last executing test programs: 2m52.624025882s ago: executing program 2 (id=461): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x40, 0x5, 0x7, {0x7, 0x5, "f906649464"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_disconnect(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x2e, 0x22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x3}, 0x4, 0x5, 0x4, 0x4, 0x0, 0x0, 0x200}) syz_open_procfs$pagemap(0x0, &(0x7f00000003c0)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc", 0x19}], 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r2, 0xe, 0x1, 0xc, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0]}, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x11) connect$inet(r3, &(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m48.781717355s ago: executing program 2 (id=477): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000340)={&(0x7f0000000400)="3c4a2d336fddf83d7b42813d1b391c347c51ee14d285f1a8021e6fcce255b89f81f283f470690874de097e7d5135ae4134a64612f188bf600fff836acc4765cb6c8ff7b68ceb8e07bcbda24bed2378d1e72bd45d178bca9b2d40d6f37022b0c9c3cdc25d288182dab86b70f35c9b603de64d4581ef27bff6dec6f638fd5015cee989de10992e63782b588e57d289b2574ccebbd01686eee5174e1ef3b1fd36f13c37a2ff8fb087f112b08fb5e0a5c3b0309d725d804ef0e16d35cb083ad483fcd9b7f08a1c58a7986b252a2b0b7c14f3df949620fa0592f16d1776fda535be07253a839c610e90055fe3b7d73a9bfc52b7f29b", 0xf3}) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) 2m48.289242857s ago: executing program 2 (id=482): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x3, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x53, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_emit_ethernet(0xb9, &(0x7f0000000140)={@remote, @random="1ff55900d8bc", @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x3}}, {@generic={0x88ca, "e6c4ec5ec21790aa85a46ce44b3e6888d4456ee3a96d06b6a617e16e2c1e62efd4f52c2e09aa5047bd8c800f9f974abfdc74a43f18db4a46c49c096a47f08f4444c456566a5c23cef9b52df00def10910f61d04d3bfa5d1c1c09664a168473259f801fb77875842003929e3691164183dc7b984cfd2de7646eeb69ca9c4d02a15932afbebd9b920502088f269baffec6882dbd2aabe1ced66570f8d4a6bec9b6753712"}}}, &(0x7f0000000080)={0x0, 0x4, [0x2fd, 0x6f3, 0xaaf, 0x6e1]}) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="c5ee924f03ad9bd3b09950cbe5307c85e3ea4df2ba2265e0359600888eff3785c20cf94d1f440789b17ba2ed54fbfd87b6ccb934a45fe3d6dc180a955926d49944cefe86f4eaeb7746d9a760ab9a47207571529df9f53f26b8d930bbb9c34dc0850b0605b76c035671aa8b7017c62c7f6af5db5aa33d0ede2c1bc7767e6fa84a54ce2afce78b009385067897af98f2d69c0e6eef1647aac4b9f01915985d6707a0c4cb9ef3a185a1533c75b0a73b483d058551141b71b32d91119ef735ec525643268990f2ac86b79e4a337569f5bab911e4c7dc04a42890023b", 0xda}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f00000004c0)="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", 0xff}, {&(0x7f0000000300)="95ea03e53082acd9168bc2b24a3fbb361cdf648ecc6353d5df2334fc8458dc6990535d58669f6f458ed434f211bca2cf11309873c52c948d3aac147b1c2fc2fc111efa630ebffb03497199ab6ab8e3717e733a10c42225f43aef9080564e765501020443d26865585e5f2f1059a8524b2d14bc5b5ea349", 0x77}, {&(0x7f0000000600)="de356ae5297f2cfba9ac4f5089e5820d01c525365cbbfc7e28f0d86c8b108b09cd5d0dd407626ac8f5b6fd096663a3737ddf41ef56c8b9fcbee0c5b99e3d90026b9f59845b3b5bd48f6b830ffdddb11b4a90b8919e82c7ee548cc33901b599deb965a22a13a2c7855a5064102c557f3944ce75993da85069", 0x78}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x20, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x6c543, 0x80) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000000000008, 0x129002) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x109180, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000000), 0x2, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) r11 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x4) mknodat$loop(r12, &(0x7f0000000040)='./file0\x00', 0x100, 0x1) openat(r12, 0x0, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)={0x0, 0xc, 0x1b, {0x1b, 0x23, "000200796d8d812b3427383e9c3ac3d9ce40c7c8fc10dba5bf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) 2m45.073730876s ago: executing program 0 (id=494): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'wlan0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'wlan0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 2m43.553683292s ago: executing program 0 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="081500000005110400000000000000000100000554020100000000000000000806110000"], 0x1508}}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x98f905, 0x8}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x519000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r3}) 2m43.22760177s ago: executing program 0 (id=501): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x22020400) unshare(0x44000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000a0002"], 0x80}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd00e4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x8, 0x575, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x34}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x10) connect$802154_dgram(r0, 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x400) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r4) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 2m43.170370881s ago: executing program 2 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) (fail_nth: 1) 2m40.873326641s ago: executing program 2 (id=506): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000340)={&(0x7f0000000400)="3c4a2d336fddf83d7b42813d1b391c347c51ee14d285f1a8021e6fcce255b89f81f283f470690874de097e7d5135ae4134a64612f188bf600fff836acc4765cb6c8ff7b68ceb8e07bcbda24bed2378d1e72bd45d178bca9b2d40d6f37022b0c9c3cdc25d288182dab86b70f35c9b603de64d4581ef27bff6dec6f638fd5015cee989de10992e63782b588e57d289b2574ccebbd01686eee5174e1ef3b1fd36f13c37a2ff8fb087f112b08fb5e0a5c3b0309d725d804ef0e16d35cb083ad483fcd9b7f08a1c58a7986b252a2b0b7c14f3df949620fa0592f16d1776fda535be07253a839c610e90055fe3b7d73a9bfc52b7f29b", 0xf3}) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) 2m39.361962551s ago: executing program 2 (id=511): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x7f) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000e8ff00000000ffff0f008500000053000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ea, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0xb, "902172378d9aaccc3e"}]}}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffeb4, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80)={r3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800006, 0x4008031, 0xffffffffffffffff, 0xd6d4a000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0xb9654000) lsm_list_modules(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4007}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x40}}, 0x4000000) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) 2m39.335619525s ago: executing program 0 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r2, &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200fe80000000000000082005007a0104dea70016f591001f000100e0000000035c0461c9ed7f6f940071342e875fab7cb6cedccf6efb8000a077e850f824664e5916277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c958775730d16a4683f5aeb4edbb57a5025e4ca9ee5350db798262f3d40fad95667e006dcdf6341b3413394e690b5692304343e44e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x60, &(0x7f0000000100)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4e, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x10, 0x1000, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8ce, 0x4}, @eol, @sack={0x5, 0x6, [0x80]}]}}, {"db6c02ea5a283b0662499e49001f"}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4, 0x48}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}, @IFLA_MTU={0x8, 0x4, 0xa4a}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) lseek(r8, 0x1, 0x4) 2m38.621599789s ago: executing program 32 (id=511): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x7f) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000e8ff00000000ffff0f008500000053000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ea, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0xb, "902172378d9aaccc3e"}]}}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffeb4, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024000180f900018008000100e000000108000200e00000010c0002800100000000002400028014000180080001000000000008000200ac1e00010c00028005ef8e00000000000800075e0000000100004fd4b751be67bbb7cd01e20fa2df845859d050a1203d81bca211d40a8a3f70ea5238198bc5bf931a830e467d4f31cfb5048225d846015f43ee1cf94ab70d58c00734d8f59286c4a7f92584221e07f7f83460d9c0de9179e1a0c27a6b88d5987ce2b2f1124aa20be3115a2bbbd7a02dc7bebdda8c9a82bdbd86bfc0c93047c58a50ad41465c21f80571ce3d0da4306f5ea783ade937f78751a676734e22bb4fed300b7ddc7c9a82e58d08b295bc4927f928d7d1d1f7fc1bed1e33293d5ad2847e00d0c7b4b6de3abd617f294434ca8656b62aac375d9582966de6fca509c01a5731109e3300170c7970b748c8e63dc229178f558c7ea0db0c636363477ab48be48431816a67"], 0x64}}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80)={r3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800006, 0x4008031, 0xffffffffffffffff, 0xd6d4a000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0xb9654000) lsm_list_modules(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4007}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x40}}, 0x4000000) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) 2m35.786446894s ago: executing program 0 (id=522): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000340)={&(0x7f0000000400)="3c4a2d336fddf83d7b42813d1b391c347c51ee14d285f1a8021e6fcce255b89f81f283f470690874de097e7d5135ae4134a64612f188bf600fff836acc4765cb6c8ff7b68ceb8e07bcbda24bed2378d1e72bd45d178bca9b2d40d6f37022b0c9c3cdc25d288182dab86b70f35c9b603de64d4581ef27bff6dec6f638fd5015cee989de10992e63782b588e57d289b2574ccebbd01686eee5174e1ef3b1fd36f13c37a2ff8fb087f112b08fb5e0a5c3b0309d725d804ef0e16d35cb083ad483fcd9b7f08a1c58a7986b252a2b0b7c14f3df949620fa0592f16d1776fda535be07253a839c610e90055fe3b7d73a9bfc52b7f29b", 0xf3}) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) 2m35.301664322s ago: executing program 0 (id=527): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000380)=ANY=[@ANYBLOB="31dcb91c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002e00000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e14bf1a87e7d0c4f843ff6a8a6123980b1debd6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff563aca36e8f20b950a7"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r4) mknod(&(0x7f0000000040)='./file0\x00', 0x200, 0xfffffffa) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m20.217526552s ago: executing program 33 (id=527): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000380)=ANY=[@ANYBLOB="31dcb91c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002e00000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e14bf1a87e7d0c4f843ff6a8a6123980b1debd6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff563aca36e8f20b950a7"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r4) mknod(&(0x7f0000000040)='./file0\x00', 0x200, 0xfffffffa) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1m31.563981413s ago: executing program 4 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m30.477007898s ago: executing program 4 (id=703): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m30.198915413s ago: executing program 4 (id=705): syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) 1m25.540814363s ago: executing program 4 (id=716): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) bind$l2tp6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7, 0x2}, 0x20) preadv(r7, &(0x7f0000000ac0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)=""/244, 0xf4}], 0x6, 0x0, 0x7c) 1m23.953302897s ago: executing program 4 (id=719): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x810, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x4, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x800, @local, 0x3}}, {{0xa, 0x4e23, 0x3ff, @mcast1, 0x1}}, {{0xa, 0x4e21, 0x2, @local, 0x7ff}}, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}}]}, 0x290) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) add_key$user(&(0x7f0000002100), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_1\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1m20.508795078s ago: executing program 4 (id=724): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x7ee8}}, './file0\x00'}) sync() sync() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)=""/200}, 0x20) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sync() sync() sync() sync() sync() sync() sync() 1m4.936436181s ago: executing program 34 (id=724): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x7ee8}}, './file0\x00'}) sync() sync() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)=""/200}, 0x20) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sync() sync() sync() sync() sync() sync() sync() 