last executing test programs: 23m24.358816123s ago: executing program 4 (id=5): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000401000/0x3000)=nil) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x83, 0x7, 0x4f2c, 0x0, @private1, @mcast2, 0x20, 0x20, 0x4, 0x7}}) 23m23.471731174s ago: executing program 4 (id=15): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fanotify_init(0x2, 0x40000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005fdfc50821048f00deba0000000109021d00010000000084708ace9ab1f50acd56ea248c09040000010202"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff75, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f0300000da100009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6985300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x24000090) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8b4292}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x410) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080047000024000000000011907800000000000000000144040a8000000000004e2100089078125faa528474296eb9cbdfc428c95dacf0a6f478ce7f"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="c0110000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000008001e008000000008001f0001"], 0x11c0}}, 0x20004800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) getpid() mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x20, 0x4, 0x20043, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 23m20.577454423s ago: executing program 4 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x7, 0x12d880) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0xa0042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x47, r4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x62, 0x8b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000000700), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0xffffffff], [0x0, 0x0, 0xffffffffffffff01]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000200)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x0, 0x9, 0xa929, 0x4, 0x4, 0x5}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000ba2be58495f339fdd87a39528d87b5f24195539990a8f4a684e2dc7d166ec57578a3d842f34117ea5c31379d6064f22ac091d39d", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff0100000000000000000000000000010800020000000000"], 0x38}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x7) 23m5.077280809s ago: executing program 32 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x7, 0x12d880) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0xa0042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x47, r4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x62, 0x8b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000000700), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00004f3000/0x4000)=nil, 0x4000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0xffffffff], [0x0, 0x0, 0xffffffffffffff01]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000200)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x0, 0x9, 0xa929, 0x4, 0x4, 0x5}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000ba2be58495f339fdd87a39528d87b5f24195539990a8f4a684e2dc7d166ec57578a3d842f34117ea5c31379d6064f22ac091d39d", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff0100000000000000000000000000010800020000000000"], 0x38}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x7) 19m3.22148991s ago: executing program 3 (id=828): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e00000"], 0x40}}, 0xc8d4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dd:cb2e') 18m57.613072371s ago: executing program 3 (id=845): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbb396212300000008000200", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4c841}, 0x4000000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000000c0)={{0x6, @rose, 0x7}, [@null, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000f00)=0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) socket$packet(0x11, 0x3, 0x300) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r8, 0xffffd000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x401, 0x4) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="20010000"], 0x18, 0x20048000}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m47.890368375s ago: executing program 3 (id=868): socket$inet6(0xa, 0x2, 0x0) openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x80080, 0x0) socket$netlink(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x23, 0x80002, 0xfffffffd) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) r4 = fanotify_init(0x200, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008ff"], 0x0) fanotify_mark(r4, 0x8, 0x8000039, r0, 0x0) syz_io_uring_setup(0x3a65, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, 0x0, 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {}, 0x8, {0x2, 0x0, @broadcast}, 'macsec0\x00'}) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r9, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x4e20, 0x0, 0x4e20, 0xaf, 0x2, 0x20, 0x80, 0x73}, {0x6, 0x80, 0xff, 0x9, 0x9, 0x0, 0x4, 0xd}, {0x70, 0x9, 0xb, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d6, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x1, 0x0, 0x6, 0x2, 0x6, 0x6}}, 0xe8) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100"/16], 0x10}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022b0000100000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18m44.038266895s ago: executing program 3 (id=879): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = getpid() syz_pidfd_open(r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x9) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x7ffc, 0x6, 0x300, 0xfc}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x80001) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x9dab4000) connect$tipc(r4, &(0x7f0000001dc0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0xa89) 18m42.803599531s ago: executing program 3 (id=881): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xbe7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000040), 0x40001, 0x2) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x10002, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='btrfs\x00', 0xa404, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002d00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000001600050200000000060000"], 0x18}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETLOCK(r7, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9aa7, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18m42.027783125s ago: executing program 3 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 18m40.651926541s ago: executing program 33 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 18m18.4302446s ago: executing program 1 (id=949): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/5047], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r1}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = syz_usb_connect$cdc_ecm(0x2, 0x60, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x0, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xda, {{0xa, 0x24, 0x6, 0x0, 0x0, "14d2b58f38"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3ff, 0xbbf4, 0x6}, [@call_mgmt={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x2, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x3, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x2, 0x6, 0x9, 0x8}, 0x136, &(0x7f0000001a00)={0x5, 0xf, 0x136, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0xfa, 0x5}, @generic={0x49, 0x10, 0xa, "a60b91f44b06d7cc8a211ed9ae62123c031c2d50eace13f1e546d2916dba07f7558462075b6e69676c960bce0ad7c7d0667efdc75e8950250e1067dc4999d61ea81fd579ade1"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8eec9d06b0240853ec6516f48055c448"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x0, 0x5}, @generic={0xc0, 0x10, 0xb, "3db68a915bb8a8e3ba2ef45ca3c73f057ab700763eb8191e07ffcf87dedeb827422f67f2deae96dff845edcfd6e1baef31468ef6b464e6ad04d843fc0fd642494f6d7f85547a806f9dcd8dd06c17c21a852c5389fa4254f691bc13444f9d7ce007c840cb0926e6c4757703f73d865e4ef1c3adc1c659dbee5bb02f39df028421449a322bee3e98c6312214082c6b0fde925efb398fd01e93f29d73ea24e4e7462ce17ac5a5ff76d35f7a56e009bf1d80ea4ad9baccbac69eeb78436b30"}]}, 0x7, [{0x2d, &(0x7f00000003c0)=@string={0x2d, 0x3, "462312b831765b15c7b4297cf6e20fd3a144fc68d93f8d0771c3d7b267809811948e38275a2c1f8e236272"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}, {0x25, &(0x7f0000000500)=@string={0x25, 0x3, "5fb0aff0b8992c7f2bc54d3e8ffe84c4cdcf35d95876045f8b449981558dc9a27c0f6c"}}, {0xd, &(0x7f0000000540)=@string={0xd, 0x3, "585778de5ded8aaf096521"}}, {0x50, &(0x7f0000001b40)=@string={0x50, 0x3, "ca0d09f12e56f28ce630fa4f4035a2b80ad65a4cca7b5b24d0c14cf4b6535d057263bfad3bb6c0ae30d914c52815de2bfbd0f586434993dbf0c2049f39aaef608ce1262351248a1eeb72f56ee14c"}}, {0xa2, &(0x7f0000001bc0)=@string={0xa2, 0x3, "212226a9589573e620b04cbb814d42f849ecb8f7cb13860c0a593bba92a97b088e7f0272effcd564b201a1d5ec346e9114eda64ae38e33f159c127eee9d9fb4884f2b530041b381c280968e9a4bc750c748bde281f2a3e8f49a9b03306f58e127f986e9a2ed3ea07f9ce8a93df3e4ef9d1412ffb23d0925554ab16eda11448b860cea6dd4897f1bce8670b1e5a2006c28bf9cf24055f6503c1942ebf2a7d8514"}}, {0x62, &(0x7f0000001c80)=@string={0x62, 0x3, "577436e878f6bd4e74cf33a3b15bed7cebda27b6ba892a127a5eedbe8d5fb576f0b61fa585fd1071e0ae60cbe713721822fb2336661a33dcf8aaade8eafd63c6481c67d8bdcff41c7281f33ad66f3d43c0d2930ae00c9f0832ce3f45096953b9"}}]}) syz_usb_control_io(r3, &(0x7f0000001f80)={0x2c, &(0x7f0000001d80)={0x20, 0xf, 0x40, {0x40, 0x10, "fa5994258990b791248442985a377d208e077ba726c88afec13e2213ab55fcea3e2a5b44beb41a3bd2ea711cb5e716ecb419b5cf392ae626605a9776b562"}}, &(0x7f0000001e00)={0x0, 0x3, 0x40, @string={0x40, 0x3, "84ba972284befa2eb92511530e69d7567bcbc53c32619df111f76ad4bda3099beb6bfe7e0422353ffe23a9c0c9d00828b3256cceabd465394a1880981551"}}, &(0x7f0000001e80)={0x0, 0xf, 0x7a, {0x5, 0xf, 0x7a, 0x4, [@generic={0x3, 0x10, 0x4}, @generic={0x64, 0x10, 0x5, "240182e3da184d75eced2af7b0a05512273b7f5635eec90b0d2d8b9034510117a7c0f1059cf48c53fc0a382d847eb95412bfe4e829750c25a1d94ab2b4cc2bcd70dcf92ba09a99defcdb493637bf4545fd9ac7d19223568726f4340cefcdc4d870"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa8, 0x4, 0x5, 0x9, 0x4}]}}, &(0x7f0000001f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb1, 0x80, 0x5, 0x5, "5b817dbd", "65b295c4"}}, &(0x7f0000001f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe7, 0x8, 0x5, 0x4, 0x3, 0x2, 0x6}}}, &(0x7f0000002400)={0x84, &(0x7f0000001fc0)={0x0, 0xf, 0x53, "ba2aca4fa20f46caf45957ee7b1d9bd03179c2c3bd840bff97392b2c70854086a862412a50b0eb0166791466716803615bd6ddb298dd6d604554dd534590529d79552dfac7b961bda44df89d8ee9ec04e324e6"}, &(0x7f0000002040)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002080)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000020c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000002100)={0x20, 0x0, 0x8, {0x80, 0x80, [0x78]}}, &(0x7f0000002140)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000002180)={0x40, 0x9, 0x1, 0x1a}, &(0x7f00000021c0)={0x40, 0xb, 0x2, '5a'}, &(0x7f0000002200)={0x40, 0xf, 0x2, 0x5a2}, &(0x7f0000002240)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002280)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000022c0)={0x40, 0x19, 0x2, "c0a5"}, &(0x7f0000002300)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000002340)={0x40, 0x1c, 0x1}, &(0x7f0000002380)={0x40, 0x1e, 0x1, 0x40}, &(0x7f00000023c0)={0x40, 0x21, 0x1, 0x7a}}) getdents64(r2, &(0x7f0000000340)=""/79, 0x4f) getdents(r2, 0xfffffffffffffffd, 0x3b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x17, &(0x7f0000001940)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x100}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18m15.138512887s ago: executing program 1 (id=959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc451b4389d1a4fb6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') setrlimit(0x3, &(0x7f0000000180)={0x8000000000000000, 0x200}) mkdir(&(0x7f0000000440)='./file1\x00', 0x8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r3, 0x4b6a, &(0x7f0000000440)={0x200f, 0x200, 0xfff7, 0x3, 0x4, "72510080ab083f00"}) 18m8.098100033s ago: executing program 1 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(0x0, r3, &(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) mount$9p_unix(&(0x7f0000000380)='./file1\x00', &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x100000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=unix,cache=none,nodevmap,dfltuid=', @ANYRESHEX, @ANYBLOB="2c69676e6f726571762c63616368653d6d6d61702c616669643d3078306630303030303022abc95b1eb90079f4b1e77fc1838f3d", @ANYRESDEC=0x0, @ANYBLOB=',afid=0xffffffffffffffff,appraise_type=imasig,\x00']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0xe8) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x3090040, &(0x7f0000000840)={[{@verity_on}], [{@permit_directio}, {@audit}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_gt={'fowner>', r5}}, {@smackfsdef={'smackfsdef', 0x3d, '$--^&]'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_lt={'euid<', r6}}, {@pcr={'pcr', 0x3d, 0x18}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x65, 0x64, 0x62, 0x61, 0x52, 0x33, 0x66], 0x2d, [0x32, 0x36, 0x63, 0x62], 0x2d, [0x38, 0x63, 0x0, 0x65], 0x2d, [0x30, 0x39, 0x30, 0x35], 0x2d, [0x63, 0x31, 0x31, 0x34, 0x39, 0x34, 0x36, 0x31]}}}]}) 18m7.09082938s ago: executing program 1 (id=984): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r4}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r4, 0x4}}]}, 0xc4}}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000400)='./file0/../file0\x00', 0x1) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x100, 0x0, 0x0, 0x81, 0x42}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000950096867a8d74c3b5000000000000000000200000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000002340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000001cc0), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000001d00)={0x7, @raw_data="aac86da8120911bd188ad44551cf29b6dbbb4656c8e829a5a7106fcec306fb531e41bd685730b003f1a0eb9b2924b2cfef33c5ceb161f6abf522805b136fdc2bc657e87690a99d55a9d89680bfd50f761230a9fbadf987231f609711435970b8409cee72c16f5b1660dec4729d32ca44f1393729b66aa5e09d610d37d088c339091cb1f20b4690d17f19ada91901acd33c014a926d9287646d7d26783f953c1ea7e3411d473cd334a76df0e4bc02aa49e3d1bba97c9d6a71a791778882a6f16895da8758f9117a81"}) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0) 18m5.386434431s ago: executing program 1 (id=991): openat(0xffffffffffffff9c, 0x0, 0x3af3c3, 0x45) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000440)='\xde\vd\x84\f\xa8CoT\x8d*\xe9\xaf,\xfc\x91\xa8\\H\xd9u\x84\xca\xb2\x00\x8f=\xbd[f`\x0f.=\xcf\xa1\xd8\xfc\x1b} \x99\x81\xfc(x5\xa2 \xa6\xc3\xea\xb8\xdd\xad\b\x1bM\xe6]\x80Z\x00\x00\x01\x00\x00\x00\x00\x00\xdd\xfa*W.7\x84\x17y\xeeF7M\xd2+WC\xadD)\x10I|8\x9b\x15\x8e\n\"K\x9a\x10<\xed\x04\xc4\xeb\xd3\xdc\x96(\xa3\x05\adw\xa6\f\xcbTHn\xf1\xbf(\x033K\xda\xa7N.o\xd4\xe5Yc\xd0\xc2?s;M[\xb8\xb9w\xe7\xbc\xe3\x98!\xc3I\x80\xb3\xcb\xd3\xd3\xedX\x1e\x8e\xe0rE\xe9q\x82\xe3\xadI,aS\xde\xdd\\\xd9\x12bi\xc8\x8d9&\x87\x83\xa93\x98\x94i\x92\xf7\xc1;\x87a\xe8\x9c', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000005c0), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r3) 18m5.09519244s ago: executing program 1 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x2, 0xfffffffc}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 18m3.741562761s ago: executing program 34 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x2, 0xfffffffc}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1m36.368592359s ago: executing program 2 (id=3614): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m35.212803315s ago: executing program 2 (id=3615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m34.929084162s ago: executing program 2 (id=3616): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 64) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) msgget$private(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lseek(r4, 0x0, 0x4) (async) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x54000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) (async) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$addseals(r3, 0x409, 0x0) (async, rerun: 64) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x5, 0x9, "c92c26502e4f3638b659ab92d80b1331cdecbabd3d04d25da1ff3662e13f939a4bac2d29feb17568c9e8c3628c3a17c9086d5813c4feecfd2c4a8f2ec045da5b", "a96066f00d27714f9f6d53403116ccda5e1bdfc66a17db9e444fc476d51414bf", [0x8001, 0x1]}) (async, rerun: 64) fallocate(r5, 0x16, 0x9, 0x8) 1m32.518108851s ago: executing program 2 (id=3619): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x800, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000680), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xffffffff, 0xff0000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0x7f000000, 0xff, 0xffffffff], 'veth0_to_team\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x8, 0x6, 0x3}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4}, {0x3, 0x4, 0x1}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'dvmrp0\x00', 'bond_slave_0\x00', {}, {}, 0x3c, 0x6, 0x0, 0x79}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x36066e73ade5fb3e, 0xff, 0x8}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0x1, 0x9, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xffffffff, 0xffffffff], 0x0, 0xe24}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ffff0000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005a0000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r4, @ANYBLOB="00000000000000000c000000b700bf91000000000000b7020000000000008500000084000000b7000000000000009500"/71], &(0x7f00000001c0)='GPL\x00', 0x0, 0x7a, &(0x7f0000000200)=""/122, 0x40f00, 0x16, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r6, r7], 0x0, 0x10, 0x4, @void, @value}, 0x94) 1m31.870302292s ago: executing program 2 (id=3622): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000100)=0x5) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5700b1b827f600333b09d3748ee7d700", 0x10) listen(r3, 0x0) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1}}) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r5, 0x4b36) setpgid(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x3ff, 0xa2, 0x9b8a, 0x9, 0x9, 0x5, 0xd, {0x0, @in6={{0xa, 0x4e22, 0x7, @local, 0xb}}, 0xe, 0x6, 0x9f57, 0x8001, 0x9}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r6, 0x6}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file2\x00') shutdown(r3, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) 1m31.006060688s ago: executing program 2 (id=3625): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x8, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x8) bind$can_raw(r1, &(0x7f0000000240), 0x8) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @multicast, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x10, 0x2, 0x0, 0x0, "f1430b7507812d65"}}}}, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xcd, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000388d0020410e4d53bd850102feff0902120001000000000904"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x128, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0xf7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x9, 0x90}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xf}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x4, 0x80, 0x10, 0x4}, 0x70, &(0x7f0000000080)={0x5, 0xf, 0x70, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x50, 0x7, 0x0, 0xba5, 0x8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4c, 0x10, 0xa, "2d0bf7ff9fc4a4a075fe1bce6b335d2a86b10c6702b5683a61c8d605b49b4e8ac557ee6aafb6d6162d4c847b0513729ff82b891da3772a372331d7af7971e01cc797b915af1735e6f5"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0xfa, 0x6, 0x2, 0x9}, @ptm_cap={0x3}]}, 0xa, [{0xbf, &(0x7f0000000100)=@string={0xbf, 0x3, "d70ae91543067d7a007c0bdc159fe1c10cba608691d2faebb403dac49835389abc02932ecb8293547ef772e36426b86d713ced2cf09777e7ecd6619cc1216949a7bae81e392bc3948f5cc3abdf44dfb88158e10d59c4224542ffc96a1ac8458cca7aa66324fb827c4fc2860123a39293b7a40499f4b52b656919bd82bd86e743d89ec204e5b4e6e6704d279780da4ee1426f9291673e1868c4040214d21d155cd4710c2901ad33474b3edf0e2896d0b52a669832f3b1aa7ea9412efb8d"}}, {0xda, &(0x7f00000001c0)=@string={0xda, 0x3, "0454392d605bdb1cda3e1977b63eb30c21ceb2ee3770dc3f32da12d0275ba6e07740a465c433c84ff55b338eed4362b9f8cf795ee9390831b85e3df64d1bd489e50914a0f6212c2fd48356272468bc31feb01f266dc4caeaee3d29f9c5257fb0aefe93a584c38f537bdecf97fe589f0fd8b4c8cfab052e9faddecbd1aed11e6ba43ebfc8437c56748a838a28c0f51852128e24ed9a9346534d6c1e2605c1f2795a8e444e8f162873b9f3113d77cd6869a8c26a4108df54c4bc1f7d0f5fc77d1d594a890c7929b0f3212ed3c27c1a8437d514dda424d1ac43"}}, {0x55, &(0x7f00000002c0)=@string={0x55, 0x3, "c46283c54d1cb70369de574a68b539cc3400717b2c24672507e8b389108fff436a4cb316361ca8ae9676315a84beacb9427989e420ee0a2be8c79070e09e52a76e781b31318dbbebd0214d6643f8f1fe3352a6"}}, {0xa, &(0x7f0000000340)=@string={0xa, 0x3, "c34e97bb29b95d14"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81d}}, {0xce, &(0x7f00000004c0)=@string={0xce, 