type=1400 audit(6669.907:43): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A03 pid=14286 comm="syz.0.1868" [ 6678.713329][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6678.761907][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6696.249804][T14327] nbd: nbd0 already in use [ 6718.162723][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 6719.271621][T14354] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 6719.286756][T14354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6723.453653][T14360] binder: 14359:14360 unknown command 0 [ 6723.457501][T14360] binder: 14359:14360 ioctl c0306201 20000540 returned -22 [ 6745.731734][T14412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1894'. [ 6747.833630][T14414] pim6reg1: entered promiscuous mode [ 6747.836786][T14414] pim6reg1: entered allmulticast mode [ 6748.210792][T14419] fuse: Unknown parameter 'group_idK[' [ 6748.296797][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6748.303126][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6753.381759][T14425] binder: 14424:14425 ioctl 80047213 20000000 returned -22 [ 6753.416876][T14425] binder_alloc: 14424: binder_alloc_buf, no vma [ 6757.487949][T14435] netlink: 'syz.2.1899': attribute type 4 has an invalid length. [ 6764.006238][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'. [ 6770.635800][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 6789.120934][T14475] netlink: 'syz.2.1907': attribute type 5 has an invalid length. [ 6789.938155][T14483] ubi: mtd0 is already attached to ubi0 [ 6800.375509][T14506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1913'. [ 6813.056699][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1919'. [ 6815.546794][T14524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6815.569352][T14524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6821.699150][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 6821.902775][T14540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 6823.067630][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6823.117001][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6833.638861][ T34] audit: type=1326 audit(7089.114:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14543 comm="syz.0.1925" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 6842.467801][T14561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'. [ 6847.228324][T14569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1930'. [ 6851.606803][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6851.628594][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6851.705838][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6851.721470][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6851.772546][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6851.786949][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6852.229200][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6852.248262][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6852.372902][T14574] [U] ^C [ 6855.692152][T14588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1932'. [ 6879.928950][T14634] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 6880.056472][T14634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6880.107447][T14634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6904.471752][T14659] fuse: Bad value for 'fd' [ 6908.759649][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6908.783549][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6908.816801][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6908.829358][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6908.867934][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6908.897987][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6908.920394][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6908.939967][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6908.989752][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6909.017337][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6909.052618][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6909.067230][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6915.270925][T14697] fuse: Bad value for 'fd' [ 6936.221175][T14732] fuse: Bad value for 'fd' [ 6937.548130][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 6945.289135][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6945.293588][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6965.197965][T14765] netlink: 'syz.2.1973': attribute type 3 has an invalid length. [ 7008.655863][T14839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7008.660426][T14839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7009.597927][T14839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7009.611915][T14839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7013.737403][T14854] syz.0.2001 (14854): drop_caches: 2 [ 7024.826293][T14869] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2007'. [ 7025.519325][T14867] Non-string source [ 7027.381179][T14874] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 7027.918078][T14878] binder: 14873:14878 ioctl c0306201 0 returned -14 [ 7027.971257][T14878] binder: 14873:14878 ioctl c0a85322 200002c0 returned -22 [ 7040.863550][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 7044.861190][T14902] block nbd0: NBD_DISCONNECT [ 7044.870285][T14902] block nbd0: Send disconnect failed -32 [ 7044.873324][T14902] block nbd0: shutting down sockets [ 7048.007518][T14906] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 7048.075575][T14906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7048.099760][T14906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7051.718307][T14913] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 7059.269428][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7059.278738][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7066.186020][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7066.228104][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7071.111444][T14940] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 7090.819365][T14973] input: syz1 as /devices/virtual/input/input25 [ 7103.889594][T14994] pim6reg: entered allmulticast mode [ 7103.928566][T14995] tmpfs: Unknown parameter 'usrquotaF( ' [ 7103.959729][T14993] pim6reg: left allmulticast mode [ 7103.975763][T14995] tmpfs: Unknown parameter 'usrquotaF( ' [ 7103.983250][T14995] tmpfs: Unknown parameter 'usrquotaF( ' [ 7110.627186][T15011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2040'. [ 7113.760909][T15022] xt_l2tp: invalid flags combination: 0 [ 7116.148086][T15030] fuse: Bad value for 'fd' [ 7119.521362][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 7119.522881][T15040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2046'. [ 7119.527712][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 7119.582215][T15040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2046'. [ 7119.588777][T15040] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2046'. [ 7121.977726][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 7123.849530][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7123.868698][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7132.911195][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 7132.938838][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 7132.941377][T15054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2051'. [ 7137.587540][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7137.592357][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7145.793284][T15070] No such timeout policy "syz0" [ 7151.548679][T15089] tmpfs: Bad value for 'nr_inodes' [ 7153.217170][T15086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2059'. [ 7171.907710][T15129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7171.922283][T15129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7173.615556][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 7173.618514][T15135] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2067'. [ 7174.267445][T15136] tmpfs: Unknown parameter 'usrquota' [ 7174.272027][T15136] tmpfs: Unknown parameter 'usrquota' [ 7174.297298][T15136] tmpfs: Unknown parameter 'usrquota' [ 7174.322199][T15136] tmpfs: Unknown parameter 'usrquota' [ 7174.367186][T15136] tmpfs: Unknown parameter 'usrquota' [ 7178.783243][T15139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2069'. [ 7188.338124][T15153] netlink: 'syz.2.2073': attribute type 29 has an invalid length. [ 7188.387454][T15153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7188.401856][T15153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7188.423377][T15153] netlink: 'syz.2.2073': attribute type 29 has an invalid length. [ 7188.528161][T15153] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2073'. [ 7188.623361][T15153] netlink: 'syz.2.2073': attribute type 29 has an invalid length. [ 7188.719402][T15156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7188.768395][T15156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7190.037834][T15162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 7190.039722][T15162] IPv6: NLM_F_CREATE should be set when creating new route [ 7190.041040][T15162] IPv6: NLM_F_CREATE should be set when creating new route [ 7194.987606][T15175] netlink: 'syz.2.2077': attribute type 2 has an invalid length. [ 7206.018336][T15188] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2080'. [ 7206.139926][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7206.159880][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7220.762940][T15218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7220.851558][T15218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7230.227157][T15227] [U] ^@ [ 7240.979256][T15238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2088'. [ 7241.421249][T15238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7241.436832][T15238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7244.301495][T15248] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2089'. [ 7254.847628][ T34] audit: type=1326 audit(7510.314:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.0.2093" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 7270.455491][T15278] fuse: Bad value for 'user_id' [ 7270.456925][T15278] fuse: Bad value for 'user_id' [ 7275.070141][T15289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7275.095700][T15289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7285.931828][T15304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2103'. [ 7317.331979][T15366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7317.346333][T15366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7324.580805][T15370] FAULT_INJECTION: forcing a failure. [ 7324.580805][T15370] name failslab, interval 1, probability 0, space 0, times 0 [ 7324.583407][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.2.2116 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7324.584820][T15370] Hardware name: riscv-virtio,qemu (DT) [ 7324.585636][T15370] Call Trace: [ 7324.586339][T15370] [] dump_backtrace+0x2e/0x3c [ 7324.587436][T15370] [] show_stack+0x30/0x3c [ 7324.588342][T15370] [] dump_stack_lvl+0x12e/0x1a6 [ 7324.589476][T15370] [] dump_stack+0x1c/0x24 [ 7324.590583][T15370] [] should_fail_ex+0x3f8/0x4e0 [ 7324.591591][T15370] [] should_failslab+0xba/0x102 [ 7324.592610][T15370] [] __kmalloc_noprof+0xce/0x5ba [ 7324.593526][T15370] [] mon_bin_ioctl+0x5a0/0x12d4 [ 7324.594597][T15370] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 7324.595713][T15370] [] syscall_handler+0x94/0x118 [ 7324.596715][T15370] [] do_trap_ecall_u+0x1aa/0x216 [ 7324.597778][T15370] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7328.810723][T15377] netlink: 'syz.0.2118': attribute type 14 has an invalid length. [ 7332.372704][T15385] FAULT_INJECTION: forcing a failure. [ 7332.372704][T15385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 7332.381566][T15385] CPU: 0 UID: 0 PID: 15385 Comm: syz.0.2121 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7332.383850][T15385] Hardware name: riscv-virtio,qemu (DT) [ 7332.385534][T15385] Call Trace: [ 7332.386732][T15385] [] dump_backtrace+0x2e/0x3c [ 7332.388586][T15385] [] show_stack+0x30/0x3c [ 7332.390268][T15385] [] dump_stack_lvl+0x12e/0x1a6 [ 7332.392152][T15385] [] dump_stack+0x1c/0x24 [ 7332.394726][T15385] [] should_fail_ex+0x3f8/0x4e0 [ 7332.396569][T15385] [] should_fail_alloc_page+0xfa/0x158 [ 7332.398441][T15385] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 7332.400254][T15385] [] __alloc_pages_noprof+0x168/0x1fc0 [ 7332.401961][T15385] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 7332.403761][T15385] [] alloc_pages_noprof+0x174/0x2f0 [ 7332.405454][T15385] [] get_free_pages_noprof+0x18/0x136 [ 