9.834883039s ago: executing program 5 (id=962): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x5, 0x8, 0x0, 0x2, 0x2, "09c8ca6c32fdcd85c86693e8199d618cd23da3", 0x10, 0x1000}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'batadv_slave_1\x00', {}, 0x1}) mlockall(0x7) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.000/010)'], 0x6f) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000030, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'bond0\x00', {0x10000003}, 0x2}) 8.777786691s ago: executing program 5 (id=965): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x23) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='3']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 7.460914009s ago: executing program 1 (id=975): ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 7.303726798s ago: executing program 1 (id=976): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x5, 0x8, 0x0, 0x2, 0x2, "09c8ca6c32fdcd85c86693e8199d618cd23da3", 0x10, 0x1000}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'batadv_slave_1\x00', {}, 0x1}) mlockall(0x7) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.000/010)'], 0x6f) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000030, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'bond0\x00', {0x10000003}, 0x2}) 6.494936278s ago: executing program 6 (id=978): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="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", 0x239}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x4}, {0x5}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100003000a000200053582c137153e37000c068005", 0x29}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100091", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 6.404336777s ago: executing program 1 (id=979): ioperm(0x0, 0x82, 0x1f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000014000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000063991f2bc3a600eabe21bab5d400808ad5"], 0x50) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 6.189864761s ago: executing program 7 (id=980): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) write$binfmt_script(r0, 0x0, 0x0) 6.138501008s ago: executing program 6 (id=981): ioperm(0x0, 0x82, 0x1f) unshare(0x28000600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000006a00cc5f6feb49feabedf149871b0c7275721901000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000014000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000063991f2bc3a600eabe21bab5d400808ad5"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x1000) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000800)=ANY=[@ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000000004000000000af0100000000000001000040"]) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') getdents(r7, &(0x7f0000000180)=""/46, 0x2e) 5.915673113s ago: executing program 7 (id=983): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x17040039}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) syz_io_uring_setup(0x1111, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) r7 = syz_usb_connect(0x0, 0x126, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2a, 0x82, 0x5, 0x8, 0x1bc7, 0x1260, 0x8997, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x114, 0x1, 0x6, 0x3, 0x60, 0x0, [{{0x9, 0x4, 0xa9, 0x4c, 0x0, 0xb4, 0x10, 0x6b, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "63f86250"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xa7, 0xe25, 0x4}, [@mdlm_detail={0x6c, 0x24, 0x13, 0x0, "c690ebc1337f5d3b744516fffb96dfd0c53a4de12d8a26240164dcc59003190e5c5522371b25465bed3c1c0c82a71ee36e83ad64d0f705e6b2c01fbf805939a7be8435d241b602dd4201bf1ca765a81ea6767fb027656f32c62aa17ec118ec4fa3e02596cf494038"}, @mdlm_detail={0x5b, 0x24, 0x13, 0x3f, "d734e909d07fe8c01b07d404732ab48c998ce49c3eb225957dab591fe955f9e6ea5cd08beb084f8fd43c1a7a806ad7751ca29a4a5489cd0adbfba62db5c6b0deb004099fab34df4d72e9104d64243323eea25d0896826f"}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x401}]}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xc, 0x3, 0x6, 0x60, 0x9}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x56, &(0x7f0000000540)=@string={0x56, 0x3, "38722471c0f235ec2f47461b1647bce08f45815bad3a0d4c7ad7205669631186b9ff5b5519fbb4e0f0ab2f803ab48f2c3718622ce60609f078a92a83520466bc60cbddadbe6ac2c10009acef46d4050dec67bfc6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}, {0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="080322a94e40ae3a"]}, {0xcf, &(0x7f00000003c0)=@string={0xcf, 0x3, "f283635f66408310bbffb8f1620bbae2f1e6511709597d92bae3cd934ae30da4ed927769866ad8f615a5309dd3761a8f3ed9904e4da9402d209d73ecbb9b618c16c6e08cb157bd8862fe07688ebe081c68e2fd55ded2eb5910c581b22a3dce088239ded2b9d8174634375f780214844fb133044b4eab24b5a926493dd6e5712885b6476c63654e59a5369495685b354acf6cf1f786735fc9b4e5c8bcbbf8e5e953af428bffed53c191390cb071f9dedfa5b6c36751c581e469d629e51067b002ece9fd67095a7051b7a3d20cf8"}}, {0xcb, &(0x7f0000000280)=@string={0xcb, 0x3, "a977c94cbf60b88f337a816b95174d9822caefb79470d3997ca6ae92a03d6f5f6a4e7603e86dcaf6a7318facf1735820860b08d21b69fc18087426d91a5fa95ca59b2d4015d51f405b4dad54bfdbdd1a6c6a01c9e05dd472d73d153dfe6e5e31dd2c5b5519e654a7330902607edab189513fda5f3fa6b49b7ed401bb066bb47748eeab9ee1008a901a2cd005009591f5681639f3087045fabf335086341e07e7b0bea90677599086b9092a717ec1f77cd668f53761ec516b2ea850922024dd4f2a06cea29ede65de66"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x438}}, {0x88, &(0x7f0000000680)=@string={0x88, 0x3, "2948c59b4ba3a15c7ffc840948bf9b34714b2b758a93105ef1212f5d5f10035a780b1d66d031ff57b67ff4476feb6fabd2870e1fb83ac3f568d05c038b23976d2d4d99941fdf2a45064f2e15c35f58345b3d6a4c7c1fd82aa8f69d465ca92868e837ea543b2195923dc42849215d2430550a87694ed37fbdd8681baf6643a8f49ec97e1549e7"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41f}}, {0x65, &(0x7f0000000780)=@string={0x65, 0x3, "f4c503515a898bddd673b9c9f58b16ed53ceab8869b861c78488a31c38713280b0a4737db22c0b2f3ef658a4b905d41021d104103115980100670ec22874d6f87a70a601d06b1a3077f27f26db53031b288ae7cc34037f3b504d0bd72e445fc09301d1"}}]}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d00)=@broute={'broute\x00', 0x10, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000000440], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e66d465600"/144]}, 0x108) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="4015de"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000ac0)={0x18, &(0x7f0000000840)={0x20, 0x15, 0x2, "480f"}, 0x0, 0x0, 0x0, 0x0}) 5.604831603s ago: executing program 5 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x2c, r2, 0x1, 0xffffffff, 0x25dfdc02, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020804) (fail_nth: 2) 4.863238335s ago: executing program 6 (id=987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x100) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1b) syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x30, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@synack={0x1e, 0x10, 0xf, 0x2, 0x5e, 0xe, 0xe9}, @mptcp=@syn={0x1e, 0xc, 0xd, 0x1, 0x1, 0x6, 0x100}]}}}}}}}}, 0x0) 4.776263396s ago: executing program 1 (id=988): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tee(r0, r3, 0xfffffffffffffc01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2, 0x0, 0x2}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x3, 0x0, 'queue0\x00', 0x92f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc05c5340, &(0x7f00000002c0)={0x9, 0x0, {0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_emit_vhci(0x0, 0xf) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f00000004c0)) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) listen(r8, 0xa) 4.458218617s ago: executing program 5 (id=990): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) 4.343203772s ago: executing program 6 (id=992): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x40010}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f00009cc000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f00000003c0)=0x6) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000140)={0x7fffffff, 0x2, {r8}, {r9}, 0x401, 0x7e}) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) 3.689090255s ago: executing program 3 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x18) (async) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r3, 0x5, 0x1, 0x4a5, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}, 0x40) (rerun: 64) 3.155496226s ago: executing program 3 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d66d87ec25c39589405f1a2d4226ac500f5e61bc94ed628", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf25010000000800040000000000040004000800020007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x80010, r5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1}, 0x1c}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0) 2.957366636s ago: executing program 6 (id=996): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r7, &(0x7f0000000d80), 0x0, 0x20048884, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x2}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0xc, {"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", 0x1000}}, 0x1006) 2.174995646s ago: executing program 3 (id=997): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r7, &(0x7f0000000d80), 0x0, 0x20048884, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x2}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0xc, {"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", 0x1000}}, 0x1006) 2.051274224s ago: executing program 3 (id=998): ioperm(0x0, 0x82, 0x1f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000014000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000063991f2bc3a600eabe21bab5d400808ad5"], 0x50) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 1.509011757s ago: executing program 7 (id=999): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$MSR(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000d80)={0x100000, 0x80}, 0x20) r1 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0xcba9, 0x80}) close(r1) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfe00, 0xa0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.434259803s ago: executing program 6 (id=1000): ioperm(0x7, 0xa, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) clock_settime(0x1, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0xa, 0x9}}}}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) 1.031062645s ago: executing program 1 (id=1001): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x974b, 0x8, 0x2, 0xffdffffa}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 1.027363999s ago: executing program 5 (id=1002): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000180)='\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000280)) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x43}, 0x18) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000300)=0x1) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x5, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffff28, &(0x7f0000000000)='\xc1k\x87\xad\x83\xd5I\x10\xd6\x1c\xe1\x03.\xa4\xa8\x86O;\xacs \xda\xe6\x9d\x83\x972{\xb6\x01\f\xcb\x90\xbc\xed\xbaY\xdai\xc1~\x0f\x0f\x909rK\xc5\x7f5=\xf8|Y\xf5B\x0e\xc3\x93l\xde\x14JQ\xd0\xadC\x86\t\xcf1\xb8k\xc0\x8b\x11\xaeC\vM\x92\xd3\xec<]\x17\xca\xd8\x0f\xc7\x9dt\x0e\xa4\"2\xbbc\x01\x854J\x0e\xfe\'`\xddG\a\xe2[\xde\x1b\xe8\x87\xaa+v\xafqq\xcbpskG\xb7\xd0\xa1\xaf\x81\xdb`\xe5M9\xb5\xe9\x89\x9b;\xa1\x84\xfa\xe3\x96\xcb\xce\x97\xb7\x82\x04\x00\"\x02\xc0\xac\xb6\x82\xa2\xe7\x81\xe7\x19u\xc6\xf8C\\\x9b\x1f)g\xc84\xa5>\xa8\x03K\xdf}\x12m\xd0\x10\xe8\xb2\xd21:d \xd1.