0x3, "d476da574a9f9c7964601e46c15cde9560c534799b1b35cdf759cd70e970d191afdb93f935413e6644f211b8102fbc526bb37b6370a2ec884ecf137bb898ff02685695a2679a105230630b00e7127c52ffeb603f3a441a023752284ad834cffb987445fd9586d7c7a82146367dd0036b4a4ae100f365ff1290e3503d0c24d56d560f3fa139b42e70ee7fe43e67c61c44911e123ffc4668a8c26530fbc696afa6d59f28a6e374c96eb4acb32192fa0e514d0aec470e18b033b3170ba6f091e13b8dcad4d5f09b36ef27f1bbec"}}]}) 1m30.095997503s ago: executing program 35 (id=3625): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x8, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x8) bind$can_raw(r1, &(0x7f0000000240), 0x8) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @multicast, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x10, 0x2, 0x0, 0x0, "f1430b7507812d65"}}}}, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xcd, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000388d0020410e4d53bd850102feff0902120001000000000904"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x128, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0xf7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x9, 0x90}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xf}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x4, 0x80, 0x10, 0x4}, 0x70, &(0x7f0000000080)={0x5, 0xf, 0x70, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x50, 0x7, 0x0, 0xba5, 0x8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4c, 0x10, 0xa, "2d0bf7ff9fc4a4a075fe1bce6b335d2a86b10c6702b5683a61c8d605b49b4e8ac557ee6aafb6d6162d4c847b0513729ff82b891da3772a372331d7af7971e01cc797b915af1735e6f5"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0xfa, 0x6, 0x2, 0x9}, @ptm_cap={0x3}]}, 0xa, [{0xbf, &(0x7f0000000100)=@string={0xbf, 0x3, "d70ae91543067d7a007c0bdc159fe1c10cba608691d2faebb403dac49835389abc02932ecb8293547ef772e36426b86d713ced2cf09777e7ecd6619cc1216949a7bae81e392bc3948f5cc3abdf44dfb88158e10d59c4224542ffc96a1ac8458cca7aa66324fb827c4fc2860123a39293b7a40499f4b52b656919bd82bd86e743d89ec204e5b4e6e6704d279780da4ee1426f9291673e1868c4040214d21d155cd4710c2901ad33474b3edf0e2896d0b52a669832f3b1aa7ea9412efb8d"}}, {0xda, &(0x7f00000001c0)=@string={0xda, 0x3, "0454392d605bdb1cda3e1977b63eb30c21ceb2ee3770dc3f32da12d0275ba6e07740a465c433c84ff55b338eed4362b9f8cf795ee9390831b85e3df64d1bd489e50914a0f6212c2fd48356272468bc31feb01f266dc4caeaee3d29f9c5257fb0aefe93a584c38f537bdecf97fe589f0fd8b4c8cfab052e9faddecbd1aed11e6ba43ebfc8437c56748a838a28c0f51852128e24ed9a9346534d6c1e2605c1f2795a8e444e8f162873b9f3113d77cd6869a8c26a4108df54c4bc1f7d0f5fc77d1d594a890c7929b0f3212ed3c27c1a8437d514dda424d1ac43"}}, {0x55, &(0x7f00000002c0)=@string={0x55, 0x3, "c46283c54d1cb70369de574a68b539cc3400717b2c24672507e8b389108fff436a4cb316361ca8ae9676315a84beacb9427989e420ee0a2be8c79070e09e52a76e781b31318dbbebd0214d6643f8f1fe3352a6"}}, {0xa, &(0x7f0000000340)=@string={0xa, 0x3, "c34e97bb29b95d14"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81d}}, {0xce, &(0x7f00000004c0)=@string={0xce, 0x3, "d476da574a9f9c7964601e46c15cde9560c534799b1b35cdf759cd70e970d191afdb93f935413e6644f211b8102fbc526bb37b6370a2ec884ecf137bb898ff02685695a2679a105230630b00e7127c52ffeb603f3a441a023752284ad834cffb987445fd9586d7c7a82146367dd0036b4a4ae100f365ff1290e3503d0c24d56d560f3fa139b42e70ee7fe43e67c61c44911e123ffc4668a8c26530fbc696afa6d59f28a6e374c96eb4acb32192fa0e514d0aec470e18b033b3170ba6f091e13b8dcad4d5f09b36ef27f1bbec"}}]}) 11.879677601s ago: executing program 0 (id=3851): unshare(0x400) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000680)="30b4", 0x2, r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, 0x0, 0x0) 10.902701998s ago: executing program 6 (id=3856): mkdir(&(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 10.846448476s ago: executing program 0 (id=3857): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r0, 0x1000, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0xfffffffe, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@dstopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r3}}}], 0x40}}], 0x2, 0x240040c4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x6, &(0x7f00000000c0)=[{0x21, 0x0, 0x0, 0xfffff00c}, {0x30, 0x6, 0x3}, {0x6, 0x0, 0xfd}, {0x8, 0x23, 0x20, 0x4}, {0x29e, 0x6, 0x7, 0x5}, {0x7, 0x9, 0x8, 0xfffffffb}]}, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 10.284503227s ago: executing program 6 (id=3858): socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000000300), 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 10.230424751s ago: executing program 0 (id=3860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) getsockopt(r3, 0x0, 0xe, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000100), 0x4000000000000b1, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 9.167677358s ago: executing program 6 (id=3862): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x2b, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x615}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x53, &(0x7f0000000480)=ANY=[@ANYBLOB="050f530005"]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x83, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x8, 0xb, 0x1, {0x22, 0x693}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x5, 0x81}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x99, 0xff, 0x7, 0x3, 0x4d94b8c8232046c9}, 0xe5, &(0x7f00000009c0)={0x5, 0xf, 0xe5, 0x3, [@generic={0xca, 0x10, 0x4, "90aeeefe1496695a2f35c392b9b5462c3785eb71702adfd6b09959ddffdce8c6114214acaf1418c929349bc0e3665c6f58bbd795d0e4250e77f927bd1c777533b36e9badd14987aa417e66580aa34c2f312f1b84128cbc9c7fa83ffe0bf422d5a27c1ca4685e6ca2b489e904e722ae2c0fa3e599baf07e416aeb363ba762d2691bc1c0cc03ca54d2e2d8001402d9572c94b50e71b519c6cccbb80c8fefc06e35ee56b2bd559eb99f5c3211da159ab1616d7e623e78f205e4783b6727e140d4a268130bcc630daa"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x3, 0x4, 0x1, 0x37}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xb, 0x5, 0xfffa, 0xa}]}, 0x2, [{0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="3e03c69b6a9a02e9019cc587679a0293366ad401471a7fb4c725f58b609fff03929736400ec3f71598825cfc320e37ca69e6806a9a5a7c0adcfe210ea766"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x425}}]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000000)="69c5e1999468fd9aa683809799615f135a98000000000000", 0x18, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250100000018000180140000006d7017746e6ca9d28230000000000000000000100002800c0001800c00010002a92eb4b870961ba40938e3bfd649dde0d9fd2567ffc8d02b8a559533dd0c839ac3702c932104464d4e5f234fcbe63e4275fd28d68ecd11dba4933cf4937b4da5bfa84f75564292be048b33eadeb5b4e5c361175fea1f4d8740e008b526e893004d167bdc3324175c9c6fdb0e5f56df19b1a7495a386d09e384a5439da7d5c0c4fe4a5fd0fc485672b7d0f280b622bd9f55555248def8a57e99c90b5994635bfb90ccd3037ce7f4a9b65307ab9d5f7aeda4fddcddfa8b65bd7f1eaa749e6954c0e117b83c8ef790fe11"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x88001, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c00)={0x0, @dev, @multicast1}, &(0x7f0000000c40)=0xc) write$sequencer(r0, &(0x7f0000000100)=[@generic={0x2}, @x={0x94, 0x7, "d724cd3b6b12"}], 0x9) unshare(0x2040400) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84880) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100697036746e6c000034000280050009000400000008000100", @ANYRES32, @ANYBLOB="060012004e240000080414000100000006000f00020000000500090089000000080004"], 0x6c}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xb6, 0x9, 0x8, 0x2, 0x2, 0x3e, 0x8, 0x3bb, 0x40, 0x2ee, 0x400, 0x3, 0x38, 0x3, 0x5, 0x75, 0x2}, [{0x0, 0x1, 0x9, 0x9, 0x8, 0x3, 0x4, 0x3}, {0x4, 0x0, 0xe63, 0x4, 0x6, 0x10001, 0x80000001, 0x5}, {0x5, 0x0, 0x6, 0x7fffffff, 0x9, 0x0, 0x3, 0x8}], "e4a3842dcbb51759d54d1eb9fe1c0eed24642e9b14f0d098c43ff95a6de87665c73f7f7b95ae1ddcf829c9999365002a279229b552ceff9e6994ac7896583d9cbbef1dc59cde2532a8b59cbd5c6fe5bd572788148e806be1cb635f98ef8a6074b714ddf11add5a3a8d941ef49dc83f19269df9b1cd85148810f5d7ccb5249cb105013fd2b33e090cd2216eca0d4af864d66743ce1a6e47f6af78d9edc17deb872bf6facee1fdc27895d69fdf0e9251b085754c0511b5c105973132a0c5ace17906db5b382278c32420beb1306436830b6b5f5eaa038178a9e63f"}, 0x1c2) write$sequencer(r0, &(0x7f00000002c0)=[@t={0x4}], 0x8) syz_usb_connect$cdc_ecm(0x4, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x351, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0xab, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x9c, 0x2, 0x2, 0x6, 0x0, 0xd3, {{0x6, 0x24, 0x6, 0x0, 0x0, "b4"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x0, 0x8}, [@country_functional={0xe, 0x24, 0x7, 0x1, 0x4, [0x1, 0x0, 0x4, 0x100]}, @dmm={0x7, 0x24, 0x14, 0x204d, 0x2}, @acm={0x4, 0x24, 0x2, 0xd}, @mbim_extended={0x8, 0x24, 0x1c, 0xc435, 0x5, 0x8}, @acm={0x4, 0x24, 0x2, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x7f, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x9, 0x1, 0xff, 0x81}, 0x3e, &(0x7f00000000c0)={0x5, 0xf, 0x3e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "c7d8b1628f3852874d52b8aa76d894d0"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x8, 0x9, 0x3ff, 0xfa}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "561208375572bf91eb43d97def8b8436"}, @ptm_cap={0x3}]}, 0x6, [{0xfb, &(0x7f0000000100)=@string={0xfb, 0x3, "7ae9f5792e9a4e4318bae6040d482a9f259301e48b2982a1c04b5439baf0a77b9e840ab650b8439b5d1d98d2f1de1236c86746463eb474db8d3ef23560d98498f8c5ee6da386baf42d58863b912d629665cda4285efeb4389a74210e281daf75620893371b6fe556df14e7304e3f72da3ba330f9f28adf79a18b6d87c328eac34f42be3255cc312e900ab3c8325cb7a9d184932e975c6639463c81bcdbe9eda862abbff2678807bf4ca923e0980d09a0eee2d9e377332dbe659ca5ad00159efdfcf2c2fa9e620d35ff5083677d8e39c952f87f6cea4810ed986fb79fd2fdd7f0b6188aaf865840a578930759ae0942d271df14ab9d8ea28503"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x430}}, {0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="5603edead3454b40191982af81ffd653f40430ffa109542bedf0a0095e7cdc7eaf8f818c305f86a2e297035eb5d5f88bd0710104ac1ec197d282a31bd0594fb4746f7c2d32417d1c1d244db12c81558f5fea4ed7974163112eb0f4633d237cbdcde11d099ef2be0b5c7a6c053542e81572c95131466ba354c05c557fb5de94f9c0f8c61d4707f3b0122b5ff0dbdf9305c4c4d7cb2e35ae1fd38961eac28d26ab55bc38ec1070215433e7ec3d8f2850c0a3d2952739398520bfe7d7dff2a78aebaacf52bc12cabac19df4fe048a5425556f3fd5612f72"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x39, &(0x7f0000000300)=@string={0x39, 0x3, "a2063fec1a86528648f402e2a8c1137d1664ca2be88bdf07822f335469c9301392083c9d7872fe9e8506c000933595b1e351ab2f3de0ee"}}, {0xfe, &(0x7f0000000580)=@string={0xfe, 0x3, "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"}}]}) 7.11286788s ago: executing program 0 (id=3867): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e258020200e01010774da000071497b00"/36], 0x0) 6.85071101s ago: executing program 8 (id=3868): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="745290251c43d0415dc108b48383e113153b8f5bc87375ab81cbba919604e67f74e42871072fab3c1329f05a247bf022cd387133febeff0d3bac0c9a4d528b5fe2e4c857844ff7309345e036bb", 0x4d}], 0x1}, 0x40010) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24", 0x31}], 0x1}, 0x4008001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000680)={'wlan0\x00', &(0x7f0000000380)=@ethtool_eee={0x44, 0x800, 0x7, 0x1, 0x0, 0x401, 0x5, 0x5, [0x5, 0x7]}}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_opts(r2, 0x29, 0x1, 0x0, 0x20) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x824c0, 0x1) mkdirat(r6, &(0x7f0000000580)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) memfd_create(&(0x7f0000000440)='-B\xd5\x9app\xfb\x8e\xea\xae\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbcz2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9;\xaa\xa9k\x00\xde\xcc\xe6\xae?r\x89\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82\x89=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\xc1C\x92+\xf3*\xe8\xb1\x87\xb8\xa4\xb6\xdb\x8b\x99bx9\x97\x9d\xa5s\xcf\xac\x92\a[k\xda\xbb\x99\xa9\xa0\xa9~\xa9o\x1fq\xf2*d\xfc\x81X\x85IC\x8bF\x06t\xba\a\xdaI\xae\xe8\x12\xdc\x8es\xa8Q+2y\xba\a)\xae\xd7g\x8fTi\xe78\xf1\x9bv\xdf\xf7t7v\xd4\xbf\xda\x010]\xeb\\\x03\xfb\xdf\xa2\xa2\xff\x0e=\xd8\xdd\xf5\xa5\xfc=r\xa0i\x13kc\x94\a\x00\xdcJDF\xef\x8eGw\xab\xb5p\xd3\xffM\xd9\xa4\x87\xaf\xec\f$\xe3\"\xb8\xf3\x83\x8cd\b\xd6\x9c? \x00\x02I9QR]\xa1\xbf\xcf2Q#(5\xda\x8bR3v\x94$L\xf0\x81\xbf\xacP\xdb\xba\x91k\xc0R\x8d', 0x3) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.367155435s ago: executing program 7 (id=3869): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000034000000090a010400000000000000000a00000008000a40000000000900020073c82031000000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) 5.738497909s ago: executing program 5 (id=3870): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a00"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace(0x420e, r1) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x3}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 5.621124403s ago: executing program 7 (id=3871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x5, 0x1, 0x63, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc0, 0x10, 0x1, 0x3}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r0, 0x3, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r2, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.608690099s ago: executing program 5 (id=3872): socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000000300), 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x8, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x9, 0x3c5b, 0x1, 0x24, 0x676, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x5, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x200008, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xe, 0x2bf, 0x6c9, 0x401, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x3, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x35, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xa, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0xffffe24b, 0x9, 0x1, 0x7, 0x3, 0x7, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7ff, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x100005, 0x5, 0x0, 0x80000001, 0x5, 0xfffffbff, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x10008, 0x4, 0x6d01, 0x1, 0x38, 0x800003, 0x200, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x80, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8000007, 0x5, 0x3, 0x80000001, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x8, 0x2, 0x14c, 0x60a7, 0x80006, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x4003, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x8, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x2, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xfdff3441, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.606416673s ago: executing program 8 (id=3873): syz_open_procfs(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000a240)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000d80)="fe", 0x1}], 0x1}}], 0x2, 0x118c0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x400000) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x28}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x108, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4.271287326s ago: executing program 8 (id=3874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000000000", @ANYRES32, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff26) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000200)='btrfs\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940), 0x400000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000980)={0xed7, r6, 0x241e62afe2e6cafb}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x19, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x10001, 0x46, &(0x7f00000006c0)=""/70, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x3, 0xff, 0xc}, 0x10, 0x0, r3, 0x5, &(0x7f00000003c0)=[r2, r2, r2, r2, r10, r11, r2, r11, r1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x1, 0x4, 0x3, 0xc}, {0x4, 0xffffffff, 0x9}, {0x0, 0x2, 0x1, 0x6}, {0x2, 0x4, 0x2, 0x3}, {0x3, 0x4, 0x7, 0x2}], 0x10, 0x7f, @void, @value}, 0x94) 4.210398872s ago: executing program 6 (id=3875): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x1e, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xe, 0x3, 0x2, 0x40, 0x7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x1fd, 0x9e, &(0x7f00000003c0)=""/158, 0x41100, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000140)=[0x1], &(0x7f0000000480)=[{0x4, 0x4, 0x5, 0x4}, {0x3, 0x1, 0x9, 0xc}, {0x5, 0x5, 0xd}, {0x2, 0x2, 0x4, 0xa}, {0x4, 0x4, 0xc, 0xf}], 0x10, 0x2, @void, @value}, 0x94) mmap(&(0x7f000065e000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r0, 0x59604000) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 4.135857848s ago: executing program 7 (id=3876): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000580)=0xb000) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4152], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20000880) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x20000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 4.135068924s ago: executing program 5 (id=3877): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x4206, &(0x7f00000000c0)={0x0, 0x3e40, 0x40, 0x2, 0x358}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd=r0}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)="c223156c2d95a8474e58d3df1b97755af8eb01f3e73a04916970bd745f9c2d42331772a25a4f47842c22a34ef4cb51df877f926cf2827992", 0x38}], 0x1, 0x0, 0x0, 0x5}, 0x20040000) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5b8}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3, 0x9, 0x2, 0x106, 0x75, 0xfffa, 0xe6]}]}, 0x48}}, 0x10) 3.763347105s ago: executing program 0 (id=3878): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xe25, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0505510, &(0x7f0000000080)) 2.949235777s ago: executing program 6 (id=3879): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) 2.78077085s ago: executing program 8 (id=3880): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500243209880bd320d98a61a90057e9bf", 0x0, 0x6, 0x0, 0x327, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0), 0x1, 0xfffffffd}, 0x50) 2.549913225s ago: executing program 6 (id=3881): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 2.29812021s ago: executing program 8 (id=3882): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioperm(0x0, 0x1, 0xffffffffffffffff) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d300000000000000800"], 0x4c}}, 0x0) 1.900220419s ago: executing program 8 (id=3884): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.890253864s ago: executing program 7 (id=3885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setuid(0xee00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x5000000) 1.601449653s ago: executing program 5 (id=3886): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) personality(0x5000002) openat$vsock(0xffffff9c, &(0x7f0000000040), 0x80400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6100330080000000ffffffffffff080211000000505050505050200000000000000000006400011003010c"], 0x80}}, 0x0) 1.374152834s ago: executing program 0 (id=3887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x8001, 0x4) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x64, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x2e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0xfffffffd, [{0x0, 0x3, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23"}]}}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1d452a4f9afef81332a6cc67496ae2b901", @ANYRES16=r4, @ANYBLOB="200029bd7000fbdbdf250500000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x100) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 1.373717457s ago: executing program 5 (id=3888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="ed080c801b6ff416d7e55632a71dbf9689", @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYBLOB="32cc1fa7d3768d29027c8cfcb68ade1aab788d91bcb42c662c8d12d20315fec663afe93d352a09ef497abf6a9ce993c8b2dce93bdf3dafae60e54dfd08dcc92613095c3efea24a14fdb7deaf0777e87ac1436bae41bc23cbbef711d44b8278ccb0467f47b77680a4ebc2a0f8364c3a8eb4695c7cc38fe3b95f6c645bfeb42c4dbd18ff1960361e8313eeecd3ff8771114bcbf23441c705de97a57386de321f338f64f76a5e4a135ad2fd44f171f2832d41265382a2", @ANYRES8, @ANYRES32, @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x87) r8 = openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0xfffffffc, @empty}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x2, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r5, 0x2) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f00000004c0)=""/86, 0x56}], 0x4, &(0x7f00000006c0)=""/210, 0xd2}}], 0x1, 0x41, &(0x7f00000005c0)={0x0, 0x3938700}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) 1.234370465s ago: executing program 7 (id=3889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) sysfs$1(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x420004008d}, 