7332.407016][T15385] [] get_zeroed_page_noprof+0x12/0x1a [ 7332.409830][T15385] [] mon_alloc_buff+0x13c/0x2b8 [ 7332.411922][T15385] [] mon_bin_ioctl+0x5ba/0x12d4 [ 7332.413648][T15385] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 7332.415503][T15385] [] syscall_handler+0x94/0x118 [ 7332.417261][T15385] [] do_trap_ecall_u+0x1aa/0x216 [ 7332.419015][T15385] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7333.452887][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7333.477655][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7352.632703][T15408] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2124'. [ 7353.196651][T15408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7353.211737][T15408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7354.788834][T15418] netlink: 'syz.0.2125': attribute type 9 has an invalid length. [ 7354.791080][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2125'. [ 7357.120953][T15423] FAULT_INJECTION: forcing a failure. [ 7357.120953][T15423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 7357.122605][T15423] CPU: 1 UID: 0 PID: 15423 Comm: syz.0.2126 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7357.123613][T15423] Hardware name: riscv-virtio,qemu (DT) [ 7357.124520][T15423] Call Trace: [ 7357.125165][T15423] [] dump_backtrace+0x2e/0x3c [ 7357.126140][T15423] [] show_stack+0x30/0x3c [ 7357.127038][T15423] [] dump_stack_lvl+0x12e/0x1a6 [ 7357.127967][T15423] [] dump_stack+0x1c/0x24 [ 7357.128860][T15423] [] should_fail_ex+0x3f8/0x4e0 [ 7357.129757][T15423] [] should_fail_alloc_page+0xfa/0x158 [ 7357.130856][T15423] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 7357.131849][T15423] [] __alloc_pages_noprof+0x168/0x1fc0 [ 7357.132775][T15423] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 7357.133764][T15423] [] alloc_pages_noprof+0x174/0x2f0 [ 7357.135030][T15423] [] get_free_pages_noprof+0x18/0x136 [ 7357.135966][T15423] [] get_zeroed_page_noprof+0x12/0x1a [ 7357.136850][T15423] [] mon_alloc_buff+0x13c/0x2b8 [ 7357.137813][T15423] [] mon_bin_ioctl+0x5ba/0x12d4 [ 7357.138850][T15423] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 7357.139794][T15423] [] syscall_handler+0x94/0x118 [ 7357.140753][T15423] [] do_trap_ecall_u+0x1aa/0x216 [ 7357.141751][T15423] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7365.718646][T15439] sit0: entered promiscuous mode [ 7365.881068][T15439] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 7365.882775][T15439] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2130'. [ 7367.959969][T15444] FAULT_INJECTION: forcing a failure. [ 7367.959969][T15444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 7367.962990][T15444] CPU: 0 UID: 0 PID: 15444 Comm: syz.0.2131 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7367.966871][T15444] Hardware name: riscv-virtio,qemu (DT) [ 7367.968281][T15444] Call Trace: [ 7367.969455][T15444] [] dump_backtrace+0x2e/0x3c [ 7367.971343][T15444] [] show_stack+0x30/0x3c [ 7367.973023][T15444] [] dump_stack_lvl+0x12e/0x1a6 [ 7367.976066][T15444] [] dump_stack+0x1c/0x24 [ 7367.977874][T15444] [] should_fail_ex+0x3f8/0x4e0 [ 7367.979862][T15444] [] should_fail_alloc_page+0xfa/0x158 [ 7367.981791][T15444] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 7367.983761][T15444] [] __alloc_pages_noprof+0x168/0x1fc0 [ 7367.985674][T15444] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 7367.987635][T15444] [] alloc_pages_noprof+0x174/0x2f0 [ 7367.989510][T15444] [] get_free_pages_noprof+0x18/0x136 [ 7367.991244][T15444] [] get_zeroed_page_noprof+0x12/0x1a [ 7367.992915][T15444] [] mon_alloc_buff+0x13c/0x2b8 [ 7367.995823][T15444] [] mon_bin_ioctl+0x5ba/0x12d4 [ 7367.997725][T15444] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 7367.999608][T15444] [] syscall_handler+0x94/0x118 [ 7368.001305][T15444] [] do_trap_ecall_u+0x1aa/0x216 [ 7368.003228][T15444] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7375.288651][T15464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7375.339485][T15464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7392.527049][T15484] FAULT_INJECTION: forcing a failure. [ 7392.527049][T15484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 7392.529668][T15484] CPU: 1 UID: 0 PID: 15484 Comm: syz.2.2137 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7392.530754][T15484] Hardware name: riscv-virtio,qemu (DT) [ 7392.531389][T15484] Call Trace: [ 7392.531927][T15484] [] dump_backtrace+0x2e/0x3c [ 7392.532786][T15484] [] show_stack+0x30/0x3c [ 7392.533597][T15484] [] dump_stack_lvl+0x12e/0x1a6 [ 7392.535292][T15484] [] dump_stack+0x1c/0x24 [ 7392.536895][T15484] [] should_fail_ex+0x3f8/0x4e0 [ 7392.537835][T15484] [] should_fail_alloc_page+0xfa/0x158 [ 7392.539589][T15484] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 7392.541330][T15484] [] __alloc_pages_noprof+0x168/0x1fc0 [ 7392.542387][T15484] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 7392.543388][T15484] [] alloc_pages_noprof+0x174/0x2f0 [ 7392.545495][T15484] [] get_free_pages_noprof+0x18/0x136 [ 7392.547018][T15484] [] get_zeroed_page_noprof+0x12/0x1a [ 7392.548328][T15484] [] mon_alloc_buff+0x13c/0x2b8 [ 7392.549234][T15484] [] mon_bin_ioctl+0x5ba/0x12d4 [ 7392.550136][T15484] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 7392.552186][T15484] [] syscall_handler+0x94/0x118 [ 7392.553683][T15484] [] do_trap_ecall_u+0x1aa/0x216 [ 7392.555336][T15484] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7411.293647][T15246] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 7413.588268][T15518] serio: Serial port ptm0 [ 7417.651590][T15525] veth0_to_team: entered promiscuous mode [ 7417.652948][T15525] veth0_to_team: entered allmulticast mode [ 7420.262489][T15534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2147'. [ 7441.229790][T15576] netlink: 'syz.2.2157': attribute type 29 has an invalid length. [ 7441.369791][T15576] netlink: 'syz.2.2157': attribute type 29 has an invalid length. [ 7441.413216][T15576] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2157'. [ 7443.947770][T15578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7444.009022][T15578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7444.630731][T15578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7444.640964][T15578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7451.228194][T15584] netlink: 'syz.0.2159': attribute type 4 has an invalid length. [ 7457.668664][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 7471.383670][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 7484.950060][T15633] netlink: 'syz.0.2174': attribute type 29 has an invalid length. [ 7485.030194][T15633] netlink: 'syz.0.2174': attribute type 29 has an invalid length. [ 7485.078172][T15633] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2174'. [ 7494.699979][T15650] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 7494.722931][T15650] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 7496.484773][ T34] audit: type=1326 audit(7751.964:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.0.2179" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 7502.309494][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2182'. [ 7502.769696][T15658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7502.791906][T15658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7511.645054][T15676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7511.676600][T15676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7512.799918][T15679] nvme_fabrics: missing parameter 'transport=%s' [ 7512.816666][T15679] nvme_fabrics: missing parameter 'nqn=%s' [ 7523.082945][T15689] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 7528.596358][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 7528.643185][T15698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2190'. [ 7528.813090][T15698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7528.837893][T15698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7539.561534][T15714] dvmrp0: entered allmulticast mode [ 7545.221237][T15724] binder_alloc: 15723: pid 15723 spamming oneway? 1 buffers allocated for a total size of 4096 [ 7545.286072][T15724] xt_SECMARK: invalid mode: 0 [ 7549.158812][T15727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2197'. [ 7549.290215][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7549.320981][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7549.568450][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 7563.891088][T15744] netlink: 'syz.2.2200': attribute type 6 has an invalid length. [ 7572.827375][T15756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7572.862752][T15756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7577.879169][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 7589.428895][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7589.459116][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7589.670942][T15767] input: syz0 as /devices/virtual/input/input26 [ 7592.706985][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7592.778850][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7602.868782][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7602.962071][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7605.333645][T15790] could not allocate digest TFM handle sha384-ce [ 7607.011243][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 7631.623514][T15830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7631.666482][T15830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7633.993390][T15823] netlink: 'syz.2.2218': attribute type 16 has an invalid length. [ 7634.019091][T15823] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2218'. [ 7654.120196][T15854] Process accounting resumed [ 7657.998221][T15858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2226'. [ 7677.172677][T15883] FAULT_INJECTION: forcing a failure. [ 7677.172677][T15883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 7677.188741][T15883] CPU: 1 UID: 0 PID: 15883 Comm: syz.0.2230 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7677.191007][T15883] Hardware name: riscv-virtio,qemu (DT) [ 7677.192220][T15883] Call Trace: [ 7677.193261][T15883] [] dump_backtrace+0x2e/0x3c [ 7677.195033][T15883] [] show_stack+0x30/0x3c [ 7677.196561][T15883] [] dump_stack_lvl+0x12e/0x1a6 [ 7677.198261][T15883] [] dump_stack+0x1c/0x24 [ 7677.199940][T15883] [] should_fail_ex+0x3f8/0x4e0 [ 7677.201631][T15883] [] should_fail+0xe/0x16 [ 7677.203360][T15883] [] should_fail_usercopy+0x1e/0x26 [ 7677.205115][T15883] [] _copy_from_user+0x3e/0x2ae [ 7677.206856][T15883] [] move_addr_to_kernel+0x72/0x14c [ 7677.208585][T15883] [] __copy_msghdr+0x340/0x408 [ 7677.210271][T15883] [] copy_msghdr_from_user+0xe2/0x176 [ 7677.211856][T15883] [] ___sys_sendmsg+0x112/0x1e6 [ 7677.213473][T15883] [] __sys_sendmmsg+0x298/0x742 [ 7677.215463][T15883] [] __riscv_sys_sendmmsg+0x8c/0xd8 [ 7677.217205][T15883] [] syscall_handler+0x94/0x118 [ 7677.218835][T15883] [] do_trap_ecall_u+0x1aa/0x216 [ 7677.220648][T15883] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7681.569906][T15891] ip6t_srh: unknown srh match flags 4001 [ 7681.682582][T15891] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2233'. [ 7681.693469][T15891] nbd: must specify at least one socket [ 7682.178795][T15887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2232'. [ 7682.767764][T15887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7682.830493][T15887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7705.371612][T15927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2242'. [ 7705.722753][T15927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7705.807780][T15927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7715.996318][T15952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7716.031445][T15952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7720.427340][T15958] syz.0.2250 (15958): /proc/15957/oom_adj is deprecated, please use /proc/15957/oom_score_adj instead. [ 7724.316836][T15960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2251'. [ 7725.252195][T15970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7725.277850][T15970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7746.967025][T16002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2259'. [ 7754.631967][T16008] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 