\xfc\x16\x8aT\xc4X\x88\x95\xc0\xd6$R\xd6@\xf9\xf0\xf3\xb3\x907E\xc3\xfd\xe16\xac\xc11\x17\xdd\xe0H\xbam\x8e\xebe\xa3\x95&\nM\xe2\xcb=\'$95O\x94\x9b4\xef\xfd[\xc7)faeM~O\xfa\xee\xaeG\xd4\x9eLKGAx\xfcI\xb2a+\xd8\xedT\xe3\xe2i\x13\xe59\x15Q\xf7\x05]\x7f\x061\xaez\x0e+\x94\xd1\x88R\xb9') 962.188992ms ago: executing program 7 (id=1003): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r7, &(0x7f0000000d80), 0x0, 0x20048884, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x2}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0xc, {"a2e3ad214fc752f91b3d060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 449.623603ms ago: executing program 3 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x62000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 235.796902ms ago: executing program 7 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0x0, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 133.425266ms ago: executing program 1 (id=1006): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004e3b474c25d9b394820a4e3ab7"], 0x90) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYRESOCT=r3, @ANYBLOB="c73742dca3377233cabec54f9a8e9457cb8a1c7bb63023252a3760f5e11b35d7f1724020c437c62f2e920de00ae812e1da6d8b240a6681f3bade0b750b7c6eb8ed79e91d9f1bf7a06a62150e8438b6e842e897b76a6c7885d25a15742ec51f17117a164cf03e227f72a5e224a7f3653f768559db8d4ae81ca1c79d965406", @ANYRES32=r2, @ANYRES8=r1, @ANYRES16=r2, @ANYRES16=r1, @ANYRES16=r1, @ANYRES16=r4, @ANYBLOB], 0x290) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x110) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000002000000060000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r8, 0x0, &(0x7f00000003c0)=""/28}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0xffffd000) syz_usbip_server_init(0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000240)={{0xeeee0000, 0xeeef0000, 0x0, 0x2b, 0x6, 0x8, 0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0xffff1000, 0xeeee5002, 0xa, 0x5, 0x7, 0x9, 0x46, 0x8, 0xa, 0x2a, 0x7, 0xa}, {0x4, 0xffffc, 0xb, 0x7, 0x5, 0x5, 0x2, 0x9, 0x1, 0x0, 0x0, 0x72}, {0xffff1000, 0xeeee0000, 0xc, 0x0, 0x20, 0x0, 0x1, 0x84, 0x81, 0x1, 0x81, 0xfe}, {0x5000, 0x4000, 0xe, 0x9, 0x0, 0x8, 0x6, 0x7f, 0xd, 0x6, 0x8, 0x2}, {0x1000, 0xd5c5b000, 0x8, 0x8, 0x4b, 0x0, 0x0, 0x4, 0x1, 0x8, 0x83, 0x5}, {0x2000, 0x8080000, 0xd, 0x3, 0x59, 0x1, 0xff, 0x8, 0xf8, 0x8, 0x8}, {0x6000, 0x4, 0x0, 0x3, 0x7f, 0xe8, 0x3, 0x1, 0x4, 0xf1, 0x4, 0x8}, {0x100000, 0xab}, {0x2000, 0x4}, 0x1, 0x0, 0x3000, 0x0, 0x5, 0xb801, 0x100000, [0xfffffffffffffffb, 0x10000, 0x40000000, 0x8001]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.362586ms ago: executing program 3 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d66d87ec25c39589405f1a2d4226ac500f5e61bc94ed628", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf25010000000800040000000000040004000800020007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x80010, r5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1}, 0x1c}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0) 0s ago: executing program 5 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$kcm(0x29, 0xa, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): value: 17 [ 244.710783][ T5867] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 244.740875][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.783559][ T5867] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 245.048850][ T5867] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 245.341377][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.449255][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.513804][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.579158][ T975] usb 5-1: USB disconnect, device number 22 [ 245.601365][ T975] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 246.014707][ T7629] veth0_vlan: entered promiscuous mode [ 246.054011][ T7629] veth1_vlan: entered promiscuous mode [ 246.112653][ T7629] veth0_macvtap: entered promiscuous mode [ 246.134927][ T7629] veth1_macvtap: entered promiscuous mode [ 246.182036][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.209773][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.251758][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.283465][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.327516][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.372965][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.405870][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.459240][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.500183][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.634201][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.651570][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.672540][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.690113][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.701016][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.729388][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.790157][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.819468][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.829522][ T2150] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 246.888318][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.929827][ T7629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.967154][ T7629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.993578][ T7629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.013679][ T7629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.034725][ T2150] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 247.059216][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.103791][ T2150] usb 5-1: Product: syz [ 247.108003][ T2150] usb 5-1: Manufacturer: syz [ 247.121700][ T2150] usb 5-1: SerialNumber: syz [ 247.165918][ T2150] usb 5-1: config 0 descriptor?? [ 247.247715][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.257282][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.265567][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.285516][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.306743][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.320114][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 247.327633][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.335830][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.424754][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.474560][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.581477][ T7859] FAULT_INJECTION: forcing a failure. [ 247.581477][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 247.594771][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.3.568 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 247.594794][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 247.594807][ T7859] Call Trace: [ 247.594814][ T7859] [ 247.594821][ T7859] dump_stack_lvl+0x241/0x360 [ 247.594853][ T7859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.594877][ T7859] ? __pfx__printk+0x10/0x10 [ 247.594903][ T7859] ? kmem_cache_alloc_noprof+0x48/0x380 [ 247.594924][ T7859] ? __pfx___might_resched+0x10/0x10 [ 247.594945][ T7859] should_fail_ex+0x40a/0x550 [ 247.594967][ T7859] should_failslab+0xac/0x100 [ 247.594986][ T7859] ? vm_area_dup+0x61/0x290 [ 247.595005][ T7859] kmem_cache_alloc_noprof+0x70/0x380 [ 247.595028][ T7859] vm_area_dup+0x61/0x290 [ 247.595051][ T7859] __split_vma+0x1cb/0xc50 [ 247.595081][ T7859] ? __pfx___split_vma+0x10/0x10 [ 247.595110][ T7859] ? mark_lock+0x9a/0x360 [ 247.595134][ T7859] vms_gather_munmap_vmas+0x2e6/0x1600 [ 247.595156][ T7859] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.595177][ T7859] ? do_raw_spin_unlock+0x13c/0x8b0 [ 247.595196][ T7859] ? finish_task_switch+0x1e5/0x870 [ 247.595217][ T7859] ? lockdep_hardirqs_on+0x99/0x150 [ 247.595237][ T7859] ? finish_task_switch+0x1e5/0x870 [ 247.595260][ T7859] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 247.595280][ T7859] ? __schedule+0x18c4/0x4c40 [ 247.595302][ T7859] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.595328][ T7859] do_vmi_align_munmap+0x3ff/0x6f0 [ 247.595355][ T7859] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 247.595370][ T7859] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.595421][ T7859] ? mas_find+0x8c0/0xbb0 [ 247.595453][ T7859] do_vmi_munmap+0x24e/0x2d0 [ 247.595478][ T7859] __se_sys_mremap+0xcc2/0x1b20 [ 247.595510][ T7859] ? __pfx___se_sys_mremap+0x10/0x10 [ 247.595548][ T7859] ? irqentry_exit+0x63/0x90 [ 247.595567][ T7859] ? lockdep_hardirqs_on+0x99/0x150 [ 247.595600][ T7859] ? __x64_sys_mremap+0x20/0xc0 [ 247.595620][ T7859] do_syscall_64+0xf3/0x230 [ 247.595642][ T7859] ? clear_bhb_loop+0x35/0x90 [ 247.595666][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.595686][ T7859] RIP: 0033:0x7f8d3378cde9 [ 247.595700][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.595714][ T7859] RSP: 002b:00007f8d315f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 247.595731][ T7859] RAX: ffffffffffffffda RBX: 00007f8d339a6080 RCX: 00007f8d3378cde9 [ 247.595744][ T7859] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 247.595755][ T7859] RBP: 00007f8d315f6090 R08: 00002000008b5000 R09: 0000000000000000 [ 247.595766][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.595776][ T7859] R13: 0000000000000000 R14: 00007f8d339a6080 R15: 00007fff0ec3def8 [ 247.595800][ T7859] [ 248.544404][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.552966][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.572129][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.580709][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.605842][ T2150] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 248.643637][ T2150] asix 5-1:0.0: probe with driver asix failed with error -71 [ 248.754413][ T2150] usb 5-1: USB disconnect, device number 23 [ 248.927551][ T7852] chnl_net:caif_netlink_parms(): no params data found [ 249.389910][ T5821] Bluetooth: hci5: command tx timeout [ 249.644712][ T7879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 249.651342][ T7879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.659204][ T7879] vhci_hcd vhci_hcd.0: Device attached [ 249.899305][ T7892] vhci_hcd: connection closed [ 249.904640][ T81] vhci_hcd: stop threads [ 249.923020][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.930128][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.944038][ T7852] bridge_slave_0: entered allmulticast mode [ 249.950163][ T81] vhci_hcd: release socket [ 249.951932][ T7852] bridge_slave_0: entered promiscuous mode [ 249.967376][ T81] vhci_hcd: disconnect device [ 249.981041][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.994259][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.994308][ T25] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 250.001552][ T7852] bridge_slave_1: entered allmulticast mode [ 250.037069][ T5867] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 250.063977][ T25] usb 35-1: enqueue for inactive port 0 [ 250.068673][ T7852] bridge_slave_1: entered promiscuous mode [ 250.142422][ T25] vhci_hcd: vhci_device speed not set [ 250.205453][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.232882][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.00 [ 250.240711][ T7852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.269906][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.308668][ T7852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.311276][ T5867] usb 5-1: config 0 descriptor?? [ 250.518023][ T7852] team0: Port device team_slave_0 added [ 250.633681][ T5867] usbhid 5-1:0.0: can't add hid device: -71 [ 250.650812][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 250.681251][ T5867] usb 5-1: USB disconnect, device number 24 [ 250.727950][ T7852] team0: Port device team_slave_1 added [ 250.883678][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.933080][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.016559][ T7852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.045002][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.062358][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.121456][ T7852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.141683][ T7912] syz.4.576: attempt to access beyond end of device [ 251.141683][ T7912] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 251.234981][ T7915] netlink: 'syz.1.574': attribute type 2 has an invalid length. [ 251.464009][ T5821] Bluetooth: hci5: command tx timeout [ 251.926307][ T7852] hsr_slave_0: entered promiscuous mode [ 251.946012][ T7852] hsr_slave_1: entered promiscuous mode [ 251.980242][ T7852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.981568][ T7919] overlayfs: failed to resolve './file0': -2 [ 252.038735][ T7852] Cannot create hsr debugfs directory [ 252.497902][ T7927] FAULT_INJECTION: forcing a failure. [ 252.497902][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.662389][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.4.578 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 252.662417][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.662428][ T7927] Call Trace: [ 252.662434][ T7927] [ 252.662442][ T7927] dump_stack_lvl+0x241/0x360 [ 252.662474][ T7927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.662498][ T7927] ? __pfx__printk+0x10/0x10 [ 252.662535][ T7927] should_fail_ex+0x40a/0x550 [ 252.662558][ T7927] _copy_from_user+0x2d/0xb0 [ 252.662576][ T7927] kstrtouint_from_user+0xc6/0x190 [ 252.662600][ T7927] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 252.662624][ T7927] ? __pfx_lock_acquire+0x10/0x10 [ 252.662658][ T7927] proc_fail_nth_write+0xaa/0x2d0 [ 252.662678][ T7927] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 252.662696][ T7927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.662730][ T7927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.662750][ T7927] vfs_write+0x29f/0xd10 [ 252.662768][ T7927] ? fdget_pos+0x254/0x320 [ 252.662792][ T7927] ? __pfx_vfs_write+0x10/0x10 [ 252.662812][ T7927] ? __fget_files+0x2a/0x410 [ 252.662833][ T7927] ? __fget_files+0x395/0x410 [ 252.662851][ T7927] ? __fget_files+0x2a/0x410 [ 252.662881][ T7927] ksys_write+0x18f/0x2b0 [ 252.662899][ T7927] ? __pfx_ksys_write+0x10/0x10 [ 252.662915][ T7927] ? do_syscall_64+0x100/0x230 [ 252.662940][ T7927] ? do_syscall_64+0xb6/0x230 [ 