last executing test programs: 13m52.696136254s ago: executing program 3 (id=3112): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4884) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 13m52.489331679s ago: executing program 3 (id=3160): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_uring_setup(0x1329, &(0x7f0000000700)={0x0, 0x92b5, 0x10, 0x2, 0x3a4}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m47.871025318s ago: executing program 3 (id=3169): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1, r0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000000)={r3}) 13m47.737055621s ago: executing program 3 (id=3170): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4884) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 13m46.633223926s ago: executing program 3 (id=3173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44854) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0xb6) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000080)={0x5c}, 0x8) fdatasync(r7) connect$inet6(r8, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 13m45.332930795s ago: executing program 3 (id=3175): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0, 0x9, 0x0, 0xfffffffc, 0x3, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000080ed41f000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x40, 0x8a, &(0x7f0000000340)=""/138, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff3, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/9, 0x9}], 0x4) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r11, 0xc0d05604, &(0x7f0000000480)={0x2, @pix={0xfffe, 0x7fff, 0x34363248, 0x3, 0x6, 0x1, 0x3, 0x1, 0x1, 0x4, 0x1, 0x2}}) r12 = gettid() r13 = epoll_create1(0x0) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000200)={0xa000000a}) finit_module(r14, 0x0, 0x0) tkill(r12, 0x7) 13m29.474705678s ago: executing program 32 (id=3175): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0, 0x9, 0x0, 0xfffffffc, 0x3, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000080ed41f000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x40, 0x8a, &(0x7f0000000340)=""/138, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff3, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/9, 0x9}], 0x4) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r11, 0xc0d05604, &(0x7f0000000480)={0x2, @pix={0xfffe, 0x7fff, 0x34363248, 0x3, 0x6, 0x1, 0x3, 0x1, 0x1, 0x4, 0x1, 0x2}}) r12 = gettid() r13 = epoll_create1(0x0) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000200)={0xa000000a}) finit_module(r14, 0x0, 0x0) tkill(r12, 0x7) 2m40.817212923s ago: executing program 1 (id=5172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m39.768334338s ago: executing program 1 (id=5174): r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "cafee079eb6829aa", "0af5f7c25154f1a1396ab447b4bd66e4340cb662b5772bf930aa0a52b9e5ce13", "3224cd0e", "a678b28f280f6321"}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev\x00') preadv(r3, &(0x7f00000025c0), 0x0, 0x10006c, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 2m38.921494296s ago: executing program 1 (id=5177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="04010000", @ANYRES16=r2], 0x104}}, 0x0) 2m38.063984926s ago: executing program 1 (id=5181): socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) io_uring_setup(0x1694, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a01020000000000000000010000000900010073797a30000800000900020073797a300000000008000740000000014000038008000240000000002c0003801400010076657468305f746f5f626f6e640000001400010062617461647630000000000000000000080001"], 0xbc}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x800, 0x1) 2m37.212533048s ago: executing program 1 (id=5183): r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "cafee079eb6829aa", "0af5f7c25154f1a1396ab447b4bd66e4340cb662b5772bf930aa0a52b9e5ce13", "3224cd0e", "a678b28f280f6321"}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x166b1ab5eb710134) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x2f, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x88, 0x42}, {@local, 0x4e23, 0x10000, 0x6, 0x8, 0x6}}, 0x44) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000022c0)={{r4}, 0x0, 0x4, @unused=[0x4, 0xf, 0x8, 0x921], @devid}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x1}) 2m36.546035937s ago: executing program 1 (id=5184): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000414010026bd7000fcdbdf25080001000000000008000300010070"], 0x20}, 0x1, 0x0, 0x0, 0x20004845}, 0x24000080) 2m20.328040833s ago: executing program 33 (id=5184): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000414010026bd7000fcdbdf25080001000000000008000300010070"], 0x20}, 0x1, 0x0, 0x0, 0x20004845}, 0x24000080) 13.861512215s ago: executing program 4 (id=5617): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000001680)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, 0x0}, 0x20) keyctl$link(0x8, 0x0, r0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x3, &(0x7f0000000180)=""/3, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xa, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x2, 0x2, 0x4, 0xa}, {0x1, 0x1, 0xd, 0x7}, {0x5, 0x5, 0xd}, {0x3, 0x5, 0xa, 0x4}, {0x1, 0x2, 0x8, 0xa}], 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40010000000040000000000000095000000000000004486b727103ec1b563afec8d046f928667bcff16d8030ce7ef99fdb4e24f747cf370d7b4089a28548f8d9e68f5eaac81f4a207404190b0d60f3011bac5f9f301dd591a28a05ead4d59169d7e902dccb851c71a0f447c96a5b6a622e31797bf5eea4dc3ac2b3c1d35e1740e83264d18e8c677b5271f460c0711ff63dd"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x8}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain) r4 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000680)="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", 0x1000, r0) keyctl$negate(0xd, r0, 0xffffffffffffa980, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fefcb7907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x36) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='securityfs\x00', 0x200000, &(0x7f00000000c0)='+)\'[%\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x149200, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) keyctl$link(0x8, r0, r0) 13.501397669s ago: executing program 6 (id=5619): ioperm(0x0, 0x6, 0x13cc) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee01, 0x0) ioperm(0x40, 0xffffffff, 0x10) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xfffffffc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x81f) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x24c}}) io_uring_enter(r3, 0x5464, 0x4040, 0x0, 0x0, 0xffffffffffffffa8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESDEC], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="24002d80"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = timerfd_create(0x1, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x10}, {0xfff3, 0x3}, {0x0, 0xffff}}, ["", "", ""]}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@gettaction={0x68, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x68}}, 0x0) 12.969090347s ago: executing program 5 (id=5621): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0xe}, {0xd, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xffffffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x156, 0x156, 0x3, [@datasec={0xe, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x4, 0x6}, {0x4, 0x4, 0x8}, {0x3, 0x8, 0xa22}, {0x4, 0x7, 0x4}, {0x2, 0x1, 0x400}, {0x3, 0x6, 0x8}, {0x4, 0x0, 0x8}, {0x1, 0x6, 0x7}], '\x00'}, @struct={0x7, 0x2, 0x0, 0x4, 0x0, 0x80000001, [{0x9, 0x2, 0x4e}, {0xd, 0x0, 0xffffffff}]}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @enum={0x3, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x5}, {0x9, 0x2}, {0x0, 0xff}, {0x6, 0x81}, {0x5, 0xfffffffe}, {0xc, 0xcb3d}, {0xb, 0x9}, {0x1}]}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x0, 0xe}, {0x4, 0xb, 0x81}, {0x4, 0x50a4, 0x5}, {0x4, 0x1, 0x4}, {0x3, 0x10000, 0xd7d7}], "9c"}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x41]}}, &(0x7f0000000640)=""/229, 0x173, 0xe5, 0x1, 0x1ff, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1}, 0x0, &(0x7f0000000400)='%-010d \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES64=0x0, @ANYRES16=r5, @ANYRESOCT, @ANYRES16=r2, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x44378000) 11.987590308s ago: executing program 6 (id=5622): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x0, 0x81, 0x3, 0xb1, 0x7, 0x0, 0xfff4, 0x20000000, [{0x0, 0x6, 0x5, 0x1ff}, {0x2, 0x2, 0xe, 0x88}, {0x101, 0x18000000, 0x9, 0x7b000000}]}}, @TCA_U32_INDEV={0x14, 0x8, 'macvtap0\x00'}]}}]}, 0x88}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.329459322s ago: executing program 5 (id=5624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) getpgid(0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioperm(0x0, 0x9, 0xd648) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}, 0x0) sendmmsg$unix(r6, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11]) 9.596555921s ago: executing program 5 (id=5629): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) r6 = syz_io_uring_setup(0x2a20, 0x0, 0x0, &(0x7f00000002c0)) creat(0x0, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESOCT, @ANYRES64=r6, @ANYRES32, @ANYRESDEC=r2], 0x50) fremovexattr(r4, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000204000000ffffffff12bf000000022000a3ca0aaa89e94596ce02173153767bd6c68079564e71f99d9fb1bf84f151ff8b8e3bfa2ed3d4ff85ca417775ee02af886aa7407dcef23bb5263a8ce3da5e9aa85bf019ea600700d479431c317c72a161fc43c6f3221d238d17da18912a2ac631bf8366305fe1ea145632d8a99e41967cce34691bd6ff9232bb4a067c48edd6f71bec24ea49613dc04db46643a49b4ef1080819e07f9e6adaa35bac2032efce1e327f67547d8b66b46a721bf8b58d8c84322db47839ee3bdb5707b0b3acbf8cb2e9dde6841a72852b04cd2f85c2ba37675816ae5c1e0eb9ab4bc438c16865619f9e62", @ANYRESDEC=r7, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200000000000300"/28], 0x50) ioctl$SIOCAX25DELUID(r7, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x12) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x19, 0x0, 0x1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 6.719523785s ago: executing program 2 (id=5635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="5e86c0b1a7b82799275f56f2", 0xc}, {&(0x7f0000002640)="8913e5ca447649090a43ff964a4457b941cf3ba22d3ed35b6d989c947f5d61b69d1b94a89cda54406f1015ed0b07b95cd08895025f23d728c18b18ea5ecaff37458c68a6ad79c8938c04dce6434926026eface8da673f509573f5ecfe548f9b1455dfcdae4d6bb7ca04eb0c12caaa336ca32917cc4c0b7d520f8742da8bfb7819ba7ee970adf9d39614787482ae12647093574feacbc2bffa807d616362318b8f607872bc38bd2ad88c02e604c45defc830d701d87c7aaf5c1816630a7", 0xbd}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}}], 0x1, 0x41, 0x0) (fail_nth: 1) 6.461901979s ago: executing program 0 (id=5637): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 6.416008444s ago: executing program 0 (id=5638): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (fail_nth: 1) 6.321563452s ago: executing program 2 (id=5639): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/54, 0x36}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 6.286898784s ago: executing program 2 (id=5640): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x1402, 0x1}, 0x10}}, 0x44890) (fail_nth: 1) 5.832030777s ago: executing program 0 (id=5641): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x0, 0x8b}, 0x0) dup(r1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [], "fb36eeca6fad50b340972a58"}}}}}}}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) sendmsg$sock(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="b3dd364511b4b16c459b0ed8a6d7956e02f8273b21b05bd87b84bacdcd8bdafdb1752d77fdf9ad127949b666f97501739434e8d8e5390d3a919c898d9337b3e58f2d70d2d9e2c97ca5cdb997a165dd33fd92567ff81bee2c2eecac3ea1", 0x5d}, {&(0x7f0000000380)="f93a8c37d677ca4425e20cd9acdf13a86d0d64f2286a716faf13ccc77264d97df25330144355c96257c217376cbe9d425162eb684f41c8c9b6ddb53e2824dcf73c39e5d4e9eaea358b28b2680a440f2a", 0x50}, {&(0x7f0000000240)="ad09ee0ab31199311ab99ea3635a1ea1c431affb461e0eaec4c0480e3e2757d16d2e4ff1e65b4c15", 0x28}], 0x3, &(0x7f0000000400)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x48}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 5.789529734s ago: executing program 2 (id=5642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x1000, 0x10001, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010102, 0x2, 0xfffe, 0x4e1d, 0x0, 0xa}, {0x9, 0x9, 0x7f, 0x54ab, 0x0, 0x0, 0x8000, 0x2}, {0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x0, 0x1, 0x2, 0x0, 0x3, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xd8, 0x24004810}], 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) close(0x4) 5.611111825s ago: executing program 0 (id=5643): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x8001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() keyctl$session_to_parent(0x12) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4}) 4.483100006s ago: executing program 0 (id=5644): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0fb3162f00760c66360f09ded926f36df30f7fed66b9630300000f320f01c90fc75e00ba430066b84b00000066ef", 0x2e}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x8080000, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00'}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r8], 0x20}}, 0x0) close(0x3) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000340)={0xd5, 0x0, 0x4}) 4.184256312s ago: executing program 2 (id=5645): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x2000}, {}, 0x0, 0x3502, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r1, @ANYBLOB="000000000000010020001280080001006772650014000280060010"], 0x40}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r7, &(0x7f00000011c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @a_listen={0x9, 0x2, 0x2, 0x80, 0x2, 0x5, 0x2, "", 0x1, 0x4, 0x5, 0x9, 0x1, "ed"}}, 0x10) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x31, 0x83, "9048bb5a64691e855268cfd05470cf824a5a1a77fb051ee86835481db3c980df35440c8c70f8960ac54fcf74705669e892bc796a1b03685aeb62704a4d5415ce7b6e2bdd3a6c3b7bfeef1ce84ace037d526555817ffdd1e0dc81ec4b9e0466c146a107a50bfd1bb3aa49a2fb86c88bf18e5d83352d40b45d5ab9ae2c5ae19916df6e55"}, 0x0, 0x0}) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r12, 0x894b, &(0x7f0000000600)) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0xfd, &(0x7f0000000600)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x41424344, @ANYRES16=r0, @ANYRES8=r6], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) 2.302585226s ago: executing program 5 (id=5646): mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) 2.28893551s ago: executing program 6 (id=5647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x40, 0x2, 0x6}}, 0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0x10}}, 0x5, 0x5, 0x4, 0x3ff, 0x5ba9}, &(0x7f00000001c0)=0x98) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x7) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000300)={0x1, 0x3}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x94d8}, 0x8) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x40, 0x2, 0x6}}, 0x14) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0x10}}, 0x5, 0x5, 0x4, 0x3ff, 0x5ba9}, &(0x7f00000001c0)=0x98) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x7) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000300)={0x1, 0x3}) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x94d8}, 0x8) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6}]}) (async) 2.169433955s ago: executing program 4 (id=5648): socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) getuid() setregid(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 1) 2.127157281s ago: executing program 0 (id=5649): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003978959201011009011f40102030109021200017f06b0050904"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xca9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x80, 0x5, {0x7, 0x25, 0x1, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x9, 0x8, {0x7, 0x25, 0x1, 0x2, 0x4, 0x2e7}}}}}}}]}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) getdents64(r2, &(0x7f0000000880)=""/235, 0xeb) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) getuid() setregid(0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = dup3(r4, r6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x0, 0x5, 0x2}, {0x1, 0x3}, 0x7, 0x100}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x47, 0x4, 0x7, 'syz0\x00', 'syz1\x00', {0x5a36c414}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x9000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x1, 0x2, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8000, 0x0, 0x0, 0x0, 0x40007fffffff}, 0x0, 0x0) 1.826730241s ago: executing program 4 (id=5650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 1.721441978s ago: executing program 6 (id=5651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000340)={0x13, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="400000000300594851680402030000000000000000001bfbff0000000000ddf5c43aa1e6fc65282cd9113be63607756051a8c195ecb502efc0b89430faaa5fe2027e17325dd716de0b4c7178e3eb068010d6bde4b59ba8301d75983f391a0085e99aa3276e1c0893d108744f95a41f4eaeae22706d0f3b2febdf06c8336a614ae4a46c100d4d462f1b3ee2ba8ceb1fa61430ca582b2576b120009307"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000300)={0x11, r6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) unshare(0x2a020400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x8850) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 