0x0) ptrace(0x10, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYBLOB="345c229266eea98c1d80585539481eeced76ecdb148c01e7754b35c556e28ff693f8b124fbd7e7b8d49c31fa65e43a8f024d4171af49bd0374b398b6db0d8833a303be4c023400fbd74bd9df6f183a584e791b5d74b8c30f8ef9295899171375cc92827c853fa8d497705d6246f196c28cca", @ANYBLOB='\x00'/11, @ANYRES32=r1, @ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000d00), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x1008001, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x811) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000600004000000000000700000085000000890000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 623.81703ms ago: executing program 5 (id=3890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[@ANYRESHEX=r8, @ANYRES32=r0, @ANYRESHEX=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x453a, 0x68b0, 0x7, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xf68}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003480)=[{{&(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000480)="cc378663638f3dbc72146d886e1e462eb3802af1f81f9fae593ade8b02ae61ea7dd6dffa2f0b2a3f06d00a4c60b5976d9894cb28b611d5823dd40a8457abbe41d238c43396a610869236ba270164ada652beb7028d87456a327f524c92fa3e3e8b959d027925a3e82292ab075558a738daec98e22e4e377e39155f3b3ccd77bf9545859375d6917020ad3872b4482d2818d1a4d9ada362cbd62d38f2afde2475a47d768c8380030bcfc337e009dd6aca61c3993048175f4e9b5825a0b9a2e97a7a2b060ba8585fa8ce24668d8223128859e9cd96a095e743dc820af043df71a205f84649bccb69c84763b62a50633b", 0xef}, {&(0x7f0000000580)="789f68de3d1624f596baa2630b4da75e75bc2c5a4ea41f1a96f554800fafa4800699cef9129d88b7623d2f1f37741f3bc8c91a0fe29f4c7dee162ac9b9f8196db40d264d9307f02b9eb24e06e9d3895710e8b43f973c076415631e2ee44583c74c611753ecede427ff9996949c5027383f6fb84d313f19a7d23069057e811b7353ff84700856f845cf719d459c283ab32e76c81c9970ad3a65e4926e4bed6e4f260b0791d1597fbdc2aafc3777b44a4e05a9110b5da5eb0a17411eae33116fa8afaf32bd6c1284568d71e8d9a277d39fa03fde65b7d0ee1da2dce509ec", 0xdd}, {&(0x7f0000000280)="53345dce835949bda0da8d8aece95a0b77960bef44f046f69b4e98bf780d94cce24d526fcab8c450d25875c65b2701cd97a33e109a84caa6d28e3004e7d6fbdce0add637d33bc392192895a441b81685ba7c32452e942950d32a758657e2bdc3a9a09d7134a025e1906737463b7fd6bcc38d75", 0x73}, {&(0x7f0000000680)="28db945dc83847a1c83e190bce639b7776bd92eb120f1eb17d092ab0f055105e0152af6eb7ddc34fd15129378e57fc8b7af733d4decbeffc57fa6d830aafb00e270391302635b335bc05dbe4889d9ed644b8bfbc8f50af1d263383bcb1181863903ae4c30eaaddc9730150923157768f243d56aa3b5decbea7", 0x79}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000700)="f6e73b602cfe825bef3b2233d9b39c35326f3cfdff3cf55c3e83b6d120dc15ed9bd79b9f96e2de066962a8b855db197dcad7c92ecb46ce01f83c4bb367a4abdac40850e213aa256b", 0x48}, {&(0x7f0000000780)="0e16a0ecff94962479cc8b3cbcc549ee6af2e41e16b5289875acbc07f69db23370f7e646a3bbee17a1638114371e83cc2427bf7b6e9fa3680e6ed90bfbadc5fa111a072b2c14a724d26b920189c0cf7d387929825f", 0x55}, {&(0x7f0000000800)="a36fcfab1b2deda10d5a1adabed99ec106670efb176c02a6ad094740d7ea20a599be8187aaa420d1a96d63cf4e51e5705bd870a25dc83584c15667e8dc176dda3626cec6650d8d3d0403413068be69aaa89a32e68208d5a981d3d3a9eaa36b934fd99233e93ec4ec8b53519bf01a03e999172a343397c5ba501d65b315bbab75baa1794fa7e5286bf1eb42efc8417efad4c93905f375f09719975e3da69104d27a6581cd2db62ef40bc669a1359849a4", 0xb0}, {&(0x7f0000000300)="4c530e78736e1efc4f8624", 0xb}, {&(0x7f0000001900)="c80b47b97c50cb4272295d0ff25faa163cc6c64a2ecca801c8143a235b1efc432c358389625d38eb761b6ee0a27ce119948ac001d8a0e33176b45eb6", 0x3c}], 0xa, 0x0, 0x0, 0x1}}, {{&(0x7f0000001a00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001a80)="8aa4cc16a4c9589190f8de5d808238d335fc4fa37db647a00862e738e9696fc208648a27dbd0160c50e262642bd11e43436a681758552e2a76d3e6815e780a62406f6e0d457059c17d6635c0851437583493df281b1b8b09ce16072f4c5bd8e97ed4f8649f12806a1eed799a77a5b2ce8b712199d482c7819208dd32e131a236be1d8f3e91d3e33b5d83f47a997f1f0eddf3e0276052e143d32a3be693f269db26dae4a97bb2981dd3aad0cbfb663c8f31ac4c22bb", 0xb5}, {&(0x7f0000001b40)="616b7a79be68863d3222eb1f8816f9e78dfe40f81acc30add784fedce19205fb244cc889fb367bc5ae109f8f22f533e8f25ef5c4b9f5db8b2eaff9d163b3f34c7fc619397c0753726f88f274c5252cd38acd0b803bdf5a8de8fa9cb25d478447a8325b6071b8a1bc9f59230f1eeb56eb0816d1c043e51735bd197e925308e4be31224ef566b492eec07ce39199b868b3da1a42b62d79a5f7044eca89e8044af78283cd43bb9d803affe29c2668f206abae67d589b6f7fff9bb28415b34ee6466da79c6ea3dd46de8524cc88981b199345bc92fabf9473f3074c321d06ffa914ce5051e26611c87f4b85fc7b4d14bf54dd72303cd197d", 0xf6}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="055a986747859fe9175b0de01dcd4384949aa24abb2e09480a6e42478234ca3d1d94ba280c22aede7f22e69788b6b19bb76e62fdccf08f897396f98e6e1b490ffeb1c4dd05f09ae797130cef00d4f93fea", 0x51}, {&(0x7f0000002cc0)="6efcfa3df0dff3bc4b1aae0d04b19c0db93dd99bbc3354146423234c0e", 0x1d}], 0x5, &(0x7f0000002d80)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r5, @ANYRES32=r8, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="00000000985fe1c71e3be855500c"], 0x148, 0x40}}, {{&(0x7f0000003280)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003300)="180d4d42594eace3f75053adfbde3396a9081e4706f0ec0c3c999cb2cfe786d5d2a5319fd0cb10a58779da2ad4f9f2cbf06681e5a4f963e2cd271c0d27c515ca994d016a45543ebed34d5fb3b4d0cd01d1424e3d1bed3f998c68e671fe9952fc7205a678c562a4a21b644a84d23ce0d4c1befa8e4a03d2a98bfb9fc9c946c804f416b53587507797681182d8a99840ac4505b8bc97", 0x95}], 0x1, &(0x7f0000003400)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x20008010}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0x0, 0xee00, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r11 = inotify_init1(0x80800) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r11, 0x8, r12) fcntl$getownex(r11, 0x10, &(0x7f0000000140)) r13 = syz_open_procfs(0x0, &(0x7f0000002f00)='net/sctp\x00') pread64(r13, &(0x7f0000000380)=""/252, 0xfc, 0xfffffffffffffffe) 0s ago: executing program 7 (id=3891): socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(0x0, 0xea9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40100c1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x3a, 0x39, 0x0, 0x18) read$FUSE(r2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x50007a2) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000220000000400"/28], 0x50) r4 = creat(&(0x7f0000000240)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) close(r4) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006311040000000000180000000000800000000700000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) kernel console output (not intermixed with test programs): 7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 1237.100481][T17397] futex_wake_op: syz.6.3190 tries to shift op by -1; fix this program [ 1237.124318][ T5828] Bluetooth: hci4: command tx timeout [ 1237.125176][T17376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.198850][ T29] audit: type=1326 audit(1739525157.709:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17393 comm="syz.2.3189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5affd8cde9 code=0x0 [ 1237.202968][T17376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.315720][T17407] 9pnet_fd: Insufficient options for proto=fd [ 1237.338459][T17376] bridge_slave_0: entered allmulticast mode [ 1237.372693][T17376] bridge_slave_0: entered promiscuous mode [ 1237.984278][T17403] netlink: 'syz.6.3190': attribute type 2 has an invalid length. [ 1237.992120][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3190'. [ 1238.031855][T17376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.062225][T17376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.083645][T17376] bridge_slave_1: entered allmulticast mode [ 1238.119848][T17376] bridge_slave_1: entered promiscuous mode [ 1238.271140][T17376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.310403][T17376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.449040][T17376] team0: Port device team_slave_0 added [ 1238.470286][T17376] team0: Port device team_slave_1 added [ 1238.572298][T17376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.591739][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.640412][T17376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.668780][T17376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.696136][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.013290][T17376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.175762][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'. [ 1239.206266][ T5828] Bluetooth: hci4: command tx timeout [ 1239.690668][T17376] hsr_slave_0: entered promiscuous mode [ 1239.709347][T17376] hsr_slave_1: entered promiscuous mode [ 1239.726756][T17376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1239.741653][T17376] Cannot create hsr debugfs directory [ 1240.704271][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1240.752939][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1241.285114][ T5828] Bluetooth: hci4: command tx timeout [ 1241.330392][T17376] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.587280][T17376] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.727818][T17376] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.772143][T17459] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3204'. [ 1241.869853][T17464] Smack: duplicate mount options [ 1241.936523][T17376] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.265240][T17480] 9pnet_fd: Insufficient options for proto=fd [ 1242.481441][T17376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1242.519802][T17376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1242.568624][T17376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1242.602214][T17376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1242.941556][T17376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.013802][T17376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.040589][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.047795][T10058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.309114][T17376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1243.333961][T17376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1243.367083][ T5828] Bluetooth: hci4: command tx timeout [ 1243.414303][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.421442][T10058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.904453][ T5828] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1244.409136][T17503] Smack: duplicate mount options [ 1245.067918][T17512] Bluetooth: MGMT ver 1.23 [ 1245.132190][T17376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.181700][T17515] FAULT_INJECTION: forcing a failure. [ 1245.181700][T17515] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.211255][T17512] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3219'. [ 1245.270224][T17515] CPU: 1 UID: 0 PID: 17515 Comm: syz.0.3220 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1245.270253][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1245.270263][T17515] Call Trace: [ 1245.270269][T17515] [ 1245.270277][T17515] dump_stack_lvl+0x241/0x360 [ 1245.270307][T17515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1245.270330][T17515] ? __pfx__printk+0x10/0x10 [ 1245.270355][T17515] ? fs_reclaim_acquire+0x93/0x130 [ 1245.270373][T17515] ? __pfx___might_resched+0x10/0x10 [ 1245.270388][T17515] ? dynamic_dname+0x141/0x1b0 [ 1245.270415][T17515] should_fail_ex+0x40a/0x550 [ 1245.270438][T17515] should_failslab+0xac/0x100 [ 1245.270459][T17515] __kmalloc_noprof+0xdd/0x4c0 [ 1245.270478][T17515] ? tomoyo_encode+0x26f/0x540 [ 1245.270498][T17515] tomoyo_encode+0x26f/0x540 [ 1245.270516][T17515] ? __pfx_sockfs_dname+0x10/0x10 [ 1245.270537][T17515] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1245.270564][T17515] tomoyo_path_number_perm+0x236/0x860 [ 1245.270586][T17515] ? __lock_acquire+0x1397/0x2100 [ 1245.270608][T17515] ? tomoyo_path_number_perm+0x206/0x860 [ 1245.270632][T17515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1245.270692][T17515] ? __fget_files+0x2a/0x410 [ 1245.270716][T17515] ? __fget_files+0x2a/0x410 [ 1245.270741][T17515] security_file_ioctl+0xc6/0x2a0 [ 1245.270766][T17515] __se_sys_ioctl+0x46/0x170 [ 1245.270792][T17515] do_syscall_64+0xf3/0x230 [ 1245.270814][T17515] ? clear_bhb_loop+0x35/0x90 [ 1245.270839][T17515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.270858][T17515] RIP: 0033:0x7fbf4f78cde9 [ 1245.270873][T17515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.270887][T17515] RSP: 002b:00007fbf505e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.270905][T17515] RAX: ffffffffffffffda RBX: 00007fbf4f9a5fa0 RCX: 00007fbf4f78cde9 [ 1245.270918][T17515] RDX: 0000400000000080 RSI: 0000000000008912 RDI: 0000000000000003 [ 1245.270929][T17515] RBP: 00007fbf505e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.270939][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.270949][T17515] R13: 0000000000000000 R14: 00007fbf4f9a5fa0 R15: 00007ffce6146668 [ 1245.270977][T17515] [ 1245.270993][T17515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1245.973310][ T29] audit: type=1326 audit(1739525166.479:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.044159][ T29] audit: type=1326 audit(1739525166.479:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.106945][ T29] audit: type=1326 audit(1739525166.509:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.160533][ T29] audit: type=1326 audit(1739525166.509:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.211350][ T29] audit: type=1326 audit(1739525166.509:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.257705][ T29] audit: type=1326 audit(1739525166.509:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.306861][ T29] audit: type=1326 audit(1739525166.509:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.352559][ T29] audit: type=1326 audit(1739525166.509:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.452056][ T29] audit: type=1326 audit(1739525166.509:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.543676][ T29] audit: type=1326 audit(1739525166.509:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17524 comm="syz.0.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbf4f78cde9 code=0x7ffc0000 [ 1246.692251][T17376] veth0_vlan: entered promiscuous mode [ 1246.756053][T17376] veth1_vlan: entered promiscuous mode [ 1246.875344][T17376] veth0_macvtap: entered promiscuous mode [ 1246.916164][T17376] veth1_macvtap: entered promiscuous mode [ 1247.464332][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.474982][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.487685][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.498608][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.691730][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.769009][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.177194][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.187771][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.202016][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.212696][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.242752][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.263770][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.282542][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.301065][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.438557][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.474057][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.493751][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.506398][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.529477][T17376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.566327][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.577881][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.588135][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.616132][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3223'. [ 1248.636401][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3223'. [ 1248.649937][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.756860][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.767508][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.777771][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.946697][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.959950][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.974685][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.113989][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.150292][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.300782][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.507172][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.708132][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.718851][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.728786][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.765018][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.804053][T17376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.984465][T17555] FAULT_INJECTION: forcing a failure. [ 1249.984465][T17555] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.998082][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.7.3228 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1249.998105][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1249.998115][T17555] Call Trace: [ 1249.998121][T17555] [ 1249.998127][T17555] dump_stack_lvl+0x241/0x360 [ 1249.998151][T17555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1249.998165][T17555] ? __pfx__printk+0x10/0x10 [ 1249.998185][T17555] should_fail_ex+0x40a/0x550 [ 1249.998199][T17555] should_failslab+0xac/0x100 [ 1249.998211][T17555] ? __get_vm_area_node+0x132/0x2d0 [ 1249.998224][T17555] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 1249.998240][T17555] __get_vm_area_node+0x132/0x2d0 [ 1249.998255][T17555] __vmalloc_node_range_noprof+0x344/0x1380 [ 1249.998269][T17555] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1249.998286][T17555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1249.998304][T17555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1249.998318][T17555] ? lockdep_hardirqs_on+0x99/0x150 [ 1249.998340][T17555] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1249.998350][T17555] __vmalloc_noprof+0x79/0x90 [ 1249.998363][T17555] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1249.998374][T17555] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1249.998384][T17555] ? bpf_prog_alloc+0x28/0x1b0 [ 1249.998395][T17555] bpf_prog_alloc+0x3a/0x1b0 [ 1249.998406][T17555] bpf_prog_load+0x7f4/0x20e0 [ 1249.998423][T17555] ? __pfx_bpf_prog_load+0x10/0x10 [ 1249.998441][T17555] ? security_bpf+0xa3/0x2a0 [ 1249.998456][T17555] ? security_bpf+0x237/0x2a0 [ 1249.998471][T17555] __sys_bpf+0x4ee/0x810 [ 1249.998482][T17555] ? __pfx___sys_bpf+0x10/0x10 [ 1249.998491][T17555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1249.998515][T17555] __x64_sys_bpf+0x7c/0x90 [ 1249.998525][T17555] do_syscall_64+0xf3/0x230 [ 1249.998537][T17555] ? clear_bhb_loop+0x35/0x90 [ 1249.998552][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.998564][T17555] RIP: 0033:0x7f91dc58cde9 [ 1249.998574][T17555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.998582][T17555] RSP: 002b:00007f91dd420038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1249.998593][T17555] RAX: ffffffffffffffda RBX: 00007f91dc7a6080 RCX: 00007f91dc58cde9 [ 1249.998599][T17555] RDX: 0000000000000090 RSI: 0000400000000b00 RDI: 0000000000000005 [ 1249.998605][T17555] RBP: 00007f91dd420090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.998611][T17555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.998617][T17555] R13: 0000000000000000 R14: 00007f91dc7a6080 R15: 00007ffc508629b8 [ 1249.998631][T17555] [ 1249.998657][T17555] syz.7.3228: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1250.287596][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.7.3228 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1250.287620][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1250.287631][T17555] Call Trace: [ 1250.287636][T17555] [ 1250.287642][T17555] dump_stack_lvl+0x241/0x360 [ 1250.287664][T17555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.287678][T17555] ? __pfx__printk+0x10/0x10 [ 1250.287695][T17555] ? __rcu_read_unlock+0xa1/0x110 [ 1250.287708][T17555] warn_alloc+0x278/0x410 [ 1250.287726][T17555] ? __pfx_warn_alloc+0x10/0x10 [ 1250.287738][T17555] ? __kasan_kmalloc+0x23/0xb0 [ 1250.287748][T17555] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 1250.287764][T17555] ? __get_vm_area_node+0x280/0x2d0 [ 1250.287780][T17555] __vmalloc_node_range_noprof+0x369/0x1380 [ 1250.287801][T17555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1250.287819][T17555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1250.287832][T17555] ? lockdep_hardirqs_on+0x99/0x150 [ 1250.287847][T17555] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1250.287858][T17555] __vmalloc_noprof+0x79/0x90 [ 1250.287871][T17555] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1250.287882][T17555] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1250.287891][T17555] ? bpf_prog_alloc+0x28/0x1b0 [ 1250.287903][T17555] bpf_prog_alloc+0x3a/0x1b0 [ 1250.287914][T17555] bpf_prog_load+0x7f4/0x20e0 [ 1250.287932][T17555] ? __pfx_bpf_prog_load+0x10/0x10 [ 1250.287949][T17555] ? security_bpf+0xa3/0x2a0 [ 1250.287965][T17555] ? security_bpf+0x237/0x2a0 [ 1250.287980][T17555] __sys_bpf+0x4ee/0x810 [ 