252.662963][ T7927] do_syscall_64+0xf3/0x230 [ 252.662983][ T7927] ? clear_bhb_loop+0x35/0x90 [ 252.663007][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.663028][ T7927] RIP: 0033:0x7f6397f8b89f [ 252.663043][ T7927] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 252.663057][ T7927] RSP: 002b:00007f6398e17030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 252.663075][ T7927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6397f8b89f [ 252.663087][ T7927] RDX: 0000000000000001 RSI: 00007f6398e170a0 RDI: 0000000000000005 [ 252.663097][ T7927] RBP: 00007f6398e17090 R08: 0000000000000000 R09: 0000000000000000 [ 252.663107][ T7927] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 252.663117][ T7927] R13: 0000000000000001 R14: 00007f63981a6080 R15: 00007fff6c482e98 [ 252.663144][ T7927] [ 252.961681][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.207385][ T7936] FAULT_INJECTION: forcing a failure. [ 253.207385][ T7936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.238920][ T7936] CPU: 0 UID: 0 PID: 7936 Comm: syz.5.580 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 253.238944][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 253.238954][ T7936] Call Trace: [ 253.238959][ T7936] [ 253.238966][ T7936] dump_stack_lvl+0x241/0x360 [ 253.238998][ T7936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.239021][ T7936] ? __pfx__printk+0x10/0x10 [ 253.239046][ T7936] ? __pfx_lock_release+0x10/0x10 [ 253.239072][ T7936] should_fail_ex+0x40a/0x550 [ 253.239095][ T7936] _copy_from_user+0x2d/0xb0 [ 253.239113][ T7936] move_addr_to_kernel+0x82/0x150 [ 253.239132][ T7936] copy_msghdr_from_user+0x43e/0x680 [ 253.239158][ T7936] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 253.239175][ T7936] ? __fget_files+0x2a/0x410 [ 253.239197][ T7936] ? __fget_files+0x2a/0x410 [ 253.239224][ T7936] __sys_sendmmsg+0x32b/0x720 [ 253.239250][ T7936] ? __pfx___sys_sendmmsg+0x10/0x10 [ 253.239278][ T7936] ? __pfx_lock_release+0x10/0x10 [ 253.239294][ T7936] ? kstrtouint_from_user+0x128/0x190 [ 253.239337][ T7936] ? ksys_write+0x22a/0x2b0 [ 253.239353][ T7936] ? __pfx_lock_release+0x10/0x10 [ 253.239377][ T7936] ? sb_end_write+0xe9/0x1c0 [ 253.239403][ T7936] ? vfs_write+0x7fa/0xd10 [ 253.239418][ T7936] ? __mutex_unlock_slowpath+0x227/0x800 [ 253.239464][ T7936] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.239486][ T7936] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.239507][ T7936] ? do_syscall_64+0x100/0x230 [ 253.239531][ T7936] __x64_sys_sendmmsg+0xa0/0xb0 [ 253.239549][ T7936] do_syscall_64+0xf3/0x230 [ 253.239574][ T7936] ? clear_bhb_loop+0x35/0x90 [ 253.239598][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.239618][ T7936] RIP: 0033:0x7f9182b8cde9 [ 253.239632][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.239646][ T7936] RSP: 002b:00007f9183a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 253.239664][ T7936] RAX: ffffffffffffffda RBX: 00007f9182da5fa0 RCX: 00007f9182b8cde9 [ 253.239675][ T7936] RDX: 0000000000000001 RSI: 00002000000031c0 RDI: 0000000000000003 [ 253.239686][ T7936] RBP: 00007f9183a73090 R08: 0000000000000000 R09: 0000000000000000 [ 253.239696][ T7936] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 253.239705][ T7936] R13: 0000000000000000 R14: 00007f9182da5fa0 R15: 00007ffc8bd728e8 [ 253.239731][ T7936] [ 253.556582][ T7852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.607969][ T5821] Bluetooth: hci5: command tx timeout [ 253.659333][ T7852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.750643][ T7852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.915876][ T7852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.620874][ T7956] FAULT_INJECTION: forcing a failure. [ 254.620874][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 254.633833][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.1.584 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 254.633856][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.633866][ T7956] Call Trace: [ 254.633873][ T7956] [ 254.633880][ T7956] dump_stack_lvl+0x241/0x360 [ 254.633911][ T7956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.633935][ T7956] ? __pfx__printk+0x10/0x10 [ 254.633960][ T7956] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 254.633982][ T7956] ? __pfx___might_resched+0x10/0x10 [ 254.634005][ T7956] should_fail_ex+0x40a/0x550 [ 254.634028][ T7956] should_failslab+0xac/0x100 [ 254.634049][ T7956] kmem_cache_alloc_node_noprof+0x77/0x380 [ 254.634068][ T7956] ? __alloc_skb+0x1c3/0x440 [ 254.634095][ T7956] __alloc_skb+0x1c3/0x440 [ 254.634122][ T7956] ? __pfx___alloc_skb+0x10/0x10 [ 254.634142][ T7956] ? netlink_alloc_large_skb+0xb2/0x100 [ 254.634167][ T7956] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 254.634190][ T7956] netlink_sendmsg+0x638/0xcb0 [ 254.634218][ T7956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.634238][ T7956] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 254.634261][ T7956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.634276][ T7956] __sock_sendmsg+0x221/0x270 [ 254.634299][ T7956] ____sys_sendmsg+0x52a/0x7e0 [ 254.634323][ T7956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.634338][ T7956] ? __fget_files+0x2a/0x410 [ 254.634361][ T7956] ? __fget_files+0x2a/0x410 [ 254.634390][ T7956] __sys_sendmsg+0x269/0x350 [ 254.634411][ T7956] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.634467][ T7956] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.634489][ T7956] ? do_syscall_64+0x100/0x230 [ 254.634514][ T7956] ? do_syscall_64+0xb6/0x230 [ 254.634538][ T7956] do_syscall_64+0xf3/0x230 [ 254.634565][ T7956] ? clear_bhb_loop+0x35/0x90 [ 254.634589][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.634610][ T7956] RIP: 0033:0x7fd7f638cde9 [ 254.634625][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.634640][ T7956] RSP: 002b:00007fd7f7196038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.634659][ T7956] RAX: ffffffffffffffda RBX: 00007fd7f65a6160 RCX: 00007fd7f638cde9 [ 254.634671][ T7956] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000a [ 254.634682][ T7956] RBP: 00007fd7f7196090 R08: 0000000000000000 R09: 0000000000000000 [ 254.634692][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.634702][ T7956] R13: 0000000000000000 R14: 00007fd7f65a6160 R15: 00007ffc96214a88 [ 254.634728][ T7956] [ 255.111285][ T7852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.139183][ T7965] openvswitch: netlink: nsh attribute has 32 unknown bytes. [ 255.331499][ T7965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.413038][ T7852] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.424629][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.431774][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.627350][ T5821] Bluetooth: hci5: command tx timeout [ 255.916319][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.923559][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.957862][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973931][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.322745][ T7972] syzkaller1: entered promiscuous mode [ 256.328287][ T7972] syzkaller1: entered allmulticast mode [ 256.546823][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 256.546840][ T29] audit: type=1804 audit(1738991421.569:22): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.590" name="/newroot/122/file0" dev="tmpfs" ino=712 res=1 errno=0 [ 256.645396][ T7852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.141769][ T8016] FAULT_INJECTION: forcing a failure. [ 257.141769][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 257.162653][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 257.168275][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.4.593 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 257.168301][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 257.168311][ T8016] Call Trace: [ 257.168319][ T8016] [ 257.168327][ T8016] dump_stack_lvl+0x241/0x360 [ 257.168358][ T8016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.168381][ T8016] ? __pfx__printk+0x10/0x10 [ 257.168405][ T8016] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 257.168426][ T8016] ? __pfx___might_resched+0x10/0x10 [ 257.168447][ T8016] should_fail_ex+0x40a/0x550 [ 257.168469][ T8016] should_failslab+0xac/0x100 [ 257.168490][ T8016] kmem_cache_alloc_node_noprof+0x77/0x380 [ 257.168516][ T8016] ? __alloc_skb+0x1c3/0x440 [ 257.168541][ T8016] __alloc_skb+0x1c3/0x440 [ 257.168567][ T8016] ? __pfx___alloc_skb+0x10/0x10 [ 257.168590][ T8016] ? netlink_autobind+0xd6/0x2f0 [ 257.168605][ T8016] ? netlink_autobind+0x2b0/0x2f0 [ 257.168625][ T8016] netlink_sendmsg+0x638/0xcb0 [ 257.168650][ T8016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.168677][ T8016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.168691][ T8016] __sock_sendmsg+0x221/0x270 [ 257.168712][ T8016] ____sys_sendmsg+0x52a/0x7e0 [ 257.168731][ T8016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.168742][ T8016] ? __fget_files+0x2a/0x410 [ 257.168760][ T8016] ? __fget_files+0x2a/0x410 [ 257.168782][ T8016] __sys_sendmsg+0x269/0x350 [ 257.168800][ T8016] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.168824][ T8016] ? do_sys_openat2+0x17a/0x1d0 [ 257.168861][ T8016] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.168888][ T8016] ? do_syscall_64+0x100/0x230 [ 257.168911][ T8016] ? do_syscall_64+0xb6/0x230 [ 257.168933][ T8016] do_syscall_64+0xf3/0x230 [ 257.168953][ T8016] ? clear_bhb_loop+0x35/0x90 [ 257.168976][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.168996][ T8016] RIP: 0033:0x7f6397f8cde9 [ 257.169011][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.169024][ T8016] RSP: 002b:00007f6398e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.169042][ T8016] RAX: ffffffffffffffda RBX: 00007f63981a5fa0 RCX: 00007f6397f8cde9 [ 257.169053][ T8016] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000004 [ 257.169064][ T8016] RBP: 00007f6398e38090 R08: 0000000000000000 R09: 0000000000000000 [ 257.169073][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.169083][ T8016] R13: 0000000000000000 R14: 00007f63981a5fa0 R15: 00007fff6c482e98 [ 257.169107][ T8016] [ 257.574911][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 257.697511][ T8009] ceph: No mds server is up or the cluster is laggy [ 257.794955][ T7852] veth0_vlan: entered promiscuous mode [ 257.912414][ T7852] veth1_vlan: entered promiscuous mode [ 259.172594][ T41] block nbd0: Possible stuck request ffff8880257be000: control (read@0,4096B). Runtime 120 seconds [ 259.948025][ T7852] veth0_macvtap: entered promiscuous mode [ 259.981995][ T7852] veth1_macvtap: entered promiscuous mode [ 260.074357][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.127393][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.139518][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.158931][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.185063][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.207173][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.229323][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.240378][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.263568][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.292327][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.320047][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.338469][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.360983][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 260.380473][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.392311][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.414234][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.436737][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.449141][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.470150][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.486944][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.507136][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.523825][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.535760][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.584310][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'. [ 260.656973][ T8054] bond1: entered promiscuous mode [ 260.662041][ T8054] bond1: entered allmulticast mode [ 260.729473][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 261.025482][ T8055] batadv1: entered promiscuous mode [ 261.044393][ T8055] batadv1: entered allmulticast mode [ 261.050212][ T8055] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 261.722700][ T8058] bond1: left promiscuous mode [ 261.727525][ T8058] batadv1: left promiscuous mode [ 261.733969][ T8058] bond1: left allmulticast mode [ 261.738868][ T8058] batadv1: left allmulticast mode [ 261.745247][ T8058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.213661][ T7852] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.257398][ T7852] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.322320][ T7852] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.346983][ T5868] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 262.389243][ T7852] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.434432][ T8070] tap0: tun_chr_ioctl cmd 1074025681 [ 262.542488][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 262.666553][ T8080] FAULT_INJECTION: forcing a failure. [ 262.666553][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.680183][ T8080] CPU: 0 UID: 0 PID: 8080 Comm: syz.3.606 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 262.680207][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 262.680218][ T8080] Call Trace: [ 262.680224][ T8080] [ 262.680231][ T8080] dump_stack_lvl+0x241/0x360 [ 262.680265][ T8080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.680297][ T8080] ? dump_stack+0x9/0x15 [ 262.680324][ T8080] should_fail_ex+0x40a/0x550 [ 262.680346][ T8080] _copy_from_user+0x2d/0xb0 [ 262.680365][ T8080] move_addr_to_kernel+0x82/0x150 [ 262.680386][ T8080] __sys_sendto+0x268/0x4c0 [ 262.680413][ T8080] ? __pfx___sys_sendto+0x10/0x10 [ 262.680458][ T8080] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.680481][ T8080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.680502][ T8080] ? exc_page_fault+0x590/0x8b0 [ 262.680524][ T8080] __x64_sys_sendto+0xde/0x100 [ 262.680549][ T8080] do_syscall_64+0xf3/0x230 [ 262.680570][ T8080] ? clear_bhb_loop+0x35/0x90 [ 262.680593][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.680613][ T8080] RIP: 0033:0x7f8d3378ec7c [ 262.680629][ T8080] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 262.680642][ T8080] RSP: 002b:00007f8d315f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 262.680660][ T8080] RAX: ffffffffffffffda RBX: 00007f8d315f4fc0 RCX: 00007f8d3378ec7c [ 262.680673][ T8080] RDX: 0000000000000020 RSI: 00007f8d315f5010 RDI: 0000000000000004 [ 262.680684][ T8080] RBP: 0000000000000000 R08: 00007f8d315f4f14 R09: 000000000000000c [ 262.680694][ T8080] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 262.680703][ T8080] R13: 00007f8d315f4f68 R14: 00007f8d315f5010 R15: 0000000000000000 [ 262.680729][ T8080] [ 263.030186][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 263.050266][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.094866][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.104393][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.112459][ T5868] usb 2-1: Product: syz [ 263.112477][ T5868] usb 2-1: Manufacturer: syz [ 263.112492][ T5868] usb 2-1: SerialNumber: syz [ 263.380088][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.410779][ T5868] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 263.442296][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.526996][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.549231][ T5868] usb 2-1: USB disconnect, device number 12 [ 263.578040][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.826101][ T6132] udevd[6132]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.080577][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.563'. [ 264.260919][ T29] audit: type=1326 audit(1738991429.279:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.1.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f638cde9 code=0x7ffc0000 [ 264.490379][ T8106] FAULT_INJECTION: forcing a failure. [ 264.490379][ T8106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.548367][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.6.611 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 264.548389][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 264.548398][ T8106] Call Trace: [ 264.548404][ T8106] [ 264.548410][ T8106] dump_stack_lvl+0x241/0x360 [ 264.548439][ T8106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.548461][ T8106] ? __pfx__printk+0x10/0x10 [ 264.548486][ T8106] ? __pfx_lock_release+0x10/0x10 [ 264.548513][ T8106] should_fail_ex+0x40a/0x550 [ 264.548534][ T8106] _copy_from_user+0x2d/0xb0 [ 264.548557][ T8106] memdup_user+0x64/0xc0 [ 264.548576][ T8106] strndup_user+0x68/0xc0 [ 264.548594][ T8106] __se_sys_mount+0x9f/0x3c0 [ 264.548609][ T8106] ? irqentry_exit+0x63/0x90 [ 264.548624][ T8106] ? lockdep_hardirqs_on+0x99/0x150 [ 264.548642][ T8106] ? __pfx___se_sys_mount+0x10/0x10 [ 264.548661][ T8106] ? __x64_sys_mount+0x20/0xc0 [ 264.548678][ T8106] do_syscall_64+0xf3/0x230 [ 264.548695][ T8106] ? clear_bhb_loop+0x35/0x90 [ 264.548714][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.548729][ T8106] RIP: 0033:0x7f82d0d8cde9 [ 264.548741][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.548752][ T8106] RSP: 002b:00007f82cebd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.548767][ T8106] RAX: ffffffffffffffda RBX: 00007f82d0fa6080 RCX: 00007f82d0d8cde9 [ 264.548777][ T8106] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 264.548786][ T8106] RBP: 00007f82cebd5090 R08: 0000200000000040 R09: 0000000000000000 [ 264.548795][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.548803][ T8106] R13: 0000000000000000 R14: 00007f82d0fa6080 R15: 00007ffe676584e8 [ 264.548822][ T8106] [ 264.728737][ T29] audit: type=1326 audit(1738991429.279:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.1.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f638cde9 code=0x7ffc0000 [ 264.824851][ T29] audit: type=1326 audit(1738991429.279:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.1.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd7f638cde9 code=0x7ffc0000 [ 265.077388][ T29] audit: type=1326 audit(1738991429.279:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.1.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f638cde9 code=0x7ffc0000 [ 265.099223][ T29] audit: type=1326 audit(1738991429.279:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.1.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f638cde9 code=0x7ffc0000 [ 265.440329][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.613'. [ 265.464699][ T8116] netlink: 'syz.5.613': attribute type 25 has an invalid length. [ 265.562548][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.613'. [ 265.680926][ T8116] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.690046][ T8116] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.698894][ T8116] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.707748][ T8116] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.928591][ T8122] evm: overlay not supported [ 266.654012][ T8116] syz.5.613 (8116) used greatest stack depth: 18224 bytes left [ 266.871826][ T29] audit: type=1326 audit(1738991431.889:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 266.886415][ T8128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.152466][ T29] audit: type=1326 audit(1738991431.889:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 267.176406][ T29] audit: type=1326 audit(1738991431.889:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 267.207648][ T29] audit: type=1326 audit(1738991431.889:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 267.253034][ T29] audit: type=1326 audit(1738991431.889:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8125 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 270.248403][ T5196] udevd[5196]: worker [5820] /devices/virtual/block/nbd0 is taking a long time [ 273.581244][ T5902] kernel write not supported for file /cpu/0/msr (pid: 5902 comm: kworker/0:6) [ 273.924932][ T8176] FAULT_INJECTION: forcing a failure. [ 273.924932][ T8176] name failslab, interval 1, probability 0, space 0, times 0 [ 273.989003][ T8176] CPU: 1 UID: 0 PID: 8176 Comm: syz.4.628 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 273.989028][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 273.989039][ T8176] Call Trace: [ 273.989045][ T8176] [ 273.989052][ T8176] dump_stack_lvl+0x241/0x360 [ 273.989083][ T8176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.989105][ T8176] ? __pfx__printk+0x10/0x10 [ 273.989128][ T8176] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 273.989150][ T8176] ? __pfx___might_resched+0x10/0x10 [ 273.989171][ T8176] should_fail_ex+0x40a/0x550 [ 273.989193][ T8176] should_failslab+0xac/0x100 [ 273.989213][ T8176] kmem_cache_alloc_node_noprof+0x77/0x380 [ 273.989231][ T8176] ? __alloc_skb+0x1c3/0x440 [ 273.989255][ T8176] __alloc_skb+0x1c3/0x440 [ 273.989281][ T8176] ? __pfx___alloc_skb+0x10/0x10 [ 273.989304][ T8176] ? netlink_autobind+0xd6/0x2f0 [ 273.989320][ T8176] ? netlink_autobind+0x2b0/0x2f0 [ 273.989339][ T8176] netlink_sendmsg+0x638/0xcb0 [ 273.989365][ T8176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.989393][ T8176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.989407][ T8176] __sock_sendmsg+0x221/0x270 [ 273.989429][ T8176] ____sys_sendmsg+0x52a/0x7e0 [ 273.989453][ T8176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.989467][ T8176] ? __fget_files+0x2a/0x410 [ 273.989490][ T8176] ? __fget_files+0x2a/0x410 [ 273.989517][ T8176] __sys_sendmsg+0x269/0x350 [ 273.989538][ T8176] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.989566][ T8176] ? do_sys_openat2+0x17a/0x1d0 [ 273.989619][ T8176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.989640][ T8176] ? do_syscall_64+0x100/0x230 [ 273.989665][ T8176] ? do_syscall_64+0xb6/0x230 [ 273.989688][ T8176] do_syscall_64+0xf3/0x230 [ 273.989709][ T8176] ? clear_bhb_loop+0x35/0x90 [ 273.989733][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.989752][ T8176] RIP: 0033:0x7f6397f8cde9 [ 273.989767][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.989781][ T8176] RSP: 002b:00007f6398e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.989799][ T8176] RAX: ffffffffffffffda RBX: 00007f63981a5fa0 RCX: 00007f6397f8cde9 [ 273.989811][ T8176] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 273.989822][ T8176] RBP: 00007f6398e38090 R08: 0000000000000000 R09: 0000000000000000 [ 273.989832][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.989842][ T8176] R13: 0000000000000000 R14: 00007f63981a5fa0 R15: 00007fff6c482e98 [ 273.989866][ T8176] [ 274.584783][ T8188] netlink: 'syz.6.630': attribute type 1 has an invalid length. [ 274.597310][ T8188] netlink: 224 bytes leftover after parsing attributes in process `syz.6.630'. [ 275.812665][ T5829] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 275.823082][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 275.994323][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 276.018594][ T25] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 276.038239][ T5829] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 276.079886][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.090006][ T8213] syz.6.636: attempt to access beyond end of device [ 276.090006][ T8213] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 276.099767][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.135474][ T25] usb 6-1: Product: syz [ 276.992939][ T25] usb 6-1: Manufacturer: syz [ 276.997591][ T25] usb 6-1: SerialNumber: syz [ 277.446266][ T5829] usb 5-1: Product: syz [ 277.450498][ T5829] usb 5-1: Manufacturer: syz [ 277.457209][ T25] usb 6-1: config 0 descriptor?? [ 277.462581][ T5829] usb 5-1: SerialNumber: syz [ 277.613507][ T5829] usb 5-1: config 0 descriptor?? [ 277.633581][ T5829] usb 5-1: can't set config #0, error -71 [ 277.666144][ T5829] usb 5-1: USB disconnect, device number 25 [ 277.740586][ T25] mos7840 6-1:0.0: required endpoints missing [ 277.757467][ T8234] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 277.802284][ T8234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.822345][ T25] usb 6-1: USB disconnect, device number 2 [ 278.281469][ T29] audit: type=1804 audit(1738991443.299:33): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.642" name="/newroot/138/file0" dev="tmpfs" ino=816 res=1 errno=0 [ 279.732568][ T8265] Mount JFS Failure: -22 [ 279.736913][ T8265] jfs_mount failed w/return code = -22 [ 280.933376][ T8274] syz.5.648: attempt to access beyond end of device [ 280.933376][ T8274] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 282.643336][ T8291] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 282.675432][ T8227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.686081][ T8291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.801339][ T29] audit: type=1326 audit(1738991447.819:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.4.654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6397f8cde9 code=0x0 [ 282.828389][ T5896] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 283.009513][ T5896] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.167305][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.426659][ T5896] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 283.604999][ T8312] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.657'. [ 283.641494][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.641647][ T5896] usb 7-1: SerialNumber: syz [ 283.999670][ T5896] usb 7-1: 0:2 : does not exist [ 284.061008][ T29] audit: type=1326 audit(1738991449.079:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.3.