7754.778799][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7754.808732][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7768.265307][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7768.288973][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7768.401119][T16025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7768.532452][T16025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7768.566697][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.569183][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.571270][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.573237][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.596602][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.599114][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.601177][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.603219][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.616606][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.618980][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.620988][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.623008][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.637432][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.639783][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.641764][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.643766][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.662844][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.677411][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.680233][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.682268][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.699900][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.702204][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.748481][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.751006][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.753040][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.788739][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.791221][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.793112][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.822758][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.832633][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.845508][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.848029][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.849855][T15833] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 7768.988396][T15833] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 7782.563269][T16038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2266'. [ 7787.737784][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7787.777698][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7800.568404][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 7812.509482][T16082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2273'. [ 7813.029210][T16082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7813.081203][T16082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7819.937925][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2276'. [ 7819.941211][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2276'. [ 7826.003116][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 7840.822817][T16121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2281'. [ 7841.205795][T16121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7841.280480][T16121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7842.783560][T16130] ip6tnl2: entered promiscuous mode [ 7842.791571][T16130] ip6tnl2: entered allmulticast mode [ 7860.407943][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2285'. [ 7863.809844][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 7871.459517][T16169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2288'. [ 7908.237967][T16284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2293'. [ 7914.491587][T16182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7914.619709][T16182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7923.498329][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2294'. [ 7925.773468][T16182] hsr_slave_0: entered promiscuous mode [ 7925.886196][T16182] hsr_slave_1: entered promiscuous mode [ 7925.971173][T16182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 7925.973616][T16182] Cannot create hsr debugfs directory [ 7928.529527][T16483] netlink: 'syz.0.2295': attribute type 11 has an invalid length. [ 7928.542328][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 7930.862968][T16182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7931.359096][T16182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7932.062904][T16182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7932.456270][T16182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7934.631076][T16182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 7934.982214][T16182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 7935.282028][T16182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 7935.659367][T16182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 7949.001344][T16182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7968.123835][T16602] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2302'. [ 7972.947706][T16616] FAULT_INJECTION: forcing a failure. [ 7972.947706][T16616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 7972.951538][T16616] CPU: 1 UID: 0 PID: 16616 Comm: syz.0.2304 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7972.952866][T16616] Hardware name: riscv-virtio,qemu (DT) [ 7972.953702][T16616] Call Trace: [ 7972.954382][T16616] [] dump_backtrace+0x2e/0x3c [ 7972.955534][T16616] [] show_stack+0x30/0x3c [ 7972.956427][T16616] [] dump_stack_lvl+0x12e/0x1a6 [ 7972.957416][T16616] [] dump_stack+0x1c/0x24 [ 7972.958382][T16616] [] should_fail_ex+0x3f8/0x4e0 [ 7972.959406][T16616] [] should_fail_alloc_page+0xfa/0x158 [ 7972.960433][T16616] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 7972.961380][T16616] [] __alloc_pages_noprof+0x168/0x1fc0 [ 7972.962302][T16616] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 7972.963416][T16616] [] alloc_pages_noprof+0x174/0x2f0 [ 7972.964675][T16616] [] get_free_pages_noprof+0x18/0x136 [ 7972.965580][T16616] [] get_zeroed_page_noprof+0x12/0x1a [ 7972.966582][T16616] [] mon_alloc_buff+0x13c/0x2b8 [ 7972.967500][T16616] [] mon_bin_ioctl+0x5ba/0x12d4 [ 7972.968383][T16616] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 7972.969328][T16616] [] syscall_handler+0x94/0x118 [ 7972.970233][T16616] [] do_trap_ecall_u+0x1aa/0x216 [ 7972.971253][T16616] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7978.696105][T16182] veth0_vlan: entered promiscuous mode [ 7978.833381][T16182] veth1_vlan: entered promiscuous mode [ 7979.840232][T16182] veth0_macvtap: entered promiscuous mode [ 7979.948886][T16182] veth1_macvtap: entered promiscuous mode [ 7980.677033][T16182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7980.680307][T16182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7980.683073][T16182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7980.687019][T16182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7986.657040][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7986.663274][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7986.693050][T16635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2289'. [ 7990.741181][T16640] syzkaller1: entered promiscuous mode [ 7990.743694][T16640] syzkaller1: entered allmulticast mode [ 8031.636130][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8031.659009][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8032.136628][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8032.169708][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8052.438865][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 8052.447269][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'. [ 8052.557769][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2332'. [ 8052.722177][T16737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8052.781851][T16737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8071.695009][T16769] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 8072.747247][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 8072.810212][T16766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2339'. [ 8072.950821][T16766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8072.967210][T16766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8092.950730][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 8093.029911][T16795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2347'. [ 8093.257862][T16795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8093.331868][T16795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8114.136402][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 8114.192931][T16819] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2352'. [ 8114.339059][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8114.413613][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8140.676456][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 8140.743215][T16843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2358'. [ 8140.843562][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8140.852432][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8152.930588][T16862] FAULT_INJECTION: forcing a failure. [ 8152.930588][T16862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 8152.933464][T16862] CPU: 0 UID: 0 PID: 16862 Comm: syz.2.2361 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 8152.935744][T16862] Hardware name: riscv-virtio,qemu (DT) [ 8152.937194][T16862] Call Trace: [ 8152.938360][T16862] [] dump_backtrace+0x2e/0x3c [ 8152.940087][T16862] [] show_stack+0x30/0x3c [ 8152.941590][T16862] [] dump_stack_lvl+0x12e/0x1a6 [ 8152.943399][T16862] [] dump_stack+0x1c/0x24 [ 8152.945166][T16862] [] should_fail_ex+0x3f8/0x4e0 [ 8152.947001][T16862] [] should_fail_alloc_page+0xfa/0x158 [ 8152.950639][T16862] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 8152.952373][T16862] [] __alloc_pages_noprof+0x168/0x1fc0 [ 8152.953990][T16862] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 8152.955809][T16862] [] alloc_pages_noprof+0x174/0x2f0 [ 8152.958346][T16862] [] get_free_pages_noprof+0x18/0x136 [ 8152.960206][T16862] [] get_zeroed_page_noprof+0x12/0x1a [ 8152.961860][T16862] [] mon_alloc_buff+0x13c/0x2b8 [ 8152.963530][T16862] [] mon_bin_ioctl+0x5ba/0x12d4 [ 8152.965188][T16862] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 8152.966966][T16862] [] syscall_handler+0x94/0x118 [ 8152.968620][T16862] [] do_trap_ecall_u+0x1aa/0x216 [ 8152.970332][T16862] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 8168.768116][T16890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2369'. [ 8237.258908][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 8292.052083][T17074] can0: slcan on ptm0. [ 8292.447573][T17073] can0 (unregistered): slcan off ptm0. [ 8300.361338][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8300.389996][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8356.742249][T17259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2435'. [ 8356.747884][T17259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2435'. [ 8356.749935][T17259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2435'. [ 8356.751640][T17259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2435'. [ 8359.462296][T17111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8359.509479][T17111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8373.519508][T17111] hsr_slave_0: entered promiscuous mode [ 8373.580791][T17111] hsr_slave_1: entered promiscuous mode [ 8373.618927][T17111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 8373.622063][T17111] Cannot create hsr debugfs directory [ 8380.909130][T17111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 8380.985613][T17111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 8381.083757][T17111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 8381.238185][T17111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 8391.167976][T17111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8423.424411][T17111] veth0_vlan: entered promiscuous mode [ 8423.682713][T17111] veth1_vlan: entered promiscuous mode [ 8424.660982][T17111] veth0_macvtap: entered promiscuous mode [ 8424.819983][T17111] veth1_macvtap: entered promiscuous mode [ 8425.827455][T17111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8425.828963][T17111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8425.830250][T17111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8425.831523][T17111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8468.838823][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 8475.305790][T17534] nbd: couldn't find device at index 0 [ 8539.048604][T17571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8539.052975][T17571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8606.890556][T17606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2477'. [ 8622.618275][T17634] input: syz1 as /devices/virtual/input/input28 [ 8634.068427][T17651] FAULT_INJECTION: forcing a failure. [ 