1250.287991][T17555] ? __pfx___sys_bpf+0x10/0x10 [ 1250.288000][T17555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1250.288024][T17555] __x64_sys_bpf+0x7c/0x90 [ 1250.288033][T17555] do_syscall_64+0xf3/0x230 [ 1250.288047][T17555] ? clear_bhb_loop+0x35/0x90 [ 1250.288061][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.288073][T17555] RIP: 0033:0x7f91dc58cde9 [ 1250.288083][T17555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.288091][T17555] RSP: 002b:00007f91dd420038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1250.288102][T17555] RAX: ffffffffffffffda RBX: 00007f91dc7a6080 RCX: 00007f91dc58cde9 [ 1250.288108][T17555] RDX: 0000000000000090 RSI: 0000400000000b00 RDI: 0000000000000005 [ 1250.288115][T17555] RBP: 00007f91dd420090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.288120][T17555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.288126][T17555] R13: 0000000000000000 R14: 00007f91dc7a6080 R15: 00007ffc508629b8 [ 1250.288139][T17555] [ 1250.288161][T17555] Mem-Info: [ 1250.327169][T17376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.381393][T17555] active_anon:312 inactive_anon:7439 isolated_anon:0 [ 1250.381393][T17555] active_file:24102 inactive_file:35911 isolated_file:0 [ 1250.381393][T17555] unevictable:768 dirty:125 writeback:0 [ 1250.381393][T17555] slab_reclaimable:6607 slab_unreclaimable:122460 [ 1250.381393][T17555] mapped:33170 shmem:4272 pagetables:799 [ 1250.381393][T17555] sec_pagetables:0 bounce:0 [ 1250.381393][T17555] kernel_misc_reclaimable:0 [ 1250.381393][T17555] free:1298234 free_pcp:551 free_cma:0 [ 1250.618080][T17555] Node 0 active_anon:1248kB inactive_anon:29756kB active_file:96312kB inactive_file:143644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132660kB dirty:496kB writeback:0kB shmem:15552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12012kB pagetables:3196kB sec_pagetables:0kB all_unreclaimable? no [ 1250.651453][T17555] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1250.686404][T17555] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.714031][T17555] lowmem_reserve[]: 0 2493 2494 0 0 [ 1250.719744][T17555] Node 0 DMA32 free:1270104kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1244kB inactive_anon:29724kB active_file:95520kB inactive_file:143592kB unevictable:1536kB writepending:496kB present:3129332kB managed:2553636kB mlocked:0kB bounce:0kB free_pcp:2200kB local_pcp:840kB free_cma:0kB [ 1250.751500][T17555] lowmem_reserve[]: 0 0 0 0 0 [ 1250.756858][T17555] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.788578][T17555] lowmem_reserve[]: 0 0 0 0 0 [ 1250.793832][T17555] Node 1 Normal free:3907472kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.823120][T17555] lowmem_reserve[]: 0 0 0 0 0 [ 1250.828525][T17555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1250.842478][T17555] Node 0 DMA32: 116*4kB (UME) 724*8kB (UME) 614*16kB (UME) 617*32kB (UME) 288*64kB (UME) 174*128kB (UME) 96*256kB (ME) 95*512kB (UME) 30*1024kB (UME) 14*2048kB (UME) 259*4096kB (UM) = 1270000kB [ 1250.863078][T17555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.875741][T17555] Node 1 Normal: 198*4kB (UE) 53*8kB (UME) 41*16kB (UME) 216*32kB (UME) 95*64kB (UME) 31*128kB (UME) 16*256kB (UM) 11*512kB (UM) 2*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3907472kB [ 1250.900349][T17555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.910202][T17555] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1250.919873][T17555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.929705][T17555] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1250.939339][T17555] 64285 total pagecache pages [ 1250.944325][T17555] 0 pages in swap cache [ 1250.948554][T17555] Free swap = 124856kB [ 1250.952752][T17555] Total swap = 124996kB [ 1250.957359][T17555] 2097051 pages RAM [ 1250.961243][T17555] 0 pages HighMem/MovableOnly [ 1250.966193][T17555] 426790 pages reserved [ 1250.970410][T17555] 0 pages cma reserved [ 1251.254564][T17376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.264398][T17376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.273320][T17376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.321167][T17559] tmpfs: Bad value for 'mpol' [ 1252.052247][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.072152][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.128443][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.436693][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.551914][T17580] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3233'. [ 1255.404375][T17590] Smack: duplicate mount options [ 1257.396654][T17602] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1259.215455][T17622] netlink: 1036 bytes leftover after parsing attributes in process `syz.7.3243'. [ 1259.545225][ T2337] pvrusb2: request_firmware fatal error with code=-110 [ 1259.583824][ T2337] pvrusb2: Failure uploading firmware1 [ 1259.649351][ T2337] pvrusb2: Device initialization was not successful. [ 1259.864095][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1260.107120][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1260.264280][ T5865] pvrusb2: Device being rendered inoperable [ 1260.377553][T17636] Smack: duplicate mount options [ 1262.135097][T10678] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1262.405152][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 1262.704020][T10678] usb 3-1: Using ep0 maxpacket: 32 [ 1262.736735][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 1262.820092][T10678] usb 3-1: descriptor type invalid, skip [ 1263.027858][T10678] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 1263.165896][T10678] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1263.243187][T10678] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1263.289539][T10678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.315841][T10678] usb 3-1: Product: 〨㱡ꤿ疲嗦⸎㏁讈崘䛒峮巁敿ᮈ袃嫐㺍持귮㖦錾ྞԔ苉糽Ύﳘ햺돿ለ擔ﯵ㶤簏僔㇮㗛뱚ꢕᮉ盦罍ꦚ‷䰙㻴﹂焳䗔錰坿뀚ﳧ荢 [ 1263.573970][T10678] usb 3-1: Manufacturer: ᡸ [ 1263.578706][T10678] usb 3-1: SerialNumber: 䀁 [ 1263.600689][T17652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1263.739998][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1263.749269][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1264.984553][T10678] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 1265.005786][T10678] usb 3-1: USB disconnect, device number 33 [ 1265.044815][T10678] usblp0: removed [ 1267.496226][ T5828] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 1267.820600][T17704] loop7: detected capacity change from 0 to 16384 [ 1268.144202][T17704] loop7: detected capacity change from 16384 to 16383 [ 1268.158821][T17704] blk_print_req_error: 7 callbacks suppressed [ 1268.165083][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.174615][T17704] buffer_io_error: 7 callbacks suppressed [ 1268.180408][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.189557][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.199572][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.208297][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.217620][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.226322][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.235784][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.244204][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.253409][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.262294][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.271549][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.280385][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.289643][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.298812][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.308460][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.316801][T17704] ldm_validate_partition_table(): Disk read failed. [ 1268.324027][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.333206][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.342235][T17704] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.351519][T17704] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.361201][T17704] Dev loop7: unable to read RDB block 0 [ 1268.370291][T17704] loop7: unable to read partition table [ 1268.376092][T17704] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 1269.209967][T17721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.372633][T17731] fuse: Bad value for 'group_id' [ 1270.634122][T17731] fuse: Bad value for 'group_id' [ 1270.648000][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1270.648017][ T29] audit: type=1326 audit(1739525191.159:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17730 comm="syz.5.3274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9706b8cde9 code=0x0 [ 1274.184914][T17756] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1277.394175][ T29] audit: type=1326 audit(1739525197.899:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17779 comm="syz.7.3288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91dc58cde9 code=0x0 [ 1277.651518][T17792] dccp_invalid_packet: P.Data Offset(0) too small [ 1285.383297][T17869] loop2: detected capacity change from 0 to 7 [ 1285.474327][T17869] Dev loop2: unable to read RDB block 7 [ 1285.482365][T17869] loop2: unable to read partition table [ 1285.503465][T17869] loop2: partition table beyond EOD, truncated [ 1285.510351][T17869] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1286.664924][T17894] FAULT_INJECTION: forcing a failure. [ 1286.664924][T17894] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.678256][T17894] CPU: 0 UID: 0 PID: 17894 Comm: syz.0.3316 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1286.678303][T17894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1286.678313][T17894] Call Trace: [ 1286.678320][T17894] [ 1286.678327][T17894] dump_stack_lvl+0x241/0x360 [ 1286.678360][T17894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1286.678383][T17894] ? __pfx__printk+0x10/0x10 [ 1286.678418][T17894] should_fail_ex+0x40a/0x550 [ 1286.678442][T17894] should_failslab+0xac/0x100 [ 1286.678463][T17894] ? radix_tree_node_alloc+0x8b/0x3c0 [ 1286.678482][T17894] kmem_cache_alloc_noprof+0x70/0x380 [ 1286.678508][T17894] radix_tree_node_alloc+0x8b/0x3c0 [ 1286.678533][T17894] idr_get_free+0x296/0xab0 [ 1286.678565][T17894] idr_alloc_u32+0x195/0x330 [ 1286.678592][T17894] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1286.678618][T17894] ? __pfx_lock_acquire+0x10/0x10 [ 1286.678642][T17894] idr_alloc_cyclic+0x106/0x300 [ 1286.678667][T17894] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1286.678685][T17894] ? __radix_tree_preload+0x80/0x860 [ 1286.678703][T17894] ? __radix_tree_preload+0x80/0x860 [ 1286.678721][T17894] ? bpf_link_prime+0x4c/0x240 [ 1286.678749][T17894] bpf_link_prime+0x6b/0x240 [ 1286.678774][T17894] bpf_uprobe_multi_link_attach+0xc0c/0xdd0 [ 1286.678806][T17894] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1286.678828][T17894] ? __fget_files+0x395/0x410 [ 1286.678854][T17894] ? bpf_prog_attach_check_attach_type+0x42c/0x4f0 [ 1286.678878][T17894] link_create+0x6d7/0x870 [ 1286.678902][T17894] __sys_bpf+0x4bc/0x810 [ 1286.678921][T17894] ? __pfx___sys_bpf+0x10/0x10 [ 1286.678951][T17894] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1286.678974][T17894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1286.678995][T17894] ? do_syscall_64+0x100/0x230 [ 1286.679020][T17894] __x64_sys_bpf+0x7c/0x90 [ 1286.679036][T17894] do_syscall_64+0xf3/0x230 [ 1286.679056][T17894] ? clear_bhb_loop+0x35/0x90 [ 1286.679080][T17894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.679100][T17894] RIP: 0033:0x7fbf4f78cde9 [ 1286.679115][T17894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.679128][T17894] RSP: 002b:00007fbf505c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1286.679146][T17894] RAX: ffffffffffffffda RBX: 00007fbf4f9a6080 RCX: 00007fbf4f78cde9 [ 1286.679158][T17894] RDX: 0000000000000040 RSI: 00004000000012c0 RDI: 000000000000001c [ 1286.679168][T17894] RBP: 00007fbf505c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.679179][T17894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.679188][T17894] R13: 0000000000000001 R14: 00007fbf4f9a6080 R15: 00007ffce6146668 [ 1286.679215][T17894] [ 1286.682182][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1288.252670][T17907] tc_dump_action: action bad kind [ 1290.239305][ T29] audit: type=1326 audit(1739525210.749:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17915 comm="syz.5.3325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9706b8cde9 code=0x0 [ 1290.936753][ T5828] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1292.734019][ T5903] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1293.030601][ T5903] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1293.084197][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.144026][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.176357][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1293.227654][ T5903] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1293.266197][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.313413][ T5903] usb 6-1: config 0 descriptor?? [ 1293.555350][T17951] [U] : [ 1293.558665][T17951] [U] [ 1293.561373][T17951] [U] [ 1293.564073][T17951] [U] [ 1293.566768][T17951] [U] [ 1293.569466][T17951] [U] [ 1293.572165][T17951] [U] [ 1293.574866][T17951] [U] [ 1293.577883][T17951] [U] [ 1293.580595][T17951] [U] [ 1293.583294][T17951] [U] [ 1293.586005][T17951] [U] [ 1293.588705][T17951] [U] [ 1293.591399][T17951] [U] [ 1293.594098][T17951] [U] [ 1293.596797][T17951] [U] [ 1293.600388][T17951] [U] [ 1293.603100][T17951] [U] [ 1293.605800][T17951] [U] [ 1293.608498][T17951] [U] [ 1293.611196][T17951] [U] [ 1293.613894][T17951] [U] [ 1293.616596][T17951] [U] [ 1293.619296][T17951] [U] [ 1293.623069][T17951] [U] [ 1293.625787][T17951] [U] [ 1293.628486][T17951] [U] [ 1293.631180][T17951] [U] [ 1293.633870][T17951] [U] [ 1293.636562][T17951] [U] [ 1293.639257][T17951] [U] [ 1293.641958][T17951] [U] [ 1293.644965][T17951] [U] [ 1293.647674][T17951] [U] [ 1293.650368][T17951] [U] [ 1293.653062][T17951] [U] [ 1293.655760][T17951] [U] [ 1293.658458][T17951] [U] [ 1293.661156][T17951] [U] [ 1293.663851][T17951] [U] [ 1293.666792][T17951] [U] [ 1293.669501][T17951] [U] [ 1293.672200][T17951] [U] [ 1293.674900][T17951] [U] [ 1293.677618][T17951] [U] [ 1293.680316][T17951] [U] [ 1293.683016][T17951] [U] [ 1293.685716][T17951] [U] [ 1293.689399][T17951] [U] [ 1293.692114][T17951] [U] [ 1293.694815][T17951] [U] [ 1293.697512][T17951] [U] [ 1293.700211][T17951] [U] [ 1293.702915][T17951] [U] [ 1293.705617][T17951] [U] [ 1293.708419][T17951] [U] [ 1293.712165][T17951] [U] [ 1293.714899][T17951] [U] [ 1293.717624][T17951] [U] [ 1293.720324][T17951] [U] [ 1293.723027][T17951] [U] [ 1293.725726][T17951] [U] [ 1293.728445][T17951] [U] [ 1293.731146][T17951] [U] [ 1293.734089][T17951] [U] [ 1293.736800][T17951] [U] [ 1293.739504][T17951] [U] [ 1293.742208][T17951] [U] [ 1293.744910][T17951] [U] [ 1293.747608][T17951] [U] [ 1293.750568][T17951] [U] [ 1293.753269][T17951] [U] [ 1293.756194][T17951] [U] [ 1293.758905][T17951] [U] [ 1293.761601][T17951] [U] [ 1293.764303][T17951] [U] [ 1293.767004][T17951] [U] [ 1293.769706][T17951] [U] [ 1293.772405][T17951] [U] [ 1293.775105][T17951] [U] [ 1293.801254][T17951] [U] [ 1293.804006][T17951] [U] [ 1293.806711][T17951] [U] [ 1293.809412][T17951] [U] [ 1293.812109][T17951] [U] [ 1293.814811][T17951] [U] [ 1293.817510][T17951] [U] [ 1293.820208][T17951] [U] [ 1293.823110][T17951] [U] [ 1293.825824][T17951] [U] [ 1293.828521][T17951] [U] [ 1293.831217][T17951] [U] [ 1293.833912][T17951] [U] [ 1293.836608][T17951] [U] [ 1293.839305][T17951] [U] [ 1293.842000][T17951] [U] [ 1293.845215][T17951] [U] [ 1293.847923][T17951] [U] [ 1293.850618][T17951] [U] [ 1293.853316][T17951] [U] [ 1293.856019][T17951] [U] [ 1293.858716][T17951] [U] [ 1293.861411][T17951] [U] [ 1293.864109][T17951] [U] [ 1293.867029][T17951] [U] [ 1293.869739][T17951] [U] [ 1293.872440][T17951] [U] [ 1293.875153][T17951] [U] [ 1293.877862][T17951] [U] [ 1293.880576][T17951] [U] [ 1293.883286][T17951] [U] [ 1293.885990][T17951] [U] [ 1293.888913][T17951] [U] [ 1293.891624][T17951] [U] [ 1293.894323][T17951] [U] [ 1293.897032][T17951] [U] [ 1293.899743][T17951] [U] [ 1293.902447][T17951] [U] [ 1293.905190][T17951] [U] [ 1293.907901][T17951] [U] [ 1293.911595][T17951] [U] [ 1293.914317][T17951] [U] [ 1293.917016][T17951] [U] [ 1293.919715][T17951] [U] [ 1293.922414][T17951] [U] [ 1293.925119][T17951] [U] [ 1293.927821][T17951] [U] [ 1294.086260][T17938] [U] [ 1294.155460][ T5903] holtek_kbd 0003:04D9:A055.000C: item fetching failed at offset 5/7 [ 1294.174547][ T5903] holtek_kbd 0003:04D9:A055.000C: probe with driver holtek_kbd failed with error -22 [ 1295.125732][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3338'. [ 1295.129994][ T29] audit: type=1326 audit(1739525215.639:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17972 comm="syz.0.3341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x0 [ 1295.134888][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3338'. [ 1296.076981][ T5865] usb 6-1: USB disconnect, device number 38 [ 1296.309771][T17991] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1296.318002][T17991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1296.329922][T17991] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1296.338300][T17991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1296.464371][T17990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3346'. [ 1296.964626][T17994] fuse: Bad value for 'fd' [ 1296.994065][ T29] audit: type=1326 audit(1739525217.499:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17993 comm="syz.2.3347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5affd8cde9 code=0x0 [ 1299.124336][ T5865] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1299.297125][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1299.362369][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1299.498052][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1299.556903][ T29] audit: type=1326 audit(1739525220.069:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18017 comm="syz.7.3355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91dc58cde9 code=0x0 [ 1299.564165][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1299.606395][ T5865] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1299.620297][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.691935][ T5865] usb 1-1: config 0 descriptor?? [ 1301.281094][ T5865] usbhid 1-1:0.0: can't add hid device: -71 [ 1301.288066][ T5865] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1301.343186][ T5865] usb 1-1: USB disconnect, device number 42 [ 1301.914112][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3362'. [ 1301.923781][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3362'. [ 1302.004891][T18044] Smack: duplicate mount options [ 1302.413356][T18051] overlayfs: missing 'lowerdir' [ 1303.305109][T18061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1304.301662][ T29] audit: type=1326 audit(1739525224.799:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18071 comm="syz.7.3369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91dc58cde9 code=0x0 [ 1304.444731][T18076] dccp_invalid_packet: P.Data Offset(0) too small [ 1305.863112][T18088] Smack: duplicate mount options [ 1306.265539][T18098] Smack: duplicate mount options [ 1307.002265][T18108] loop8: detected capacity change from 0 to 7 [ 1307.011821][T18108] Dev loop8: unable to read RDB block 7 [ 1307.019961][T18108] loop8: unable to read partition table [ 1307.030106][T18108] loop8: partition table beyond EOD, truncated [ 1307.169783][T18108] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1307.169783][T18108] ) failed (rc=-5) [ 1307.270138][T18112] netlink: 'syz.2.3383': attribute type 29 has an invalid length. [ 1307.362338][T18112] netlink: 'syz.2.3383': attribute type 29 has an invalid length. [ 1307.914881][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1307.960678][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1311.941683][T18152] Smack: duplicate mount options [ 1312.065996][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1312.142296][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1315.779718][T15905] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1316.519706][T15905] usb 1-1: Using ep0 maxpacket: 16 [ 1316.614131][T15905] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1316.622358][T15905] usb 1-1: config 0 has no interface number 0 [ 1316.689750][T15905] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1316.773630][T15905] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1316.855718][T15905] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1316.884065][T15905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.903962][T15905] usb 1-1: Product: syz [ 1316.908262][T15905] usb 1-1: Manufacturer: syz [ 1316.953408][T15905] usb 1-1: SerialNumber: syz [ 1316.973235][ T5865] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 1317.204565][T15905] usb 1-1: config 0 descriptor?? [ 