1.102069347s ago: executing program 5 (id=5652): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 673.167818ms ago: executing program 6 (id=5653): mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) (async, rerun: 32) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) (rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="380000000314010027bd7000000000000900020073797a320000000008004100c9697700140033007465616d30"], 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000840)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="40085a0000005a2269fa67dceebe952fb74d675423f69932de6886a556106617133a5c5883ebf41867887192e8542989f6cc58c3be38b004a8d89331017ce5d265c1b8ee596e7ba0e330d9c8ac4ecc7d586a54e9383938c90100000000000000"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)={0x20, 0x30, 0xa7, "e0d87daf9c946997d5af467db07f56295414716cfae216db64dcbe685d59332095dccffe085d030fb2bb29a8bb7dd8d3ceed8af8a29ffef30c8fa71f93f50e3368a0b6c531cac200d0d0563bb36419e56d98413f18ed009db80e07b768ad283fe3952057f538a66d3c4e3aff4cc5f166a277b674479b52e2e7a6b5915f7da94e141aea33c29e0d443aa450a28f0768aecee0a7498724451e75b08bb0db42fe0d7d058d599ad04b"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}}) (async, rerun: 64) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) splice(r4, &(0x7f0000000380)=0x4, r1, &(0x7f00000003c0)=0x3, 0xffffffffffffffaf, 0x9) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00'}, 0x18) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) (async) iopl(0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x43, 0xa0, 0xb8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0xff000000, 0x0, 'caif0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9, 0x3}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc, {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xe, 0x4, 0x1, 0x0, 0x3, 0x4], 0x0, 0x9}, {0x3, [0x0, 0x1, 0x5, 0x7], 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) (async, rerun: 64) r7 = accept4(r4, 0x0, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="73912bbd7000fbdbdf251900000008000300", @ANYRES32=r10, @ANYBLOB="0500a30001000000050060"], 0x2c}}, 0xc0050) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3aa0}}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 540.506138ms ago: executing program 4 (id=5654): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe80000000000000000000000000001514"], 0x68}}, 0x0) 451.887274ms ago: executing program 2 (id=5655): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) r6 = syz_io_uring_setup(0x2a20, 0x0, 0x0, &(0x7f00000002c0)) creat(0x0, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESOCT, @ANYRES64=r6, @ANYRES32, @ANYRESDEC=r2], 0x50) fremovexattr(r4, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000204000000ffffffff12bf000000022000a3ca0aaa89e94596ce02173153767bd6c68079564e71f99d9fb1bf84f151ff8b8e3bfa2ed3d4ff85ca417775ee02af886aa7407dcef23bb5263a8ce3da5e9aa85bf019ea600700d479431c317c72a161fc43c6f3221d238d17da18912a2ac631bf8366305fe1ea145632d8a99e41967cce34691bd6ff9232bb4a067c48edd6f71bec24ea49613dc04db46643a49b4ef1080819e07f9e6adaa35bac2032efce1e327f67547d8b66b46a721bf8b58d8c84322db47839ee3bdb5707b0b3acbf8cb2e9dde6841a72852b04cd2f85c2ba37675816ae5c1e0eb9ab4bc438c16865619f9e62", @ANYRESDEC=r7, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200000000000300"/28], 0x50) ioctl$SIOCAX25DELUID(r7, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x12) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x19, 0x0, 0x1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 427.048415ms ago: executing program 4 (id=5656): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e63, 0x0, @rand_addr, 0x7}, 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 236.017131ms ago: executing program 6 (id=5657): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002000)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r1, 0x5411, &(0x7f0000000000)={'gretap0\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x200000000000024d, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0xffffffffffffffc5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 25.518893ms ago: executing program 5 (id=5658): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, 0x0) io_uring_setup(0x663f, &(0x7f0000000080)={0x0, 0x86dc, 0x400, 0xfffffffc, 0xffffffff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$peekuser(0x3, r1, 0x3) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet6(r5, &(0x7f0000001600)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000010c0)="bf", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet6(r5, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/128, 0x80}], 0x1, 0xc002a0, 0x101) syz_init_net_socket$bt_rfcomm(0x1f, 0x39f87215a8594e35, 0x3) 0s ago: executing program 4 (id=5659): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = io_uring_setup(0x4ba2, &(0x7f0000000280)={0x0, 0xb6fc, 0x400, 0x0, 0x81}) r1 = io_uring_setup(0x530c, &(0x7f0000000080)={0x0, 0x60ab, 0x400, 0x3, 0x3ba, 0x0, r0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_setup(0x26fd, &(0x7f0000000000)={0x0, 0x2000ecbb, 0x40, 0x3, 0x3d, 0x0, r1}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r2) socket$rxrpc(0x21, 0x2, 0xa) io_uring_setup(0x4c2d, &(0x7f0000000480)={0x0, 0x6e21, 0x8, 0x2, 0x1ee}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) kernel console output (not intermixed with test programs): New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1630.548252][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.636247][ T51] usb 5-1: config 0 descriptor?? [ 1630.802240][T24712] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1630.826000][T24712] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.107131][ T51] ft260 0003:0403:6030.005F: unknown main item tag 0x0 [ 1631.494086][ T51] ft260 0003:0403:6030.005F: chip code: 0000 0000 [ 1631.883759][T24712] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.022020][T24712] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.307721][T24712] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.316832][T24712] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.371051][T24712] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.380327][T24712] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.395485][T24712] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1632.404052][T24712] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.797453][ T51] usb 5-1: USB disconnect, device number 112 [ 1634.054703][T24753] rdma_rxe: rxe_newlink: failed to add lo [ 1634.119084][ T51] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1634.522395][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1634.622938][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.637582][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.648395][ T51] usb 5-1: Product: syz [ 1634.652638][ T51] usb 5-1: Manufacturer: syz [ 1634.682357][ T51] usb 5-1: SerialNumber: syz [ 1634.812001][T24746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1635.339107][ T51] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1635.414709][T24764] smc: removing ib device sz1 [ 1635.499983][ T51] usb 5-1: USB disconnect, device number 113 [ 1636.022535][ T51] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1636.193409][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 1636.201966][ T51] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 1636.210267][ T51] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1636.296310][ T51] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1636.333534][ T51] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1636.356614][ T51] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.381689][ T51] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 1636.393072][ T51] usb 5-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 1636.406745][ T51] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1636.416607][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.467609][T24746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1636.699181][ T51] usb 5-1: usb_control_msg returned -32 [ 1636.716799][ T51] usbtmc 5-1:16.0: can't read capabilities [ 1636.734365][ T51] usb 5-1: USB disconnect, device number 114 [ 1637.271811][T24797] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.424196][T24797] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.944170][T24797] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.482269][T24797] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.023672][T24797] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.060086][T24797] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.093491][T24797] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.188027][T24797] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.752701][T13455] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1640.372782][T13455] usb 5-1: Using ep0 maxpacket: 16 [ 1640.390142][T13455] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1640.403696][T13455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.416114][T13455] usb 5-1: Product: syz [ 1640.424817][T13455] usb 5-1: Manufacturer: syz [ 1640.429877][T13455] usb 5-1: SerialNumber: syz [ 1640.529224][T13455] usb 5-1: config 0 descriptor?? [ 1640.870434][T24819] random: crng reseeded on system resumption [ 1640.890014][T13455] as10x_usb: device has been detected [ 1640.895963][T13455] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1640.951523][T13455] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1641.048722][T13455] as10x_usb: error during firmware upload part1 [ 1641.066237][T13455] Registered device Sky IT Digital Key (green led) [ 1643.125625][T13455] usb 5-1: USB disconnect, device number 115 [ 1643.152786][T13455] Unregistered device Sky IT Digital Key (green led) [ 1643.187649][T13455] as10x_usb: device has been disconnected [ 1643.738071][T24857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1643.750081][T24857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1644.188020][T24869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1645.457710][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1645.554909][T24889] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5218'. [ 1645.575416][T24892] FAULT_INJECTION: forcing a failure. [ 1645.575416][T24892] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.608447][T24892] CPU: 0 UID: 0 PID: 24892 Comm: syz.5.5219 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1645.619260][T24892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1645.629344][T24892] Call Trace: [ 1645.632621][T24892] [ 1645.635540][T24892] dump_stack_lvl+0x16c/0x1f0 [ 1645.640216][T24892] should_fail_ex+0x497/0x5b0 [ 1645.644885][T24892] ? fs_reclaim_acquire+0xae/0x150 [ 1645.650000][T24892] should_failslab+0xc2/0x120 [ 1645.654683][T24892] __kmalloc_cache_noprof+0x68/0x410 [ 1645.659966][T24892] ? find_held_lock+0x2d/0x110 [ 1645.664755][T24892] rtnl_newlink+0x10b/0x1ce0 [ 1645.669385][T24892] ? hlock_class+0x4e/0x130 [ 1645.673882][T24892] ? __lock_acquire+0xcc5/0x3c40 [ 1645.678814][T24892] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.683848][T24892] ? __pfx___lock_acquire+0x10/0x10 [ 1645.689048][T24892] ? cred_has_capability.isra.0+0x192/0x2f0 [ 1645.694932][T24892] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1645.701166][T24892] ? find_held_lock+0x2d/0x110 [ 1645.705923][T24892] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 1645.711025][T24892] ? __pfx_lock_release+0x10/0x10 [ 1645.716035][T24892] ? trace_lock_acquire+0x14e/0x1f0 [ 1645.721232][T24892] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.726255][T24892] rtnetlink_rcv_msg+0x95b/0xea0 [ 1645.731187][T24892] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1645.736646][T24892] netlink_rcv_skb+0x16b/0x440 [ 1645.741417][T24892] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1645.746878][T24892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1645.752267][T24892] ? netlink_deliver_tap+0x1ae/0xd30 [ 1645.757624][T24892] netlink_unicast+0x53c/0x7f0 [ 1645.762608][T24892] ? __pfx_netlink_unicast+0x10/0x10 [ 1645.767963][T24892] netlink_sendmsg+0x8b8/0xd70 [ 1645.772725][T24892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.778022][T24892] ____sys_sendmsg+0xaaf/0xc90 [ 1645.782803][T24892] ? copy_msghdr_from_user+0x10b/0x160 [ 1645.788281][T24892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.793596][T24892] ___sys_sendmsg+0x135/0x1e0 [ 1645.798329][T24892] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.803539][T24892] ? __pfx_lock_release+0x10/0x10 [ 1645.808577][T24892] ? trace_lock_acquire+0x14e/0x1f0 [ 1645.813771][T24892] ? __fget_files+0x206/0x3a0 [ 1645.818436][T24892] __sys_sendmsg+0x16e/0x220 [ 1645.823032][T24892] ? __pfx___sys_sendmsg+0x10/0x10 [ 1645.828168][T24892] do_syscall_64+0xcd/0x250 [ 1645.832702][T24892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.838588][T24892] RIP: 0033:0x7feeeb97ff19 [ 1645.842987][T24892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.862585][T24892] RSP: 002b:00007feeec781058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.870994][T24892] RAX: ffffffffffffffda RBX: 00007feeebb45fa0 RCX: 00007feeeb97ff19 [ 1645.878962][T24892] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 [ 1645.886956][T24892] RBP: 00007feeec7810a0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.894932][T24892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.902906][T24892] R13: 0000000000000000 R14: 00007feeebb45fa0 R15: 00007ffea82c8fc8 [ 1645.910869][T24892] [ 1645.913957][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.075880][ T29] audit: type=1400 audit(2000000287.457:1165): avc: denied { bind } for pid=24897 comm="syz.5.5222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1646.790223][T24896] syzkaller0: entered promiscuous mode [ 1646.795759][T24896] syzkaller0: entered allmulticast mode [ 1650.823818][T24914] macvlan0: entered allmulticast mode [ 1650.831529][T24914] veth1_vlan: entered allmulticast mode [ 1651.683750][T21257] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1651.840373][T24947] serio: Serial port ptm0 [ 1651.854623][T21257] usb 6-1: Using ep0 maxpacket: 16 [ 1651.874890][T24949] netlink: 'syz.2.5234': attribute type 4 has an invalid length. [ 1651.878101][T21257] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.929513][T21257] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.959980][T21257] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1651.984108][T21257] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1651.999792][T21257] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1652.013063][T21257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.031048][T21257] usb 6-1: config 0 descriptor?? [ 1652.168535][T13149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1652.184139][T13149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1652.193069][T13149] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1652.201579][T13149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1652.211743][T13149] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1652.219499][T13149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1652.480212][T21257] hid-generic 0003:045E:05DA.0060: unknown main item tag 0x0 [ 1652.503440][T21257] hid-generic 0003:045E:05DA.0060: unknown main item tag 0x0 [ 1652.515302][T21257] hid-generic 0003:045E:05DA.0060: unknown main item tag 0x0 [ 1652.526122][T21257] hid-generic 0003:045E:05DA.0060: unbalanced collection at end of report description [ 1652.547277][T21257] hid-generic 0003:045E:05DA.0060: probe with driver hid-generic failed with error -22 [ 1652.603764][T24950] chnl_net:caif_netlink_parms(): no params data found [ 1652.970480][T24950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.987309][T24950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.040363][T24950] bridge_slave_0: entered allmulticast mode [ 1653.368217][T24950] bridge_slave_0: entered promiscuous mode [ 1653.401596][T24950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.438073][T24950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.469339][T24950] bridge_slave_1: entered allmulticast mode [ 1653.501396][T24950] bridge_slave_1: entered promiscuous mode [ 1653.559197][T21257] usb 6-1: USB disconnect, device number 49 [ 1653.571280][T24950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1653.584365][T24950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1653.978562][T24950] team0: Port device team_slave_0 added [ 1654.410685][T24950] team0: Port device team_slave_1 added [ 1654.431387][T13149] Bluetooth: hci6: command tx timeout [ 1654.925936][T24950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.932941][T24950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.011234][T24950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.078542][T24950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.113965][T24950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.218617][T24950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.877660][T24950] hsr_slave_0: entered promiscuous mode [ 1655.898324][T24950] hsr_slave_1: entered promiscuous mode [ 1655.906012][T24950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1655.925635][T24950] Cannot create hsr debugfs directory [ 1655.971689][ T25] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1656.153586][T25007] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.239623][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1656.273845][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1656.304118][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1656.333563][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.342217][T25007] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.369913][T25002] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1656.382752][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1656.537993][T25007] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.666902][ T5819] Bluetooth: hci6: command tx timeout [ 1656.679435][T24997] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1656.686077][T24997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1656.693856][T24997] vhci_hcd vhci_hcd.0: Device attached [ 1656.762502][T25007] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.953942][ T8] usb 41-1: new low-speed USB device number 12 using vhci_hcd [ 1656.970777][T24950] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1657.013142][T24950] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1657.047335][T24950] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1657.071068][T24950] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1657.155005][T25007] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.231099][T25007] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.314676][T25007] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.433361][T25007] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.639342][T24950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.678617][T24950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1657.706682][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.713885][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.171301][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.178492][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.271373][T25014] vhci_hcd: connection reset by peer [ 1658.335936][ T25] usb 5-1: USB disconnect, device number 116 [ 1658.537747][ T66] vhci_hcd: stop threads [ 1658.542070][ T66] vhci_hcd: release socket [ 1658.558010][ T66] vhci_hcd: disconnect device [ 1658.782239][ T5906] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1658.823185][T24950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.945180][ T5906] usb 3-1: device descriptor read/64, error -71 [ 1658.951604][ T5819] Bluetooth: hci6: command 0x040f tx timeout [ 1658.997646][ T25] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1659.180081][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1659.201375][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.215702][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.241732][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1659.370258][ T25] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1659.379480][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.404624][ T25] usb 5-1: config 0 descriptor?? [ 1659.498571][ T5906] usb 3-1: device descriptor read/64, error -71 [ 1659.617191][ T5906] usb usb3-port1: attempt power cycle [ 1659.698470][T24950] veth0_vlan: entered promiscuous mode [ 1659.746160][T24950] veth1_vlan: entered promiscuous mode [ 1659.773800][T24950] veth0_macvtap: entered promiscuous mode [ 1659.782721][T24950] veth1_macvtap: entered promiscuous mode [ 1659.798542][T24950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.809441][T24950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.821143][T24950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.842860][T24950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.853753][T24950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.865103][T24950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1659.878415][T24950] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.887385][T24950] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.896581][T24950] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.905904][T24950] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.930917][ T25] ft260 0003:0403:6030.0061: unknown main item tag 0x6 [ 1659.990056][ T5906] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1660.023556][ T5906] usb 3-1: device descriptor read/8, error -71 [ 1660.060644][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.069193][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.126065][ T29] audit: type=1400 audit(2000000300.600:1166): avc: denied { connect } for pid=25053 comm="syz.0.5257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1660.146724][ T25] ft260 0003:0403:6030.0061: failed to retrieve chip version [ 1660.156257][ T25] ft260 0003:0403:6030.0061: probe with driver ft260 failed with error -32 [ 1660.195057][T16399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.202975][T16399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.245250][ T25] usb 5-1: USB disconnect, device number 117 [ 1660.279091][ T5906] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1660.311733][ T5906] usb 3-1: device descriptor read/8, error -71 [ 1660.450236][ T5906] usb usb3-port1: unable to enumerate USB device [ 1661.145278][ T5819] Bluetooth: hci6: command 0x040f tx timeout [ 1662.563356][T25077] netlink: 'syz.4.5262': attribute type 1 has an invalid length. [ 1662.598626][ T8] vhci_hcd: vhci_device speed not set [ 1663.349141][ T5819] Bluetooth: hci6: command 0x040f tx timeout [ 1663.788906][T25095] tmpfs: Bad value for 'mpol' [ 1664.975622][T25108] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5268'. [ 1665.181409][T25111] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 1665.199455][ T29] audit: type=1400 audit(2000000305.323:1167): avc: denied { relabelfrom } for pid=25110 comm="syz.4.5271" name="SCTP" dev="sockfs" ino=116834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1665.581339][ T29] audit: type=1400 audit(2000000305.398:1168): avc: denied { relabelto } for pid=25110 comm="syz.4.5271" name="SCTP" dev="sockfs" ino=116834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 1665.650592][T25116] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.505564][T25131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5275'. [ 1666.570411][ T29] audit: type=1400 audit(2000000306.624:1169): avc: denied { bind } for pid=25130 comm="syz.0.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1666.571226][T25116] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.656556][T25140] FAULT_INJECTION: forcing a failure. [ 1666.656556][T25140] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.669674][T25140] CPU: 1 UID: 0 PID: 25140 Comm: syz.5.5279 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1666.680471][T25140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1666.690542][T25140] Call Trace: [ 1666.693832][T25140] [ 1666.696771][T25140] dump_stack_lvl+0x16c/0x1f0 [ 1666.701473][T25140] should_fail_ex+0x497/0x5b0 [ 1666.706176][T25140] ? fs_reclaim_acquire+0xae/0x150 [ 1666.711317][T25140] should_failslab+0xc2/0x120 [ 1666.716017][T25140] __kmalloc_noprof+0xcb/0x510 [ 1666.720803][T25140] ? rcu_is_watching+0x12/0xc0 [ 1666.725590][T25140] tomoyo_encode2+0x100/0x3e0 [ 1666.730291][T25140] tomoyo_encode+0x29/0x50 [ 1666.734723][T25140] tomoyo_realpath_from_path+0x19d/0x720 [ 1666.740383][T25140] ? tomoyo_path_number_perm+0x235/0x590 [ 1666.746022][T25140] tomoyo_path_number_perm+0x248/0x590 [ 1666.751480][T25140] ? tomoyo_path_number_perm+0x235/0x590 [ 1666.757130][T25140] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1666.763151][T25140] ? __pfx_lock_release+0x10/0x10 [ 1666.768227][T25140] ? trace_lock_acquire+0x14e/0x1f0 [ 1666.773441][T25140] ? lock_acquire+0x2f/0xb0 [ 1666.777941][T25140] ? __fget_files+0x40/0x3a0 [ 1666.782533][T25140] ? __fget_files+0x206/0x3a0 [ 1666.787209][T25140] security_file_ioctl+0x9b/0x240 [ 1666.792300][T25140] __x64_sys_ioctl+0xb7/0x200 [ 1666.796983][T25140] do_syscall_64+0xcd/0x250 [ 1666.801487][T25140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.807378][T25140] RIP: 0033:0x7feeeb97ff19 [ 1666.811788][T25140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1666.831410][T25140] RSP: 002b:00007feeec781058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1666.839818][T25140] RAX: ffffffffffffffda RBX: 00007feeebb45fa0 RCX: 00007feeeb97ff19 [ 1666.847789][T25140] RDX: 0000000020000000 RSI: 00000000400442c9 RDI: 0000000000000004 [ 1666.855757][T25140] RBP: 00007feeec7810a0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.863720][T25140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.871687][T25140] R13: 0000000000000000 R14: 00007feeebb45fa0 R15: 00007ffea82c8fc8 [ 1666.879674][T25140] [ 1666.885191][T25140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1667.049238][T25116] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.004538][T25116] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.496426][T25116] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.514406][T25116] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.528870][T25116] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.546107][T25116] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.825548][T25158] IPVS: stopping backup sync thread 25161 ... [ 1668.828983][T25161] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1668.913615][T25160] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5283'. [ 1672.831013][T13470] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1672.896068][T13455] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1673.075399][T13455] usb 3-1: device descriptor read/64, error -71 [ 1673.155338][T13470] usb 6-1: Using ep0 maxpacket: 16 [ 1673.166567][T13470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1673.186568][T13470] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1673.857834][T13470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.880112][T13455] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1673.891527][T13470] usb 6-1: Product: syz [ 1673.896310][T13470] usb 6-1: Manufacturer: syz [ 1673.897595][T25226] tmpfs: Bad value for 'mpol' [ 1673.901112][T13470] usb 6-1: SerialNumber: syz [ 1673.987943][T13470] usb 6-1: config 0 descriptor?? [ 1673.994573][T13470] hub 6-1:0.0: bad descriptor, ignoring hub [ 1674.000691][T13470] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1674.010981][T13470] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input83 [ 1674.026881][T13455] usb 3-1: device descriptor read/64, error -71 [ 1674.145901][T13455] usb usb3-port1: attempt power cycle [ 1674.270081][T25236] FAULT_INJECTION: forcing a failure. [ 1674.270081][T25236] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.308764][T25236] CPU: 0 UID: 0 PID: 25236 Comm: syz.0.5309 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1674.319602][T25236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1674.329663][T25236] Call Trace: [ 1674.332943][T25236] [ 1674.335871][T25236] dump_stack_lvl+0x16c/0x1f0 [ 1674.340554][T25236] should_fail_ex+0x497/0x5b0 [ 1674.345296][T25236] ? fs_reclaim_acquire+0xae/0x150 [ 1674.350414][T25236] should_failslab+0xc2/0x120 [ 1674.355092][T25236] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1674.360467][T25236] ? vma_merge_new_range+0x3f0/0xb70 [ 1674.365749][T25236] ? vm_area_dup+0x53/0x2f0 [ 1674.370263][T25236] vm_area_dup+0x53/0x2f0 [ 1674.374595][T25236] copy_vma+0x4fd/0xa90 [ 1674.378753][T25236] ? __pfx_copy_vma+0x10/0x10 [ 1674.383435][T25236] ? move_vma+0x5c7/0x1c60 [ 1674.387864][T25236] ? up_write+0x1b2/0x520 [ 1674.392194][T25236] move_vma+0x640/0x1c60 [ 1674.396439][T25236] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1674.403103][T25236] ? __pfx_move_vma+0x10/0x10 [ 1674.407800][T25236] ? __pfx_mtree_load+0x10/0x10 [ 1674.412727][T25236] ? selinux_mmap_addr+0x2b/0x110 [ 1674.417766][T25236] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1674.422633][T25236] ? security_mmap_addr+0x6c/0x1e0 [ 1674.427758][T25236] __do_sys_mremap+0xfc7/0x15e0 [ 1674.432619][T25236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1674.438617][T25236] ? __pfx___do_sys_mremap+0x10/0x10 [ 1674.443919][T25236] ? __fget_files+0x206/0x3a0 [ 1674.448595][T25236] ? fput+0x67/0x440 [ 1674.452490][T25236] ? ksys_write+0x1ba/0x250 [ 1674.456985][T25236] ? __pfx_ksys_write+0x10/0x10 [ 1674.461839][T25236] do_syscall_64+0xcd/0x250 [ 1674.466347][T25236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.472235][T25236] RIP: 0033:0x7fb5ddf7ff19 [ 1674.476646][T25236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1674.496250][T25236] RSP: 002b:00007fb5ded09058 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1674.504688][T25236] RAX: ffffffffffffffda RBX: 00007fb5de145fa0 RCX: 00007fb5ddf7ff19 [ 1674.512835][T25236] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 1674.520818][T25236] RBP: 00007fb5ded090a0 R08: 0000000020000000 R09: 0000000000000000 [ 1674.528787][T25236] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1674.536754][T25236] R13: 0000000000000000 R14: 00007fb5de145fa0 R15: 00007ffd95300338 [ 1674.544737][T25236] [ 1674.655778][T25242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25242 comm=syz.5.5299 [ 1674.672449][T13455] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1674.701112][T13455] usb 3-1: device descriptor read/8, error -71 [ 1674.752301][T25207] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 1674.783282][T25207] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 1675.427268][T13455] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1675.451924][T13455] usb 3-1: device descriptor read/8, error -71 [ 1675.705361][T13455] usb usb3-port1: unable to enumerate USB device [ 1676.055298][T25262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1676.860987][T25267] rdma_rxe: rxe_newlink: failed to add lo [ 1676.989609][ T25] usb 6-1: USB disconnect, device number 50 [ 1677.298978][T25272] rdma_rxe: rxe_newlink: failed to add lo [ 1678.020692][T25273] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.5317'. [ 1678.043974][T25273] openvswitch: netlink: Flow actions attr not present in new flow. [ 1678.311726][T25286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1678.531204][ T29] audit: type=1400 audit(2000000317.755:1170): avc: denied { append } for pid=25281 comm="syz.2.5321" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1678.841059][T25274] vivid-007: kernel_thread() failed [ 1679.142236][T25298] FAULT_INJECTION: forcing a failure. [ 1679.142236][T25298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1679.177355][T25298] CPU: 0 UID: 0 PID: 25298 Comm: syz.4.5326 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1679.188177][T25298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1679.198254][T25298] Call Trace: [ 1679.201541][T25298] [ 1679.204476][T25298] dump_stack_lvl+0x16c/0x1f0 [ 1679.209157][T25298] should_fail_ex+0x497/0x5b0 [ 1679.213827][T25298] _copy_to_user+0x32/0xd0 [ 1679.218244][T25298] simple_read_from_buffer+0xd0/0x160 [ 1679.223615][T25298] proc_fail_nth_read+0x198/0x270 [ 1679.228646][T25298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1679.234211][T25298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1679.239764][T25298] vfs_read+0x1df/0xbe0 [ 1679.243918][T25298] ? __fget_files+0x1fc/0x3a0 [ 1679.248611][T25298] ? __pfx___mutex_lock+0x10/0x10 [ 1679.253624][T25298] ? __pfx_vfs_read+0x10/0x10 [ 1679.258303][T25298] ? __fget_files+0x206/0x3a0 [ 1679.262965][T25298] ksys_read+0x12b/0x250 [ 1679.267192][T25298] ? __pfx_ksys_read+0x10/0x10 [ 1679.271948][T25298] do_syscall_64+0xcd/0x250 [ 1679.276436][T25298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.282329][T25298] RIP: 0033:0x7f988f37e92c [ 1679.286749][T25298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1679.306368][T25298] RSP: 002b:00007f9890256050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1679.314769][T25298] RAX: ffffffffffffffda RBX: 00007f988f545fa0 RCX: 00007f988f37e92c [ 1679.322726][T25298] RDX: 000000000000000f RSI: 00007f98902560b0 RDI: 0000000000000003 [ 1679.330686][T25298] RBP: 00007f98902560a0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.338647][T25298] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1679.346618][T25298] R13: 0000000000000000 R14: 00007f988f545fa0 R15: 00007ffd559e27e8 [ 1679.354604][T25298] [ 1680.467751][T25314] rdma_rxe: rxe_newlink: failed to add lo [ 1680.681938][T25308] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 1680.688564][T25308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1680.696298][T25308] vhci_hcd vhci_hcd.0: Device attached [ 1681.272498][ T8] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1681.540491][T25325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5334'. [ 1683.388683][T25313] vhci_hcd: connection reset by peer [ 1683.573904][ T4392] vhci_hcd: stop threads [ 1683.579624][ T4392] vhci_hcd: release socket [ 1683.607208][ T4392] vhci_hcd: disconnect device [ 1684.833870][T25360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5345'. [ 1685.108207][T25368] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1685.121918][T25368] openvswitch: netlink: Flow actions attr not present in new flow. [ 1686.366729][ T29] audit: type=1400 audit(2000000325.145:1171): avc: denied { map } for pid=25384 comm="syz.4.5352" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1686.425605][ T29] audit: type=1400 audit(2000000325.201:1172): avc: denied { setattr } for pid=25384 comm="syz.4.5352" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1687.048010][T13455] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1687.058666][ T8] vhci_hcd: vhci_device speed not set [ 1687.533810][T13455] usb 3-1: Using ep0 maxpacket: 8 [ 1687.555500][T13455] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 1687.565028][T13455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.575852][T13455] usb 3-1: Product: syz [ 1687.580050][T13455] usb 3-1: Manufacturer: syz [ 1687.595761][T13455] usb 3-1: SerialNumber: syz [ 1687.607349][T13455] usb 3-1: config 0 descriptor?? [ 1687.629883][T13455] hub 3-1:0.0: bad descriptor, ignoring hub [ 1687.650360][T13455] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1687.673382][T13455] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1688.010889][ T25] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1688.192057][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1688.204705][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.391244][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.417631][ T5829] usb 3-1: USB disconnect, device number 21 [ 1688.445507][ T25] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1688.486781][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.516143][ T25] usb 5-1: config 0 descriptor?? [ 1689.222660][ T25] ft260 0003:0403:6030.0062: unknown main item tag 0x6 [ 1689.445528][ T25] ft260 0003:0403:6030.0062: failed to retrieve chip version [ 1689.534225][ T25] ft260 0003:0403:6030.0062: probe with driver ft260 failed with error -71 [ 1689.660137][T25411] rdma_rxe: rxe_newlink: failed to add lo [ 1690.003933][ T25] usb 5-1: USB disconnect, device number 118 [ 1690.417228][T25418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5362'. [ 1690.427299][T25418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5362'. [ 1691.620940][T25434] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5366'. [ 1692.971173][T25452] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.5371'. [ 1693.002896][T25452] openvswitch: netlink: Flow actions attr not present in new flow. [ 1693.603066][ T5829] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1693.804511][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 1693.872767][ T5829] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 1694.350314][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.491599][ T5829] usb 3-1: Product: syz [ 1694.507792][ T5829] usb 3-1: Manufacturer: syz [ 1694.608088][T25476] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1695.091370][ T5829] usb 3-1: SerialNumber: syz [ 1695.098500][ T5829] usb 3-1: config 0 descriptor?? [ 1695.104914][ T5829] hub 3-1:0.0: bad descriptor, ignoring hub [ 1695.117834][ T5829] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1695.142521][ T5829] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1696.009287][ T25] usb 3-1: USB disconnect, device number 22 [ 1698.411138][T25507] rdma_rxe: rxe_newlink: failed to add lo [ 1698.674949][T25510] input: syz0 as /devices/virtual/input/input84 [ 1698.677903][ T29] audit: type=1400 audit(2000000336.659:1173): avc: denied { map } for pid=25508 comm="syz.2.5386" path="socket:[117669]" dev="sockfs" ino=117669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1699.042922][T13455] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1699.223340][T13455] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1699.272344][T13455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.380519][T13455] usb 3-1: config 0 descriptor?? [ 1699.481402][T13455] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1700.763119][T13455] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1701.318676][T25532] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.542260][T25532] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.672808][T13455] gspca_cpia1: usb_control_msg 05, error -71 [ 1701.679249][T13455] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1701.690138][T13455] usb 3-1: USB disconnect, device number 23 [ 1701.940757][ T25] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1702.067000][T25532] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.247190][T25532] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.285060][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1702.295816][ T25] usb 6-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 1702.305104][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.314223][ T25] usb 6-1: Product: syz [ 1702.318902][ T25] usb 6-1: Manufacturer: syz [ 1702.323639][ T25] usb 6-1: SerialNumber: syz [ 1702.331387][ T25] usb 6-1: config 0 descriptor?? [ 1702.338044][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 1702.344648][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1702.353930][ T25] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1702.468232][T25555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1703.076426][T25541] syz_tun: left allmulticast mode [ 1703.082378][T25541] bridge0: port 1(syz_tun) entered disabled state [ 1703.933199][ T25] usb 6-1: USB disconnect, device number 51 [ 1703.955754][T25532] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.983479][T25532] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.997507][T25532] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.014893][T25532] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.185814][ T5848] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1704.381649][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 1704.406651][ T5848] usb 3-1: config 0 has no interfaces? [ 1704.426871][ T5848] usb 3-1: New USB device found, idVendor=19d2, idProduct=0077, bcdDevice=fd.92 [ 1704.462903][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.484524][ T5848] usb 3-1: Product: syz [ 1704.488970][ T5848] usb 3-1: Manufacturer: syz [ 1704.736115][ T5848] usb 3-1: SerialNumber: syz [ 1704.758158][ T5848] usb 3-1: config 0 descriptor?? [ 1704.937304][T25568] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.991048][T25568] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.030765][ T5848] usb 3-1: USB disconnect, device number 24 [ 1705.064443][T25568] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.097079][T25568] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.104638][T25600] FAULT_INJECTION: forcing a failure. [ 1707.104638][T25600] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.274890][T25600] CPU: 0 UID: 0 PID: 25600 Comm: syz.0.5408 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1707.285706][T25600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1707.295771][T25600] Call Trace: [ 1707.299053][T25600] [ 1707.301992][T25600] dump_stack_lvl+0x16c/0x1f0 [ 1707.306700][T25600] should_fail_ex+0x497/0x5b0 [ 1707.311409][T25600] ? fs_reclaim_acquire+0xae/0x150 [ 1707.316541][T25600] should_failslab+0xc2/0x120 [ 1707.321222][T25600] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1707.326605][T25600] ? lockdep_init_map_type+0x16d/0x7d0 [ 1707.332093][T25600] ? security_inode_alloc+0x3b/0x2b0 [ 1707.337394][T25600] security_inode_alloc+0x3b/0x2b0 [ 1707.342508][T25600] inode_init_always_gfp+0xce4/0x1030 [ 1707.347885][T25600] alloc_inode+0x82/0x230 [ 1707.352219][T25600] sock_alloc+0x40/0x280 [ 1707.356471][T25600] __sock_create+0xc1/0x8d0 [ 1707.360982][T25600] __sys_socket+0x14f/0x260 [ 1707.365487][T25600] ? __pfx___sys_socket+0x10/0x10 [ 1707.370505][T25600] ? ksys_write+0x1ba/0x250 [ 1707.375000][T25600] ? __pfx_ksys_write+0x10/0x10 [ 1707.379847][T25600] __x64_sys_socket+0x72/0xb0 [ 1707.384523][T25600] ? lockdep_hardirqs_on+0x7c/0x110 [ 1707.389716][T25600] do_syscall_64+0xcd/0x250 [ 1707.394222][T25600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.400114][T25600] RIP: 0033:0x7fb5ddf7ff19 [ 1707.404522][T25600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.424122][T25600] RSP: 002b:00007fb5ded09058 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1707.432536][T25600] RAX: ffffffffffffffda RBX: 00007fb5de145fa0 RCX: 00007fb5ddf7ff19 [ 1707.440525][T25600] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 1707.448490][T25600] RBP: 00007fb5ded090a0 R08: 0000000000000000 R09: 0000000000000000 [ 1707.456455][T25600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.464440][T25600] R13: 0000000000000001 R14: 00007fb5de145fa0 R15: 00007ffd95300338 [ 1707.472428][T25600] [ 1708.437693][T25602] afs: Unknown parameter 'dyn ' [ 1708.452163][T25600] socket: no more sockets [ 1709.370195][T25618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1709.675193][ T5848] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1709.936687][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 1709.975419][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.018233][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.277433][ T5848] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1710.277470][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.305146][ T5848] usb 6-1: config 0 descriptor?? [ 1710.585850][ T5906] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1711.363859][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1711.388409][ T5906] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.399818][ T5906] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1711.444944][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1711.454020][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.462257][ T5906] usb 3-1: Product: syz [ 1711.466577][ T5906] usb 3-1: Manufacturer: syz [ 1711.471184][ T5906] usb 3-1: SerialNumber: syz [ 1711.675344][ T5848] ft260 0003:0403:6030.0063: unknown main item tag 0x6 [ 1711.884615][ T5848] ft260 0003:0403:6030.0063: failed to retrieve chip version [ 1711.894209][ T5848] ft260 0003:0403:6030.0063: probe with driver ft260 failed with error -71 [ 1711.971106][ T5848] usb 6-1: USB disconnect, device number 52 [ 1711.989608][T25623] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1712.508995][ T29] audit: type=1400 audit(2000000349.596:1174): avc: denied { name_bind } for pid=25621 comm="syz.2.5414" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1712.572557][T25568] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.585262][T25568] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.598168][T25568] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.611838][T25568] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.997307][T25645] rdma_rxe: rxe_newlink: failed to add lo [ 1713.177807][T25643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1713.469435][ T5906] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1713.477896][ T5906] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1713.488699][ T5906] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 1713.740046][ T5906] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 1713.772609][ T5906] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1713.869835][ T5906] wwan wwan0: port wwan0mbim0 attached [ 1713.903449][ T5906] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 1715.981317][T13455] usb 3-1: USB disconnect, device number 25 [ 1715.991778][T13455] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1716.408989][T13455] wwan wwan0: port wwan0mbim0 disconnected [ 1716.480060][T25687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.525373][T25687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.615594][T25687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.678479][T25687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.741980][T25687] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.754327][T25687] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.767327][T25687] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.779510][T25687] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.730534][T13470] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1718.138204][T25709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1718.166967][T13470] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1718.209353][T13470] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1718.283323][T13470] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1718.390178][T13470] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1718.496710][T13470] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1718.525712][T13470] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1718.535142][T13470] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1718.548871][T13470] usb 6-1: Product: syz [ 1718.558114][T13470] usb 6-1: Manufacturer: syz [ 1718.572449][T13470] cdc_wdm 6-1:1.0: skipping garbage [ 1718.583941][T13470] cdc_wdm 6-1:1.0: skipping garbage [ 1718.602145][T13470] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1718.614352][T13470] cdc_wdm 6-1:1.0: Unknown control protocol [ 1720.104690][T25721] netlink: 'syz.5.5432': attribute type 10 has an invalid length. [ 1720.172937][T25721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.215512][T25721] bond0: (slave team0): Enslaving as an active interface with an up link [ 1720.226874][ T8] usb 6-1: USB disconnect, device number 53 [ 1723.349638][T25712] Process accounting resumed [ 1723.388139][T25712] kernel write not supported for file /asound/timers (pid: 25712 comm: syz.0.5435) [ 1723.995246][ T8] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1724.250065][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1724.423375][ T8] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1724.423449][ T8] usb 6-1: config 0 has no interface number 0 [ 1724.423578][ T8] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1724.423644][ T8] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1724.423723][ T8] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1724.423794][ T8] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1724.423911][ T8] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1724.424005][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.003997][ T8] usb 6-1: config 0 descriptor?? [ 1725.012593][ T8] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1725.141884][T25752] kernel write not supported for file /asound/timers (pid: 25752 comm: syz.0.5444) [ 1725.273109][T13470] usb 6-1: USB disconnect, device number 54 [ 1725.277960][T13470] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1726.881254][T13470] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1727.044483][T13470] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.093860][T13470] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1727.130404][T13470] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1727.171361][T13470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.654679][T25808] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1727.661335][T25808] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1727.669507][T25808] vhci_hcd vhci_hcd.0: Device attached [ 1727.950850][T13470] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 1728.845491][T25804] kernel write not supported for file /asound/timers (pid: 25804 comm: syz.0.5445) [ 1729.369833][ T8] usb 3-1: USB disconnect, device number 26 [ 1729.407246][T25827] vhci_hcd: connection reset by peer [ 1729.457779][T25788] vhci_hcd: stop threads [ 1729.468406][T25788] vhci_hcd: release socket [ 1729.490152][T25788] vhci_hcd: disconnect device [ 1729.617055][ T29] audit: type=1400 audit(2000000365.554:1175): avc: denied { map } for pid=25837 comm="syz.4.5455" path="socket:[119390]" dev="sockfs" ino=119390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1729.692898][ T29] audit: type=1400 audit(2000000365.554:1176): avc: denied { accept } for pid=25837 comm="syz.4.5455" path="socket:[119390]" dev="sockfs" ino=119390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1729.924456][T25850] FAULT_INJECTION: forcing a failure. [ 1729.924456][T25850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.971778][T25847] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.001654][T25850] CPU: 1 UID: 0 PID: 25850 Comm: syz.5.5457 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1730.012465][T25850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1730.022534][T25850] Call Trace: [ 1730.025823][T25850] [ 1730.028759][T25850] dump_stack_lvl+0x16c/0x1f0 [ 1730.033460][T25850] should_fail_ex+0x497/0x5b0 [ 1730.038162][T25850] _copy_from_iter+0x2a1/0x1560 [ 1730.043033][T25850] ? __pfx__copy_from_iter+0x10/0x10 [ 1730.048331][T25850] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1730.054328][T25850] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 1730.060239][T25850] ? __pfx_lock_release+0x10/0x10 [ 1730.065275][T25850] ? trace_lock_acquire+0x14e/0x1f0 [ 1730.070482][T25850] ? __pfx_lock_release+0x10/0x10 [ 1730.075503][T25850] copy_page_from_iter+0xa5/0x120 [ 1730.080530][T25850] tun_build_skb.constprop.0+0x294/0x1120 [ 1730.086260][T25850] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1730.092413][T25850] ? __pfx___lock_acquire+0x10/0x10 [ 1730.097609][T25850] ? register_lock_class+0xb1/0x1240 [ 1730.102898][T25850] ? __lock_acquire+0xcc5/0x3c40 [ 1730.107835][T25850] tun_get_user+0x870/0x3e40 [ 1730.112449][T25850] ? find_held_lock+0x2d/0x110 [ 1730.117225][T25850] ? __pfx_tun_get_user+0x10/0x10 [ 1730.122256][T25850] ? find_held_lock+0x2d/0x110 [ 1730.127029][T25850] ? __pfx_lock_release+0x10/0x10 [ 1730.132073][T25850] tun_chr_write_iter+0xdc/0x210 [ 1730.137020][T25850] vfs_write+0x5ae/0x1150 [ 1730.141346][T25850] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1730.146895][T25850] ? __pfx_vfs_write+0x10/0x10 [ 1730.151656][T25850] ? __fget_files+0x40/0x3a0 [ 1730.156252][T25850] ksys_write+0x12b/0x250 [ 1730.160575][T25850] ? __pfx_ksys_write+0x10/0x10 [ 1730.165426][T25850] do_syscall_64+0xcd/0x250 [ 