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x0 [ 285.013528][ T8332] FAULT_INJECTION: forcing a failure. [ 285.013528][ T8332] name failslab, interval 1, probability 0, space 0, times 0 [ 285.029205][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.4.662 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 285.029229][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 285.029240][ T8332] Call Trace: [ 285.029246][ T8332] [ 285.029252][ T8332] dump_stack_lvl+0x241/0x360 [ 285.029284][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.029307][ T8332] ? __pfx__printk+0x10/0x10 [ 285.029331][ T8332] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 285.029354][ T8332] ? __pfx___might_resched+0x10/0x10 [ 285.029376][ T8332] should_fail_ex+0x40a/0x550 [ 285.029399][ T8332] should_failslab+0xac/0x100 [ 285.029419][ T8332] kmem_cache_alloc_node_noprof+0x77/0x380 [ 285.029438][ T8332] ? __alloc_skb+0x1c3/0x440 [ 285.029464][ T8332] __alloc_skb+0x1c3/0x440 [ 285.029488][ T8332] ? __pfx___alloc_skb+0x10/0x10 [ 285.029511][ T8332] ? netlink_autobind+0xd6/0x2f0 [ 285.029526][ T8332] ? netlink_autobind+0x2b0/0x2f0 [ 285.029544][ T8332] netlink_sendmsg+0x638/0xcb0 [ 285.029570][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.029596][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.029610][ T8332] __sock_sendmsg+0x221/0x270 [ 285.029632][ T8332] ____sys_sendmsg+0x52a/0x7e0 [ 285.029657][ T8332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.029671][ T8332] ? __fget_files+0x2a/0x410 [ 285.029694][ T8332] ? __fget_files+0x2a/0x410 [ 285.029721][ T8332] __sys_sendmsg+0x269/0x350 [ 285.029742][ T8332] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.029770][ T8332] ? do_sys_openat2+0x17a/0x1d0 [ 285.029823][ T8332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.029844][ T8332] ? do_syscall_64+0x100/0x230 [ 285.029868][ T8332] ? do_syscall_64+0xb6/0x230 [ 285.029890][ T8332] do_syscall_64+0xf3/0x230 [ 285.029911][ T8332] ? clear_bhb_loop+0x35/0x90 [ 285.029935][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.029954][ T8332] RIP: 0033:0x7f6397f8cde9 [ 285.029969][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.029983][ T8332] RSP: 002b:00007f6398e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.030001][ T8332] RAX: ffffffffffffffda RBX: 00007f63981a5fa0 RCX: 00007f6397f8cde9 [ 285.030013][ T8332] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 285.030024][ T8332] RBP: 00007f6398e38090 R08: 0000000000000000 R09: 0000000000000000 [ 285.030034][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.030044][ T8332] R13: 0000000000000000 R14: 00007f63981a5fa0 R15: 00007fff6c482e98 [ 285.030069][ T8332] [ 285.474450][ T8341] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 285.482267][ T8341] netlink: 224 bytes leftover after parsing attributes in process `syz.4.664'. [ 286.913636][ T8] usb 7-1: USB disconnect, device number 2 [ 287.152399][ T5868] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 287.326129][ T5868] usb 5-1: no configurations [ 287.330778][ T5868] usb 5-1: can't read configurations, error -22 [ 287.502415][ T5868] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.675368][ T5868] usb 5-1: no configurations [ 287.746230][ T8391] netlink: 'syz.6.675': attribute type 2 has an invalid length. [ 287.896484][ T5868] usb 5-1: can't read configurations, error -22 [ 287.961016][ T5868] usb usb5-port1: attempt power cycle [ 288.772312][ T5868] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 288.825495][ T5868] usb 5-1: no configurations [ 288.855542][ T5868] usb 5-1: can't read configurations, error -22 [ 289.584892][ T8409] FAULT_INJECTION: forcing a failure. [ 289.584892][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 289.608569][ T41] block nbd0: Possible stuck request ffff8880257be000: control (read@0,4096B). Runtime 150 seconds [ 289.662357][ T5868] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 289.757204][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.1.678 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 289.757232][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.757242][ T8409] Call Trace: [ 289.757249][ T8409] [ 289.757262][ T8409] dump_stack_lvl+0x241/0x360 [ 289.757294][ T8409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.757318][ T8409] ? __pfx__printk+0x10/0x10 [ 289.757343][ T8409] ? fs_reclaim_acquire+0x93/0x130 [ 289.757360][ T8409] ? __pfx___might_resched+0x10/0x10 [ 289.757380][ T8409] should_fail_ex+0x40a/0x550 [ 289.757405][ T8409] should_failslab+0xac/0x100 [ 289.757426][ T8409] __kmalloc_noprof+0xdd/0x4c0 [ 289.757446][ T8409] ? tomoyo_encode+0x26f/0x540 [ 289.757467][ T8409] tomoyo_encode+0x26f/0x540 [ 289.757488][ T8409] tomoyo_realpath_from_path+0x59e/0x5e0 [ 289.757516][ T8409] tomoyo_path_number_perm+0x236/0x860 [ 289.757536][ T8409] ? __lock_acquire+0x1397/0x2100 [ 289.757558][ T8409] ? tomoyo_path_number_perm+0x206/0x860 [ 289.757582][ T8409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.757641][ T8409] ? __fget_files+0x2a/0x410 [ 289.757665][ T8409] ? __fget_files+0x2a/0x410 [ 289.757690][ T8409] security_file_ioctl+0xc6/0x2a0 [ 289.757714][ T8409] __se_sys_ioctl+0x46/0x170 [ 289.757733][ T8409] do_syscall_64+0xf3/0x230 [ 289.757755][ T8409] ? clear_bhb_loop+0x35/0x90 [ 289.757778][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.757798][ T8409] RIP: 0033:0x7fd7f638cde9 [ 289.757814][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.757827][ T8409] RSP: 002b:00007fd7f7163038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.757845][ T8409] RAX: ffffffffffffffda RBX: 00007fd7f65a6160 RCX: 00007fd7f638cde9 [ 289.757857][ T8409] RDX: 00002000000006c0 RSI: 0000000000005412 RDI: 0000000000000004 [ 289.757868][ T8409] RBP: 00007fd7f7163090 R08: 0000000000000000 R09: 0000000000000000 [ 289.757878][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.757888][ T8409] R13: 0000000000000001 R14: 00007fd7f65a6160 R15: 00007ffc96214a88 [ 289.757915][ T8409] [ 289.758047][ T8409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.953081][ T5868] usb 5-1: device descriptor read/8, error -71 [ 290.285360][ T5868] usb usb5-port1: unable to enumerate USB device [ 290.720758][ T8433] FAULT_INJECTION: forcing a failure. [ 290.720758][ T8433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.742723][ T8433] CPU: 0 UID: 0 PID: 8433 Comm: syz.5.685 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 290.742749][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.742759][ T8433] Call Trace: [ 290.742765][ T8433] [ 290.742772][ T8433] dump_stack_lvl+0x241/0x360 [ 290.742804][ T8433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.742827][ T8433] ? __pfx__printk+0x10/0x10 [ 290.742852][ T8433] ? __pfx_lock_release+0x10/0x10 [ 290.742871][ T8433] ? __lock_acquire+0x1397/0x2100 [ 290.742896][ T8433] should_fail_ex+0x40a/0x550 [ 290.742920][ T8433] _copy_from_user+0x2d/0xb0 [ 290.742947][ T8433] kstrtouint_from_user+0xc6/0x190 [ 290.742971][ T8433] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 290.742995][ T8433] ? __pfx_lock_acquire+0x10/0x10 [ 290.743024][ T8433] proc_fail_nth_write+0xaa/0x2d0 [ 290.743043][ T8433] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 290.743060][ T8433] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.743085][ T8433] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.743105][ T8433] vfs_write+0x29f/0xd10 [ 290.743122][ T8433] ? fdget_pos+0x254/0x320 [ 290.743145][ T8433] ? __pfx_vfs_write+0x10/0x10 [ 290.743164][ T8433] ? __fget_files+0x2a/0x410 [ 290.743185][ T8433] ? __fget_files+0x395/0x410 [ 290.743203][ T8433] ? __fget_files+0x2a/0x410 [ 290.743231][ T8433] ksys_write+0x18f/0x2b0 [ 290.743249][ T8433] ? __pfx_ksys_write+0x10/0x10 [ 290.743275][ T8433] do_syscall_64+0xf3/0x230 [ 290.743297][ T8433] ? clear_bhb_loop+0x35/0x90 [ 290.743320][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.743340][ T8433] RIP: 0033:0x7f9182b8b89f [ 290.743355][ T8433] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 290.743368][ T8433] RSP: 002b:00007f9183a31030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 290.743386][ T8433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9182b8b89f [ 290.743397][ T8433] RDX: 0000000000000001 RSI: 00007f9183a310a0 RDI: 0000000000000005 [ 290.743407][ T8433] RBP: 00007f9183a31090 R08: 0000000000000000 R09: 0000000000000000 [ 290.743417][ T8433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 290.743427][ T8433] R13: 0000000000000001 R14: 00007f9182da6160 R15: 00007ffc8bd728e8 [ 290.743453][ T8433] [ 291.992412][ T29] audit: type=1804 audit(1738991456.999:36): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.686" name="/newroot/25/file0" dev="tmpfs" ino=156 res=1 errno=0 [ 292.428991][ T8454] FAULT_INJECTION: forcing a failure. [ 292.428991][ T8454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.486192][ T8454] CPU: 1 UID: 0 PID: 8454 Comm: syz.4.689 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 292.486218][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 292.486228][ T8454] Call Trace: [ 292.486235][ T8454] [ 292.486243][ T8454] dump_stack_lvl+0x241/0x360 [ 292.486274][ T8454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.486298][ T8454] ? __pfx__printk+0x10/0x10 [ 292.486323][ T8454] ? __pfx_lock_release+0x10/0x10 [ 292.486352][ T8454] should_fail_ex+0x40a/0x550 [ 292.486375][ T8454] _copy_from_user+0x2d/0xb0 [ 292.486392][ T8454] memdup_user+0x64/0xc0 [ 292.486415][ T8454] uinput_write+0x82a/0x12b0 [ 292.486445][ T8454] ? __pfx_uinput_write+0x10/0x10 [ 292.486467][ T8454] ? bpf_lsm_file_permission+0x9/0x10 [ 292.486485][ T8454] ? rw_verify_area+0x243/0x630 [ 292.486508][ T8454] ? __pfx_uinput_write+0x10/0x10 [ 292.486530][ T8454] vfs_write+0x29f/0xd10 [ 292.486549][ T8454] ? __mutex_unlock_slowpath+0x227/0x800 [ 292.486574][ T8454] ? __pfx_vfs_write+0x10/0x10 [ 292.486587][ T8454] ? do_sys_openat2+0x17a/0x1d0 [ 292.486609][ T8454] ? __fget_files+0x2a/0x410 [ 292.486631][ T8454] ? __fget_files+0x395/0x410 [ 292.486650][ T8454] ? __fget_files+0x2a/0x410 [ 292.486678][ T8454] ksys_write+0x18f/0x2b0 [ 292.486697][ T8454] ? __pfx_ksys_write+0x10/0x10 [ 292.486714][ T8454] ? do_syscall_64+0x100/0x230 [ 292.486744][ T8454] ? do_syscall_64+0xb6/0x230 [ 292.486768][ T8454] do_syscall_64+0xf3/0x230 [ 292.486787][ T8454] ? clear_bhb_loop+0x35/0x90 [ 292.486808][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.486828][ T8454] RIP: 0033:0x7f6397f8cde9 [ 292.486842][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.486855][ T8454] RSP: 002b:00007f6398e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.486873][ T8454] RAX: ffffffffffffffda RBX: 00007f63981a5fa0 RCX: 00007f6397f8cde9 [ 292.486885][ T8454] RDX: 000000000000045c RSI: 0000200000000840 RDI: 0000000000000003 [ 292.486894][ T8454] RBP: 00007f6398e38090 R08: 0000000000000000 R09: 0000000000000000 [ 292.486902][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.486910][ T8454] R13: 0000000000000000 R14: 00007f63981a5fa0 R15: 00007fff6c482e98 [ 292.486930][ T8454] [ 292.801209][ T8460] FAULT_INJECTION: forcing a failure. [ 292.801209][ T8460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.814605][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.1.690 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 292.814627][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 292.814644][ T8460] Call Trace: [ 292.814649][ T8460] [ 292.814656][ T8460] dump_stack_lvl+0x241/0x360 [ 292.814689][ T8460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.814710][ T8460] ? __pfx__printk+0x10/0x10 [ 292.814736][ T8460] ? snprintf+0xda/0x120 [ 292.814756][ T8460] should_fail_ex+0x40a/0x550 [ 292.814779][ T8460] _copy_to_user+0x31/0xb0 [ 292.814802][ T8460] simple_read_from_buffer+0xca/0x150 [ 292.814823][ T8460] proc_fail_nth_read+0x1e9/0x250 [ 292.814844][ T8460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.814864][ T8460] ? rw_verify_area+0x243/0x630 [ 292.814885][ T8460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.814904][ T8460] vfs_read+0x1f8/0xb40 [ 292.814927][ T8460] ? fdget_pos+0x254/0x320 [ 292.814974][ T8460] ? __pfx___mutex_lock+0x10/0x10 [ 292.814996][ T8460] ? __pfx_vfs_read+0x10/0x10 [ 292.815022][ T8460] ? __fget_files+0x2a/0x410 [ 292.815042][ T8460] ? __fget_files+0x395/0x410 [ 292.815061][ T8460] ? __fget_files+0x2a/0x410 [ 292.815088][ T8460] ksys_read+0x18f/0x2b0 [ 292.815103][ T8460] ? __pfx_ksys_read+0x10/0x10 [ 292.815120][ T8460] ? do_syscall_64+0x100/0x230 [ 292.815150][ T8460] ? do_syscall_64+0xb6/0x230 [ 292.815174][ T8460] do_syscall_64+0xf3/0x230 [ 292.815194][ T8460] ? clear_bhb_loop+0x35/0x90 [ 292.815218][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.815237][ T8460] RIP: 0033:0x7fd7f638b7fc [ 292.815252][ T8460] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 292.815266][ T8460] RSP: 