1317.213458][T18189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1317.240686][T18189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1317.317457][ T5828] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1317.360750][ T5865] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.437768][ T5865] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1317.540305][T18189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1317.554002][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1317.565354][T18189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1317.594258][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1317.624087][ T5865] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1317.676959][ T5865] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1317.694129][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1317.714413][ T5865] usb 8-1: Product: syz [ 1317.718668][ T5865] usb 8-1: Manufacturer: syz [ 1317.723278][ T5865] usb 8-1: SerialNumber: syz [ 1317.753478][ T5865] usb 8-1: config 0 descriptor?? [ 1317.986664][ T5865] radio-si470x 8-1:0.0: DeviceID=0x9b00 ChipID=0xe384 [ 1318.034244][T16034] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1318.302322][T15905] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1318.361201][T15905] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1318.526745][T15905] asix 1-1:0.251: probe with driver asix failed with error -71 [ 1318.819567][ T5865] radio-si470x 8-1:0.0: software version 170, hardware version 170 [ 1318.833755][ T5865] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1318.853984][ T5865] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 1318.894160][ T5865] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1318.914234][T16034] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1318.934246][ T5865] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 1318.937289][T15905] usb 1-1: USB disconnect, device number 43 [ 1318.951614][T16034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.993195][ T5865] usb 8-1: USB disconnect, device number 47 [ 1319.000453][T16034] usb 6-1: config 0 descriptor?? [ 1319.016995][T16034] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1319.517957][T18222] Smack: duplicate mount options [ 1319.985732][T16034] usb 6-1: USB disconnect, device number 39 [ 1320.797990][T18234] 9pnet_fd: Insufficient options for proto=fd [ 1321.185833][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1321.194844][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1323.034161][ T5865] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 1323.655730][ T5865] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1323.683067][ T5865] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1323.734204][ T5865] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1323.796236][ T5865] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1323.826656][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1323.874170][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1323.924247][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1325.852290][ T5865] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1325.872379][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.916553][ T5865] usb 6-1: config 0 descriptor?? [ 1325.924374][ T5865] usb 6-1: can't set config #0, error -71 [ 1325.946068][ T5865] usb 6-1: USB disconnect, device number 40 [ 1326.295478][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1326.304644][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1328.882600][T16034] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1329.053361][T16034] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1329.064316][T16034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.090786][T16034] usb 6-1: Product: syz [ 1329.102038][T16034] usb 6-1: Manufacturer: syz [ 1329.143579][T16034] usb 6-1: SerialNumber: syz [ 1329.150296][T16034] usb 6-1: config 0 descriptor?? [ 1329.299075][T16034] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1330.202284][T18336] netlink: 'syz.7.3448': attribute type 29 has an invalid length. [ 1330.214254][T16034] usb 6-1: USB disconnect, device number 41 [ 1330.264557][T18337] netlink: 'syz.7.3448': attribute type 29 has an invalid length. [ 1330.562825][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3450'. [ 1330.571831][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3450'. [ 1331.954092][T15905] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1332.165076][T15905] usb 1-1: Using ep0 maxpacket: 8 [ 1332.501794][T15905] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1332.758750][T15905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.769775][T15905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1332.782881][T15905] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1332.792100][T15905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.825379][T15905] usb 1-1: config 0 descriptor?? [ 1333.728352][T15905] logitech 0003:046D:C298.000D: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 1333.772679][T15905] logitech 0003:046D:C298.000D: no inputs found [ 1333.817302][T18382] fuse: Invalid rootmode [ 1334.393019][ T29] audit: type=1326 audit(1739525254.889:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18380 comm="syz.7.3461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91dc58cde9 code=0x0 [ 1334.524810][T15905] usb 1-1: USB disconnect, device number 44 [ 1334.924707][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3462'. [ 1334.933619][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3462'. [ 1335.654161][ T29] audit: type=1326 audit(1739525256.159:273): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=18397 comm="syz.7.3465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91dc58cde9 code=0x0 [ 1335.846034][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3465'. [ 1340.002851][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1340.011936][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1341.674642][T18444] Smack: duplicate mount options [ 1344.741222][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 1345.005030][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3490'. [ 1346.503933][ T29] audit: type=1326 audit(1739525266.969:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1346.587456][ T29] audit: type=1326 audit(1739525266.969:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1346.788205][ T29] audit: type=1326 audit(1739525266.969:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1346.847588][ T29] audit: type=1326 audit(1739525266.969:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1347.243978][ T29] audit: type=1326 audit(1739525266.969:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1347.352188][ T29] audit: type=1326 audit(1739525266.969:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1347.411884][ T29] audit: type=1326 audit(1739525266.969:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1347.565053][T18522] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3498'. [ 1347.595923][ T29] audit: type=1326 audit(1739525266.969:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1347.677242][ T29] audit: type=1326 audit(1739525266.969:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1347.770491][ T29] audit: type=1326 audit(1739525266.969:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18502 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x7fc00000 [ 1347.984227][T15905] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1348.138313][T15905] usb 6-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef [ 1348.314963][T15905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.323012][T15905] usb 6-1: Product: syz [ 1348.327501][T15905] usb 6-1: Manufacturer: syz [ 1348.333420][T15905] usb 6-1: SerialNumber: syz [ 1349.184563][T15905] usb 6-1: config 0 descriptor?? [ 1349.239571][T15905] gspca_main: 04a5:3035 too many config [ 1349.842992][T15905] usb 6-1: USB disconnect, device number 42 [ 1350.052523][T18540] team_slave_0: entered promiscuous mode [ 1350.058968][T18540] team_slave_1: entered promiscuous mode [ 1350.078585][T18540] macsec1: entered promiscuous mode [ 1350.092033][T18540] team0: entered promiscuous mode [ 1350.103428][T18540] macsec1: entered allmulticast mode [ 1350.111770][T18540] team0: entered allmulticast mode [ 1350.117312][T18540] team_slave_0: entered allmulticast mode [ 1350.123327][T18540] team_slave_1: entered allmulticast mode [ 1350.133488][T18540] team0: left allmulticast mode [ 1350.144238][T18540] team_slave_0: left allmulticast mode [ 1350.160425][T18540] team_slave_1: left allmulticast mode [ 1350.177256][T18540] team0: left promiscuous mode [ 1350.191437][T18540] team_slave_0: left promiscuous mode [ 1350.196983][T18540] team_slave_1: left promiscuous mode [ 1352.281724][T18564] Invalid source name [ 1352.407073][T18564] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1352.916538][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3516'. [ 1354.709279][T18583] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1354.767560][T18583] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3519'. [ 1354.807744][T18583] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3519'. [ 1355.215061][T18590] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1355.222124][T18590] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1355.319980][T18590] vhci_hcd vhci_hcd.0: Device attached [ 1355.544210][T18592] vhci_hcd: connection closed [ 1355.554536][T10678] vhci_hcd: vhci_device speed not set [ 1355.637816][T12657] vhci_hcd: stop threads [ 1355.693809][T12657] vhci_hcd: release socket [ 1356.194801][T12657] vhci_hcd: disconnect device [ 1356.259380][T10678] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1356.318031][T10678] usb 47-1: enqueue for inactive port 0 [ 1356.415792][T10678] vhci_hcd: vhci_device speed not set [ 1356.851676][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1358.894057][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 1359.174060][T10678] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1359.347727][T10678] usb 6-1: Using ep0 maxpacket: 32 [ 1359.355002][T10678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.456002][T10678] usb 6-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 1359.567137][T10678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.595049][T10678] usb 6-1: config 0 descriptor?? [ 1360.670293][T10678] wacom 0003:056A:032C.000E: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.5-1/input0 [ 1360.827864][T15905] usb 6-1: USB disconnect, device number 43 [ 1361.325292][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1361.325313][ T29] audit: type=1326 audit(1739525281.819:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18643 comm="syz.0.3538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf4f78cde9 code=0x0 [ 1361.625366][T18653] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3539'. [ 1362.853376][T18665] dccp_invalid_packet: P.Data Offset(0) too small [ 1363.414132][T10678] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1364.338759][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1364.694994][T10678] usb 7-1: Using ep0 maxpacket: 32 [ 1364.942887][T10678] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1364.964098][T10678] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1364.976315][T10678] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1365.010092][T10678] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1365.044362][T10678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.072965][T10678] usb 7-1: Product: syz [ 1365.077421][T10678] usb 7-1: Manufacturer: syz [ 1365.092839][T10678] usb 7-1: SerialNumber: syz [ 1365.769183][T18663] netlink: 'syz.6.3542': attribute type 9 has an invalid length. [ 1366.852070][T10678] usb 7-1: 0:2 : does not exist [ 1366.886183][ T5828] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1366.913808][T10678] usb 7-1: USB disconnect, device number 51 [ 1366.977639][T18698] fuse: Bad value for 'user_id' [ 1366.982645][T18698] fuse: Bad value for 'user_id' [ 1367.036872][ T29] audit: type=1326 audit(1739525287.549:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18697 comm="syz.5.3554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9706b8cde9 code=0x0 [ 1367.191683][T18701] FAULT_INJECTION: forcing a failure. [ 1367.191683][T18701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.214221][T18701] CPU: 1 UID: 0 PID: 18701 Comm: syz.0.3555 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1367.214250][T18701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1367.214261][T18701] Call Trace: [ 1367.214267][T18701] [ 1367.214274][T18701] dump_stack_lvl+0x241/0x360 [ 1367.214307][T18701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1367.214330][T18701] ? __pfx__printk+0x10/0x10 [ 1367.214354][T18701] ? __pfx_lock_release+0x10/0x10 [ 1367.214382][T18701] should_fail_ex+0x40a/0x550 [ 1367.214405][T18701] _copy_from_user+0x2d/0xb0 [ 1367.214423][T18701] copy_msghdr_from_user+0xae/0x680 [ 1367.214444][T18701] ? __pfx___might_resched+0x10/0x10 [ 1367.214465][T18701] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1367.214483][T18701] ? set_normalized_timespec64+0x160/0x1e0 [ 1367.214508][T18701] ? do_recvmmsg+0x44e/0xab0 [ 1367.214524][T18701] ? __might_fault+0xaa/0x120 [ 1367.214552][T18701] do_recvmmsg+0x3bd/0xab0 [ 1367.214579][T18701] ? __pfx_do_recvmmsg+0x10/0x10 [ 1367.214621][T18701] ? __pfx___might_resched+0x10/0x10 [ 1367.214638][T18701] ? __might_fault+0xaa/0x120 [ 1367.214660][T18701] ? __pfx_lock_release+0x10/0x10 [ 1367.214680][T18701] ? vfs_write+0x7fa/0xd10 [ 1367.214710][T18701] ? get_timespec64+0x19c/0x280 [ 1367.214743][T18701] __x64_sys_recvmmsg+0x1b8/0x250 [ 1367.214762][T18701] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1367.214781][T18701] ? do_syscall_64+0x100/0x230 [ 1367.214805][T18701] ? do_syscall_64+0xb6/0x230 [ 1367.214827][T18701] do_syscall_64+0xf3/0x230 [ 1367.214847][T18701] ? clear_bhb_loop+0x35/0x90 [ 1367.214871][T18701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.214891][T18701] RIP: 0033:0x7fbf4f78cde9 [ 1367.214905][T18701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.214919][T18701] RSP: 002b:00007fbf505e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1367.214937][T18701] RAX: ffffffffffffffda RBX: 00007fbf4f9a5fa0 RCX: 00007fbf4f78cde9 [ 1367.214949][T18701] RDX: 04000000000003b4 RSI: 00004000000037c0 RDI: 0000000000000003 [ 1367.214960][T18701] RBP: 00007fbf505e7090 R08: 0000400000003700 R09: 0000000000000000 [ 1367.214971][T18701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.214981][T18701] R13: 0000000000000000 R14: 00007fbf4f9a5fa0 R15: 00007ffce6146668 [ 1367.215006][T18701] [ 1368.860533][T18716] FAULT_INJECTION: forcing a failure. [ 1368.860533][T18716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.896804][T18716] CPU: 0 UID: 0 PID: 18716 Comm: syz.6.3560 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1368.896832][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1368.896843][T18716] Call Trace: [ 1368.896849][T18716] [ 1368.896856][T18716] dump_stack_lvl+0x241/0x360 [ 1368.896888][T18716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1368.896910][T18716] ? __pfx__printk+0x10/0x10 [ 1368.896938][T18716] ? snprintf+0xda/0x120 [ 1368.896968][T18716] should_fail_ex+0x40a/0x550 [ 1368.896991][T18716] _copy_to_user+0x31/0xb0 [ 1368.897011][T18716] simple_read_from_buffer+0xca/0x150 [ 1368.897034][T18716] proc_fail_nth_read+0x1e9/0x250 [ 1368.897056][T18716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1368.897078][T18716] ? rw_verify_area+0x243/0x630 [ 1368.897100][T18716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1368.897120][T18716] vfs_read+0x1f8/0xb40 [ 1368.897145][T18716] ? fdget_pos+0x254/0x320 [ 1368.897166][T18716] ? __pfx___mutex_lock+0x10/0x10 [ 1368.897188][T18716] ? __pfx_vfs_read+0x10/0x10 [ 1368.897213][T18716] ? __fget_files+0x2a/0x410 [ 1368.897234][T18716] ? __fget_files+0x395/0x410 [ 1368.897253][T18716] ? __fget_files+0x2a/0x410 [ 1368.897281][T18716] ksys_read+0x18f/0x2b0 [ 1368.897299][T18716] ? __pfx_ksys_read+0x10/0x10 [ 1368.897315][T18716] ? do_syscall_64+0x100/0x230 [ 1368.897340][T18716] ? do_syscall_64+0xb6/0x230 [ 1368.897363][T18716] do_syscall_64+0xf3/0x230 [ 1368.897384][T18716] ? clear_bhb_loop+0x35/0x90 [ 1368.897406][T18716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.897426][T18716] RIP: 0033:0x7f2aaff8b7fc [ 1368.897441][T18716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1368.897454][T18716] RSP: 002b:00007f2ab0e6b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1368.897473][T18716] RAX: ffffffffffffffda RBX: 00007f2ab01a6080 RCX: 00007f2aaff8b7fc [ 1368.897485][T18716] RDX: 000000000000000f RSI: 00007f2ab0e6b0a0 RDI: 0000000000000005 [ 1368.897495][T18716] RBP: 00007f2ab0e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.897505][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.897515][T18716] R13: 0000000000000000 R14: 00007f2ab01a6080 R15: 00007fff57d4b0b8 [ 1368.897542][T18716] [ 1369.467698][T10678] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1369.714178][T10678] usb 1-1: Using ep0 maxpacket: 32 [ 1369.726809][T10678] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1370.772435][T10678] usb 1-1: config 0 has no interface number 0 [ 1370.881415][T10678] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1370.994107][T10678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.003545][T10678] usb 1-1: Product: syz [ 1371.023924][T10678] usb 1-1: Manufacturer: syz [ 1371.028772][T10678] usb 1-1: SerialNumber: syz [ 1371.086660][T10678] usb 1-1: config 0 descriptor?? [ 1371.126721][T10678] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1371.264341][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3568'. [ 1371.308087][T10678] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1371.321969][T18744] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1371.331985][T10678] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1371.519785][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 48 [ 1371.568763][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3573'. [ 1371.748922][T18718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.758069][T18718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.100316][T16034] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1372.466871][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1372.467290][ T5865] usb 1-1: USB disconnect, device number 45 [ 1372.489454][ T5865] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1372.528048][ T5865] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1372.553242][ T5865] quatech2 1-1:0.51: device disconnected [ 1372.711460][T16034] usb 3-1: Using ep0 maxpacket: 16 [ 1372.734975][T16034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.798852][T16034] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.447736][T16034] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1373.518736][T16034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.529635][T16034] usb 3-1: config 0 descriptor?? [ 1374.105244][T16034] razer 0003:1532:010E.000F: unknown main item tag 0x0 [ 1374.122807][T16034] razer 0003:1532:010E.000F: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 1374.926290][T16034] usb 3-1: USB disconnect, device number 34 [ 1378.215964][T18801] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3587'. [ 1378.498164][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3590'. [ 1378.547708][T18814] FAULT_INJECTION: forcing a failure. [ 1378.547708][T18814] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.574083][T18814] CPU: 0 UID: 0 PID: 18814 Comm: syz.7.3592 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1378.574112][T18814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1378.574123][T18814] Call Trace: [ 1378.574130][T18814] [ 1378.574138][T18814] dump_stack_lvl+0x241/0x360 [ 1378.574171][T18814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.574195][T18814] ? __pfx__printk+0x10/0x10 [ 1378.574221][T18814] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1378.574243][T18814] ? __pfx___might_resched+0x10/0x10 [ 1378.574267][T18814] should_fail_ex+0x40a/0x550 [ 1378.574291][T18814] should_failslab+0xac/0x100 [ 1378.574313][T18814] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1378.574334][T18814] ? __alloc_skb+0x1c3/0x440 [ 1378.574361][T18814] __alloc_skb+0x1c3/0x440 [ 1378.574389][T18814] ? __pfx___alloc_skb+0x10/0x10 [ 1378.574412][T18814] ? tipc_node_find+0x90/0x5a0 [ 1378.574440][T18814] tipc_msg_build+0x150/0x1070 [ 1378.574472][T18814] ? tipc_node_find+0x42f/0x5a0 [ 1378.574495][T18814] ? __pfx_tipc_msg_build+0x10/0x10 [ 1378.574528][T18814] ? tipc_node_get_mtu+0x228/0x2d0 [ 1378.574551][T18814] __tipc_sendmsg+0x1e61/0x35e0 [ 1378.574591][T18814] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1378.574613][T18814] ? ima_get_action+0x75/0xb0 [ 1378.574642][T18814] ? __pfx_validate_chain+0x10/0x10 [ 1378.574674][T18814] ? mark_lock+0x9a/0x360 [ 1378.574695][T18814] ? __lock_acquire+0x1397/0x2100 [ 1378.574730][T18814] ? mark_lock+0x9a/0x360 [ 