8634.068427][T17651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 8634.070430][T17651] CPU: 1 UID: 0 PID: 17651 Comm: syz.0.2485 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 8634.071696][T17651] Hardware name: riscv-virtio,qemu (DT) [ 8634.072508][T17651] Call Trace: [ 8634.073186][T17651] [] dump_backtrace+0x2e/0x3c [ 8634.074861][T17651] [] show_stack+0x30/0x3c [ 8634.075841][T17651] [] dump_stack_lvl+0x12e/0x1a6 [ 8634.076931][T17651] [] dump_stack+0x1c/0x24 [ 8634.078470][T17651] [] should_fail_ex+0x3f8/0x4e0 [ 8634.079951][T17651] [] should_fail_alloc_page+0xfa/0x158 [ 8634.081144][T17651] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 8634.082292][T17651] [] __alloc_pages_noprof+0x168/0x1fc0 [ 8634.083426][T17651] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 8634.085169][T17651] [] alloc_pages_noprof+0x174/0x2f0 [ 8634.086355][T17651] [] get_free_pages_noprof+0x18/0x136 [ 8634.087454][T17651] [] get_zeroed_page_noprof+0x12/0x1a [ 8634.088560][T17651] [] mon_alloc_buff+0x13c/0x2b8 [ 8634.089647][T17651] [] mon_bin_ioctl+0x5ba/0x12d4 [ 8634.090773][T17651] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 8634.091891][T17651] [] syscall_handler+0x94/0x118 [ 8634.092907][T17651] [] do_trap_ecall_u+0x1aa/0x216 [ 8634.094076][T17651] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 8644.456671][T17668] FAULT_INJECTION: forcing a failure. [ 8644.456671][T17668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 8644.458255][T17668] CPU: 1 UID: 0 PID: 17668 Comm: syz.0.2490 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 8644.459269][T17668] Hardware name: riscv-virtio,qemu (DT) [ 8644.459894][T17668] Call Trace: [ 8644.460440][T17668] [] dump_backtrace+0x2e/0x3c [ 8644.461310][T17668] [] show_stack+0x30/0x3c [ 8644.462096][T17668] [] dump_stack_lvl+0x12e/0x1a6 [ 8644.463003][T17668] [] dump_stack+0x1c/0x24 [ 8644.463925][T17668] [] should_fail_ex+0x3f8/0x4e0 [ 8644.464848][T17668] [] should_fail_alloc_page+0xfa/0x158 [ 8644.465805][T17668] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 8644.466723][T17668] [] __alloc_pages_noprof+0x168/0x1fc0 [ 8644.467595][T17668] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 8644.468542][T17668] [] alloc_pages_noprof+0x174/0x2f0 [ 8644.469499][T17668] [] get_free_pages_noprof+0x18/0x136 [ 8644.470356][T17668] [] get_zeroed_page_noprof+0x12/0x1a [ 8644.471208][T17668] [] mon_alloc_buff+0x13c/0x2b8 [ 8644.472085][T17668] [] mon_bin_ioctl+0x5ba/0x12d4 [ 8644.472941][T17668] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 8644.473917][T17668] [] syscall_handler+0x94/0x118 [ 8644.474779][T17668] [] do_trap_ecall_u+0x1aa/0x216 [ 8644.475699][T17668] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 8652.100577][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 8669.095340][T17715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8669.102904][T17715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8685.826767][T17747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8685.839440][T17747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8685.942881][T17747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2514'. [ 8696.182666][T17762] sock: sock_set_timeout: `syz.2.2520' (pid 17762) tries to set negative timeout [ 8719.816884][T17791] fuse: Unknown parameter 'gro!_id}Srr)}ש/ʡ۽sR9xB{ {K i/Sk' [ 8719.820211][T17790] fuse: Unknown parameter 'gro!_id}Srr)}ש/ʡ۽sR9xB{ {K i/Sk' [ 8722.092602][T14355] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 8722.142699][T14355] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 8741.755690][T17824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8741.773893][T17824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8749.787943][T17834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8749.798480][T17834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8750.673458][T17834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8750.690143][T17834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8770.603470][T17850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2542'. [ 8771.129918][T17850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8771.161819][T17850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8786.483405][T17880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8786.501739][T17880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8791.251604][T17884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2550'. [ 8803.731964][T17901] FAULT_INJECTION: forcing a failure. [ 8803.731964][T17901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 8803.741037][T17901] CPU: 1 UID: 0 PID: 17901 Comm: syz.2.2552 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 8803.742970][T17901] Hardware name: riscv-virtio,qemu (DT) [ 8803.744143][T17901] Call Trace: [ 8803.745153][T17901] [] dump_backtrace+0x2e/0x3c [ 8803.746829][T17901] [] show_stack+0x30/0x3c [ 8803.748185][T17901] [] dump_stack_lvl+0x12e/0x1a6 [ 8803.750089][T17901] [] dump_stack+0x1c/0x24 [ 8803.751946][T17901] [] should_fail_ex+0x3f8/0x4e0 [ 8803.753493][T17901] [] should_fail_alloc_page+0xfa/0x158 [ 8803.755141][T17901] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 8803.756686][T17901] [] __alloc_pages_noprof+0x168/0x1fc0 [ 8803.758205][T17901] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 8803.759784][T17901] [] alloc_pages_noprof+0x174/0x2f0 [ 8803.761312][T17901] [] get_free_pages_noprof+0x18/0x136 [ 8803.762751][T17901] [] get_zeroed_page_noprof+0x12/0x1a [ 8803.764213][T17901] [] mon_alloc_buff+0x13c/0x2b8 [ 8803.765607][T17901] [] mon_bin_ioctl+0x5ba/0x12d4 [ 8803.767091][T17901] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 8803.768603][T17901] [] syscall_handler+0x94/0x118 [ 8803.770048][T17901] [] do_trap_ecall_u+0x1aa/0x216 [ 8803.771612][T17901] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 8803.774548][ C1] vkms_vblank_simulate: vblank timer overrun [ 8808.685406][T17909] netlink: 660 bytes leftover after parsing attributes in process `syz.2.2555'. [ 8823.116624][T17923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2557'. [ 8845.278645][T17959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2567'. [ 8845.706366][T17959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8845.747428][T17959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8847.218846][T17968] mmap: syz.0.2569 (17968): VmData 29085696 exceed data ulimit 58. Update limits or use boot option ignore_rlimit_data. [ 8867.642616][T17994] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2576'. [ 8879.350582][T18008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2578'. [ 8882.313580][T18015] can0: slcan on ptm0. [ 8884.643348][T18019] can0 (unregistered): slcan off ptm0. [ 8889.470119][T18040] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 8899.192721][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 8906.590280][T18065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2583'. [ 8913.580055][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 8913.875555][T18075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8913.901033][T18075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8914.089006][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 8920.295775][ T34] audit: type=1326 audit(9175.724:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.299687][ T34] audit: type=1326 audit(9175.724:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.468805][ T34] audit: type=1326 audit(9175.954:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.489511][ T34] audit: type=1326 audit(9175.974:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.550008][ T34] audit: type=1326 audit(9176.034:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=208 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.552619][ T34] audit: type=1326 audit(9176.034:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.576611][ T34] audit: type=1326 audit(9176.044:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.606243][ T34] audit: type=1326 audit(9176.044:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.619305][ T34] audit: type=1326 audit(9176.084:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.639210][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 8920.651867][ T34] audit: type=1326 audit(9176.114:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.2.2586" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0xdb5be code=0x7ffc0000 [ 8920.813616][T18097] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 8921.236724][T18098] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 8947.318211][T18139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2597'. [ 8947.404910][T18139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8947.417871][T18139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8967.713639][T18175] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 8977.379510][T18195] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 8978.082323][T18198] syzkaller1: entered promiscuous mode [ 8978.083594][T18198] syzkaller1: entered allmulticast mode [ 8998.070011][T18235] xt_hashlimit: invalid rate [ 8999.151162][T18238] ipvlan2: entered promiscuous mode [ 8999.190998][T18238] ipvlan2: entered allmulticast mode [ 8999.202362][T18238] bond0: entered allmulticast mode [ 8999.208717][T18238] bond_slave_0: entered allmulticast mode [ 8999.210870][T18238] bond_slave_1: entered allmulticast mode [ 8999.277388][T18238] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 9009.881557][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.907375][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.909587][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.911488][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.919558][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.921021][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.922051][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.923687][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.926890][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.931302][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.932412][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.933386][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.937146][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.938309][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.940068][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.943570][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.947518][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.949254][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.951062][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.955865][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.957036][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.958036][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.959145][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.960838][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.962684][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.970903][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.972990][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9009.996358][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9010.001654][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9010.003463][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9010.029522][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9010.031688][T14355] hid-generic 0000:0000:0003.0034: unknown main item tag 0x0 [ 9010.113327][T14355] hid-generic 0000:0000:0003.