002b:00007fd7f71b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.815283][ T8460] RAX: ffffffffffffffda RBX: 00007fd7f65a6080 RCX: 00007fd7f638b7fc [ 292.815296][ T8460] RDX: 000000000000000f RSI: 00007fd7f71b70a0 RDI: 0000000000000006 [ 292.815306][ T8460] RBP: 00007fd7f71b7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.815316][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.815325][ T8460] R13: 0000000000000000 R14: 00007fd7f65a6080 R15: 00007ffc96214a88 [ 292.815352][ T8460] [ 294.057391][ T8483] netlink: 'syz.1.694': attribute type 2 has an invalid length. [ 295.453233][ T8496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 295.459893][ T8496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 295.509863][ T8501] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.519146][ T8501] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.528960][ T8501] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.538039][ T8501] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.547006][ T8496] vhci_hcd vhci_hcd.0: Device attached [ 295.565595][ T8501] vxlan0: entered promiscuous mode [ 295.597877][ T8501] vxlan0: entered allmulticast mode [ 295.677520][ T8501] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.686703][ T8501] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.696273][ T8501] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.705187][ T8501] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.852992][ T8498] vhci_hcd: connection closed [ 295.854776][ T7202] vhci_hcd: stop threads [ 295.883160][ T5902] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 295.902323][ T7202] vhci_hcd: release socket [ 295.924976][ T7202] vhci_hcd: disconnect device [ 295.936390][ T8515] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.702'. [ 296.005797][ T29] audit: type=1804 audit(1738991461.019:37): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.701" name="/newroot/29/file0" dev="tmpfs" ino=178 res=1 errno=0 [ 297.993239][ T8548] FAULT_INJECTION: forcing a failure. [ 297.993239][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.016026][ T8547] Mount JFS Failure: -22 [ 298.020457][ T8547] jfs_mount failed w/return code = -22 [ 298.275561][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.6.708 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 298.275590][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 298.275601][ T8548] Call Trace: [ 298.275607][ T8548] [ 298.275616][ T8548] dump_stack_lvl+0x241/0x360 [ 298.275646][ T8548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.275661][ T8548] ? __pfx__printk+0x10/0x10 [ 298.275676][ T8548] ? __pfx_lock_release+0x10/0x10 [ 298.275688][ T8548] ? __lock_acquire+0x1397/0x2100 [ 298.275706][ T8548] should_fail_ex+0x40a/0x550 [ 298.275720][ T8548] _copy_from_user+0x2d/0xb0 [ 298.275731][ T8548] kstrtouint_from_user+0xc6/0x190 [ 298.275746][ T8548] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 298.275760][ T8548] ? __pfx_lock_acquire+0x10/0x10 [ 298.275777][ T8548] proc_fail_nth_write+0xaa/0x2d0 [ 298.275788][ T8548] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 298.275798][ T8548] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 298.275812][ T8548] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 298.275824][ T8548] vfs_write+0x29f/0xd10 [ 298.275834][ T8548] ? fdget_pos+0x254/0x320 [ 298.275846][ T8548] ? __mutex_unlock_slowpath+0x227/0x800 [ 298.275861][ T8548] ? __pfx_vfs_write+0x10/0x10 [ 298.275872][ T8548] ? __fget_files+0x2a/0x410 [ 298.275884][ T8548] ? __fget_files+0x395/0x410 [ 298.275895][ T8548] ? __fget_files+0x2a/0x410 [ 298.275912][ T8548] ksys_write+0x18f/0x2b0 [ 298.275922][ T8548] ? __pfx_ksys_write+0x10/0x10 [ 298.275937][ T8548] do_syscall_64+0xf3/0x230 [ 298.275951][ T8548] ? clear_bhb_loop+0x35/0x90 [ 298.275965][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.275977][ T8548] RIP: 0033:0x7f82d0d8b89f [ 298.275987][ T8548] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 298.275995][ T8548] RSP: 002b:00007f82cebd5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 298.276007][ T8548] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82d0d8b89f [ 298.276014][ T8548] RDX: 0000000000000001 RSI: 00007f82cebd50a0 RDI: 000000000000000c [ 298.276020][ T8548] RBP: 00007f82cebd5090 R08: 0000000000000000 R09: 0000000000000000 [ 298.276025][ T8548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 298.276031][ T8548] R13: 0000000000000000 R14: 00007f82d0fa6080 R15: 00007ffe676584e8 [ 298.276045][ T8548] [ 298.665433][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.683923][ T8549] FAULT_INJECTION: forcing a failure. [ 298.683923][ T8549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.847255][ T8549] CPU: 1 UID: 0 PID: 8549 Comm: syz.1.707 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 298.847281][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 298.847291][ T8549] Call Trace: [ 298.847298][ T8549] [ 298.847306][ T8549] dump_stack_lvl+0x241/0x360 [ 298.847336][ T8549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.847359][ T8549] ? __pfx__printk+0x10/0x10 [ 298.847381][ T8549] ? __pfx_lock_release+0x10/0x10 [ 298.847408][ T8549] should_fail_ex+0x40a/0x550 [ 298.847435][ T8549] strncpy_from_user+0x36/0x270 [ 298.847462][ T8549] getname_flags+0xf1/0x540 [ 298.847486][ T8549] __x64_sys_mkdirat+0x7a/0xa0 [ 298.847502][ T8549] do_syscall_64+0xf3/0x230 [ 298.847524][ T8549] ? clear_bhb_loop+0x35/0x90 [ 298.847544][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.847563][ T8549] RIP: 0033:0x7fd7f638cde9 [ 298.847578][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.847591][ T8549] RSP: 002b:00007fd7f71b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 298.847609][ T8549] RAX: ffffffffffffffda RBX: 00007fd7f65a6080 RCX: 00007fd7f638cde9 [ 298.847621][ T8549] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 298.847631][ T8549] RBP: 00007fd7f71b7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.847639][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.847649][ T8549] R13: 0000000000000000 R14: 00007fd7f65a6080 R15: 00007ffc96214a88 [ 298.847674][ T8549] [ 300.376794][ T8569] bridge0: entered promiscuous mode [ 300.387669][ T8570] FAULT_INJECTION: forcing a failure. [ 300.387669][ T8570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.421804][ T8569] macvlan2: entered promiscuous mode [ 300.441522][ T8569] bridge0: port 3(macvlan2) entered blocking state [ 300.461652][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.3.713 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 300.461679][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 300.461689][ T8570] Call Trace: [ 300.461695][ T8570] [ 300.461703][ T8570] dump_stack_lvl+0x241/0x360 [ 300.461734][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.461756][ T8570] ? __pfx__printk+0x10/0x10 [ 300.461779][ T8570] ? __pfx_lock_release+0x10/0x10 [ 300.461805][ T8570] should_fail_ex+0x40a/0x550 [ 300.461826][ T8570] _copy_from_user+0x2d/0xb0 [ 300.461842][ T8570] memdup_user+0x64/0xc0 [ 300.461863][ T8570] strndup_user+0x68/0xc0 [ 300.461883][ T8570] __se_sys_mount+0x9f/0x3c0 [ 300.461903][ T8570] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.461925][ T8570] ? __pfx___se_sys_mount+0x10/0x10 [ 300.461945][ T8570] ? do_syscall_64+0x100/0x230 [ 300.461978][ T8570] ? __x64_sys_mount+0x20/0xc0 [ 300.461999][ T8570] do_syscall_64+0xf3/0x230 [ 300.462024][ T8570] ? clear_bhb_loop+0x35/0x90 [ 300.462047][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.462068][ T8570] RIP: 0033:0x7f8d3378cde9 [ 300.462083][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.462096][ T8570] RSP: 002b:00007f8d34504038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.462115][ T8570] RAX: ffffffffffffffda RBX: 00007f8d339a5fa0 RCX: 00007f8d3378cde9 [ 300.462127][ T8570] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000000000000000 [ 300.462138][ T8570] RBP: 00007f8d34504090 R08: 00002000000001c0 R09: 0000000000000000 [ 300.462149][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.462163][ T8570] R13: 0000000000000000 R14: 00007f8d339a5fa0 R15: 00007fff0ec3def8 [ 300.462183][ T8570] [ 300.648326][ T8569] bridge0: port 3(macvlan2) entered disabled state [ 300.661897][ T8569] macvlan2: entered allmulticast mode [ 300.667491][ T8569] bridge0: entered allmulticast mode [ 300.703565][ T8569] macvlan2: left allmulticast mode [ 300.710999][ T8569] bridge0: left allmulticast mode [ 300.864641][ T8569] bridge0: left promiscuous mode [ 301.072595][ T5902] vhci_hcd: vhci_device speed not set [ 302.772214][ T8585] ipt_ECN: cannot use operation on non-tcp rule [ 304.088145][ T8592] o2cb: This node has not been configured. [ 304.094685][ T8592] o2cb: Cluster check failed. Fix errors before retrying. [ 304.110122][ T8592] (syz.4.719,8592,1):user_dlm_register:674 ERROR: status = -22 [ 304.155961][ T8592] (syz.4.719,8592,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 305.689179][ T8603] FAULT_INJECTION: forcing a failure. [ 305.689179][ T8603] name failslab, interval 1, probability 0, space 0, times 0 [ 305.702010][ T8603] CPU: 1 UID: 0 PID: 8603 Comm: syz.3.722 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 305.702031][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 305.702052][ T8603] Call Trace: [ 305.702059][ T8603] [ 305.702065][ T8603] dump_stack_lvl+0x241/0x360 [ 305.702086][ T8603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.702101][ T8603] ? __pfx__printk+0x10/0x10 [ 305.702115][ T8603] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 305.702129][ T8603] ? __pfx___might_resched+0x10/0x10 [ 305.702142][ T8603] should_fail_ex+0x40a/0x550 [ 305.702163][ T8603] should_failslab+0xac/0x100 [ 305.702184][ T8603] kmem_cache_alloc_node_noprof+0x77/0x380 [ 305.702203][ T8603] ? __alloc_skb+0x1c3/0x440 [ 305.702229][ T8603] __alloc_skb+0x1c3/0x440 [ 305.702256][ T8603] ? __pfx___alloc_skb+0x10/0x10 [ 305.702280][ T8603] ? netlink_autobind+0xd6/0x2f0 [ 305.702294][ T8603] ? netlink_autobind+0x2b0/0x2f0 [ 305.702314][ T8603] netlink_sendmsg+0x638/0xcb0 [ 305.702341][ T8603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.702368][ T8603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.702382][ T8603] __sock_sendmsg+0x221/0x270 [ 305.702405][ T8603] ____sys_sendmsg+0x52a/0x7e0 [ 305.702429][ T8603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.702443][ T8603] ? __fget_files+0x2a/0x410 [ 305.702464][ T8603] ? __fget_files+0x2a/0x410 [ 305.702492][ T8603] __sys_sendmsg+0x269/0x350 [ 305.702513][ T8603] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.702540][ T8603] ? do_sys_openat2+0x17a/0x1d0 [ 305.702567][ T8603] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.702581][ T8603] ? do_syscall_64+0x100/0x230 [ 305.702595][ T8603] ? do_syscall_64+0xb6/0x230 [ 305.702608][ T8603] do_syscall_64+0xf3/0x230 [ 305.702621][ T8603] ? clear_bhb_loop+0x35/0x90 [ 305.702635][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.702647][ T8603] RIP: 0033:0x7f8d3378cde9 [ 305.702656][ T8603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.702664][ T8603] RSP: 002b:00007f8d315d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.702675][ T8603] RAX: ffffffffffffffda RBX: 00007f8d339a6160 RCX: 00007f8d3378cde9 [ 305.702682][ T8603] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000006 [ 305.702695][ T8603] RBP: 00007f8d315d5090 R08: 0000000000000000 R09: 0000000000000000 [ 305.702701][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.702707][ T8603] R13: 0000000000000000 R14: 00007f8d339a6160 R15: 00007fff0ec3def8 [ 305.702721][ T8603] [ 306.914247][ T8614] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 306.920940][ T8614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.932392][ T8614] vhci_hcd vhci_hcd.0: Device attached [ 306.994212][ T8615] vhci_hcd: connection closed [ 307.012794][ T6235] vhci_hcd: stop threads [ 307.052979][ T6235] vhci_hcd: release socket [ 307.077841][ T6235] vhci_hcd: disconnect device [ 307.122333][ T2150] vhci_hcd: vhci_device speed not set [ 307.309889][ T8622] nftables ruleset with unbound chain [ 307.982766][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.728'. [ 307.991871][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.728'. [ 309.064525][ T8634] 9pnet_fd: Insufficient options for proto=fd [ 309.248496][ T8624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.714497][ T8661] syz.3.737 (8661): drop_caches: 2 [ 313.118619][ T8666] netlink: 'syz.6.738': attribute type 2 has an invalid length. [ 317.246430][ T8688] block nbd1: shutting down sockets [ 317.282362][ T8689] nbd1: detected capacity change from 0 to 12 [ 318.253854][ T8701] Process accounting resumed [ 319.933536][ T8729] FAULT_INJECTION: forcing a failure. [ 319.933536][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 319.989912][ T41] block nbd0: Possible stuck request ffff8880257be000: control (read@0,4096B). Runtime 180 seconds [ 