1730.169928][T25850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.175830][T25850] RIP: 0033:0x7feeeb97e9cf [ 1730.180244][T25850] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1730.199854][T25850] RSP: 002b:00007feeec781020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1730.208268][T25850] RAX: ffffffffffffffda RBX: 00007feeebb45fa0 RCX: 00007feeeb97e9cf [ 1730.216231][T25850] RDX: 000000000000007a RSI: 0000000020000400 RDI: 00000000000000c8 [ 1730.224192][T25850] RBP: 00007feeec7810a0 R08: 0000000000000000 R09: 0000000000000000 [ 1730.232155][T25850] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 1730.240124][T25850] R13: 0000000000000000 R14: 00007feeebb45fa0 R15: 00007ffea82c8fc8 [ 1730.248104][T25850] [ 1730.299192][T25847] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.356792][T25847] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.464396][T25847] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.548092][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1730.604871][T25847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.619489][T25847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.634811][T25847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.649940][T25847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.681034][T25847] kernel write not supported for file /asound/timers (pid: 25847 comm: syz.0.5456) [ 1730.761877][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1730.781246][ T8] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 1730.790789][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.827204][ T8] usb 3-1: Product: syz [ 1730.836773][ T8] usb 3-1: Manufacturer: syz [ 1730.840546][T25862] FAULT_INJECTION: forcing a failure. [ 1730.840546][T25862] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.846749][ T8] usb 3-1: SerialNumber: syz [ 1730.854037][T25862] CPU: 1 UID: 0 PID: 25862 Comm: syz.0.5462 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1730.854063][T25862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1730.854076][T25862] Call Trace: [ 1730.854083][T25862] [ 1730.854093][T25862] dump_stack_lvl+0x16c/0x1f0 [ 1730.854124][T25862] should_fail_ex+0x497/0x5b0 [ 1730.854156][T25862] should_failslab+0xc2/0x120 [ 1730.854179][T25862] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1730.905088][T25862] ? trace_lock_acquire+0x14e/0x1f0 [ 1730.910321][T25862] ? skb_clone+0x190/0x3f0 [ 1730.913707][ T8] usb 3-1: config 0 descriptor?? [ 1730.914725][T25862] skb_clone+0x190/0x3f0 [ 1730.914753][T25862] dev_queue_xmit_nit+0x38f/0xbc0 [ 1730.924244][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 1730.928904][T25862] ? netif_skb_features+0x3b0/0xd50 [ 1730.940002][T25862] dev_hard_start_xmit+0x283/0x7b0 [ 1730.943738][ T8] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1730.945121][T25862] __dev_queue_xmit+0x7f0/0x43e0 [ 1730.957161][T25862] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1730.962581][T25862] ? __skb_clone+0x570/0x760 [ 1730.967200][T25862] netlink_deliver_tap+0xa87/0xd30 [ 1730.972350][T25862] netlink_unicast+0x5e1/0x7f0 [ 1730.977146][T25862] ? __pfx_netlink_unicast+0x10/0x10 [ 1730.982464][T25862] netlink_sendmsg+0x8b8/0xd70 [ 1730.987257][T25862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.992573][T25862] ____sys_sendmsg+0xaaf/0xc90 [ 1730.997361][T25862] ? copy_msghdr_from_user+0x10b/0x160 [ 1731.002833][T25862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1731.008114][T25862] ___sys_sendmsg+0x135/0x1e0 [ 1731.012780][T25862] ? __pfx____sys_sendmsg+0x10/0x10 [ 1731.017970][T25862] ? __pfx_lock_release+0x10/0x10 [ 1731.022990][T25862] ? trace_lock_acquire+0x14e/0x1f0 [ 1731.028197][T25862] ? __fget_files+0x206/0x3a0 [ 1731.032864][T25862] __sys_sendmsg+0x16e/0x220 [ 1731.037492][T25862] ? __pfx___sys_sendmsg+0x10/0x10 [ 1731.042603][T25862] do_syscall_64+0xcd/0x250 [ 1731.047093][T25862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.052971][T25862] RIP: 0033:0x7fb5ddf7ff19 [ 1731.057380][T25862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1731.077064][T25862] RSP: 002b:00007fb5ded09058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1731.085635][T25862] RAX: ffffffffffffffda RBX: 00007fb5de145fa0 RCX: 00007fb5ddf7ff19 [ 1731.093598][T25862] RDX: 0000000000000100 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1731.101545][T25862] RBP: 00007fb5ded090a0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.109503][T25862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.117476][T25862] R13: 0000000000000000 R14: 00007fb5de145fa0 R15: 00007ffd95300338 [ 1731.125457][T25862] [ 1731.132862][ T8] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1731.204469][T25862] kernel write not supported for file /asound/timers (pid: 25862 comm: syz.0.5462) [ 1731.412495][ T5829] usb 3-1: USB disconnect, device number 27 [ 1733.787377][T13470] vhci_hcd: vhci_device speed not set [ 1734.721797][T25866] kernel write not supported for file /asound/timers (pid: 25866 comm: syz.0.5464) [ 1734.906002][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1735.195533][T25869] kernel write not supported for file /asound/timers (pid: 25869 comm: syz.0.5464) [ 1735.247173][T25899] kernel write not supported for file /asound/timers (pid: 25899 comm: syz.0.5471) [ 1735.527261][T25907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1735.550001][T25909] kernel write not supported for file /asound/timers (pid: 25909 comm: syz.0.5474) [ 1735.609374][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1735.667970][T25912] loop6: detected capacity change from 0 to 524287999 [ 1735.677768][ C0] blk_print_req_error: 7 callbacks suppressed [ 1735.677789][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1735.693099][ C0] buffer_io_error: 4 callbacks suppressed [ 1735.693118][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1735.719745][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1735.728996][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1735.744935][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1735.754169][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1735.786971][T25915] loop6: detected capacity change from 524287999 to 524287952 [ 1735.795474][T25914] kernel write not supported for file /asound/timers (pid: 25914 comm: syz.0.5475) [ 1735.806377][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1735.818239][ T8] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1735.839774][T25912] loop6: unable to read partition table [ 1735.845958][T25912] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´8ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 1735.881725][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.892653][ T8] usb 3-1: Product: syz [ 1735.924995][ T8] usb 3-1: Manufacturer: syz [ 1735.935798][ T8] usb 3-1: SerialNumber: syz [ 1735.961408][ T8] usb 3-1: config 0 descriptor?? [ 1735.980117][ T8] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1736.002203][T25917] netlink: 'syz.6.5477': attribute type 10 has an invalid length. [ 1736.437565][T25900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.479857][T25901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.506655][T25900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.612670][T25901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.949627][T25928] rdma_rxe: rxe_newlink: failed to add lo [ 1737.625610][ T29] audit: type=1326 audit(2000000373.074:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.674283][ T29] audit: type=1326 audit(2000000373.084:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.698894][ T29] audit: type=1326 audit(2000000373.084:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.723163][ T29] audit: type=1326 audit(2000000373.084:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.749242][ T29] audit: type=1326 audit(2000000373.084:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.773424][ T29] audit: type=1326 audit(2000000373.084:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.797926][ T29] audit: type=1326 audit(2000000373.084:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.822025][ T29] audit: type=1326 audit(2000000373.084:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.846096][ T29] audit: type=1326 audit(2000000373.084:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.869707][ T29] audit: type=1326 audit(2000000373.084:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.6.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1cf7ff19 code=0x7fc00000 [ 1737.988869][T13455] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1738.159842][T13455] usb 6-1: Using ep0 maxpacket: 32 [ 1738.180336][T13455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.217552][T13455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.252517][ T8] gp8psk: usb out operation failed. [ 1738.277535][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1738.286984][T13455] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1738.309751][T13455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.318304][ T8] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1738.346926][T13455] usb 6-1: config 0 descriptor?? [ 1738.354129][ T8] usb 3-1: media controller created [ 1738.389870][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1738.415189][ T8] gp8psk_fe: Frontend revision 1 attached [ 1738.481658][ T8] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1738.528476][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1738.555128][T25953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1738.707831][T25958] FAULT_INJECTION: forcing a failure. [ 1738.707831][T25958] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.727143][T25956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5488'. [ 1738.751941][T25958] CPU: 1 UID: 0 PID: 25958 Comm: syz.2.5489 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1738.759253][ T8] gp8psk: usb in 138 operation failed. [ 1738.762739][T25958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1738.762758][T25958] Call Trace: [ 1738.762766][T25958] [ 1738.762776][T25958] dump_stack_lvl+0x16c/0x1f0 [ 1738.762808][T25958] should_fail_ex+0x497/0x5b0 [ 1738.779605][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1738.781555][T25958] ? fs_reclaim_acquire+0xae/0x150 [ 1738.781598][T25958] should_failslab+0xc2/0x120 [ 1738.781624][T25958] __kmalloc_noprof+0xcb/0x510 [ 1738.781651][T25958] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1738.781689][T25958] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1738.790369][ T8] gp8psk: found Genpix USB device pID = 201 (hex) [ 1738.793910][T25958] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1738.794024][T25958] ? bpf_lsm_capable+0x9/0x10 [ 1738.794054][T25958] ? security_capable+0x7e/0x260 [ 1738.794087][T25958] ? ns_capable+0xd7/0x110 [ 1738.794114][T25958] genl_rcv_msg+0x565/0x800 [ 1738.794143][T25958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1738.794170][T25958] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1738.794196][T25958] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 1738.794222][T25958] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1738.835744][ T8] usb 3-1: USB disconnect, device number 28 [ 1738.837717][T25958] netlink_rcv_skb+0x16b/0x440 [ 1738.837757][T25958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1738.899776][T25958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1738.905105][T25958] ? down_read+0xc9/0x330 [ 1738.909463][T25958] ? __pfx_down_read+0x10/0x10 [ 1738.914258][T25958] ? netlink_deliver_tap+0x1ae/0xd30 [ 1738.919576][T25958] genl_rcv+0x28/0x40 [ 1738.923587][T25958] netlink_unicast+0x53c/0x7f0 [ 1738.928377][T25958] ? __pfx_netlink_unicast+0x10/0x10 [ 1738.933697][T25958] netlink_sendmsg+0x8b8/0xd70 [ 1738.938492][T25958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1738.943816][T25958] ____sys_sendmsg+0xaaf/0xc90 [ 1738.948595][T25958] ? copy_msghdr_from_user+0x10b/0x160 [ 1738.954083][T25958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1738.959403][T25958] ___sys_sendmsg+0x135/0x1e0 [ 1738.964108][T25958] ? __pfx____sys_sendmsg+0x10/0x10 [ 1738.966442][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1738.969331][T25958] ? __pfx_lock_release+0x10/0x10 [ 1738.969363][T25958] ? trace_lock_acquire+0x14e/0x1f0 [ 1738.989975][T25958] ? __fget_files+0x206/0x3a0 [ 1738.994676][T25958] __sys_sendmsg+0x16e/0x220 [ 1738.999290][T25958] ? __pfx___sys_sendmsg+0x10/0x10 [ 1739.004437][T25958] do_syscall_64+0xcd/0x250 [ 1739.008963][T25958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.014878][T25958] RIP: 0033:0x7ff66cb7ff19 [ 1739.019305][T25958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.038936][T25958] RSP: 002b:00007ff66d92f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.047374][T25958] RAX: ffffffffffffffda RBX: 00007ff66cd45fa0 RCX: 00007ff66cb7ff19 [ 1739.055364][T25958] RDX: 0000000000008000 RSI: 0000000020001540 RDI: 0000000000000004 [ 1739.063365][T25958] RBP: 00007ff66d92f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.071354][T25958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.079342][T25958] R13: 0000000000000000 R14: 00007ff66cd45fa0 R15: 00007ffd40d5b2a8 [ 1739.087347][T25958] [ 1739.092528][T25929] kernel write not supported for file /asound/timers (pid: 25929 comm: syz.0.5478) [ 1739.113705][T13455] ft260 0003:0403:6030.0064: unknown main item tag 0x6 [ 1739.356975][T13455] ft260 0003:0403:6030.0064: failed to retrieve chip version [ 1739.426902][T25968] rdma_rxe: rxe_newlink: failed to add lo [ 1739.549855][T13455] ft260 0003:0403:6030.0064: probe with driver ft260 failed with error -32 [ 1739.701217][T13455] usb 6-1: USB disconnect, device number 55 [ 1743.628498][T25990] kernel write not supported for file /asound/timers (pid: 25990 comm: syz.0.5493) [ 1744.249317][T26010] input: syz1 as /devices/virtual/input/input85 [ 1744.739188][T26015] rdma_rxe: rxe_newlink: failed to add lo [ 1744.973162][T26010] kernel write not supported for file /asound/timers (pid: 26010 comm: syz.0.5502) [ 1745.615578][T26027] rdma_rxe: rxe_newlink: failed to add lo [ 1747.571613][T26038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1748.079724][T26040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26040 comm=syz.6.5511 [ 1748.093088][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 1748.093103][ T29] audit: type=1400 audit(2000000382.887:1876): avc: denied { read } for pid=26039 comm="syz.6.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1748.124367][T26040] Bluetooth: MGMT ver 1.23 [ 1749.212983][T26020] kernel write not supported for file /asound/timers (pid: 26020 comm: syz.0.5505) [ 1749.782603][T26061] netlink: 'syz.5.5517': attribute type 10 has an invalid length. [ 1750.281493][T26063] kernel write not supported for file /asound/timers (pid: 26063 comm: syz.0.5515) [ 1750.582446][ T866] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1750.672039][ T29] audit: type=1400 audit(2000000385.300:1877): avc: denied { write } for pid=26069 comm="syz.6.5520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1750.713608][T26073] kernel write not supported for file /asound/timers (pid: 26073 comm: syz.0.5521) [ 1750.786344][ T866] usb 3-1: Using ep0 maxpacket: 8 [ 1750.786780][T26077] FAULT_INJECTION: forcing a failure. [ 1750.786780][T26077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1750.803940][ T866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1750.809504][T26077] CPU: 0 UID: 0 PID: 26077 Comm: syz.6.5522 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1750.825647][T26077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1750.835716][T26077] Call Trace: [ 1750.838994][T26077] [ 1750.841911][T26077] dump_stack_lvl+0x16c/0x1f0 [ 1750.846581][T26077] should_fail_ex+0x497/0x5b0 [ 1750.851249][T26077] _copy_from_iter+0x2a1/0x1560 [ 1750.856093][T26077] ? trace_lock_acquire+0x14e/0x1f0 [ 1750.861298][T26077] ? __pfx__copy_from_iter+0x10/0x10 [ 1750.866597][T26077] ? __virt_addr_valid+0x1a4/0x590 [ 1750.871699][T26077] ? __virt_addr_valid+0x5e/0x590 [ 1750.876706][T26077] ? __phys_addr_symbol+0x30/0x80 [ 1750.881728][T26077] ? __check_object_size+0x488/0x710 [ 1750.887019][T26077] kernfs_fop_write_iter+0x19d/0x500 [ 1750.892291][T26077] vfs_write+0x5ae/0x1150 [ 1750.896616][T26077] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1750.902403][T26077] ? __pfx___mutex_lock+0x10/0x10 [ 1750.907414][T26077] ? __pfx_vfs_write+0x10/0x10 [ 1750.912166][T26077] ksys_write+0x12b/0x250 [ 1750.916485][T26077] ? __pfx_ksys_write+0x10/0x10 [ 1750.921329][T26077] do_syscall_64+0xcd/0x250 [ 1750.925883][T26077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.931938][T26077] RIP: 0033:0x7f3e1cf7ff19 [ 1750.936456][T26077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1750.956044][T26077] RSP: 002b:00007f3e1de0f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1750.964478][T26077] RAX: ffffffffffffffda RBX: 00007f3e1d145fa0 RCX: 00007f3e1cf7ff19 [ 1750.972430][T26077] RDX: 0000000000000009 RSI: 0000000020000540 RDI: 0000000000000004 [ 1750.980382][T26077] RBP: 00007f3e1de0f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.988330][T26077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.996365][T26077] R13: 0000000000000000 R14: 00007f3e1d145fa0 R15: 00007ffd36485fa8 [ 1751.004467][T26077] [ 1751.020511][ T866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1751.033442][ T866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1751.044041][ T866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1751.057165][ T866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1751.066372][ T866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.376065][T26089] batman_adv: batadv0: Adding interface: dummy0 [ 1751.382531][T26089] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.384652][ T29] audit: type=1400 audit(2000000385.955:1878): avc: denied { create } for pid=26086 comm="syz.4.5527" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1751.419619][ T866] usb 3-1: GET_CAPABILITIES returned 0 [ 1751.434942][T26089] batman_adv: batadv0: Interface activated: dummy0 [ 1751.554564][ T866] usbtmc 3-1:16.0: can't read capabilities [ 1751.574132][ T29] audit: type=1400 audit(2000000386.133:1879): avc: denied { rmdir } for pid=16831 comm="syz-executor" name="file1" dev="tmpfs" ino=2680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1751.802573][T26065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.952238][T26065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.724593][T26065] kAFS: unparsable volume name [ 1754.095268][ T5829] usb 3-1: USB disconnect, device number 29 [ 1754.246940][T26081] kernel write not supported for file /asound/timers (pid: 26081 comm: syz.0.5523) [ 1754.382000][T26129] FAULT_INJECTION: forcing a failure. [ 1754.382000][T26129] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.350522][T26129] CPU: 0 UID: 0 PID: 26129 Comm: syz.0.5538 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1755.361351][T26129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1755.371424][T26129] Call Trace: [ 1755.374711][T26129] [ 1755.377651][T26129] dump_stack_lvl+0x16c/0x1f0 [ 1755.382348][T26129] should_fail_ex+0x497/0x5b0 [ 1755.387037][T26129] ? fs_reclaim_acquire+0xae/0x150 [ 1755.392163][T26129] should_failslab+0xc2/0x120 [ 1755.396879][T26129] __kmalloc_cache_noprof+0x68/0x410 [ 1755.402201][T26129] ? __lock_acquire+0x15a9/0x3c40 [ 1755.407243][T26129] fl_create+0x105/0xd40 [ 1755.411612][T26129] ? __pfx_fl_create+0x10/0x10 [ 1755.416408][T26129] ? __pfx___lock_acquire+0x10/0x10 [ 1755.421636][T26129] ? __pfx_register_lock_class+0x10/0x10 [ 1755.427291][T26129] ? find_held_lock+0x2d/0x110 [ 1755.432073][T26129] ? __might_fault+0x13b/0x190 [ 1755.436937][T26129] ? __pfx_lock_release+0x10/0x10 [ 1755.441979][T26129] ? trace_lock_acquire+0x14e/0x1f0 [ 1755.447193][T26129] ? lock_acquire+0x2f/0xb0 [ 1755.451706][T26129] ? __might_fault+0xe3/0x190 [ 1755.456399][T26129] ? __might_fault+0xe3/0x190 [ 1755.461098][T26129] ipv6_flowlabel_opt+0xa84/0x2ea0 [ 1755.466291][T26129] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1755.471853][T26129] ? sockopt_lock_sock+0x54/0x70 [ 1755.476819][T26129] ? mark_held_locks+0x9f/0xe0 [ 1755.481595][T26129] ? __local_bh_enable_ip+0xa4/0x120 [ 1755.486920][T26129] ? do_ipv6_setsockopt+0x104e/0x45f0 [ 1755.492305][T26129] do_ipv6_setsockopt+0x104e/0x45f0 [ 1755.497520][T26129] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1755.503074][T26129] ? trace_lock_acquire+0x14e/0x1f0 [ 1755.508292][T26129] ? lock_acquire+0x2f/0xb0 [ 1755.512800][T26129] ? avc_has_perm_noaudit+0x61/0x3a0 [ 1755.518110][T26129] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1755.523512][T26129] ? avc_has_perm+0x11b/0x1c0 [ 1755.528208][T26129] ? __pfx_avc_has_perm+0x10/0x10 [ 1755.533257][T26129] ? hlock_class+0x4e/0x130 [ 1755.537784][T26129] ? sock_has_perm+0x25a/0x2f0 [ 1755.542575][T26129] ? ipv6_setsockopt+0xcb/0x170 [ 1755.547431][T26129] ipv6_setsockopt+0xcb/0x170 [ 1755.552120][T26129] rawv6_setsockopt+0xd7/0x680 [ 1755.556905][T26129] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1755.562298][T26129] ? selinux_socket_setsockopt+0x6a/0x80 [ 1755.567942][T26129] ? sock_common_setsockopt+0x2e/0xf0 [ 1755.573327][T26129] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1755.579235][T26129] do_sock_setsockopt+0x222/0x480 [ 1755.584274][T26129] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1755.589833][T26129] ? lock_acquire+0x2f/0xb0 [ 1755.594361][T26129] __sys_setsockopt+0x1a0/0x230 [ 1755.599235][T26129] __x64_sys_setsockopt+0xbd/0x160 [ 1755.604365][T26129] ? do_syscall_64+0x91/0x250 [ 1755.609051][T26129] ? lockdep_hardirqs_on+0x7c/0x110 [ 1755.614235][T26129] do_syscall_64+0xcd/0x250 [ 1755.618724][T26129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.624596][T26129] RIP: 0033:0x7fb5ddf7ff19 [ 1755.629001][T26129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.648617][T26129] RSP: 002b:00007fb5ded09058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1755.657016][T26129] RAX: ffffffffffffffda RBX: 00007fb5de145fa0 RCX: 00007fb5ddf7ff19 [ 1755.664965][T26129] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1755.672926][T26129] RBP: 00007fb5ded090a0 R08: 0000000000000020 R09: 0000000000000000 [ 1755.680884][T26129] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 1755.688848][T26129] R13: 0000000000000000 R14: 00007fb5de145fa0 R15: 00007ffd95300338 [ 1755.696807][T26129] [ 1755.841753][T26129] Process accounting paused [ 1755.855102][T26131] FAULT_INJECTION: forcing a failure. [ 1755.855102][T26131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.094100][T26131] CPU: 1 UID: 0 PID: 26131 Comm: syz.2.5539 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1756.104912][T26131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1756.115005][T26131] Call Trace: [ 1756.118291][T26131] [ 1756.121229][T26131] dump_stack_lvl+0x16c/0x1f0 [ 1756.125992][T26131] should_fail_ex+0x497/0x5b0 [ 1756.130704][T26131] _copy_to_user+0x32/0xd0 [ 1756.135163][T26131] simple_read_from_buffer+0xd0/0x160 [ 1756.140560][T26131] proc_fail_nth_read+0x198/0x270 [ 1756.145605][T26131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1756.151175][T26131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1756.156748][T26131] vfs_read+0x1df/0xbe0 [ 1756.160923][T26131] ? __fget_files+0x1fc/0x3a0 [ 1756.165617][T26131] ? __pfx___mutex_lock+0x10/0x10 [ 1756.170659][T26131] ? __pfx_vfs_read+0x10/0x10 [ 1756.175359][T26131] ? __fget_files+0x206/0x3a0 [ 1756.180065][T26131] ksys_read+0x12b/0x250 [ 1756.184324][T26131] ? __pfx_ksys_read+0x10/0x10 [ 1756.189107][T26131] do_syscall_64+0xcd/0x250 [ 1756.193631][T26131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.199538][T26131] RIP: 0033:0x7ff66cb7e92c [ 1756.203962][T26131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1756.223591][T26131] RSP: 002b:00007ff66d92f050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1756.232029][T26131] RAX: ffffffffffffffda RBX: 00007ff66cd45fa0 RCX: 00007ff66cb7e92c [ 1756.240011][T26131] RDX: 000000000000000f RSI: 00007ff66d92f0b0 RDI: 0000000000000003 [ 1756.247978][T26131] RBP: 00007ff66d92f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.255943][T26131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.263909][T26131] R13: 0000000000000000 R14: 00007ff66cd45fa0 R15: 00007ffd40d5b2a8 [ 1756.271887][T26131] [ 1756.442750][T26139] syzkaller1: entered promiscuous mode [ 1756.462377][T26139] syzkaller1: entered allmulticast mode [ 1756.528829][T26139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26139 comm=syz.5.5541 [ 1756.741299][T26140] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.842665][T26140] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.985166][T26140] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.128389][T26140] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.234278][T26150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26150 comm=syz.4.5545 [ 1757.905599][T26140] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.922461][T26140] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.937720][T26140] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.952004][T26140] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.273782][T13455] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1759.331050][T26173] netlink: 'syz.0.5551': attribute type 10 has an invalid length. [ 1759.344699][T26173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.383341][T26173] bond0: (slave team0): Enslaving as an active interface with an up link [ 1759.434463][T13455] usb 5-1: Using ep0 maxpacket: 32 [ 1759.441811][T13455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.453122][T13455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.478599][T26177] FAULT_INJECTION: forcing a failure. [ 1759.478599][T26177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.485646][T13455] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1759.501436][T26177] CPU: 1 UID: 0 PID: 26177 Comm: syz.5.5553 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1759.512284][T26177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1759.520680][T13455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.522329][T26177] Call Trace: [ 1759.522340][T26177] [ 1759.532346][T13455] usb 5-1: config 0 descriptor?? [ 1759.533546][T26177] dump_stack_lvl+0x16c/0x1f0 [ 1759.546113][T26177] should_fail_ex+0x497/0x5b0 [ 1759.550823][T26177] _copy_from_user+0x2e/0xd0 [ 1759.555439][T26177] tipc_ioctl+0x224/0x2b0 [ 1759.559861][T26177] ? __pfx_tipc_ioctl+0x10/0x10 [ 1759.564742][T26177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1759.570661][T26177] sock_do_ioctl+0x116/0x280 [ 1759.575277][T26177] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1759.580415][T26177] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 1759.586938][T26177] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 1759.593466][T26177] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1759.600342][T26177] sock_ioctl+0x228/0x6c0 [ 1759.604698][T26177] ? __pfx_sock_ioctl+0x10/0x10 [ 1759.609579][T26177] ? selinux_file_ioctl+0x180/0x270 [ 1759.614801][T26177] ? selinux_file_ioctl+0xb4/0x270 [ 1759.619936][T26177] ? __pfx_sock_ioctl+0x10/0x10 [ 1759.624808][T26177] __x64_sys_ioctl+0x190/0x200 [ 1759.629597][T26177] do_syscall_64+0xcd/0x250 [ 1759.634127][T26177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.640049][T26177] RIP: 0033:0x7feeeb97ff19 [ 1759.644479][T26177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1759.664111][T26177] RSP: 002b:00007feeec781058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.672554][T26177] RAX: ffffffffffffffda RBX: 00007feeebb45fa0 RCX: 00007feeeb97ff19 [ 1759.680554][T26177] RDX: 0000000000000000 RSI: 00000000000089e0 RDI: 0000000000000003 [ 1759.688548][T26177] RBP: 00007feeec7810a0 R08: 0000000000000000 R09: 0000000000000000 [ 1759.696543][T26177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.704534][T26177] R13: 0000000000000000 R14: 00007feeebb45fa0 R15: 00007ffea82c8fc8 [ 1759.712546][T26177] [ 1759.774032][T26183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1760.039702][T26188] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.089762][T26188] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.133991][T26188] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.196581][T26188] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.211756][T13455] ft260 0003:0403:6030.0065: unknown main item tag 0x6 [ 1760.271257][T26188] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.283228][T26188] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.295332][T26188] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.307408][T26188] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.438370][T13455] ft260 0003:0403:6030.0065: failed to retrieve chip version [ 1760.446756][T13455] ft260 0003:0403:6030.0065: probe with driver ft260 failed with error -32 [ 1760.468296][T13455] usb 5-1: USB disconnect, device number 119 [ 1760.884050][T26192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26192 comm=syz.2.5559 [ 1761.660951][T26199] FAULT_INJECTION: forcing a failure. [ 1761.660951][T26199] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.673978][T26199] CPU: 0 UID: 0 PID: 26199 Comm: syz.4.5562 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1761.684781][T26199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1761.694858][T26199] Call Trace: [ 1761.698150][T26199] [ 1761.701095][T26199] dump_stack_lvl+0x16c/0x1f0 [ 1761.705787][T26199] should_fail_ex+0x497/0x5b0 [ 1761.710458][T26199] ? fs_reclaim_acquire+0xae/0x150 [ 1761.715563][T26199] should_failslab+0xc2/0x120 [ 1761.720228][T26199] __kmalloc_noprof+0xcb/0x510 [ 1761.724995][T26199] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1761.730663][T26199] tomoyo_realpath_from_path+0xb9/0x720 [ 1761.736226][T26199] ? tomoyo_path_number_perm+0x235/0x590 [ 1761.741872][T26199] ? tomoyo_path_number_perm+0x235/0x590 [ 1761.747533][T26199] tomoyo_path_number_perm+0x248/0x590 [ 1761.752989][T26199] ? tomoyo_path_number_perm+0x235/0x590 [ 1761.758631][T26199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1761.764637][T26199] ? __pfx_lock_release+0x10/0x10 [ 1761.769658][T26199] ? trace_lock_acquire+0x14e/0x1f0 [ 1761.774856][T26199] ? lock_acquire+0x2f/0xb0 [ 1761.779356][T26199] ? __fget_files+0x40/0x3a0 [ 1761.783945][T26199] ? __fget_files+0x206/0x3a0 [ 1761.788617][T26199] security_file_ioctl+0x9b/0x240 [ 1761.793641][T26199] __x64_sys_ioctl+0xb7/0x200 [ 1761.798320][T26199] do_syscall_64+0xcd/0x250 [ 1761.802825][T26199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.808714][T26199] RIP: 0033:0x7f988f37ff19 [ 1761.813119][T26199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1761.832720][T26199] RSP: 002b:00007f9890256058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.841130][T26199] RAX: ffffffffffffffda RBX: 00007f988f545fa0 RCX: 00007f988f37ff19 [ 1761.849101][T26199] RDX: 0000000020000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 1761.857063][T26199] RBP: 00007f98902560a0 R08: 0000000000000000 R09: 0000000000000000 [ 1761.865038][T26199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.873013][T26199] R13: 0000000000000000 R14: 00007f988f545fa0 R15: 00007ffd559e27e8 [ 1761.880996][T26199] [ 1761.904650][T26202] @ÿ: renamed from veth0_vlan (while UP) [ 1761.985659][T26199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1762.674172][T26219] rdma_rxe: rxe_newlink: failed to add lo [ 1763.026410][T26221] FAULT_INJECTION: forcing a failure. [ 1763.026410][T26221] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.040017][T26221] CPU: 0 UID: 0 PID: 26221 Comm: syz.5.5568 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1763.050823][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1763.060897][T26221] Call Trace: [ 1763.064190][T26221] [ 1763.067141][T26221] dump_stack_lvl+0x16c/0x1f0 [ 1763.071849][T26221] should_fail_ex+0x497/0x5b0 [ 1763.076556][T26221] ? fs_reclaim_acquire+0xae/0x150 [ 1763.081705][T26221] should_failslab+0xc2/0x120 [ 1763.086466][T26221] __kmalloc_noprof+0xcb/0x510 [ 1763.091261][T26221] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1763.096920][T26221] tomoyo_realpath_from_path+0xb9/0x720 [ 1763.102486][T26221] ? tomoyo_path_number_perm+0x235/0x590 [ 1763.108120][T26221] ? tomoyo_path_number_perm+0x235/0x590 [ 1763.113750][T26221] tomoyo_path_number_perm+0x248/0x590 [ 1763.119190][T26221] ? tomoyo_path_number_perm+0x235/0x590 [ 1763.124802][T26221] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1763.130788][T26221] ? __pfx_lock_release+0x10/0x10 [ 1763.135805][T26221] ? trace_lock_acquire+0x14e/0x1f0 [ 1763.141017][T26221] ? lock_acquire+0x2f/0xb0 [ 1763.145509][T26221] ? __fget_files+0x40/0x3a0 [ 1763.150088][T26221] ? __fget_files+0x206/0x3a0 [ 1763.154765][T26221] security_file_ioctl+0x9b/0x240 [ 1763.159814][T26221] __x64_sys_ioctl+0xb7/0x200 [ 1763.164490][T26221] do_syscall_64+0xcd/0x250 [ 1763.168987][T26221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.174871][T26221] RIP: 0033:0x7feeeb97ff19 [ 1763.179279][T26221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1763.198895][T26221] RSP: 002b:00007feeec781058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.207312][T26221] RAX: ffffffffffffffda RBX: 00007feeebb45fa0 RCX: 00007feeeb97ff19 [ 1763.215279][T26221] RDX: 0000000020000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 1763.223242][T26221] RBP: 00007feeec7810a0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.231195][T26221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.239320][T26221] R13: 0000000000000000 R14: 00007feeebb45fa0 R15: 00007ffea82c8fc8 [ 1763.247283][T26221] [ 1763.283717][T26221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1763.592809][ T866] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1763.869347][ T866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1763.885131][ T866] usb 6-1: not running at top speed; connect to a high speed hub [ 1763.939656][ T866] usb 6-1: config 1 interface 0 altsetting 127 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1764.318499][ T866] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1764.482989][ T866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1764.585802][ T866] usb 6-1: New USB device strings: Mfr=1, Product=24, SerialNumber=113 [ 1764.594298][ T866] usb 6-1: Product: syz [ 1764.599036][ T866] usb 6-1: Manufacturer: syz [ 1764.603931][ T866] usb 6-1: SerialNumber: syz [ 1765.092781][T26228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.138863][T26228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.640075][ T866] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 127 proto 2 vid 0x0525 pid 0xA4A8 [ 1765.666069][T26250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5575'. [ 1765.701757][ T866] usb 6-1: USB disconnect, device number 56 [ 1765.740829][ T866] usblp0: removed [ 1767.352284][T26277] FAULT_INJECTION: forcing a failure. [ 