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 9021.667562][ T34] kauditd_printk_skb: 32 callbacks suppressed [ 9021.668124][ T34] audit: type=1326 audit(9277.134:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9021.692167][ T34] audit: type=1326 audit(9277.154:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9021.732486][ T34] audit: type=1326 audit(9277.184:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=167 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9021.791094][ T34] audit: type=1326 audit(9277.194:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9021.877640][ T34] audit: type=1326 audit(9277.214:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9021.881694][ T34] audit: type=1326 audit(9277.314:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9021.957234][ T34] audit: type=1326 audit(9277.324:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9021.961245][ T34] audit: type=1326 audit(9277.344:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.2.2625" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.598870][ T34] audit: type=1326 audit(9282.074:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.646640][ T34] audit: type=1326 audit(9282.084:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.686768][ T34] kauditd_printk_skb: 3 callbacks suppressed [ 9026.687328][ T34] audit: type=1326 audit(9282.144:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=208 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.692503][ T34] audit: type=1326 audit(9282.144:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.733259][ T34] audit: type=1326 audit(9282.154:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.749031][ T34] audit: type=1326 audit(9282.154:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.762017][ T34] audit: type=1326 audit(9282.244:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.791812][ T34] audit: type=1326 audit(9282.254:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.848859][ T34] audit: type=1326 audit(9282.264:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.853262][ T34] audit: type=1326 audit(9282.274:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.912549][ T34] audit: type=1326 audit(9282.274:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9026.956919][ T34] audit: type=1326 audit(9282.294:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18272 comm="syz.2.2628" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9030.137734][T18280] netlink: 'syz.0.2629': attribute type 2 has an invalid length. [ 9030.162575][T18280] netlink: 'syz.0.2629': attribute type 11 has an invalid length. [ 9030.185696][T18280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2629'. [ 9030.249328][T18281] netlink: 'syz.0.2629': attribute type 2 has an invalid length. [ 9030.250782][T18281] netlink: 'syz.0.2629': attribute type 11 has an invalid length. [ 9030.251851][T18281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2629'. [ 9037.563312][ T34] kauditd_printk_skb: 27 callbacks suppressed [ 9037.587479][ T34] audit: type=1107 audit(9293.056:139): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 9042.179018][T18295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9042.183448][T18295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9050.284711][T18304] devtmpfs: Unknown parameter '' [ 9057.159451][T18314] FAULT_INJECTION: forcing a failure. [ 9057.159451][T18314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 9057.161411][T18314] CPU: 0 UID: 0 PID: 18314 Comm: syz.2.2638 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9057.162749][T18314] Hardware name: riscv-virtio,qemu (DT) [ 9057.163663][T18314] Call Trace: [ 9057.164724][T18314] [] dump_backtrace+0x2e/0x3c [ 9057.165883][T18314] [] show_stack+0x30/0x3c [ 9057.166928][T18314] [] dump_stack_lvl+0x12e/0x1a6 [ 9057.168069][T18314] [] dump_stack+0x1c/0x24 [ 9057.169176][T18314] [] should_fail_ex+0x3f8/0x4e0 [ 9057.170272][T18314] [] should_fail_alloc_page+0xfa/0x158 [ 9057.171508][T18314] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 9057.172678][T18314] [] __alloc_pages_noprof+0x168/0x1fc0 [ 9057.173802][T18314] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 9057.174882][T18314] [] alloc_pages_noprof+0x174/0x2f0 [ 9057.175898][T18314] [] get_free_pages_noprof+0x18/0x136 [ 9057.176834][T18314] [] get_zeroed_page_noprof+0x12/0x1a [ 9057.177737][T18314] [] mon_alloc_buff+0x13c/0x2b8 [ 9057.178735][T18314] [] mon_bin_ioctl+0x5ba/0x12d4 [ 9057.179985][T18314] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9057.181001][T18314] [] syscall_handler+0x94/0x118 [ 9057.181925][T18314] [] do_trap_ecall_u+0x1aa/0x216 [ 9057.182997][T18314] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9061.877920][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9061.882510][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9070.827289][T18333] fuse: Bad value for 'user_id' [ 9070.828605][T18333] fuse: Bad value for 'user_id' [ 9079.721239][T18348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9079.799722][T18348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9089.406954][ T34] audit: type=1326 audit(9344.896:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18366 comm="syz.0.2648" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 9097.760302][T18381] netlink: 38 bytes leftover after parsing attributes in process `syz.0.2651'. [ 9105.720323][T18410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9105.827908][T18410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9107.008263][ T34] audit: type=1326 audit(9362.496:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18409 comm="syz.2.2652" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 9119.590731][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 9119.593299][T18419] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2655'. [ 9138.197315][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2659'. [ 9145.736896][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9145.758286][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9146.425474][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9146.490255][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9169.963172][T18483] binder: Bad value for 'stats' [ 9180.599965][T18498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2672'. [ 9180.772575][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 9181.132229][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 9181.230892][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'. [ 9182.130981][T18503] bond0: (slave bond_slave_0): Releasing backup interface [ 9182.269961][T18503] bond_slave_0 (unregistering): left allmulticast mode [ 9191.831235][T18512] trusted_key: encrypted_key: key trusted:8sX not found [ 9192.296893][T18512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9192.328515][T18512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9201.720355][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 9218.948192][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'. [ 9235.411086][T18563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9235.491016][T18563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9245.780644][T18573] xt_bpf: check failed: parse error [ 9255.170123][T18581] netlink: 'syz.2.2691': attribute type 10 has an invalid length. [ 9260.159108][T18588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9260.171977][T18588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9262.521155][T18592] FAULT_INJECTION: forcing a failure. [ 9262.521155][T18592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 9262.522768][T18592] CPU: 1 UID: 0 PID: 18592 Comm: syz.0.2694 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9262.523915][T18592] Hardware name: riscv-virtio,qemu (DT) [ 9262.524586][T18592] Call Trace: [ 9262.525260][T18592] [] dump_backtrace+0x2e/0x3c [ 9262.526312][T18592] [] show_stack+0x30/0x3c [ 9262.527285][T18592] [] dump_stack_lvl+0x12e/0x1a6 [ 9262.528226][T18592] [] dump_stack+0x1c/0x24 [ 9262.529230][T18592] [] should_fail_ex+0x3f8/0x4e0 [ 9262.530161][T18592] [] should_fail_alloc_page+0xfa/0x158 [ 9262.531254][T18592] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 9262.532182][T18592] [] __alloc_pages_noprof+0x168/0x1fc0 [ 9262.533065][T18592] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 9262.534209][T18592] [] alloc_pages_noprof+0x174/0x2f0 [ 9262.535279][T18592] [] get_free_pages_noprof+0x18/0x136 [ 9262.536213][T18592] [] get_zeroed_page_noprof+0x12/0x1a [ 9262.537562][T18592] [] mon_alloc_buff+0x13c/0x2b8 [ 9262.538729][T18592] [] mon_bin_ioctl+0x5ba/0x12d4 [ 9262.539669][T18592] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9262.540602][T18592] [] syscall_handler+0x94/0x118 [ 9262.541451][T18592] [] do_trap_ecall_u+0x1aa/0x216 [ 9262.542508][T18592] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9275.929449][T18608] FAULT_INJECTION: forcing a failure. [ 9275.929449][T18608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 9275.931166][T18608] CPU: 1 UID: 0 PID: 18608 Comm: syz.2.2699 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9275.932186][T18608] Hardware name: riscv-virtio,qemu (DT) [ 9275.932906][T18608] Call Trace: [ 9275.933478][T18608] [] dump_backtrace+0x2e/0x3c [ 9275.934524][T18608] [] show_stack+0x30/0x3c [ 9275.935413][T18608] [] dump_stack_lvl+0x12e/0x1a6 [ 9275.936313][T18608] [] dump_stack+0x1c/0x24 [ 9275.937184][T18608] [] should_fail_ex+0x3f8/0x4e0 [ 9275.938564][T18608] [] should_fail_alloc_page+0xfa/0x158 [ 9275.939620][T18608] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 9275.940677][T18608] [] __alloc_pages_noprof+0x168/0x1fc0 [ 9275.941897][T18608] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 9275.942883][T18608] [] alloc_pages_noprof+0x174/0x2f0 [ 9275.943886][T18608] [] get_free_pages_noprof+0x18/0x136 [ 9275.944726][T18608] [] get_zeroed_page_noprof+0x12/0x1a [ 9275.945627][T18608] [] mon_alloc_buff+0x13c/0x2b8 [ 9275.946533][T18608] [] mon_bin_ioctl+0x5ba/0x12d4 [ 9275.947388][T18608] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9275.948375][T18608] [] syscall_handler+0x94/0x118 [ 9275.949247][T18608] [] do_trap_ecall_u+0x1aa/0x216 [ 9275.950187][T18608] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9288.328103][T18621] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 9288.462433][T18621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9288.483057][T18621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9303.917631][T18638] syzkaller1: entered promiscuous mode [ 9303.919299][T18638] syzkaller1: entered allmulticast mode [ 9311.369050][T18652] FAULT_INJECTION: forcing a failure. [ 9311.369050][T18652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 9311.372077][T18652] CPU: 1 UID: 0 PID: 18652 Comm: syz.0.2710 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9311.374090][T18652] Hardware name: riscv-virtio,qemu (DT) [ 9311.375435][T18652] Call Trace: [ 9311.376509][T18651] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 9311.376524][T18652] [] dump_backtrace+0x2e/0x3c [ 9311.382797][T18652] [] show_stack+0x30/0x3c [ 9311.384729][T18652] [] dump_stack_lvl+0x12e/0x1a6 [ 9311.386607][T18652] [] dump_stack+0x1c/0x24 [ 9311.388294][T18652] [] should_fail_ex+0x3f8/0x4e0 [ 9311.390217][T18652] [] should_fail_alloc_page+0xfa/0x158 [ 9311.392077][T18652] [] prepare_alloc_pages.constprop.0+0x27a/0x502 [ 9311.393859][T18652] [] __alloc_pages_noprof+0x168/0x1fc0 [ 9311.396074][T18652] [] alloc_pages_mpol_noprof+0xf8/0x488 [ 9311.397847][T18652] [] alloc_pages_noprof+0x174/0x2f0 [ 9311.399597][T18652] [] get_free_pages_noprof+0x18/0x136 [ 9311.401206][T18652] [] get_zeroed_page_noprof+0x12/0x1a [ 9311.402866][T18652] [] mon_alloc_buff+0x13c/0x2b8 [ 9311.405238][T18652] [] mon_bin_ioctl+0x5ba/0x12d4 [ 9311.406880][T18652] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 9311.408535][T18652] [] syscall_handler+0x94/0x118 [ 9311.410091][T18652] [] do_trap_ecall_u+0x1aa/0x216 [ 9311.411772][T18652] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9311.540681][T18651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9311.816122][T18651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9326.357053][T18665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9326.428798][T18665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9338.865083][ T34] audit: type=1326 audit(9594.356:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9338.999794][ T34] audit: type=1326 audit(9594.496:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=35 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.132473][ T34] audit: type=1326 audit(9594.596:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.143083][ T34] audit: type=1326 audit(9594.596:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.197532][ T34] audit: type=1326 audit(9594.676:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=35 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.276817][ T34] audit: type=1326 audit(9594.706:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.319016][ T34] audit: type=1326 audit(9594.776:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.336539][ T34] audit: type=1326 audit(9594.806:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=193 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.340654][ T34] audit: type=1326 audit(9594.836:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.367075][ T34] audit: type=1326 audit(9594.846:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18682 comm="syz.2.2721" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9339.526894][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9339.571885][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9343.079185][T18692] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 9343.079185][T18692] The task syz.2.2721 (18692) triggered the difference, watch for misbehavior. [ 9358.325068][T18704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9358.342864][T18704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9367.540175][T18713] No