1378.574753][T18814] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1378.574774][T18814] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1378.574804][T18814] ? __local_bh_enable_ip+0x168/0x200 [ 1378.574826][T18814] ? __pfx_woken_wake_function+0x10/0x10 [ 1378.574848][T18814] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1378.574869][T18814] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1378.574895][T18814] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1378.574915][T18814] tipc_sendmsg+0x55/0x70 [ 1378.574937][T18814] __sock_sendmsg+0x221/0x270 [ 1378.574960][T18814] ____sys_sendmsg+0x52a/0x7e0 [ 1378.574993][T18814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1378.575009][T18814] ? __fget_files+0x2a/0x410 [ 1378.575032][T18814] ? __fget_files+0x2a/0x410 [ 1378.575062][T18814] __sys_sendmmsg+0x36a/0x720 [ 1378.575090][T18814] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1378.575119][T18814] ? __pfx_lock_release+0x10/0x10 [ 1378.575137][T18814] ? kstrtouint_from_user+0x128/0x190 [ 1378.575184][T18814] ? ksys_write+0x22a/0x2b0 [ 1378.575201][T18814] ? __pfx_lock_release+0x10/0x10 [ 1378.575226][T18814] ? sb_end_write+0xe9/0x1c0 [ 1378.575248][T18814] ? vfs_write+0x7fa/0xd10 [ 1378.575266][T18814] ? __mutex_unlock_slowpath+0x227/0x800 [ 1378.575316][T18814] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1378.575339][T18814] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1378.575361][T18814] ? do_syscall_64+0x100/0x230 [ 1378.575386][T18814] __x64_sys_sendmmsg+0xa0/0xb0 [ 1378.575405][T18814] do_syscall_64+0xf3/0x230 [ 1378.575427][T18814] ? clear_bhb_loop+0x35/0x90 [ 1378.575451][T18814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.575472][T18814] RIP: 0033:0x7f91dc58cde9 [ 1378.575488][T18814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1378.575500][T18814] RSP: 002b:00007f91dd441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1378.575518][T18814] RAX: ffffffffffffffda RBX: 00007f91dc7a5fa0 RCX: 00007f91dc58cde9 [ 1378.575529][T18814] RDX: 0000000000000300 RSI: 0000400000002f40 RDI: 0000000000000003 [ 1378.575539][T18814] RBP: 00007f91dd441090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.575549][T18814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.575559][T18814] R13: 0000000000000000 R14: 00007f91dc7a5fa0 R15: 00007ffc508629b8 [ 1378.575584][T18814] [ 1378.947262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.236411][T18821] Invalid source name [ 1379.249130][T18821] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1380.874013][ T9950] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1381.034970][ T9950] usb 6-1: Using ep0 maxpacket: 16 [ 1381.051391][ T9950] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1381.087912][ T9950] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1381.116743][ T9950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1381.129088][ T9950] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.147276][ T9950] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1381.157641][ T9950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.167108][ T9950] usb 6-1: Product: syz [ 1381.171313][ T9950] usb 6-1: Manufacturer: syz [ 1381.177756][ T9950] usb 6-1: SerialNumber: syz [ 1381.186776][ T9950] usb 6-1: config 0 descriptor?? [ 1381.444699][ T9950] appledisplay: Apple Cinema Display connected [ 1381.970655][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1381.994302][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1382.003629][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1382.073678][T18840] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1382.198647][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1382.249741][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1382.289079][ T5913] usb 6-1: USB disconnect, device number 44 [ 1382.289215][ C1] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1382.315381][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1382.340113][ T5913] appledisplay: Apple Cinema Display disconnected [ 1382.381253][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1382.398770][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1383.405038][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1383.413588][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1383.487721][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1383.583068][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1383.594434][T18852] Smack: duplicate mount options [ 1383.605318][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1383.633334][T18840] syzkaller0 speed is unknown, defaulting to 1000 [ 1384.095939][T18864] loop2: detected capacity change from 0 to 7 [ 1385.002428][T18864] Dev loop2: unable to read RDB block 7 [ 1385.028919][T18864] loop2: unable to read partition table [ 1385.056507][T18864] loop2: partition table beyond EOD, truncated [ 1385.064040][T18864] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1385.266369][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3611'. [ 1389.807525][T18909] Smack: duplicate mount options [ 1392.214755][T18873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.464559][T18873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.138423][T18873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.341329][T18873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.474236][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1394.492639][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1394.501572][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1394.509569][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1394.523688][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1394.532226][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1395.183668][T18947] lo speed is unknown, defaulting to 1000 [ 1395.249134][T18873] bridge_slave_1: left allmulticast mode [ 1395.274081][T18873] bridge_slave_1: left promiscuous mode [ 1395.302445][T18873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.498912][T18964] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1395.691142][T18873] bridge_slave_0: left allmulticast mode [ 1395.837412][T18873] bridge_slave_0: left promiscuous mode [ 1396.011957][T18873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.344094][T17357] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1396.527948][T17357] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1396.548873][T17357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1396.576452][T17357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1396.834926][ T5828] Bluetooth: hci3: command tx timeout [ 1396.848432][T17357] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1396.875461][T17357] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1396.899509][T17357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.929507][T17357] usb 6-1: config 0 descriptor?? [ 1396.939020][T18965] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1397.462335][T17357] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 1397.472362][T17357] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1397.491146][T17357] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1397.921575][T18965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.026468][T18965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.071695][T18873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.137878][T18873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.142045][ T5903] usb 6-1: USB disconnect, device number 45 [ 1398.161621][T18873] bond0 (unregistering): Released all slaves [ 1398.191061][T18947] syzkaller0 speed is unknown, defaulting to 1000 [ 1398.484720][T18947] chnl_net:caif_netlink_parms(): no params data found [ 1398.634013][T17357] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1398.884032][ T5828] Bluetooth: hci3: command tx timeout [ 1399.495518][T17357] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.509579][T17357] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1399.518588][T17357] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1399.533982][T17357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.542069][T17357] usb 7-1: Product: syz [ 1399.566557][T17357] usb 7-1: Manufacturer: syz [ 1399.574116][T17357] usb 7-1: SerialNumber: syz [ 1399.593330][T17357] usb 7-1: config 0 descriptor?? [ 1399.601269][T17357] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1399.630715][T17357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1399.651022][T17357] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1399.664024][T17357] usb 7-1: media controller created [ 1399.703056][T17357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.812056][T18999] Smack: duplicate mount options [ 1399.831577][T18984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.954486][T18984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.424161][T17357] DVB: Unable to find symbol tda10046_attach() [ 1400.430635][T17357] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1400.466290][T17357] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1400.505127][T18947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.665786][T18947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.937831][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 1401.631284][ T5828] Bluetooth: hci3: command tx timeout [ 1401.672902][T18947] bridge_slave_0: entered allmulticast mode [ 1401.714272][T18947] bridge_slave_0: entered promiscuous mode [ 1401.788512][T18947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.816276][T18947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.846928][T18947] bridge_slave_1: entered allmulticast mode [ 1401.865349][T18947] bridge_slave_1: entered promiscuous mode [ 1402.452737][T19006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.487565][T19006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.582416][T18947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.623586][T18947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.841808][T18947] team0: Port device team_slave_0 added [ 1402.903643][T18873] hsr_slave_0: left promiscuous mode [ 1403.014082][T18873] hsr_slave_1: left promiscuous mode [ 1403.026777][T18873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.064141][T18873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.088697][T18873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.097917][T17357] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1403.107235][T18873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.116864][T17357] usb 7-1: USB disconnect, device number 52 [ 1403.157981][T18873] veth1_macvtap: left promiscuous mode [ 1403.165794][T18873] veth0_macvtap: left promiscuous mode [ 1403.171641][T18873] veth1_vlan: left promiscuous mode [ 1403.180013][T18873] veth0_vlan: left promiscuous mode [ 1403.695913][ T5828] Bluetooth: hci3: command tx timeout [ 1405.595579][T18873] team0 (unregistering): Port device team_slave_1 removed [ 1405.764477][T18873] team0 (unregistering): Port device team_slave_0 removed [ 1406.756129][T19019] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3646'. [ 1406.767216][T19020] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3646'. [ 1406.786490][T18947] team0: Port device team_slave_1 added [ 1406.876934][T19024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1406.883050][T19024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1406.901703][T19024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1406.961843][T19024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1406.973040][T19024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1407.007801][T19024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1407.013820][T19024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1407.015654][T18947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.074204][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.162511][T18947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.195246][T19024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1408.058338][T18947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.084695][T19048] Smack: duplicate mount options [ 1408.089814][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.159278][T18947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.189086][T19053] netlink: 'syz.6.3654': attribute type 21 has an invalid length. [ 1408.201871][T19053] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1408.230662][T19053] netlink: 'syz.6.3654': attribute type 5 has an invalid length. [ 1408.289305][T19053] netlink: 'syz.6.3654': attribute type 6 has an invalid length. [ 1408.310840][T19053] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1408.567667][T18947] hsr_slave_0: entered promiscuous mode [ 1408.586904][T18947] hsr_slave_1: entered promiscuous mode [ 1408.605667][T18947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1408.625960][T18947] Cannot create hsr debugfs directory [ 1408.894349][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 1408.900559][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 1408.974387][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 1409.044070][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 1409.050278][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 1410.078130][T18947] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1410.119985][T18947] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1410.168444][T18947] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1410.219684][T18947] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1410.341355][T19075] Invalid option length (1048173) for dns_resolver key [ 1410.438438][T18947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.535286][T18947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.615804][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.623003][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.696852][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.704022][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.136274][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 1411.151267][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 1411.798795][T19094] Smack: duplicate mount options [ 1412.397220][T19099] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1412.613418][T18947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.204169][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 1414.382501][T18947] veth0_vlan: entered promiscuous mode [ 1414.413616][T18947] veth1_vlan: entered promiscuous mode [ 1414.424253][ T5913] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1415.290188][T19137] fuse: Bad value for 'fd' [ 1415.303489][ T29] audit: type=1326 audit(1739525335.809:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19136 comm="syz.0.3676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf4f78cde9 code=0x0 [ 1415.429182][T18947] veth0_macvtap: entered promiscuous mode [ 1415.464811][ T5913] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1415.482948][T18947] veth1_macvtap: entered promiscuous mode [ 1415.493258][T19140] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1415.499864][T19140] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1415.507548][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1415.509757][T19140] vhci_hcd vhci_hcd.0: Device attached [ 1415.524032][ T5913] usb 8-1: can't read configurations, error -61 [ 1415.533763][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.557809][T19141] vhci_hcd: connection closed [ 1415.564128][T17708] vhci_hcd: stop threads [ 1415.573172][T17708] vhci_hcd: release socket [ 1415.573955][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.587430][T17708] vhci_hcd: disconnect device [ 1415.588061][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.602846][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.613044][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.624353][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.634547][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.646225][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.654041][ T5913] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1415.656277][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.674726][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.685023][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.698049][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.708225][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.719137][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.729260][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.740312][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.751723][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.762720][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.778660][T18947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.797515][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.813569][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.823980][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.825797][ T5913] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1415.835491][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.854413][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.859310][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1415.865407][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.882967][ T5913] usb 8-1: can't read configurations, error -61 [ 1415.883474][ T5913] usb usb8-port1: attempt power cycle [ 1415.889777][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.906423][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.916882][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.927975][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.939178][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.950026][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.961439][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.972233][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.982421][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.993253][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.003381][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.014305][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.030442][T18947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.061031][T18947] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.070122][T18947] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.079668][T18947] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.088943][T18947] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.294327][ T5913] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1416.711607][ T5913] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1416.785107][ T6408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.792957][ T6408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.816186][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1416.823819][ T5913] usb 8-1: can't read configurations, error -61 [ 1417.004538][ T5913] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1417.063324][T19151] netlink: 'syz.0.3680': attribute type 9 has an invalid length. [ 1417.072523][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1417.472121][T19155] FAULT_INJECTION: forcing a failure. [ 1417.472121][T19155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.490939][T19156] Invalid ELF header magic: != ELF [ 1417.502261][ T5913] usb 8-1: device descriptor read/8, error -71 [ 1417.503399][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.526731][T19155] CPU: 1 UID: 0 PID: 19155 Comm: syz.6.3682 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1417.526760][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1417.526771][T19155] Call Trace: [ 1417.526778][T19155] [ 1417.526786][T19155] dump_stack_lvl+0x241/0x360 [ 1417.526816][T19155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.526838][T19155] ? __pfx__printk+0x10/0x10 [ 1417.526857][T19155] ? _raw_spin_unlock+0x28/0x50 [ 1417.526876][T19155] ? drm_ioctl_kernel+0x337/0x440 [ 1417.526902][T19155] should_fail_ex+0x40a/0x550 [ 1417.526925][T19155] _copy_to_user+0x31/0xb0 [ 1417.526943][T19155] drm_ioctl+0x635/0xad0 [ 1417.526962][T19155] ? __pfx_drm_mode_setplane+0x10/0x10 [ 1417.526987][T19155] ? __pfx_drm_ioctl+0x10/0x10 [ 1417.527016][T19155] ? __fget_files+0x2a/0x410 [ 1417.527039][T19155] ? __pfx_drm_ioctl+0x10/0x10 [ 1417.527060][T19155] __se_sys_ioctl+0xf5/0x170 [ 1417.527088][T19155] do_syscall_64+0xf3/0x230 [ 1417.527109][T19155] ? clear_bhb_loop+0x35/0x90 [ 1417.527130][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.527147][T19155] RIP: 0033:0x7f2aaff8cde9 [ 1417.527162][T19155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.527175][T19155] RSP: 002b:00007f2ab0e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1417.527192][T19155] RAX: ffffffffffffffda RBX: 00007f2ab01a5fa0 RCX: 00007f2aaff8cde9 [ 1417.527202][T19155] RDX: 0000400000000200 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 1417.527212][T19155] RBP: 00007f2ab0e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.527220][T19155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1417.527228][T19155] R13: 0000000000000000 R14: 00007f2ab01a5fa0 R15: 00007fff57d4b0b8 [ 1417.527251][T19155] [ 