1767.352284][T26277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.415480][T26277] CPU: 0 UID: 0 PID: 26277 Comm: syz.5.5585 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1767.426297][T26277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1767.436437][T26277] Call Trace: [ 1767.439724][T26277] [ 1767.442660][T26277] dump_stack_lvl+0x16c/0x1f0 [ 1767.447366][T26277] should_fail_ex+0x497/0x5b0 [ 1767.452073][T26277] _copy_to_user+0x32/0xd0 [ 1767.456515][T26277] simple_read_from_buffer+0xd0/0x160 [ 1767.461911][T26277] proc_fail_nth_read+0x198/0x270 [ 1767.466956][T26277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.472527][T26277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.478098][T26277] vfs_read+0x1df/0xbe0 [ 1767.482282][T26277] ? __fget_files+0x1fc/0x3a0 [ 1767.486978][T26277] ? __pfx___mutex_lock+0x10/0x10 [ 1767.492024][T26277] ? __pfx_vfs_read+0x10/0x10 [ 1767.496728][T26277] ? __fget_files+0x206/0x3a0 [ 1767.501428][T26277] ksys_read+0x12b/0x250 [ 1767.505686][T26277] ? __pfx_ksys_read+0x10/0x10 [ 1767.510473][T26277] do_syscall_64+0xcd/0x250 [ 1767.514992][T26277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.520897][T26277] RIP: 0033:0x7feeeb97e92c [ 1767.525317][T26277] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1767.544944][T26277] RSP: 002b:00007feeec781050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1767.553379][T26277] RAX: ffffffffffffffda RBX: 00007feeebb45fa0 RCX: 00007feeeb97e92c [ 1767.561371][T26277] RDX: 000000000000000f RSI: 00007feeec7810b0 RDI: 0000000000000003 [ 1767.569353][T26277] RBP: 00007feeec7810a0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.577355][T26277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.585342][T26277] R13: 0000000000000000 R14: 00007feeebb45fa0 R15: 00007ffea82c8fc8 [ 1767.593344][T26277] [ 1768.254673][T26288] FAULT_INJECTION: forcing a failure. [ 1768.254673][T26288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.315062][T26288] CPU: 0 UID: 0 PID: 26288 Comm: syz.4.5587 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1768.325875][T26288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1768.335963][T26288] Call Trace: [ 1768.339261][T26288] [ 1768.342196][T26288] dump_stack_lvl+0x16c/0x1f0 [ 1768.346891][T26288] should_fail_ex+0x497/0x5b0 [ 1768.351590][T26288] _copy_to_user+0x32/0xd0 [ 1768.356025][T26288] simple_read_from_buffer+0xd0/0x160 [ 1768.361417][T26288] proc_fail_nth_read+0x198/0x270 [ 1768.366457][T26288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.372028][T26288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.377598][T26288] vfs_read+0x1df/0xbe0 [ 1768.381768][T26288] ? __fget_files+0x1fc/0x3a0 [ 1768.386455][T26288] ? __pfx___mutex_lock+0x10/0x10 [ 1768.391492][T26288] ? __pfx_vfs_read+0x10/0x10 [ 1768.396187][T26288] ? __fget_files+0x206/0x3a0 [ 1768.400884][T26288] ksys_read+0x12b/0x250 [ 1768.405155][T26288] ? __pfx_ksys_read+0x10/0x10 [ 1768.409940][T26288] do_syscall_64+0xcd/0x250 [ 1768.414525][T26288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.420440][T26288] RIP: 0033:0x7f988f37e92c [ 1768.424861][T26288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1768.444488][T26288] RSP: 002b:00007f9890235050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1768.452925][T26288] RAX: ffffffffffffffda RBX: 00007f988f546080 RCX: 00007f988f37e92c [ 1768.460915][T26288] RDX: 000000000000000f RSI: 00007f98902350b0 RDI: 0000000000000005 [ 1768.468904][T26288] RBP: 00007f98902350a0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.476886][T26288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.484864][T26288] R13: 0000000000000000 R14: 00007f988f546080 R15: 00007ffd559e27e8 [ 1768.492845][T26288] [ 1768.650117][T26295] FAULT_INJECTION: forcing a failure. [ 1768.650117][T26295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.684365][T26295] CPU: 0 UID: 0 PID: 26295 Comm: syz.6.5589 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1768.695179][T26295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1768.705249][T26295] Call Trace: [ 1768.708534][T26295] [ 1768.711471][T26295] dump_stack_lvl+0x16c/0x1f0 [ 1768.716167][T26295] should_fail_ex+0x497/0x5b0 [ 1768.720869][T26295] _copy_from_user+0x2e/0xd0 [ 1768.725481][T26295] copy_msghdr_from_user+0x99/0x160 [ 1768.730699][T26295] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1768.736538][T26295] ___sys_sendmsg+0xff/0x1e0 [ 1768.741147][T26295] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.746378][T26295] ? __pfx_lock_release+0x10/0x10 [ 1768.751417][T26295] ? trace_lock_acquire+0x14e/0x1f0 [ 1768.756643][T26295] ? __fget_files+0x206/0x3a0 [ 1768.761340][T26295] __sys_sendmsg+0x16e/0x220 [ 1768.765954][T26295] ? __pfx___sys_sendmsg+0x10/0x10 [ 1768.771107][T26295] do_syscall_64+0xcd/0x250 [ 1768.775630][T26295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.781536][T26295] RIP: 0033:0x7f3e1cf7ff19 [ 1768.785962][T26295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1768.805591][T26295] RSP: 002b:00007f3e1de0f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.814029][T26295] RAX: ffffffffffffffda RBX: 00007f3e1d145fa0 RCX: 00007f3e1cf7ff19 [ 1768.822027][T26295] RDX: 0000000000000084 RSI: 0000000020000040 RDI: 0000000000000003 [ 1768.830007][T26295] RBP: 00007f3e1de0f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.837985][T26295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.845968][T26295] R13: 0000000000000000 R14: 00007f3e1d145fa0 R15: 00007ffd36485fa8 [ 1768.853962][T26295] [ 1770.219237][T26314] input: syz1 as /devices/virtual/input/input86 [ 1770.224229][T26315] tc_dump_action: action bad kind [ 1770.349375][T13470] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1770.531353][T13470] usb 3-1: Using ep0 maxpacket: 32 [ 1770.565110][T13470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.815394][T13470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.840947][T13470] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1771.425082][T13470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.436282][T13470] usb 3-1: config 0 descriptor?? [ 1771.567639][T26331] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.639039][T26331] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.355396][T26341] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 1772.374554][T26331] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.509785][T26331] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.674665][T26331] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.689252][T26331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.704333][T26331] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.719672][T26331] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.133148][T26354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1773.536185][ T866] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1773.956029][ T866] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 1773.965191][ T866] usb 5-1: config 0 has no interface number 0 [ 1774.037794][T26363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.669604][T13470] ft260 0003:0403:6030.0066: unknown main item tag 0x6 [ 1774.685235][ T866] usb 5-1: config 0 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1774.740072][ T866] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 2.46 [ 1774.758967][T13470] ft260 0003:0403:6030.0066: failed to retrieve chip version [ 1774.768360][T13470] ft260 0003:0403:6030.0066: probe with driver ft260 failed with error -32 [ 1774.819207][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.893527][T13470] usb 3-1: USB disconnect, device number 30 [ 1774.924618][ T866] usb 5-1: Product: syz [ 1775.061896][ T866] usb 5-1: Manufacturer: syz [ 1775.097793][ T866] usb 5-1: SerialNumber: syz [ 1775.111141][ T866] usb 5-1: config 0 descriptor?? [ 1775.271143][ T29] audit: type=1400 audit(2000000408.311:1880): avc: denied { setopt } for pid=26372 comm="syz.2.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1775.542005][T26351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.551219][T26351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.809918][T26381] FAULT_INJECTION: forcing a failure. [ 1775.809918][T26381] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.833506][T26381] CPU: 0 UID: 0 PID: 26381 Comm: syz.2.5612 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1775.844316][T26381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1775.854387][T26381] Call Trace: [ 1775.857669][T26381] [ 1775.860615][T26381] dump_stack_lvl+0x16c/0x1f0 [ 1775.865327][T26381] should_fail_ex+0x497/0x5b0 [ 1775.870026][T26381] ? fs_reclaim_acquire+0xae/0x150 [ 1775.875166][T26381] should_failslab+0xc2/0x120 [ 1775.879869][T26381] __kmalloc_noprof+0xcb/0x510 [ 1775.884657][T26381] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1775.890314][T26381] tomoyo_realpath_from_path+0xb9/0x720 [ 1775.895878][T26381] ? tomoyo_path_number_perm+0x235/0x590 [ 1775.901530][T26381] ? tomoyo_path_number_perm+0x235/0x590 [ 1775.907182][T26381] tomoyo_path_number_perm+0x248/0x590 [ 1775.912656][T26381] ? tomoyo_path_number_perm+0x235/0x590 [ 1775.918310][T26381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1775.924336][T26381] ? __pfx_lock_release+0x10/0x10 [ 1775.929430][T26381] ? trace_lock_acquire+0x14e/0x1f0 [ 1775.934660][T26381] ? lock_acquire+0x2f/0xb0 [ 1775.939179][T26381] ? __fget_files+0x40/0x3a0 [ 1775.943790][T26381] ? __fget_files+0x206/0x3a0 [ 1775.948483][T26381] security_file_ioctl+0x9b/0x240 [ 1775.953529][T26381] __x64_sys_ioctl+0xb7/0x200 [ 1775.958228][T26381] do_syscall_64+0xcd/0x250 [ 1775.962743][T26381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.968654][T26381] RIP: 0033:0x7ff66cb7ff19 [ 1775.973078][T26381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1775.992685][T26381] RSP: 002b:00007ff66d92f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.001096][T26381] RAX: ffffffffffffffda RBX: 00007ff66cd45fa0 RCX: 00007ff66cb7ff19 [ 1776.009497][T26381] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1776.017464][T26381] RBP: 00007ff66d92f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1776.025431][T26381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.033391][T26381] R13: 0000000000000000 R14: 00007ff66cd45fa0 R15: 00007ffd40d5b2a8 [ 1776.041367][T26381] [ 1776.045735][T26381] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1776.876944][T13470] usb 5-1: USB disconnect, device number 120 [ 1776.910802][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1777.470713][T13470] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1777.681509][T13470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.829657][T13470] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1777.907408][T13470] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1777.939674][T13470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.966760][T13470] usb 3-1: config 0 descriptor?? [ 1778.107665][T26401] FAULT_INJECTION: forcing a failure. [ 1778.107665][T26401] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.121609][T26401] CPU: 1 UID: 0 PID: 26401 Comm: syz.6.5618 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1778.132389][T26401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1778.142440][T26401] Call Trace: [ 1778.145711][T26401] [ 1778.148635][T26401] dump_stack_lvl+0x16c/0x1f0 [ 1778.153319][T26401] should_fail_ex+0x497/0x5b0 [ 1778.158010][T26401] ? fs_reclaim_acquire+0xae/0x150 [ 1778.163123][T26401] should_failslab+0xc2/0x120 [ 1778.167814][T26401] __kmalloc_noprof+0xcb/0x510 [ 1778.172586][T26401] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1778.178229][T26401] tomoyo_realpath_from_path+0xb9/0x720 [ 1778.183787][T26401] ? tomoyo_path_number_perm+0x235/0x590 [ 1778.189421][T26401] ? tomoyo_path_number_perm+0x235/0x590 [ 1778.195056][T26401] tomoyo_path_number_perm+0x248/0x590 [ 1778.200520][T26401] ? tomoyo_path_number_perm+0x235/0x590 [ 1778.206164][T26401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1778.212163][T26401] ? __pfx_lock_release+0x10/0x10 [ 1778.217188][T26401] ? trace_lock_acquire+0x14e/0x1f0 [ 1778.222392][T26401] ? lock_acquire+0x2f/0xb0 [ 1778.226957][T26401] ? __fget_files+0x40/0x3a0 [ 1778.231551][T26401] ? __fget_files+0x206/0x3a0 [ 1778.236250][T26401] security_file_ioctl+0x9b/0x240 [ 1778.241287][T26401] __x64_sys_ioctl+0xb7/0x200 [ 1778.245973][T26401] do_syscall_64+0xcd/0x250 [ 1778.250484][T26401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.256386][T26401] RIP: 0033:0x7f3e1cf7ff19 [ 1778.260799][T26401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1778.280409][T26401] RSP: 002b:00007f3e1de0f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1778.288822][T26401] RAX: ffffffffffffffda RBX: 00007f3e1d145fa0 RCX: 00007f3e1cf7ff19 [ 1778.296829][T26401] RDX: 0000000020000380 RSI: 00000000c0306201 RDI: 0000000000000005 [ 1778.304807][T26401] RBP: 00007f3e1de0f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1778.312774][T26401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.320741][T26401] R13: 0000000000000000 R14: 00007f3e1d145fa0 R15: 00007ffd36485fa8 [ 1778.328726][T26401] [ 1778.334241][T26401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1778.552608][T26407] FAULT_INJECTION: forcing a failure. [ 1778.552608][T26407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.603042][T13470] plantronics 0003:047F:FFFF.0067: ignoring exceeding usage max [ 1778.614292][T13470] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving [ 1778.654171][T26407] CPU: 0 UID: 0 PID: 26407 Comm: syz.5.5620 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1778.664961][T26407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1778.675007][T26407] Call Trace: [ 1778.678284][T26407] [ 1778.681207][T26407] dump_stack_lvl+0x16c/0x1f0 [ 1778.685879][T26407] should_fail_ex+0x497/0x5b0 [ 1778.690550][T26407] _copy_from_user+0x2e/0xd0 [ 1778.695136][T26407] copy_msghdr_from_user+0x99/0x160 [ 1778.700343][T26407] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1778.706236][T26407] ___sys_sendmsg+0xff/0x1e0 [ 1778.710844][T26407] ? __pfx____sys_sendmsg+0x10/0x10 [ 1778.716046][T26407] ? __pfx_lock_release+0x10/0x10 [ 1778.721069][T26407] ? trace_lock_acquire+0x14e/0x1f0 [ 1778.726267][T26407] ? __fget_files+0x206/0x3a0 [ 1778.730955][T26407] __sys_sendmsg+0x16e/0x220 [ 1778.735542][T26407] ? __pfx___sys_sendmsg+0x10/0x10 [ 1778.740658][T26407] do_syscall_64+0xcd/0x250 [ 1778.745151][T26407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.751031][T26407] RIP: 0033:0x7feeeb97ff19 [ 1778.755428][T26407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1778.775028][T26407] RSP: 002b:00007feeec781058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1778.783427][T26407] RAX: ffffffffffffffda RBX: 00007feeebb45fa0 RCX: 00007feeeb97ff19 [ 1778.791393][T26407] RDX: 0000000000044890 RSI: 0000000020000340 RDI: 0000000000000003 [ 1778.799362][T26407] RBP: 00007feeec7810a0 R08: 0000000000000000 R09: 0000000000000000 [ 1778.807326][T26407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.815302][T26407] R13: 0000000000000000 R14: 00007feeebb45fa0 R15: 00007ffea82c8fc8 [ 1778.822396][T13470] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1778.823267][T26407] [ 1778.867417][ T29] audit: type=1400 audit(2000000411.669:1881): avc: denied { write } for pid=26402 comm="syz.4.5617" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1778.899758][T26408] syzkaller0: entered promiscuous mode [ 1778.949278][T26408] syzkaller0: entered allmulticast mode [ 1779.490267][T26415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.564762][T26415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.616256][T26415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.646826][T26415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.866163][T13470] usb 3-1: USB disconnect, device number 31 [ 1780.761144][ T29] audit: type=1400 audit(2000000413.446:1882): avc: denied { accept } for pid=26420 comm="syz.5.5624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1780.858733][ T29] audit: type=1326 audit(2000000413.530:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1780.900839][ T29] audit: type=1326 audit(2000000413.559:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1780.939372][ T29] audit: type=1326 audit(2000000413.568:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1780.982176][ T29] audit: type=1326 audit(2000000413.568:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1780.985618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.014200][ T29] audit: type=1326 audit(2000000413.568:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1781.057517][ T29] audit: type=1326 audit(2000000413.568:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1781.093284][ T29] audit: type=1326 audit(2000000413.568:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1781.125343][ T29] audit: type=1326 audit(2000000413.568:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1781.167495][ T29] audit: type=1326 audit(2000000413.596:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26418 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7ff66cb7ff19 code=0x7ffc0000 [ 1783.156582][T26449] loop7: detected capacity change from 16383 to 0 [ 1783.263262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1783.634371][T26455] rdma_rxe: rxe_newlink: failed to add lo [ 1784.600228][T13149] Bluetooth: hci6: command 0x040f tx timeout [ 1785.304752][T26467] FAULT_INJECTION: forcing a failure. [ 