control pipe specified [ 9372.460315][T18721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9372.503364][T18721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9373.299266][T18725] all: renamed from ipvlan1 [ 9382.190266][T18734] No control pipe specified [ 9386.423498][T18736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9386.479820][T18736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9399.322678][T18757] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 9399.332675][T18758] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2735'. [ 9452.817140][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2757'. [ 9459.240319][T18838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2760'. [ 9471.299062][T18852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2765'. [ 9486.861770][T18872] FAULT_INJECTION: forcing a failure. [ 9486.861770][T18872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9486.863543][T18872] CPU: 0 UID: 0 PID: 18872 Comm: syz.0.2770 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9486.864995][T18872] Hardware name: riscv-virtio,qemu (DT) [ 9486.865827][T18872] Call Trace: [ 9486.866509][T18872] [] dump_backtrace+0x2e/0x3c [ 9486.867514][T18872] [] show_stack+0x30/0x3c [ 9486.868422][T18872] [] dump_stack_lvl+0x12e/0x1a6 [ 9486.869427][T18872] [] dump_stack+0x1c/0x24 [ 9486.870428][T18872] [] should_fail_ex+0x3f8/0x4e0 [ 9486.871406][T18872] [] should_fail+0xe/0x16 [ 9486.872344][T18872] [] should_fail_usercopy+0x1e/0x26 [ 9486.873313][T18872] [] _copy_from_user+0x3e/0x2ae [ 9486.875127][T18872] [] core_sys_select+0x376/0xc6c [ 9486.876260][T18872] [] __riscv_sys_pselect6+0x380/0x5a0 [ 9486.877286][T18872] [] syscall_handler+0x94/0x118 [ 9486.878190][T18872] [] do_trap_ecall_u+0x1aa/0x216 [ 9486.879181][T18872] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9505.072462][T18894] syzkaller1: entered promiscuous mode [ 9505.077841][T18894] syzkaller1: entered allmulticast mode [ 9507.478538][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'. [ 9525.355956][T18922] xt_TCPMSS: Only works on TCP SYN packets [ 9525.600327][T18921] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 9525.835050][T18921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9525.863793][T18921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9539.479681][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2788'. [ 9542.872337][T18941] trusted_key: encrypted_key: insufficient parameters specified [ 9544.338022][T18943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9544.407281][T18943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9544.546292][T18943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9544.640382][T18943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9553.747999][T18956] No control pipe specified [ 9553.836339][T18955] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 9561.911023][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 9561.918743][T18964] bMtadv_lave_0: renamed from lo (while UP) [ 9562.192369][T18964] bMtadv_lave_0: entered allmulticast mode [ 9568.898730][T18983] No control pipe specified [ 9573.470838][T18992] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 9578.208411][T19001] No control pipe specified [ 9592.204739][T19021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9592.250258][T19021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9613.668458][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 9621.430728][T19071] netlink: 'syz.0.2825': attribute type 3 has an invalid length. [ 9632.088873][T19085] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2831'. [ 9632.090541][T19085] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2831'. [ 9646.820799][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 9647.116420][T19108] veth0_to_bridge: entered promiscuous mode [ 9652.032901][T19120] autofs: Unknown parameter '0x0000000000000000' [ 9660.066057][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 9667.443003][T19134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2841'. [ 9673.110222][T19145] autofs: Unknown parameter '0x0000000000000000' [ 9685.549106][T19163] autofs: Unknown parameter '0x0000000000000000' [ 9685.670452][T19159] netlink: 'syz.0.2847': attribute type 4 has an invalid length. [ 9686.396815][T19162] netlink: 'syz.0.2847': attribute type 4 has an invalid length. [ 9689.129171][T19165] es: renamed from ipvlan1 [ 9693.579699][T19168] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 9699.488310][T19178] autofs: Unknown parameter '0x0000000000000000' [ 9706.918312][T19190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2855'. [ 9710.011590][T19195] xt_socket: unknown flags 0x8 [ 9710.450979][T19195] devtmpfs: Unknown parameter 'g%aqᓯCYtQ'[&ph<#%yN\_fBlw*TToyI+ HID v0.00 Device [syz0] on syz0 [ 9791.905330][T19313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9791.936615][T19313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9801.106727][T19336] sit0: entered promiscuous mode [ 9801.108227][T19336] sit0: entered allmulticast mode [ 9804.757275][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 9804.760158][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 9804.980512][T19344] fuse: Bad value for 'fd' [ 9843.409542][T19392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9843.449273][T19392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9861.272394][T19424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9861.290781][T19424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9886.082011][T19466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 9889.933455][T19470] netlink: 'syz.0.2924': attribute type 1 has an invalid length. [ 9889.942840][T19470] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2924'. [ 9893.621713][T19477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 9907.699905][T19488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9907.791190][T19488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9933.958924][ T34] kauditd_printk_skb: 18 callbacks suppressed [ 9933.959263][ T34] audit: type=1326 audit(10189.056:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.962603][ T34] audit: type=1326 audit(10189.076:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.977288][ T34] audit: type=1326 audit(10189.276:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.979642][ T34] audit: type=1326 audit(10189.296:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.981573][ T34] audit: type=1326 audit(10189.316:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=217 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.983584][ T34] audit: type=1326 audit(10189.336:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.991059][ T34] audit: type=1326 audit(10189.436:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.993054][ T34] audit: type=1326 audit(10189.446:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=217 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.997449][ T34] audit: type=1326 audit(10189.446:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9933.999498][ T34] audit: type=1326 audit(10189.466:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.0.2936" exe="/syz-executor" sig=0 arch=c00000f3 syscall=217 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9934.391344][T19556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9934.442489][T19556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9942.777423][T19576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9942.797051][T19576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9944.118982][T19579] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 9950.963259][T19587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9951.033569][T19587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9968.559459][ T34] kauditd_printk_skb: 73 callbacks suppressed [ 9968.560039][ T34] audit: type=1326 audit(10224.036:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9968.594076][ T34] audit: type=1326 audit(10224.046:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9968.656631][ T34] audit: type=1326 audit(10224.136:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9968.690309][ T34] audit: type=1326 audit(10224.186:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9968.706530][ T34] audit: type=1326 audit(10224.196:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9968.726709][ T34] audit: type=1326 audit(10224.216:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9969.102246][ T34] audit: type=1326 audit(10224.276:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9969.126039][ T34] audit: type=1326 audit(10224.286:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9969.228501][ T34] audit: type=1326 audit(10224.716:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9969.242956][ T34] audit: type=1326 audit(10224.736:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19618 comm="syz.0.2948" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 9972.091534][T19623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9972.109253][T19623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9974.751026][T19629] FAULT_INJECTION: forcing a failure. [ 9974.751026][T19629] name failslab, interval 1, probability 0, space 0, times 0 [ 9974.752576][T19629] CPU: 0 UID: 0 PID: 19629 Comm: syz.0.2952 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9974.753594][T19629] Hardware name: riscv-virtio,qemu (DT) [ 9974.754369][T19629] Call Trace: [ 9974.754971][T19629] [] dump_backtrace+0x2e/0x3c [ 9974.755981][T19629] [] show_stack+0x30/0x3c [ 9974.756961][T19629] [] dump_stack_lvl+0x12e/0x1a6 [ 9974.757898][T19629] [] dump_stack+0x1c/0x24 [ 9974.758961][T19629] [] should_fail_ex+0x3f8/0x4e0 [ 9974.759920][T19629] [] should_failslab+0xba/0x102 [ 9974.760943][T19629] [] kmem_cache_alloc_noprof+0x62/0x3da [ 9974.761852][T19629] [] skb_clone+0x180/0x3ce [ 9974.762806][T19629] [] bpf_clone_redirect+0xb0/0x360 [ 9974.763694][T19629] [] bpf_prog_1eda3e3d4f38ab1d+0x5e/0x7c [ 9974.765233][T19629] [] bpf_test_run+0x42a/0x9f0 [ 9974.766286][T19629] [] bpf_prog_test_run_skb+0xa9c/0x1ff2 [ 9974.767284][T19629] [] __sys_bpf+0x1746/0x363c [ 9974.768179][T19629] [] __riscv_sys_bpf+0x6c/0x9e [ 9974.769049][T19629] [] syscall_handler+0x94/0x118 [ 9974.769874][T19629] [] do_trap_ecall_u+0x1aa/0x216 [ 9974.770864][T19629] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9978.873376][ T34] kauditd_printk_skb: 60 callbacks suppressed [ 9978.889974][ T34] audit: type=1326 audit(10234.356:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19630 comm="syz.0.2953" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 9989.361779][T19651] misc userio: Begin command sent, but we're already running [ 9989.406918][T19651] misc userio: Begin command sent, but we're already running [ 9989.409230][T19651] misc userio: Begin command sent, but we're already running [ 9989.411256][T19651] misc userio: Begin command sent, but we're already running [ 9989.413192][T19651] misc userio: Begin command sent, but we're already running [ 9989.833072][T19651] misc userio: Begin command sent, but we're already running [ 9989.851765][T19651] misc userio: Begin command sent, but we're already running [ 9989.867601][T19651] misc userio: Begin command sent, but we're already running [ 9989.870064][T19651] misc userio: Begin command sent, but we're already running [ 9989.872235][T19651] misc userio: Begin command sent, but we're already running [ 9989.908605][T19651] misc userio: Begin command sent, but we're already running [ 9989.911299][T19651] misc userio: Begin command sent, but we're already running [ 9989.913571][T19651] misc userio: Begin command sent, but we're already running [ 9989.962226][T19651] misc userio: Begin command sent, but we're already running [ 9991.110809][T19651] misc userio: Begin command sent, but we're already running [ 9991.112607][T19651] misc userio: Begin command sent, but we're already running [ 9991.127537][T19651] misc userio: Begin command sent, but we're already running [ 9991.129076][T19651] misc userio: Begin command sent, but we're already running [ 9991.130447][T19651] misc userio: Begin command sent, but we're already running [ 9991.131775][T19651] misc userio: Begin command sent, but we're already running [ 9991.133130][T19651] misc userio: Begin command sent, but we're already running [ 9991.187503][T19651] misc userio: Begin command sent, but we're already running [ 9991.188990][T19651] misc userio: Begin command sent, but we're already running [ 9991.190275][T19651] misc userio: Begin command sent, but we're already running [ 9991.192198][T19651] misc userio: Begin command sent, but we're already running [ 9991.193585][T19651] misc userio: Begin command sent, but we're already running [ 