1417.722859][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.744222][ T5913] usb usb8-port1: unable to enumerate USB device [ 1418.028371][T19169] fuse: Bad value for 'fd' [ 1418.035492][ T29] audit: type=1326 audit(1739525338.549:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.5.3687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9706b8cde9 code=0x0 [ 1418.954837][T19171] loop2: detected capacity change from 0 to 7 [ 1418.998634][T19171] Dev loop2: unable to read RDB block 7 [ 1419.021446][T19171] loop2: unable to read partition table [ 1419.156190][T19171] loop2: partition table beyond EOD, truncated [ 1419.884137][T19171] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1420.335482][T19191] netlink: 'syz.0.3693': attribute type 16 has an invalid length. [ 1420.343517][T19191] netlink: 'syz.0.3693': attribute type 17 has an invalid length. [ 1421.560650][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1421.673799][T19210] 9pnet_fd: Insufficient options for proto=fd [ 1421.908664][T19216] Invalid source name [ 1422.015845][T19216] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1422.527100][T19191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.534454][T19191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.234576][T19191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.263217][T19191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.754960][T19191] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.792052][T19191] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.814110][T19191] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.823185][T19191] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.358283][T19284] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1428.366810][T19286] netlink: 'syz.8.3718': attribute type 29 has an invalid length. [ 1428.397456][T19292] netlink: 'syz.8.3718': attribute type 29 has an invalid length. [ 1430.349856][T19320] fuse: Invalid rootmode [ 1430.393217][ T29] audit: type=1326 audit(1739525350.899:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19319 comm="syz.7.3728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91dc58cde9 code=0x0 [ 1430.616189][T19326] tipc: Started in network mode [ 1430.653125][T19326] tipc: Node identity 569e319107a7, cluster identity 4711 [ 1430.688719][T19326] tipc: Enabled bearer , priority 0 [ 1430.774452][ T5913] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1430.801029][T19329] syzkaller0: entered promiscuous mode [ 1430.823465][T19329] syzkaller0: entered allmulticast mode [ 1430.847620][T19329] tipc: Resetting bearer [ 1430.919878][T19323] tipc: Resetting bearer [ 1430.944015][ T5913] usb 9-1: Using ep0 maxpacket: 32 [ 1430.961838][ T5913] usb 9-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1430.993186][ T5913] usb 9-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1431.014779][ T5913] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1431.024784][ T5913] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1431.034426][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.042576][ T5913] usb 9-1: Product: ᢓＨ먾둸ᖰ㏏⫝̸ෘ㐈☻螊㺦趆뱲﫿鼵᤺巧禆ঈ㮃䥛ᭅ蹐拲꞊Ȋ꒳ﹷ蒍덻鰧ప脯퐉伖䄡盚蚪뚋똋㱳׏飉饴㳌䣭埂좟㎻﫟ꚬ⋰햓렞쎀ᦃ鴬댊孍嗡ᩑꉘ䌂麟끀鉦͏돇䇕䞲糦弚鶎礵腎䀑埃泿ڇ遈뭑媗ퟯ렾炵䔢⯯ᒑ [ 1431.073281][ T5913] usb 9-1: Manufacturer: అ [ 1431.086895][ T5913] usb 9-1: SerialNumber: ␀ [ 1431.164330][T19325] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1431.172023][T19325] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1431.390145][T19325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.399374][T19325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.410461][ T5913] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 1431.491109][ T5913] usb 9-1: USB disconnect, device number 2 [ 1432.287377][T11801] tipc: Node number set to 1362702737 [ 1435.958868][T11801] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1436.154869][T11801] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 1436.163082][T11801] usb 9-1: config 0 has no interface number 0 [ 1436.169876][T11801] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 6400, setting to 64 [ 1436.195714][T11801] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1436.266136][T11801] usb 9-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 1436.275471][T11801] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.283615][T11801] usb 9-1: Product: syz [ 1436.299043][T11801] usb 9-1: Manufacturer: syz [ 1436.304162][T11801] usb 9-1: SerialNumber: syz [ 1436.335703][T11801] usb 9-1: config 0 descriptor?? [ 1436.342878][T19369] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1436.354169][T19369] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1436.805239][T11801] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1436.822533][T11801] usb 9-1: MIDIStreaming interface descriptor not found [ 1436.902329][T11801] usb 9-1: USB disconnect, device number 3 [ 1438.207327][T19323] tipc: Disabling bearer [ 1438.220748][T19344] xfrm0: mtu less than device minimum [ 1438.427031][T19378] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1438.433590][T19378] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1438.470396][T19378] vhci_hcd vhci_hcd.0: Device attached [ 1438.514443][T19381] vhci_hcd: connection closed [ 1438.534472][T18932] vhci_hcd: stop threads [ 1438.556102][T18932] vhci_hcd: release socket [ 1438.560585][T18932] vhci_hcd: disconnect device [ 1438.818353][T19385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1440.248995][T19403] Smack: duplicate mount options [ 1440.476053][ T29] audit: type=1326 audit(1739525360.989:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19405 comm="syz.8.3755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e9d98cde9 code=0x0 [ 1440.775233][T19418] netlink: zone id is out of range [ 1440.780690][T19418] netlink: zone id is out of range [ 1440.780844][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3761'. [ 1440.786095][T19418] netlink: zone id is out of range [ 1440.786110][T19418] netlink: zone id is out of range [ 1440.786120][T19418] netlink: zone id is out of range [ 1440.786129][T19418] netlink: zone id is out of range [ 1441.023475][T19418] netlink: zone id is out of range [ 1441.074444][T19418] netlink: zone id is out of range [ 1441.986828][T19418] netlink: zone id is out of range [ 1443.900542][T19446] Invalid source name [ 1444.204986][T19448] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1447.263981][T11801] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1447.533476][T11801] usb 9-1: config 54 has an invalid interface number: 154 but max is 0 [ 1447.543552][T11801] usb 9-1: config 54 has no interface number 0 [ 1447.617198][T11801] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1447.662724][T11801] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.721758][T11801] usb 9-1: Product: syz [ 1447.742748][T11801] usb 9-1: Manufacturer: syz [ 1447.767673][T11801] usb 9-1: SerialNumber: syz [ 1447.927350][T19491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3784'. [ 1447.976133][T19491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3784'. [ 1448.072306][T19492] lo speed is unknown, defaulting to 1000 [ 1448.750038][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3781'. [ 1448.759607][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3781'. [ 1448.869475][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3781'. [ 1448.912852][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3781'. [ 1448.999869][T19492] syzkaller0 speed is unknown, defaulting to 1000 [ 1449.060857][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3781'. [ 1449.089158][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3781'. [ 1449.170763][T11801] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1449.184255][ T3482] usb 9-1: Failed to submit usb control message: -71 [ 1449.193170][T11801] usb 9-1: USB disconnect, device number 4 [ 1449.214556][ T3482] usb 9-1: unable to send the bmi data to the device: -71 [ 1449.238691][ T3482] usb 9-1: unable to get target info from device [ 1449.246536][ T3482] usb 9-1: could not get target info (-71) [ 1449.252814][ T3482] usb 9-1: could not probe fw (-71) [ 1449.514037][T17357] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1449.684515][T17357] usb 6-1: Using ep0 maxpacket: 32 [ 1449.703913][T17357] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1449.735375][T17357] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1449.762146][T17357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.780896][T17357] usb 6-1: Product: syz [ 1449.806284][T17357] usb 6-1: Manufacturer: syz [ 1449.810941][T17357] usb 6-1: SerialNumber: syz [ 1449.837353][T17357] usb 6-1: config 0 descriptor?? [ 1449.904196][T15905] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1450.286840][T15905] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 1450.340296][T15905] usb 1-1: config 0 has an invalid interface number: 82 but max is 35 [ 1450.373966][T15905] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 1450.397862][T17357] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1450.423618][T15905] usb 1-1: config 0 has no interface number 0 [ 1450.472787][T15905] usb 1-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 1450.484109][T15905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.601240][T17357] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1450.647767][T17357] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1450.658865][T15905] usb 1-1: config 0 descriptor?? [ 1450.818850][T15905] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 1451.243472][T15905] gspca_sunplus: reg_r err -71 [ 1451.265009][T15905] sunplus 1-1:0.82: probe with driver sunplus failed with error -71 [ 1451.275614][T15905] usb 1-1: USB disconnect, device number 46 [ 1452.099903][T19543] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3795'. [ 1454.145060][T19554] FAULT_INJECTION: forcing a failure. [ 1454.145060][T19554] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.178622][T19554] CPU: 0 UID: 0 PID: 19554 Comm: syz.0.3800 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1454.178657][T19554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1454.178667][T19554] Call Trace: [ 1454.178674][T19554] [ 1454.178683][T19554] dump_stack_lvl+0x241/0x360 [ 1454.178721][T19554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1454.178746][T19554] ? __pfx__printk+0x10/0x10 [ 1454.178771][T19554] ? __kmalloc_cache_noprof+0x48/0x390 [ 1454.178794][T19554] ? __pfx___might_resched+0x10/0x10 [ 1454.178818][T19554] should_fail_ex+0x40a/0x550 [ 1454.178843][T19554] should_failslab+0xac/0x100 [ 1454.178866][T19554] __kmalloc_cache_noprof+0x70/0x390 [ 1454.178886][T19554] ? snd_pcm_oss_change_params_locked+0x13f/0x3d60 [ 1454.178909][T19554] ? __mutex_trylock_common+0x183/0x2e0 [ 1454.178936][T19554] snd_pcm_oss_change_params_locked+0x13f/0x3d60 [ 1454.178961][T19554] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1454.178989][T19554] ? rcu_is_watching+0x15/0xb0 [ 1454.179013][T19554] ? trace_contention_end+0x3c/0x120 [ 1454.179036][T19554] ? __mutex_lock+0x397/0x1010 [ 1454.179070][T19554] ? snd_pcm_oss_write+0x25e/0x11f0 [ 1454.179092][T19554] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1454.179117][T19554] ? psi_task_change+0xed/0x270 [ 1454.179131][T19554] ? sched_clock_cpu+0x76/0x490 [ 1454.179165][T19554] ? mark_lock+0x9a/0x360 [ 1454.179188][T19554] snd_pcm_oss_write+0x2cf/0x11f0 [ 1454.179209][T19554] ? __lock_acquire+0x1397/0x2100 [ 1454.179245][T19554] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1454.179270][T19554] ? bpf_lsm_file_permission+0x9/0x10 [ 1454.179289][T19554] ? rw_verify_area+0x243/0x630 [ 1454.179312][T19554] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1454.179336][T19554] vfs_write+0x29f/0xd10 [ 1454.179361][T19554] ? __pfx_vfs_write+0x10/0x10 [ 1454.179384][T19554] ? kvm_sched_clock_read+0x11/0x20 [ 1454.179402][T19554] ? sched_clock+0x4a/0x70 [ 1454.179420][T19554] ? __fget_files+0x2a/0x410 [ 1454.179443][T19554] ? __fget_files+0x395/0x410 [ 1454.179462][T19554] ? __fget_files+0x2a/0x410 [ 1454.179492][T19554] ksys_write+0x18f/0x2b0 [ 1454.179510][T19554] ? __pfx_ksys_write+0x10/0x10 [ 1454.179527][T19554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1454.179546][T19554] ? __irq_exit_rcu+0x105/0x220 [ 1454.179565][T19554] ? do_syscall_64+0xb6/0x230 [ 1454.179590][T19554] do_syscall_64+0xf3/0x230 [ 1454.179615][T19554] ? clear_bhb_loop+0x35/0x90 [ 1454.179639][T19554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.179667][T19554] RIP: 0033:0x7fbf4f78cde9 [ 1454.179683][T19554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1454.179703][T19554] RSP: 002b:00007fbf505e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1454.179722][T19554] RAX: ffffffffffffffda RBX: 00007fbf4f9a5fa0 RCX: 00007fbf4f78cde9 [ 1454.179735][T19554] RDX: 0000000000000001 RSI: 00004000000012c0 RDI: 0000000000000005 [ 1454.179746][T19554] RBP: 00007fbf505e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.179757][T19554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.179767][T19554] R13: 0000000000000000 R14: 00007fbf4f9a5fa0 R15: 00007ffce6146668 [ 1454.179793][T19554] [ 1454.909046][T11801] usb 6-1: USB disconnect, device number 46 [ 1457.650218][T19587] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3809'. [ 1459.109171][T19611] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1459.116362][T19611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1459.158480][T19611] vhci_hcd vhci_hcd.0: Device attached [ 1459.216047][T19612] vhci_hcd: connection closed [ 1459.334170][ T9950] vhci_hcd: vhci_device speed not set [ 1459.346752][T18932] vhci_hcd: stop threads [ 1459.351538][T18932] vhci_hcd: release socket [ 1459.358642][T18932] vhci_hcd: disconnect device [ 1459.434088][ T9950] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1459.462082][ T9950] usb 49-1: enqueue for inactive port 0 [ 1459.505345][T19620] loop2: detected capacity change from 0 to 7 [ 1459.515421][T19620] Dev loop2: unable to read RDB block 7 [ 1459.521311][T19620] loop2: unable to read partition table [ 1459.531574][T19620] loop2: partition table beyond EOD, truncated [ 1459.538742][T19620] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1459.554141][ T9950] vhci_hcd: vhci_device speed not set [ 1461.627905][T19631] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1462.034026][T17357] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1462.063193][T19642] vivid-001: disconnect [ 1462.388232][T19635] vivid-001: reconnect [ 1462.664127][T17357] usb 1-1: Using ep0 maxpacket: 8 [ 1462.715401][T19648] FAULT_INJECTION: forcing a failure. [ 1462.715401][T19648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.729090][T17357] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.740865][T19648] CPU: 0 UID: 0 PID: 19648 Comm: syz.5.3829 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1462.740889][T19648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1462.740899][T19648] Call Trace: [ 1462.740905][T19648] [ 1462.740912][T19648] dump_stack_lvl+0x241/0x360 [ 1462.740942][T19648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.740965][T19648] ? __pfx__printk+0x10/0x10 [ 1462.740988][T19648] ? __pfx_lock_release+0x10/0x10 [ 1462.741015][T19648] should_fail_ex+0x40a/0x550 [ 1462.741037][T19648] _copy_from_user+0x2d/0xb0 [ 1462.741055][T19648] copy_msghdr_from_user+0xae/0x680 [ 1462.741079][T19648] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1462.741096][T19648] ? __fget_files+0x2a/0x410 [ 1462.741119][T19648] ? __fget_files+0x2a/0x410 [ 1462.741145][T19648] __sys_sendmmsg+0x32b/0x720 [ 1462.741169][T19648] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1462.741210][T19648] ? try_to_wake_up+0x91b/0x1470 [ 1462.741231][T19648] ? __pfx_lock_release+0x10/0x10 [ 1462.741257][T19648] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1462.741294][T19648] ? __flush_smp_call_function_queue+0xb4d/0x1620 [ 1462.741326][T19648] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1462.741354][T19648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1462.741376][T19648] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1462.741396][T19648] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1462.741415][T19648] ? __irq_exit_rcu+0x105/0x220 [ 1462.741434][T19648] __x64_sys_sendmmsg+0xa0/0xb0 [ 1462.741451][T19648] do_syscall_64+0xf3/0x230 [ 1462.741474][T19648] ? clear_bhb_loop+0x35/0x90 [ 1462.741508][T19648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.741529][T19648] RIP: 0033:0x7f9706b8cde9 [ 1462.741544][T19648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.741559][T19648] RSP: 002b:00007f97049f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1462.741578][T19648] RAX: ffffffffffffffda RBX: 00007f9706da6160 RCX: 00007f9706b8cde9 [ 1462.741590][T19648] RDX: 0000000000000588 RSI: 0000400000001500 RDI: 0000000000000007 [ 1462.741602][T19648] RBP: 00007f97049f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.741612][T19648] R10: 00000000000001f8 R11: 0000000000000246 R12: 0000000000000001 [ 1462.741623][T19648] R13: 0000000000000000 R14: 00007f9706da6160 R15: 00007ffc17ba3eb8 [ 1462.741649][T19648] [ 1462.751118][T17357] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.137104][T17357] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1463.144330][T17357] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1463.153955][T17357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.212406][T17357] usb 1-1: config 0 descriptor?? [ 1463.905979][T17357] usbhid 1-1:0.0: can't add hid device: -71 [ 1463.914407][T17357] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1463.999685][T17357] usb 1-1: USB disconnect, device number 47 [ 1464.794233][T11801] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1464.966440][T11801] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1464.986420][T11801] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1465.010521][T11801] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1465.023008][T11801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.230619][T19661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1465.242693][T11801] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1465.612115][T19674] Invalid source name [ 1465.776533][T19674] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1465.906686][T19661] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1465.985742][T19661] net_ratelimit: 75 callbacks suppressed [ 1465.985797][T19661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1466.226417][T11801] usb 1-1: USB disconnect, device number 48 [ 1466.267438][T19678] netlink: 'syz.6.3838': attribute type 11 has an invalid length. [ 1467.228944][ T29] audit: type=1326 audit(1739525387.739:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.264110][T17357] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1467.309761][ T29] audit: type=1326 audit(1739525387.739:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.389298][ T29] audit: type=1326 audit(1739525387.749:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.446862][T17357] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1467.465465][T17357] usb 1-1: config 0 has no interface number 0 [ 1467.476914][ T29] audit: type=1326 audit(1739525387.749:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.504051][T17357] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1467.529279][T17357] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1467.554635][ T29] audit: type=1326 audit(1739525387.749:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.591809][T17357] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1467.648219][T17357] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 1467.675288][ T29] audit: type=1326 audit(1739525387.749:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.706570][T17357] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1467.748111][T17357] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1467.775070][ T29] audit: type=1326 audit(1739525387.749:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.814328][T17357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.871567][T17357] usb 1-1: config 0 descriptor?? [ 1467.893970][ T29] audit: type=1326 audit(1739525387.749:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1467.938246][T19691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1467.990988][T17357] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1468.014806][ T29] audit: type=1326 audit(1739525387.749:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1468.074326][ T29] audit: type=1326 audit(1739525387.749:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19692 comm="syz.6.