1785.304752][T26467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.350952][T26467] CPU: 1 UID: 0 PID: 26467 Comm: syz.2.5635 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1785.361769][T26467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1785.371844][T26467] Call Trace: [ 1785.375131][T26467] [ 1785.378042][T26467] dump_stack_lvl+0x16c/0x1f0 [ 1785.382853][T26467] should_fail_ex+0x497/0x5b0 [ 1785.387561][T26467] _copy_from_user+0x2e/0xd0 [ 1785.392197][T26467] copy_msghdr_from_user+0x99/0x160 [ 1785.397420][T26467] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1785.403253][T26467] ? __pfx___lock_acquire+0x10/0x10 [ 1785.408475][T26467] ___sys_recvmsg+0xdc/0x1a0 [ 1785.413092][T26467] ? __pfx____sys_recvmsg+0x10/0x10 [ 1785.418317][T26467] ? __pfx_lock_release+0x10/0x10 [ 1785.423360][T26467] ? trace_lock_acquire+0x14e/0x1f0 [ 1785.428600][T26467] do_recvmmsg+0x2f8/0x740 [ 1785.433047][T26467] ? __pfx_do_recvmmsg+0x10/0x10 [ 1785.438007][T26467] ? vfs_write+0x306/0x1150 [ 1785.442531][T26467] ? __mutex_unlock_slowpath+0x164/0x690 [ 1785.448198][T26467] ? __fget_files+0x206/0x3a0 [ 1785.452905][T26467] __x64_sys_recvmmsg+0x239/0x290 [ 1785.458028][T26467] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1785.463603][T26467] do_syscall_64+0xcd/0x250 [ 1785.468132][T26467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.474044][T26467] RIP: 0033:0x7ff66cb7ff19 [ 1785.478469][T26467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.480035][T26473] FAULT_INJECTION: forcing a failure. [ 1785.480035][T26473] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.498070][T26467] RSP: 002b:00007ff66d92f058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1785.498093][T26467] RAX: ffffffffffffffda RBX: 00007ff66cd45fa0 RCX: 00007ff66cb7ff19 [ 1785.498107][T26467] RDX: 0000000000000001 RSI: 0000000020000e80 RDI: 0000000000000004 [ 1785.498118][T26467] RBP: 00007ff66d92f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.498131][T26467] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 1785.498142][T26467] R13: 0000000000000000 R14: 00007ff66cd45fa0 R15: 00007ffd40d5b2a8 [ 1785.498168][T26467] [ 1785.580968][T26473] CPU: 0 UID: 0 PID: 26473 Comm: syz.0.5638 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1785.591769][T26473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1785.601827][T26473] Call Trace: [ 1785.605100][T26473] [ 1785.605113][T26473] dump_stack_lvl+0x16c/0x1f0 [ 1785.605143][T26473] should_fail_ex+0x497/0x5b0 [ 1785.605171][T26473] ? fs_reclaim_acquire+0xae/0x150 [ 1785.622531][T26473] should_failslab+0xc2/0x120 [ 1785.627238][T26473] __kmalloc_noprof+0xcb/0x510 [ 1785.632027][T26473] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1785.637690][T26473] tomoyo_realpath_from_path+0xb9/0x720 [ 1785.643255][T26473] ? tomoyo_path_number_perm+0x235/0x590 [ 1785.648890][T26473] ? tomoyo_path_number_perm+0x235/0x590 [ 1785.654518][T26473] tomoyo_path_number_perm+0x248/0x590 [ 1785.659971][T26473] ? tomoyo_path_number_perm+0x235/0x590 [ 1785.665598][T26473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1785.671594][T26473] ? __pfx_lock_release+0x10/0x10 [ 1785.676701][T26473] ? trace_lock_acquire+0x14e/0x1f0 [ 1785.681909][T26473] ? lock_acquire+0x2f/0xb0 [ 1785.686407][T26473] ? __fget_files+0x40/0x3a0 [ 1785.690999][T26473] ? __fget_files+0x206/0x3a0 [ 1785.695685][T26473] security_file_ioctl+0x9b/0x240 [ 1785.700709][T26473] __x64_sys_ioctl+0xb7/0x200 [ 1785.705411][T26473] do_syscall_64+0xcd/0x250 [ 1785.709918][T26473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.715805][T26473] RIP: 0033:0x7fb5ddf7ff19 [ 1785.720213][T26473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.739840][T26473] RSP: 002b:00007fb5ded09058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.748272][T26473] RAX: ffffffffffffffda RBX: 00007fb5de145fa0 RCX: 00007fb5ddf7ff19 [ 1785.756236][T26473] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 1785.764196][T26473] RBP: 00007fb5ded090a0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.772159][T26473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.780141][T26473] R13: 0000000000000000 R14: 00007fb5de145fa0 R15: 00007ffd95300338 [ 1785.788185][T26473] [ 1785.817746][T26473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1785.861298][T26477] FAULT_INJECTION: forcing a failure. [ 1785.861298][T26477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.875917][T26477] CPU: 1 UID: 0 PID: 26477 Comm: syz.2.5640 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1785.886719][T26477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1785.896794][T26477] Call Trace: [ 1785.900081][T26477] [ 1785.903018][T26477] dump_stack_lvl+0x16c/0x1f0 [ 1785.907722][T26477] should_fail_ex+0x497/0x5b0 [ 1785.912416][T26477] _copy_from_user+0x2e/0xd0 [ 1785.917017][T26477] copy_msghdr_from_user+0x99/0x160 [ 1785.922230][T26477] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1785.928056][T26477] ___sys_sendmsg+0xff/0x1e0 [ 1785.932661][T26477] ? __pfx____sys_sendmsg+0x10/0x10 [ 1785.937877][T26477] ? __pfx_lock_release+0x10/0x10 [ 1785.942910][T26477] ? trace_lock_acquire+0x14e/0x1f0 [ 1785.948126][T26477] ? __fget_files+0x206/0x3a0 [ 1785.952822][T26477] __sys_sendmsg+0x16e/0x220 [ 1785.957418][T26477] ? __pfx___sys_sendmsg+0x10/0x10 [ 1785.962559][T26477] do_syscall_64+0xcd/0x250 [ 1785.967072][T26477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.972971][T26477] RIP: 0033:0x7ff66cb7ff19 [ 1785.977383][T26477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.996990][T26477] RSP: 002b:00007ff66d92f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1786.005405][T26477] RAX: ffffffffffffffda RBX: 00007ff66cd45fa0 RCX: 00007ff66cb7ff19 [ 1786.013370][T26477] RDX: 0000000000044890 RSI: 0000000020000340 RDI: 0000000000000003 [ 1786.021334][T26477] RBP: 00007ff66d92f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.029309][T26477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.037329][T26477] R13: 0000000000000000 R14: 00007ff66cd45fa0 R15: 00007ffd40d5b2a8 [ 1786.045324][T26477] [ 1786.664757][T26485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1787.790356][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1787.923191][T25788] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 1788.186535][ T5829] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1788.377894][ T5829] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1788.387365][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.409884][ T5829] usb 3-1: config 0 descriptor?? [ 1789.715609][T26502] Process accounting resumed [ 1789.720358][T26502] kernel write not supported for file /asound/timers (pid: 26502 comm: syz.0.5644) [ 1789.840437][T26512] FAULT_INJECTION: forcing a failure. [ 1789.840437][T26512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.878559][T26512] CPU: 1 UID: 0 PID: 26512 Comm: syz.4.5648 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1789.889373][T26512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1789.899447][T26512] Call Trace: [ 1789.902732][T26512] [ 1789.905673][T26512] dump_stack_lvl+0x16c/0x1f0 [ 1789.910371][T26512] should_fail_ex+0x497/0x5b0 [ 1789.915137][T26512] _copy_from_user+0x2e/0xd0 [ 1789.919750][T26512] core_sys_select+0x2cf/0xb80 [ 1789.924531][T26512] ? __pfx_core_sys_select+0x10/0x10 [ 1789.929826][T26512] ? get_pid_task+0xfc/0x250 [ 1789.934540][T26512] ? set_user_sigmask+0x217/0x2a0 [ 1789.939627][T26512] ? __pfx_set_user_sigmask+0x10/0x10 [ 1789.945020][T26512] do_pselect.constprop.0+0x1a0/0x1f0 [ 1789.950400][T26512] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1789.956287][T26512] __x64_sys_pselect6+0x183/0x240 [ 1789.961334][T26512] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 1789.966917][T26512] do_syscall_64+0xcd/0x250 [ 1789.971426][T26512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.977327][T26512] RIP: 0033:0x7f988f37ff19 [ 1789.981748][T26512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1790.001349][T26512] RSP: 002b:00007f9890256058 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1790.009773][T26512] RAX: ffffffffffffffda RBX: 00007f988f545fa0 RCX: 00007f988f37ff19 [ 1790.017752][T26512] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 1790.025810][T26512] RBP: 00007f98902560a0 R08: 0000000000000000 R09: 0000000000000000 [ 1790.033786][T26512] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1790.041755][T26512] R13: 0000000000000000 R14: 00007f988f545fa0 R15: 00007ffd559e27e8 [ 1790.049744][T26512] [ 1791.021955][T26497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1791.326073][ T5829] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1791.339300][ T5829] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1791.349697][ T5829] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1791.376970][ T5829] usb 3-1: USB disconnect, device number 32 [ 1791.437082][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1791.437099][ T29] audit: type=1400 audit(2000000423.427:1893): avc: denied { write } for pid=26527 comm="syz.6.5653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1791.907059][ T30] INFO: task syz.1.5184:24764 blocked for more than 143 seconds. [ 1791.930365][ T30] Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1791.962730][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1791.972408][ T30] task:syz.1.5184 state:D stack:22944 pid:24764 tgid:24763 ppid:17008 flags:0x00004004 [ 1791.983118][ T30] Call Trace: [ 1791.986412][ T30] [ 1791.990750][ T30] __schedule+0xe58/0x5ad0 [ 1791.995262][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1792.000537][ T30] ? __pfx___schedule+0x10/0x10 [ 1792.005414][ T30] ? schedule+0x298/0x350 [ 1792.009829][ T30] ? __pfx_lock_release+0x10/0x10 [ 1792.014891][ T30] ? lock_acquire+0x2f/0xb0 [ 1792.020717][ T30] ? schedule+0x1fd/0x350 [ 1792.025297][ T30] schedule+0xe7/0x350 [ 1792.029395][ T30] schedule_timeout+0x244/0x280 [ 1792.039449][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1792.045129][ T30] ? mark_held_locks+0x9f/0xe0 [ 1792.049917][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1792.056303][ T30] __wait_for_common+0x3e1/0x600 [ 1792.061326][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1792.066727][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1792.072187][ T30] ? ib_cq_pool_cleanup+0x220/0x360 [ 1792.078219][ T30] disable_device+0x170/0x280 [ 1792.086429][ T30] ? __pfx_disable_device+0x10/0x10 [ 1792.091669][ T30] __ib_unregister_device+0x2b4/0x480 [ 1792.098196][ T30] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1792.104119][ T30] ib_unregister_device_and_put+0x5a/0x80 [ 1792.109857][ T30] nldev_dellink+0x211/0x300 [ 1792.114542][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 1792.119866][ T30] ? cap_capable+0x1cf/0x240 [ 1792.124487][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1792.130426][ T30] ? security_capable+0x7e/0x260 [ 1792.135399][ T30] ? ns_capable+0xd7/0x110 [ 1792.139951][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 1792.145091][ T30] rdma_nl_rcv_msg+0x388/0x6e0 [ 1792.150191][ T30] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1792.155536][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1792.162050][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1792.167271][ T30] ? hlock_class+0x4e/0x130 [ 1792.173881][ T30] ? __lock_acquire+0xcc5/0x3c40 [ 1792.178829][ T30] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 1792.185411][ T30] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1792.195467][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 1792.200916][ T30] netlink_unicast+0x53c/0x7f0 [ 1792.205729][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1792.211044][ T30] netlink_sendmsg+0x8b8/0xd70 [ 1792.216149][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.221460][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 1792.227322][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 1792.232841][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1792.238162][ T30] ___sys_sendmsg+0x135/0x1e0 [ 1792.242882][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1792.248277][ T30] ? __pfx_lock_release+0x10/0x10 [ 1792.253332][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1792.259617][ T30] ? __fget_files+0x206/0x3a0 [ 1792.264343][ T30] __sys_sendmsg+0x16e/0x220 [ 1792.269137][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1792.274288][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 1792.279637][ T30] do_syscall_64+0xcd/0x250 [ 1792.284173][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.291210][ T30] RIP: 0033:0x7f6bae37ff19 [ 1792.295649][ T30] RSP: 002b:00007f6baf15b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1792.305328][ T30] RAX: ffffffffffffffda RBX: 00007f6bae545fa0 RCX: 00007f6bae37ff19 [ 1792.316482][ T30] RDX: 0000000024000080 RSI: 0000000020000380 RDI: 0000000000000003 [ 1792.330874][ T30] RBP: 00007f6bae3f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1792.338875][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1792.347054][ T30] R13: 0000000000000000 R14: 00007f6bae545fa0 R15: 00007ffff9ac8448 [ 1792.356186][ T30] [ 1792.359331][ T30] [ 1792.359331][ T30] Showing all locks held in the system: [ 1792.367217][ T30] 1 lock held by pool_workqueue_/3: [ 1792.392289][ T30] 1 lock held by khungtaskd/30: [ 1792.401237][ T30] #0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1792.411939][ T30] 2 locks held by getty/5570: [ 1792.417891][ T30] #0: ffff888035af20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1792.427927][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1792.438316][ T30] 4 locks held by kworker/u8:10/6127: [ 1792.443766][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1792.454325][ T30] #1: ffffc900047afd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1792.464634][ T30] #2: ffffffff8fec4c50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xb40 [ 1792.474368][ T30] #3: ffff888077b0c6b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1792.485781][ T30] 2 locks held by syz.1.5184/24764: [ 1792.491538][ T30] #0: ffffffff9ab97558 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x16a/0x6e0 [ 1792.502051][ T30] #1: ffff888077b0c6b8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 1792.513652][ T30] 2 locks held by syz.5.5658/26548: [ 1792.518989][ T30] #0: ffffffff8e089668 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x3f/0xa0 [ 1792.529287][ T30] #1: ffffffff8e1c6e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1792.539386][ T30] 2 locks held by syz.4.5659/26549: [ 1792.544898][ T30] #0: ffff888075075008 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1792.556952][ T30] #1: ffff8880332da958 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x1c/0x3c0 [ 1792.567065][ T30] [ 1792.571192][ T30] ============================================= [ 1792.571192][ T30] [ 1792.585818][ T30] NMI backtrace for cpu 0 [ 1792.590196][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1792.600713][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1792.610779][ T30] Call Trace: [ 1792.614051][ T30] [ 1792.616971][ T30] dump_stack_lvl+0x116/0x1f0 [ 1792.621654][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1792.626631][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1792.632693][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1792.638708][ T30] watchdog+0xf14/0x1240 [ 1792.642974][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.647642][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1792.652844][ T30] ? __kthread_parkme+0x148/0x220 [ 1792.657958][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.662651][ T30] kthread+0x2c1/0x3a0 [ 1792.666748][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1792.671944][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.676549][ T30] ret_from_fork+0x45/0x80 [ 1792.680964][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.685551][ T30] ret_from_fork_asm+0x1a/0x30 [ 1792.690420][ T30] [ 1792.694205][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1792.699465][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1792.700968][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1792.715983][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1792.726466][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1792.736605][ T30] Call Trace: [ 1792.739893][ T30] [ 1792.742822][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1792.747408][ T30] panic+0x71d/0x800 [ 1792.751299][ T30] ? __pfx_panic+0x10/0x10 [ 1792.755726][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1792.761132][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1792.767132][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1792.772512][ T30] ? watchdog+0xd7e/0x1240 [ 1792.776967][ T30] ? watchdog+0xd71/0x1240 [ 1792.781387][ T30] watchdog+0xd8f/0x1240 [ 1792.785653][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.790349][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1792.795535][ T30] ? __kthread_parkme+0x148/0x220 [ 1792.800549][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.805215][ T30] kthread+0x2c1/0x3a0 [ 1792.809273][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1792.814464][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.819058][ T30] ret_from_fork+0x45/0x80 [ 1792.823469][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.828058][ T30] ret_from_fork_asm+0x1a/0x30 [ 1792.832829][ T30] [ 1792.836257][ T30] Kernel Offset: disabled [ 1792.840598][ T30] Rebooting in 86400 seconds..