9991.307709][T19651] misc userio: Begin command sent, but we're already running [ 9991.309679][T19651] misc userio: Begin command sent, but we're already running [ 9991.311017][T19651] misc userio: Begin command sent, but we're already running [ 9991.312306][T19651] misc userio: Begin command sent, but we're already running [ 9991.313599][T19651] misc userio: Begin command sent, but we're already running [ 9991.451518][T19651] misc userio: Begin command sent, but we're already running [10003.133474][T19679] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [10003.139125][T19679] Error validating options; rc = [-22] [10031.442357][T19836] can0: slcan on ttyS3. [10034.920807][T19682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10035.030537][T19682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10043.137618][T19835] can0 (unregistered): slcan off ttyS3. [10045.069135][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [10048.640918][T19682] hsr_slave_0: entered promiscuous mode [10048.694670][T19682] hsr_slave_1: entered promiscuous mode [10048.744889][T19682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10048.746317][T19682] Cannot create hsr debugfs directory [10055.820079][T19682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [10056.010551][T19682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [10056.158514][T19682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [10056.303537][T19682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [10065.010934][T19682] 8021q: adding VLAN 0 to HW filter on device bond0 [10082.230367][T20080] netlink: 'syz.0.2973': attribute type 4 has an invalid length. [10083.058525][T20080] netlink: 'syz.0.2973': attribute type 4 has an invalid length. [10108.328772][T19682] veth0_vlan: entered promiscuous mode [10108.722079][T19682] veth1_vlan: entered promiscuous mode [10109.972094][T19682] veth0_macvtap: entered promiscuous mode [10110.479149][T19682] veth1_macvtap: entered promiscuous mode [10112.763292][T19682] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10112.799809][T19682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10112.802169][T19682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10112.828342][T19682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10117.352899][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2962'. [10117.510869][T20120] FAULT_INJECTION: forcing a failure. [10117.510869][T20120] name failslab, interval 1, probability 0, space 0, times 0 [10117.522357][T20120] CPU: 0 UID: 0 PID: 20120 Comm: syz.0.2978 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [10117.523965][T20120] Hardware name: riscv-virtio,qemu (DT) [10117.524863][T20120] Call Trace: [10117.525577][T20120] [] dump_backtrace+0x2e/0x3c [10117.526704][T20120] [] show_stack+0x30/0x3c [10117.527762][T20120] [] dump_stack_lvl+0x12e/0x1a6 [10117.528962][T20120] [] dump_stack+0x1c/0x24 [10117.529960][T20120] [] should_fail_ex+0x3f8/0x4e0 [10117.531091][T20120] [] should_failslab+0xba/0x102 [10117.532302][T20120] [] kmem_cache_alloc_lru_noprof+0x282/0x3e6 [10117.533350][T20120] [] __d_alloc+0x46/0x8a6 [10117.535367][T20120] [] d_alloc+0x42/0x19a [10117.536503][T20120] [] d_alloc_parallel+0xf0/0x17ec [10117.537499][T20120] [] __lookup_slow+0x170/0x3ba [10117.538619][T20120] [] walk_component+0x32c/0x508 [10117.539683][T20120] [] link_path_walk.part.0.constprop.0+0x54c/0xa32 [10117.540772][T20120] [] path_parentat+0x9a/0x1de [10117.541752][T20120] [] __filename_parentat+0x1b6/0x59a [10117.542906][T20120] [] filename_create+0xb8/0x45e [10117.544061][T20120] [] do_mkdirat+0xa8/0x32e [10117.545347][T20120] [] __riscv_sys_mkdirat+0x80/0xa0 [10117.546480][T20120] [] syscall_handler+0x94/0x118 [10117.547541][T20120] [] do_trap_ecall_u+0x1aa/0x216 [10117.548833][T20120] [] _new_vmalloc_restore_context_a0+0xc2/0xce [10124.429638][T20128] fuse: Bad value for 'fd' [10125.402501][T20125] syzkaller1: entered promiscuous mode [10125.423234][T20125] syzkaller1: entered allmulticast mode [10128.345861][ C1] vkms_vblank_simulate: vblank timer overrun [10133.665111][T20141] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2982'. [10133.967358][T20138] xt_CT: No such helper "syz1" [10134.428250][T20143] No control pipe specified [10139.540530][T20152] fuse: Bad value for 'fd' [10162.790691][T20172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10162.872279][T20172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10176.069255][T20185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10176.140044][T20185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10177.122250][T20185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2993'. [10177.152730][T20185] netlink: 'syz.3.2993': attribute type 2 has an invalid length. [10194.462043][T20219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [10194.976248][T20213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2997'. [10222.621744][T20259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3002'. [10228.481035][T20261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3004'. [10230.396930][T20272] veth0_to_team: entered promiscuous mode [10230.399910][T20272] veth0_to_team: entered allmulticast mode [10232.199791][T20272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10232.223605][T20272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10252.297634][T20294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3012'. [10252.712008][T20294] FAULT_INJECTION: forcing a failure. [10252.712008][T20294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [10252.729652][T20294] CPU: 1 UID: 0 PID: 20294 Comm: syz.3.3012 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [10252.731793][T20294] Hardware name: riscv-virtio,qemu (DT) [10252.732949][T20294] Call Trace: [10252.734013][T20294] [] dump_backtrace+0x2e/0x3c [10252.735700][T20294] [] show_stack+0x30/0x3c [10252.737141][T20294] [] dump_stack_lvl+0x12e/0x1a6 [10252.738791][T20294] [] dump_stack+0x1c/0x24 [10252.740423][T20294] [] should_fail_ex+0x3f8/0x4e0 [10252.742042][T20294] [] should_fail+0xe/0x16 [10252.743667][T20294] [] should_fail_usercopy+0x1e/0x26 [10252.745372][T20294] [] _copy_to_user+0x3e/0x25a [10252.746942][T20294] [] simple_read_from_buffer+0xd0/0x154 [10252.748662][T20294] [] proc_fail_nth_read+0x194/0x27c [10252.750450][T20294] [] vfs_read+0x1c0/0x94a [10252.751914][T20294] [] ksys_read+0x126/0x226 [10252.753394][T20294] [] __riscv_sys_read+0x6e/0x94 [10252.755060][T20294] [] syscall_handler+0x94/0x118 [10252.756618][T20294] [] do_trap_ecall_u+0x1aa/0x216 [10252.758296][T20294] [] _new_vmalloc_restore_context_a0+0xc2/0xce [10257.494912][T20303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10257.537489][T20303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10289.757832][T20308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10289.938132][T20308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10303.267040][T20308] hsr_slave_0: entered promiscuous mode [10303.390428][T20308] hsr_slave_1: entered promiscuous mode [10303.447734][T20308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10303.449164][T20308] Cannot create hsr debugfs directory [10305.346105][T20578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3021'. [10306.536278][ T34] audit: type=1326 audit(10561.986:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [10306.539565][ T34] audit: type=1326 audit(10562.016:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [10306.543243][ T34] audit: type=1326 audit(10562.016:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=199 compat=0 ip=0xdb5be code=0x7ffc0000 [10306.558659][ T34] audit: type=1326 audit(10562.046:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [10306.562288][ T34] audit: type=1326 audit(10562.046:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [10306.587916][ T34] audit: type=1326 audit(10562.076:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=269 compat=0 ip=0xdb5be code=0x7ffc0000 [10307.623120][T20308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10308.173088][T20308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10308.358321][ T34] audit: type=1326 audit(10563.846:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [10308.377966][ T34] audit: type=1326 audit(10563.866:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdb5be code=0x7ffc0000 [10308.405862][ T34] audit: type=1326 audit(10563.896:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [10308.450186][ T34] audit: type=1326 audit(10563.906:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20573 comm="syz.3.3021" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [10308.663037][T20308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10309.139013][T20308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10311.727543][T20308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [10311.852254][T20308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [10311.900044][T20308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [10312.001867][T20308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [10322.548580][T20308] 8021q: adding VLAN 0 to HW filter on device bond0 [10330.530446][T20672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10330.547519][T20672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10363.935855][T20712] netlink: 'syz.3.3034': attribute type 4 has an invalid length. [10366.357955][T20308] veth0_vlan: entered promiscuous mode [10366.911801][T20308] veth1_vlan: entered promiscuous mode [10367.967202][T20308] veth0_macvtap: entered promiscuous mode [10368.391197][T20308] veth1_macvtap: entered promiscuous mode [10371.163380][T20308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10371.172749][T20308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10371.181689][T20308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10371.187223][T20308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10379.091327][T19481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10379.903573][T19481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10380.496629][T19481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10380.921448][T19481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10390.198749][T19481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10390.382184][T19481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10390.517966][T19481] bond0 (unregistering): Released all slaves [10395.622810][T19481] hsr_slave_0: left promiscuous mode [10395.792013][T19481] hsr_slave_1: left promiscuous mode [10396.710202][T19481] veth1_macvtap: left promiscuous mode [10396.713627][T19481] veth0_macvtap: left promiscuous mode [10396.717855][T19481] veth1_vlan: left promiscuous mode [10396.720707][T19481] veth0_vlan: left promiscuous mode [10410.233319][T20747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10410.274227][T20747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10441.452271][T20838] smc: removing ib device syz2 [10457.440396][T20735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10457.680686][T20735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10473.907511][T20735] hsr_slave_0: entered promiscuous mode [10473.962542][T20735] hsr_slave_1: entered promiscuous mode [10474.060159][T20735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10474.062604][T20735] Cannot create hsr debugfs directory [10487.951818][T20735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [10488.141717][T20735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [10488.240679][T20735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [10488.390174][T20735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [10503.939805][T20735] 8021q: adding VLAN 0 to HW filter on device bond0 [10541.045162][T21121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10541.091466][T21121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10564.998867][T21121] hsr_slave_0: entered promiscuous mode [10565.030596][T21121] hsr_slave_1: entered promiscuous mode [10565.132191][T21121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10565.145858][T21121] Cannot create hsr debugfs directory [10569.858662][T20735] veth0_vlan: entered promiscuous mode [10572.180841][T20735] veth1_vlan: entered promiscuous mode [10575.962663][T21121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [10576.448220][T21121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [10576.729442][T20735] veth0_macvtap: entered promiscuous mode [10576.918671][T21121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [10577.228900][T21121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [10577.897598][T20735] veth1_macvtap: entered promiscuous mode [10583.023010][T20735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10583.100123][T20735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10583.102849][T20735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10583.137814][T20735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10595.438862][T19481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10597.171073][T19481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10598.596583][T19481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10600.493244][T19481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10615.009014][T19481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10615.613229][T19481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10615.730799][T19481] bond0 (unregistering): Released all slaves [10617.823862][T21121] 8021q: adding VLAN 0 to HW filter on device bond0 [10666.352926][T21533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10666.692637][T21533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10682.898466][T21533] hsr_slave_0: entered promiscuous mode [10682.923480][T21533] hsr_slave_1: entered promiscuous mode [10682.976641][T21533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10682.978042][T21533] Cannot create hsr debugfs directory [10703.633108][T21533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [10703.777592][T21533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [10704.059704][T21533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [10704.218652][T21533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [10706.419124][T21121] veth0_vlan: entered promiscuous mode [10707.398354][T21121] veth1_vlan: entered promiscuous mode [10710.781143][T21121] veth0_macvtap: entered promiscuous mode [10711.538625][T21121] veth1_macvtap: entered promiscuous mode [10715.872731][T21121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10715.922810][T21121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10715.925851][T21121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10715.926477][T21121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10724.510996][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [10725.269847][T21533] 8021q: adding VLAN 0 to HW filter on device bond0 [10725.542888][T21935] No control pipe specified [10745.335859][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [10748.949160][T21975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [10748.953918][T21975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [10787.612551][T21533] veth0_vlan: entered promiscuous mode [10787.791769][T21533] veth1_vlan: entered promiscuous mode [10788.193102][T21533] veth0_macvtap: entered promiscuous mode [10788.252128][T21533] veth1_macvtap: entered promiscuous mode [10788.607124][T21533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10788.608634][T21533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10788.609892][T21533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10788.611169][T21533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10858.540863][T22016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10858.680968][T22016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10868.796135][T22030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10869.028395][T22030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10887.191594][T22016] hsr_slave_0: entered promiscuous mode [10887.338238][T22016] hsr_slave_1: entered promiscuous mode [10887.439126][T22016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [10887.441662][T22016] Cannot create hsr debugfs directory [10891.260867][ T37] INFO: task syz.3.3041:20838 blocked for more than 430 seconds. [10891.262470][ T37] Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [10891.263753][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [10891.276642][ T37] task:syz.3.3041 state:D stack:0 pid:20838 tgid:20812 ppid:19682 flags:0x0000000c [10891.306133][ T37] Call Trace: [10891.307246][ T37] [] __schedule+0xdaa/0x393a [10891.308314][ T37] [] schedule+0xc4/0x324 [10891.309278][ T37] [] schedule_timeout+0x1c6/0x28a [10891.310315][ T37] [] __wait_for_common+0x1ca/0x4b6 [10891.311812][ T37] [] wait_for_completion+0x1a/0x22 [10891.313076][ T37] [] disable_device+0x1b2/0x2ba SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [10891.355479][ T37] [] __ib_unregister_device+0x28e/0x402 [10891.357638][ T37] [] ib_unregister_device_and_put+0x56/0x82 [10891.359280][ T37] [] nldev_dellink+0x212/0x314 [10891.360546][ T37] [] rdma_nl_rcv_msg+0x352/0x680 [10891.361854][ T37] [] rdma_nl_rcv_skb.constprop.0.isra.0+0x328/0x424 [10891.363425][ T37] [] rdma_nl_rcv+0x1a/0x24 [10891.415589][ T37] [] netlink_unicast+0x4f0/0x82c [10891.417089][ T37] [] netlink_sendmsg+0x864/0xdc6 [10891.418451][ T37] [] __sock_sendmsg+0xcc/0x160 [10891.419557][ T37] [] ____sys_sendmsg+0x5ce/0x79e [10891.420640][ T37] [] ___sys_sendmsg+0x144/0x1e6 [10891.421876][ T37] [] __sys_sendmsg+0x188/0x22a [10891.423361][ T37] [] __riscv_sys_sendmsg+0x70/0xa2 [10891.467683][ T37] [] syscall_handler+0x94/0x118 [10891.469075][ T37] [] do_trap_ecall_u+0x1aa/0x216 [10891.470634][ T37] [] _new_vmalloc_restore_context_a0+0xc2/0xce [10891.473138][ T37] [10891.473138][ T37] Showing all locks held in the system: [10891.556103][ T37] 1 lock held by khungtaskd/37: [10891.557518][ T37] #0: ffffffff881d0c40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x68/0x2e6 [10891.573231][ T37] 1 lock held by syslogd/2973: [10891.651706][ T37] 2 locks held by getty/3126: [10891.653545][ T37] #0: ff600000194930a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [10891.668127][ T37] #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xd7c/0x129a [10891.670993][ T37] 2 locks held by syz-executor/3159: [10891.672045][ T37] 2 locks held by kworker/u10:5/14886: [10891.673017][ T37] #0: ff60000011471148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1f38 [10891.718508][ T37] #1: ff20000000537c90 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f38 [10891.721422][ T37] 3 locks held by kworker/u10:6/18768: [10891.722510][ T37] 4 locks held by kworker/u8:2/19481: [10891.723598][ T37] #0: ff60000012289948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x848/0x1f38 [10891.750320][ T37] #1: ff20000004737c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f38 [10891.753558][ T37] #2: ffffffff895c8a70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xda/0x984 [10891.820195][ T37] #3: ff600000213406b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x3c/0x348 [10891.823183][ T37] 3 locks held by kworker/u9:4/19830: [10891.849626][ T37] 3 locks held by kworker/1:2/20182: [10891.850898][ T37] 2 locks held by syz.3.3041/20838: [10891.852221][ T37] #0: ffffffff90dce478 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x172/0x680 [10891.879120][ T37] #1: ff600000213406b8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x200/0x402 [10891.881979][ T37] 2 locks held by kworker/u9:8/21257: [10891.883226][ T37] 3 locks held by kworker/u10:8/21588: [10891.924765][ T37] #0: ff6000005cdf4a58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x278/0x393a [10891.927677][ T37] #1: ff6000005cde0688 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x22c/0x71a [10891.930570][ T37] #2: ff6000005cde2418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x86/0x22c [10891.933352][ T37] 2 locks held by syz-executor/22016: [10891.994888][ T37] 2 locks held by modprobe/22515: [10892.014660][ T37] [10892.015744][ T37] ============================================= [10892.015744][ T37] [10892.017374][ T37] NMI backtrace for cpu 0 [10892.018222][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [10892.019564][ T37] Hardware name: riscv-virtio,qemu (DT) [10892.020561][ T37] Call Trace: [10892.021182][ T37] [] dump_backtrace+0x2e/0x3c [10892.022137][ T37] [] show_stack+0x30/0x3c [10892.022953][ T37] [] dump_stack_lvl+0x12e/0x1a6 [10892.023884][ T37] [] dump_stack+0x1c/0x24 [10892.024780][ T37] [] nmi_cpu_backtrace+0x3b0/0x3b2 [10892.025729][ T37] [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 [10892.026731][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x3e [10892.027697][ T37] [] watchdog+0xcee/0x1170 [10892.028525][ T37] [] kthread+0x28c/0x3a4 [10892.029384][ T37] [] ret_from_fork+0xe/0x18 [10892.034504][ T37] Sending NMI from CPU 0 to CPUs 1: [10892.036344][ C1] NMI backtrace for cpu 1 [10892.038112][ C1] CPU: 1 UID: 0 PID: 18768 Comm: kworker/u10:6 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [10892.040162][ C1] Hardware name: riscv-virtio,qemu (DT) [10892.041896][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [10892.044313][ C1] epc : sched_balance_update_blocked_averages+0xb72/0x173e [10892.046139][ C1] ra : sched_balance_update_blocked_averages+0xe66/0x173e [10892.048999][ C1] epc : ffffffff802234b4 ra : ffffffff802237a8 sp : ff20000000017cc0 [10892.051098][ C1] gp : ffffffff899f4f80 tp : ff60000032604ec0 t0 : 28a5115b21b9eb17 [10892.052955][ C1] t1 : ffebffff0b9be948 t2 : 0000000000000028 s0 : ff20000000017e50 [10892.056020][ C1] s1 : 0000000000000000 a0 : 0000000000000001 a1 : ffffffff8663f920 [10892.057747][ C1] a2 : 0000000000000002 a3 : 0000000000000102 a4 : 0000000000000001 [10892.059557][ C1] a5 : 0000000000000000 a6 : ff60000032605a78 a7 : 1fec0000064c0b4f [10892.061295][ C1] s2 : ff6000005cdf4a58 s3 : ff20000000017de0 s4 : ff6000005cde0640 [10892.063095][ C1] s5 : ff6000005cdf5698 s6 : 0000000000000002 s7 : ff6000005cdf5400 [10892.066166][ C1] s8 : dfffffff00000000 s9 : ff6000005cdf4a40 s10: ff6000005cdf5588 [10892.067988][ C1] s11: 1fec00000b9bead3 t3 : 0000000002d2a6f1 t4 : ffebffff0b9be948 [10892.069661][ C1] t5 : ffebffff0b9be949 t6 : 0000000000000008 [10892.071194][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [10892.073125][ C1] [] sched_balance_update_blocked_averages+0xb72/0x173e [10892.075837][ C1] [] sched_balance_softirq+0x128/0x19e [10892.078727][ C1] [] handle_softirqs+0x4b2/0x132e [10892.080801][ C1] [] __do_softirq+0x12/0x1a [10892.082797][ C1] [] ___do_softirq+0x18/0x20 [10892.085038][ C1] [] call_on_irq_stack+0x32/0x40 [10892.388873][ T37] Kernel panic - not syncing: hung_task: blocked tasks [10892.390660][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [10892.391889][ T37] Hardware name: riscv-virtio,qemu (DT) [10892.392683][ T37] Call Trace: [10892.393565][ T37] [] dump_backtrace+0x2e/0x3c [10892.396138][ T37] [] show_stack+0x30/0x3c [10892.397675][ T37] [] dump_stack_lvl+0x110/0x1a6 [10892.399722][ T37] [] dump_stack+0x1c/0x24 [10892.401251][ T37] [] panic+0x38c/0x86e [10892.402235][ T37] [] watchdog+0x772/0x1170 [10892.403123][ T37] [] kthread+0x28c/0x3a4 [10892.403990][ T37] [] ret_from_fork+0xe/0x18 [10892.405813][ T37] SMP: stopping secondary CPUs [10892.409746][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:35:46 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff85636132 mhartid 0000000000000000 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e63e4 vstvec 0000000000000000 mepc ffffffff8008378a sepc ffffffff80a60180 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a145c000000c4d35 x0/zero 0000000000000000 x1/ra ffffffff802bd674 x2/sp ff20000000006880 x3/gp ffffffff899f4f80 x4/tp ff60000014af0000 x5/t0 0000000038912d9f x6/t1 ff60000014af0b70 x7/t2 0000000000000005 x8/s0 ff20000000006d30 x9/s1 ff60000019fe0dc0 x10/a0 0000000000000000 x11/a1 0000000000000000 x12/a2 0000000000f00000 x13/a3 0000000000000000 x14/a4 1ffffffff134657c x15/a5 0000000000000000 x16/a6 0000000000000000 x17/a7 0000000000040000 x18/s2 1fec00000295e160 x19/s3 ffffffff8d232be0 x20/s4 ff6000005cdbf4a0 x21/s5 ffffffff89b65060 x22/s6 ffffffff89a32be0 x23/s7 ff60000014af0b04 x24/s8 0000000000000003 x25/s9 0000000000000001 x26/s10 0000000000001fff x27/s11 ff60000014af0000 x28/t3 ff60000014af0b20 x29/t4 1fec00000295e163 x30/t5 1fec00000295e172 x31/t6 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff800750fa mhartid 0000000000000001 mstatus 0000000a000001a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e63e4 vstvec 0000000000000000 mepc ffffffff802bdbca sepc ffffffff802d5eee vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a14c1000000c4d91 x0/zero 0000000000000000 x1/ra ffffffff861d0b96 x2/sp ff20000000d67750 x3/gp ffffffff899f4f80 x4/tp ff600000126ab480 x5/t0 256862aed0bec77a x6/t1 fffffffef1012a4c x7/t2 000000000000000d x8/s0 ff20000000d67890 x9/s1 ffffffff88095260 x10/a0 0000000000000001 x11/a1 0000000000000008 x12/a2 0000000000000001 x13/a3 0000000000000000 x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 ffe3ffff001acef5 x17/a7 ff20000000d677a7 x18/s2 ffffffff87bb1ee8 x19/s3 dfffffff00000000 x20/s4 0000000000000000 x21/s5 1ffffffff0f763de x22/s6 ffffffff87bc2a68 x23/s7 ffffffff90c0f220 x24/s8 ffffffff87bb1f00 x25/s9 ffffffffffffffff x26/s10 1ffffffff135f4f8 x27/s11 0000000000000000 x28/t3 ff600000126abfa0 x29/t4 fffffffef2181e44 x30/t5 fffffffef2181e45 x31/t6 0000000000000003 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000