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaff8cde9 code=0x7ffc0000 [ 1468.160105][T19703] syz.5.3847 (19703): drop_caches: 2 [ 1469.449181][ T5828] Bluetooth: hci4: unexpected event for opcode 0x200b [ 1470.575562][T17357] usb 1-1: USB disconnect, device number 49 [ 1470.595519][T17357] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1471.435959][T19727] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1471.442542][T19727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1471.480335][T19727] vhci_hcd vhci_hcd.0: Device attached [ 1471.497632][T19729] vhci_hcd: connection closed [ 1471.498456][ T6408] vhci_hcd: stop threads [ 1471.539593][ T6408] vhci_hcd: release socket [ 1471.583989][ T6408] vhci_hcd: disconnect device [ 1473.857977][T19759] trusted_key: encrypted_key: master key parameter is missing [ 1474.275628][T16034] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1474.677048][T16034] usb 7-1: Using ep0 maxpacket: 8 [ 1474.803269][T16034] usb 7-1: descriptor type invalid, skip [ 1474.809167][T16034] usb 7-1: descriptor type invalid, skip [ 1474.834212][T16034] usb 7-1: descriptor type invalid, skip [ 1474.863988][T16034] usb 7-1: descriptor type invalid, skip [ 1474.869714][T16034] usb 7-1: descriptor type invalid, skip [ 1474.916784][T16034] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1474.961633][T16034] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1474.997414][T16034] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1475.026746][T16034] usb 7-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 1475.046231][T16034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.059077][T16034] usb 7-1: Product: syz [ 1475.063277][T16034] usb 7-1: Manufacturer: syz [ 1475.068089][T16034] usb 7-1: SerialNumber: syz [ 1475.297175][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.334468][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.468494][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3862'. [ 1475.527538][T19774] FAULT_INJECTION: forcing a failure. [ 1475.527538][T19774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.541421][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz.5.3866 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1475.541453][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1475.541463][T19774] Call Trace: [ 1475.541474][T19774] [ 1475.541482][T19774] dump_stack_lvl+0x241/0x360 [ 1475.541511][T19774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1475.541543][T19774] ? __wake_up_klogd+0xcc/0x110 [ 1475.541563][T19774] should_fail_ex+0x40a/0x550 [ 1475.541585][T19774] _copy_from_user+0x2d/0xb0 [ 1475.541603][T19774] copy_msghdr_from_user+0xae/0x680 [ 1475.541629][T19774] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1475.541648][T19774] ? __fget_files+0x2a/0x410 [ 1475.541670][T19774] ? __fget_files+0x2a/0x410 [ 1475.541696][T19774] __sys_sendmmsg+0x32b/0x720 [ 1475.541723][T19774] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1475.541782][T19774] ? __pfx___schedule+0x10/0x10 [ 1475.541803][T19774] ? irqentry_exit+0x63/0x90 [ 1475.541820][T19774] ? lockdep_hardirqs_on+0x99/0x150 [ 1475.541857][T19774] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1475.541898][T19774] __x64_sys_sendmmsg+0xa0/0xb0 [ 1475.541916][T19774] do_syscall_64+0xf3/0x230 [ 1475.541937][T19774] ? clear_bhb_loop+0x35/0x90 [ 1475.541961][T19774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.541981][T19774] RIP: 0033:0x7f9706b8cde9 [ 1475.541994][T19774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.542007][T19774] RSP: 002b:00007f97049f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1475.542026][T19774] RAX: ffffffffffffffda RBX: 00007f9706da6160 RCX: 00007f9706b8cde9 [ 1475.542036][T19774] RDX: 0000000000000588 RSI: 0000400000001500 RDI: 0000000000000007 [ 1475.542047][T19774] RBP: 00007f97049f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.542058][T19774] R10: 00000000000001f8 R11: 0000000000000246 R12: 0000000000000001 [ 1475.542068][T19774] R13: 0000000000000000 R14: 00007f9706da6160 R15: 00007ffc17ba3eb8 [ 1475.542090][T19774] [ 1476.249478][T10678] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1476.544245][T10678] usb 1-1: Using ep0 maxpacket: 32 [ 1476.552776][T19782] loop2: detected capacity change from 0 to 7 [ 1476.632107][T19782] Dev loop2: unable to read RDB block 7 [ 1476.649320][T10678] usb 1-1: too many configurations: 113, using maximum allowed: 8 [ 1476.664105][T19782] loop2: AHDI p2 p3 [ 1476.669246][T10678] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1476.676123][T19782] loop2: partition table partially beyond EOD, truncated [ 1476.682612][T10678] usb 1-1: can't read configurations, error -61 [ 1476.737500][T19782] loop2: p2 size 150995200 extends beyond EOD, truncated [ 1476.824003][T10678] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1476.998073][T19789] Invalid ELF header magic: != ELF [ 1477.014136][T10678] usb 1-1: Using ep0 maxpacket: 32 [ 1477.184296][T10678] usb 1-1: too many configurations: 113, using maximum allowed: 8 [ 1477.235100][T10678] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1477.242848][T10678] usb 1-1: can't read configurations, error -61 [ 1477.274826][T10678] usb usb1-port1: attempt power cycle [ 1478.215907][T16034] usbhid 7-1:1.0: can't add hid device: -71 [ 1478.221968][T16034] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1478.234496][T16034] usb 7-1: USB disconnect, device number 53 [ 1478.434029][T10678] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1478.681387][T10678] usb 1-1: device descriptor read/8, error -71 [ 1479.539668][T19808] Smack: duplicate mount options [ 1481.815203][T11801] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1481.954138][T19841] Invalid source name [ 1482.044916][T19841] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1482.099685][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1482.141041][T11801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.165181][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1482.184868][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1482.218653][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1482.248107][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1482.277793][T11801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1482.278484][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1482.454050][T11801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1482.464011][T11801] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1482.480243][T11801] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1482.489640][T11801] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1482.497801][T11801] usb 1-1: Manufacturer: syz [ 1482.523808][T19842] lo speed is unknown, defaulting to 1000 [ 1500.124809][ T16] sched: DL replenish lagged too much [ 1587.913864][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1587.920958][ C0] rcu: 1-...!: (1 GPs behind) idle=9af4/1/0x4000000000000000 softirq=94685/94686 fqs=21 [ 1587.933010][ C0] rcu: (detected by 0, t=10502 jiffies, g=93233, q=185 ncpus=2) [ 1587.940762][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1587.940809][ C1] NMI backtrace for cpu 1 [ 1587.940823][ C1] CPU: 1 UID: 0 PID: 9458 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1587.940840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1587.940851][ C1] RIP: 0010:rcu_is_watching+0x1c/0xb0 [ 1587.940882][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 a8 c9 5e 7e e8 0b 1b 49 0a 89 c3 83 f8 08 73 7a <49> bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 50 0b 30 8e 4c 89 f0 48 [ 1587.940894][ C1] RSP: 0018:ffffc90000a18b00 EFLAGS: 00000097 [ 1587.940911][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff819ad130 [ 1587.940921][ C1] RDX: 0000000000000000 RSI: ffffffff8c5fb8e0 RDI: ffffffff8c5fb8a0 [ 1587.940932][ C1] RBP: ffffc90000a18c60 R08: ffffffff901a3677 R09: 1ffffffff20346ce [ 1587.940945][ C1] R10: dffffc0000000000 R11: fffffbfff20346cf R12: 1ffff92000143170 [ 1587.940956][ C1] R13: ffffffff89ef5c82 R14: ffff888078060c00 R15: dffffc0000000000 [ 1587.940968][ C1] FS: 000055555ef95500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1587.940982][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1587.940992][ C1] CR2: 00007f91dd2d56c0 CR3: 0000000058208000 CR4: 00000000003526f0 [ 1587.941006][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1587.941015][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1587.941025][ C1] Call Trace: [ 1587.941033][ C1] [ 1587.941042][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1587.941062][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1587.941084][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1587.941100][ C1] ? nmi_handle+0x2a/0x5a0 [ 1587.941128][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1587.941145][ C1] ? nmi_handle+0x14f/0x5a0 [ 1587.941165][ C1] ? nmi_handle+0x2a/0x5a0 [ 1587.941186][ C1] ? rcu_is_watching+0x1c/0xb0 [ 1587.941208][ C1] ? default_do_nmi+0x63/0x160 [ 1587.941224][ C1] ? exc_nmi+0x123/0x1f0 [ 1587.941239][ C1] ? end_repeat_nmi+0xf/0x53 [ 1587.941260][ C1] ? advance_sched+0xa02/0xca0 [ 1587.941279][ C1] ? lock_release+0xb0/0xa30 [ 1587.941298][ C1] ? rcu_is_watching+0x1c/0xb0 [ 1587.941320][ C1] ? rcu_is_watching+0x1c/0xb0 [ 1587.941343][ C1] ? rcu_is_watching+0x1c/0xb0 [ 1587.941365][ C1] [ 1587.941370][ C1] [ 1587.941377][ C1] lock_release+0xbf/0xa30 [ 1587.941396][ C1] ? advance_sched+0xa02/0xca0 [ 1587.941413][ C1] ? __netif_schedule+0xc4/0x310 [ 1587.941435][ C1] ? __pfx_lock_release+0x10/0x10 [ 1587.941454][ C1] ? __pfx___netif_schedule+0x10/0x10 [ 1587.941478][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1587.941494][ C1] ? taprio_set_budgets+0x32c/0x370 [ 1587.941511][ C1] ? advance_sched+0xa02/0xca0 [ 1587.941526][ C1] ? advance_sched+0xa02/0xca0 [ 1587.941543][ C1] advance_sched+0xb32/0xca0 [ 1587.941566][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1587.941583][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 1587.941614][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1587.941635][ C1] ? sched_clock+0x4a/0x70 [ 1587.941651][ C1] ? read_tsc+0x9/0x20 [ 1587.941666][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1587.941688][ C1] hrtimer_interrupt+0x403/0xa40 [ 1587.941722][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1587.941745][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1587.941765][ C1] [ 1587.941771][ C1] [ 1587.941777][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1587.941807][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 1587.941826][ C1] Code: 2b 00 74 08 4c 89 f7 e8 1a b6 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1587.941839][ C1] RSP: 0018:ffffc9000c4f7020 EFLAGS: 00000206 [ 1587.941852][ C1] RAX: 0000000000000001 RBX: 1ffff9200189ee10 RCX: ffff8880606a64e8 [ 1587.941863][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fb900 [ 1587.941876][ C1] RBP: ffffc9000c4f7178 R08: ffffffff942c6847 R09: 1ffffffff2858d08 [ 1587.941888][ C1] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: 1ffff9200189ee0c [ 1587.941900][ C1] R13: dffffc0000000000 R14: ffffc9000c4f7080 R15: 0000000000000246 [ 1587.941923][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1587.941942][ C1] ? pfn_valid+0xf6/0x450 [ 1587.941959][ C1] ? __pfx_lock_release+0x10/0x10 [ 1587.941982][ C1] ? __pfx_lock_release+0x10/0x10 [ 1587.942003][ C1] ? page_ext_get+0x20/0x2a0 [ 1587.942019][ C1] page_ext_get+0x3d/0x2a0 [ 1587.942035][ C1] ? page_ext_get+0x20/0x2a0 [ 1587.942052][ C1] page_table_check_set+0x4f/0x540 [ 1587.942072][ C1] __page_table_check_ptes_set+0x30f/0x410 [ 1587.942092][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1587.942111][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1587.942128][ C1] ? __folio_rmap_sanity_checks+0x15d/0x3a0 [ 1587.942146][ C1] copy_pmd_range+0x450f/0x77a0 [ 1587.942168][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1587.942195][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1587.942212][ C1] ? look_up_lock_class+0x77/0x170 [ 1587.942232][ C1] ? register_lock_class+0x102/0x980 [ 1587.942254][ C1] ? __pfx_mas_destroy+0x10/0x10 [ 1587.942273][ C1] ? mark_lock+0x9a/0x360 [ 1587.942295][ C1] ? __lock_acquire+0x1397/0x2100 [ 1587.942328][ C1] copy_page_range+0x99f/0xe90 [ 1587.942355][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1587.942374][ C1] ? __pfx_up_write+0x10/0x10 [ 1587.942396][ C1] ? __rb_insert_augmented+0x2a4/0x6b0 [ 1587.942416][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1587.942438][ C1] ? vma_interval_tree_augment_rotate+0x1b4/0x1c0 [ 1587.942460][ C1] copy_mm+0x1269/0x2160 [ 1587.942486][ C1] ? __pfx_copy_mm+0x10/0x10 [ 1587.942508][ C1] ? __init_rwsem+0x122/0x160 [ 1587.942531][ C1] ? copy_signal+0x51c/0x640 [ 1587.942548][ C1] copy_process+0x1845/0x3d50 [ 1587.942572][ C1] ? copy_process+0x9fa/0x3d50 [ 1587.942588][ C1] ? __lock_acquire+0x1397/0x2100 [ 1587.942609][ C1] ? __pfx_copy_process+0x10/0x10 [ 1587.942632][ C1] kernel_clone+0x223/0x870 [ 1587.942651][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1587.942676][ C1] __x64_sys_clone+0x258/0x2a0 [ 1587.942695][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1587.942712][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1587.942736][ C1] ? exc_page_fault+0x590/0x8b0 [ 1587.942756][ C1] ? do_syscall_64+0xb6/0x230 [ 1587.942778][ C1] do_syscall_64+0xf3/0x230 [ 1587.942805][ C1] ? clear_bhb_loop+0x35/0x90 [ 1587.942827][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.942848][ C1] RIP: 0033:0x7f91dc583653 [ 1587.942862][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1587.942875][ C1] RSP: 002b:00007ffc50862c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1587.942890][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91dc583653 [ 1587.942901][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1587.942911][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1587.942921][ C1] R10: 000055555ef957d0 R11: 0000000000000246 R12: 0000000000000000 [ 1587.942931][ C1] R13: 00000000000927c0 R14: 0000000000169e63 R15: 00007ffc50862dd0 [ 1587.942949][ C1] [ 1587.943795][ C0] rcu: rcu_preempt kthread starved for 10440 jiffies! g93233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1588.659881][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1588.669857][ C0] rcu: RCU grace-period kthread stack dump: [ 1588.675748][ C0] task:rcu_preempt state:R running task stack:25784 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1588.689263][ C0] Call Trace: [ 1588.692548][ C0] [ 1588.695491][ C0] __schedule+0x18bc/0x4c40 [ 1588.700032][ C0] ? __pfx___schedule+0x10/0x10 [ 1588.704903][ C0] ? __pfx_lock_release+0x10/0x10 [ 1588.709956][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1588.714906][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1588.721255][ C0] ? schedule+0x90/0x320 [ 1588.725507][ C0] schedule+0x14b/0x320 [ 1588.729697][ C0] schedule_timeout+0x15a/0x290 [ 1588.734584][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1588.739983][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1588.745292][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1588.750853][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1588.755718][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1588.760944][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1588.767121][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1588.772417][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1588.778329][ C0] ? finish_swait+0xd4/0x1e0 [ 1588.782931][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1588.788145][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1588.792753][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1588.797963][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1588.803868][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1588.808907][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1588.814122][ C0] kthread+0x7a9/0x920 [ 1588.818201][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.822805][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1588.828017][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.832615][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.837221][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.841820][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1588.847025][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1588.852233][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.856835][ C0] ret_from_fork+0x4b/0x80 [ 1588.861260][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.865859][ C0] ret_from_fork_asm+0x1a/0x30 [ 1588.870647][ C0] [ 1588.873672][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1588.879997][ C0] CPU: 0 UID: 0 PID: 5490 Comm: dhcpcd Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 1588.890322][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1588.900381][ C0] RIP: 0010:smp_call_function_many_cond+0x1ba2/0x2d30 [ 1588.907156][ C0] Code: b6 04 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 b0 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 60 e4 0b 00 eb 41 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 [ 1588.926768][ C0] RSP: 0018:ffffc900039af560 EFLAGS: 00000293 [ 1588.932849][ C0] RAX: ffffffff81b36b05 RBX: 1ffff110170e88c9 RCX: ffff88802eff3c00 [ 1588.940827][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1588.948799][ C0] RBP: ffffc900039af760 R08: ffffffff81b36ad0 R09: 1ffffffff2858d0e [ 1588.956774][ C0] R10: dffffc0000000000 R11: fffffbfff2858d0f R12: ffff8880b863f9c8 [ 1588.964749][ C0] R13: ffff8880b8744648 R14: ffff8880b863f9c0 R15: 0000000000000001 [ 1588.972725][ C0] FS: 00007f471570b740(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1588.981659][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.988246][ C0] CR2: 00007f0dd6e10218 CR3: 000000002e080000 CR4: 00000000003526f0 [ 1588.996230][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1589.004203][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1589.012177][ C0] Call Trace: [ 1589.015463][ C0] [ 1589.018312][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1589.024680][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1589.030338][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1589.036169][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1589.042427][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1589.047816][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1589.053476][ C0] ? update_process_times+0x242/0x2f0 [ 1589.058855][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1589.063973][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1589.069440][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1589.074841][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1589.080567][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 1589.085510][ C0] ? read_tsc+0x9/0x20 [ 1589.089580][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1589.095661][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1589.100805][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1589.106969][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1589.112781][ C0] [ 1589.115712][ C0] [ 1589.118647][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1589.124902][ C0] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 1589.131072][ C0] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 1589.137262][ C0] ? smp_call_function_many_cond+0x1ba2/0x2d30 [ 1589.143459][ C0] ? __mutex_unlock_slowpath+0x227/0x800 [ 1589.149134][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1589.155481][ C0] ? __pfx_lock_release+0x10/0x10 [ 1589.160520][ C0] ? rcu_is_watching+0x15/0xb0 [ 1589.165297][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1589.170509][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1589.175638][ C0] flush_tlb_mm_range+0x42d/0x710 [ 1589.180694][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1589.186262][ C0] copy_mm+0x18af/0x2160 [ 1589.190529][ C0] ? __pfx_copy_mm+0x10/0x10 [ 1589.195134][ C0] ? __init_rwsem+0x122/0x160 [ 1589.199826][ C0] ? copy_signal+0x51c/0x640 [ 1589.204427][ C0] copy_process+0x1845/0x3d50 [ 1589.209106][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1589.214504][ C0] ? copy_process+0x9fa/0x3d50 [ 1589.219282][ C0] ? __pfx_copy_process+0x10/0x10 [ 1589.224315][ C0] ? __pfx_sk_setsockopt+0x10/0x10 [ 1589.229440][ C0] ? __pfx_lock_release+0x10/0x10 [ 1589.234472][ C0] ? fd_install+0x9c/0x5d0 [ 1589.238901][ C0] kernel_clone+0x223/0x870 [ 1589.243411][ C0] ? __might_fault+0xaa/0x120 [ 1589.248100][ C0] ? __might_fault+0xc6/0x120 [ 1589.252803][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1589.257851][ C0] __x64_sys_clone+0x258/0x2a0 [ 1589.262628][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1589.267960][ C0] ? do_syscall_64+0x100/0x230 [ 1589.272750][ C0] ? do_syscall_64+0xb6/0x230 [ 1589.277446][ C0] do_syscall_64+0xf3/0x230 [ 1589.281970][ C0] ? clear_bhb_loop+0x35/0x90 [ 1589.286669][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.292575][ C0] RIP: 0033:0x7f47157bba12 [ 1589.296994][ C0] Code: 41 5d 41 5e 41 5f c3 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e7 43 0f 00 f7 d8 64 89 02 48 83 [ 1589.316627][ C0] RSP: 002b:00007fff98d79df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1589.325065][ C0] RAX: ffffffffffffffda RBX: 0000564743708101 RCX: 00007f47157bba12 [ 1589.333063][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1589.341051][ C0] RBP: 00007fff98d9a368 R08: 0000000000000000 R09: 00005647437080d0 [ 1589.349031][ C0] R10: 00007f471570ba10 R11: 0000000000000246 R12: 0000000000000000 [ 1589.357009][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000564743708104 [ 1589.365003][ C0]