320.002982][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.6.756 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 320.003008][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 320.003018][ T8729] Call Trace: [ 320.003033][ T8729] [ 320.003041][ T8729] dump_stack_lvl+0x241/0x360 [ 320.003071][ T8729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.003094][ T8729] ? __pfx__printk+0x10/0x10 [ 320.003120][ T8729] ? fs_reclaim_acquire+0x93/0x130 [ 320.003137][ T8729] ? __pfx___might_resched+0x10/0x10 [ 320.003157][ T8729] should_fail_ex+0x40a/0x550 [ 320.003181][ T8729] should_failslab+0xac/0x100 [ 320.003203][ T8729] __kmalloc_noprof+0xdd/0x4c0 [ 320.003222][ T8729] ? tomoyo_encode+0x26f/0x540 [ 320.003242][ T8729] tomoyo_encode+0x26f/0x540 [ 320.003262][ T8729] tomoyo_realpath_from_path+0x59e/0x5e0 [ 320.003286][ T8729] tomoyo_path_number_perm+0x236/0x860 [ 320.003307][ T8729] ? __lock_acquire+0x1397/0x2100 [ 320.003327][ T8729] ? tomoyo_path_number_perm+0x206/0x860 [ 320.003350][ T8729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.003397][ T8729] ? __fget_files+0x2a/0x410 [ 320.003416][ T8729] ? __fget_files+0x2a/0x410 [ 320.003435][ T8729] security_file_ioctl+0xc6/0x2a0 [ 320.003455][ T8729] __se_sys_ioctl+0x46/0x170 [ 320.003469][ T8729] do_syscall_64+0xf3/0x230 [ 320.003487][ T8729] ? clear_bhb_loop+0x35/0x90 [ 320.003506][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.003522][ T8729] RIP: 0033:0x7f82d0d8cde9 [ 320.003535][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.003546][ T8729] RSP: 002b:00007f82cebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.003561][ T8729] RAX: ffffffffffffffda RBX: 00007f82d0fa5fa0 RCX: 00007f82d0d8cde9 [ 320.003571][ T8729] RDX: 0000200000000000 RSI: 0000000000002287 RDI: 0000000000000003 [ 320.003579][ T8729] RBP: 00007f82cebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.003587][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.003595][ T8729] R13: 0000000000000000 R14: 00007f82d0fa5fa0 R15: 00007ffe676584e8 [ 320.003615][ T8729] [ 320.003858][ T8729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.186756][ T29] audit: type=1326 audit(1738991485.212:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8731 comm="syz.3.757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x0 [ 321.695221][ T8747] openvswitch: netlink: nsh attribute has 32 unknown bytes. [ 321.930340][ T8749] FAULT_INJECTION: forcing a failure. [ 321.930340][ T8749] name failslab, interval 1, probability 0, space 0, times 0 [ 321.953130][ T8747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.089913][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.5.763 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 322.089941][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 322.089951][ T8749] Call Trace: [ 322.089958][ T8749] [ 322.089966][ T8749] dump_stack_lvl+0x241/0x360 [ 322.089997][ T8749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.090022][ T8749] ? __pfx__printk+0x10/0x10 [ 322.090046][ T8749] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 322.090069][ T8749] ? __pfx___might_resched+0x10/0x10 [ 322.090092][ T8749] should_fail_ex+0x40a/0x550 [ 322.090122][ T8749] should_failslab+0xac/0x100 [ 322.090144][ T8749] kmem_cache_alloc_node_noprof+0x77/0x380 [ 322.090164][ T8749] ? __alloc_skb+0x1c3/0x440 [ 322.090190][ T8749] __alloc_skb+0x1c3/0x440 [ 322.090218][ T8749] ? __pfx___alloc_skb+0x10/0x10 [ 322.090243][ T8749] ? netlink_autobind+0xd6/0x2f0 [ 322.090259][ T8749] ? netlink_autobind+0x2b0/0x2f0 [ 322.090279][ T8749] netlink_sendmsg+0x638/0xcb0 [ 322.090307][ T8749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.090335][ T8749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.090349][ T8749] __sock_sendmsg+0x221/0x270 [ 322.090374][ T8749] ____sys_sendmsg+0x52a/0x7e0 [ 322.090399][ T8749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.090414][ T8749] ? __fget_files+0x2a/0x410 [ 322.090437][ T8749] ? __fget_files+0x2a/0x410 [ 322.090465][ T8749] __sys_sendmsg+0x269/0x350 [ 322.090486][ T8749] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.090515][ T8749] ? do_sys_openat2+0x17a/0x1d0 [ 322.090560][ T8749] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.090582][ T8749] ? do_syscall_64+0x100/0x230 [ 322.090607][ T8749] ? do_syscall_64+0xb6/0x230 [ 322.090630][ T8749] do_syscall_64+0xf3/0x230 [ 322.090651][ T8749] ? clear_bhb_loop+0x35/0x90 [ 322.090675][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.090695][ T8749] RIP: 0033:0x7f9182b8cde9 [ 322.090710][ T8749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.090725][ T8749] RSP: 002b:00007f9183a73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.090743][ T8749] RAX: ffffffffffffffda RBX: 00007f9182da5fa0 RCX: 00007f9182b8cde9 [ 322.090756][ T8749] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 322.090767][ T8749] RBP: 00007f9183a73090 R08: 0000000000000000 R09: 0000000000000000 [ 322.090777][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.090787][ T8749] R13: 0000000000000000 R14: 00007f9182da5fa0 R15: 00007ffc8bd728e8 [ 322.090813][ T8749] [ 322.752847][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 322.764861][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 322.776844][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 322.786094][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 322.795308][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 322.802789][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.320965][ T8760] chnl_net:caif_netlink_parms(): no params data found [ 324.822447][ T5821] Bluetooth: hci6: command tx timeout [ 324.903195][ T8800] openvswitch: netlink: nsh attribute has 32 unknown bytes. [ 324.923136][ T8800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.159867][ T8798] netlink: 'syz.3.775': attribute type 21 has an invalid length. [ 325.174947][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.276001][ T2150] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 325.512559][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 325.608589][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 325.922953][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.931465][ T8760] bridge_slave_0: entered allmulticast mode [ 325.954466][ T2150] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 325.972222][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.980252][ T2150] usb 2-1: Product: syz [ 325.983978][ T8760] bridge_slave_0: entered promiscuous mode [ 325.992751][ T2150] usb 2-1: Manufacturer: syz [ 325.997384][ T2150] usb 2-1: SerialNumber: syz [ 326.014428][ T2150] usb 2-1: config 0 descriptor?? [ 326.021161][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.034555][ T2150] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 326.056746][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.069292][ T8760] bridge_slave_1: entered allmulticast mode [ 326.076560][ T8760] bridge_slave_1: entered promiscuous mode [ 326.225417][ T5868] usb 2-1: USB disconnect, device number 13 [ 326.256845][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.284763][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.356875][ T8819] FAULT_INJECTION: forcing a failure. [ 326.356875][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 326.375617][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.6.783 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 326.375650][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 326.375659][ T8819] Call Trace: [ 326.375665][ T8819] [ 326.375672][ T8819] dump_stack_lvl+0x241/0x360 [ 326.375703][ T8819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.375726][ T8819] ? __pfx__printk+0x10/0x10 [ 326.375751][ T8819] ? fs_reclaim_acquire+0x93/0x130 [ 326.375768][ T8819] ? __pfx___might_resched+0x10/0x10 [ 326.375783][ T8819] ? dynamic_dname+0x141/0x1b0 [ 326.375806][ T8819] should_fail_ex+0x40a/0x550 [ 326.375830][ T8819] should_failslab+0xac/0x100 [ 326.375849][ T8819] __kmalloc_noprof+0xdd/0x4c0 [ 326.375866][ T8819] ? tomoyo_encode+0x26f/0x540 [ 326.375885][ T8819] tomoyo_encode+0x26f/0x540 [ 326.375902][ T8819] ? __pfx_sockfs_dname+0x10/0x10 [ 326.375922][ T8819] tomoyo_realpath_from_path+0x59e/0x5e0 [ 326.375947][ T8819] tomoyo_path_number_perm+0x236/0x860 [ 326.375966][ T8819] ? __lock_acquire+0x1397/0x2100 [ 326.375988][ T8819] ? tomoyo_path_number_perm+0x206/0x860 [ 326.376011][ T8819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 326.376063][ T8819] ? __fget_files+0x2a/0x410 [ 326.376081][ T8819] ? __fget_files+0x2a/0x410 [ 326.376101][ T8819] security_file_ioctl+0xc6/0x2a0 [ 326.376120][ T8819] __se_sys_ioctl+0x46/0x170 [ 326.376133][ T8819] do_syscall_64+0xf3/0x230 [ 326.376151][ T8819] ? clear_bhb_loop+0x35/0x90 [ 326.376171][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.376187][ T8819] RIP: 0033:0x7f82d0d8cde9 [ 326.376201][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.376213][ T8819] RSP: 002b:00007f82cebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.376230][ T8819] RAX: ffffffffffffffda RBX: 00007f82d0fa5fa0 RCX: 00007f82d0d8cde9 [ 326.376239][ T8819] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000004 [ 326.376247][ T8819] RBP: 00007f82cebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.376255][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.376263][ T8819] R13: 0000000000000000 R14: 00007f82d0fa5fa0 R15: 00007ffe676584e8 [ 326.376284][ T8819] [ 326.376298][ T8819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.377917][ T8760] team0: Port device team_slave_0 added [ 326.834133][ T8760] team0: Port device team_slave_1 added [ 326.903095][ T5821] Bluetooth: hci6: command tx timeout [ 327.162309][ T29] audit: type=1800 audit(1738991492.062:39): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.785" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 327.686414][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.716282][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.760693][ T8760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.776145][ T8835] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.787'. [ 327.789145][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.802221][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.921531][ T8839] siw: device registration error -23 [ 328.646796][ T8760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.793314][ T8760] hsr_slave_0: entered promiscuous mode [ 328.799676][ T8760] hsr_slave_1: entered promiscuous mode [ 328.813038][ T8845] trusted_key: syz.3.791 sent an empty control message without MSG_MORE. [ 328.830094][ T8760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.872569][ T8760] Cannot create hsr debugfs directory [ 329.000274][ T5821] Bluetooth: hci6: command tx timeout [ 331.197363][ T5821] Bluetooth: hci6: command tx timeout [ 331.471925][ T8760] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.526987][ T8760] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.612732][ T8760] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.628937][ T29] audit: type=1804 audit(1738991496.652:40): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.794" name="/newroot/43/file0" dev="tmpfs" ino=254 res=1 errno=0 [ 331.656716][ T8760] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.868327][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.930252][ T8760] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.004591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.011785][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.036206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.043379][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.322322][ T8881] siw: device registration error -23 [ 333.072005][ T8884] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.800'. [ 333.302916][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.384210][ T8897] FAULT_INJECTION: forcing a failure. [ 333.384210][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.502310][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.5.805 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 333.502338][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 333.502348][ T8897] Call Trace: [ 333.502354][ T8897] [ 333.502361][ T8897] dump_stack_lvl+0x241/0x360 [ 333.502393][ T8897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.502417][ T8897] ? __pfx__printk+0x10/0x10 [ 333.502439][ T8897] ? rcu_is_watching+0x15/0xb0 [ 333.502461][ T8897] ? __pfx_lock_release+0x10/0x10 [ 333.502479][ T8897] ? __alloc_frozen_pages_noprof+0x350/0x710 [ 333.502504][ T8897] should_fail_ex+0x40a/0x550 [ 333.502527][ T8897] _copy_from_iter+0x1e9/0x1c20 [ 333.502555][ T8897] ? alloc_pages_mpol+0x4bd/0x660 [ 333.502578][ T8897] ? __pfx__copy_from_iter+0x10/0x10 [ 333.502602][ T8897] ? tun_get_user+0x875/0x48a0 [ 333.502628][ T8897] ? set_page_refcounted+0xa1/0x1e0 [ 333.502649][ T8897] ? alloc_pages_noprof+0x136/0x190 [ 333.502666][ T8897] ? page_copy_sane+0x46/0x260 [ 333.502690][ T8897] copy_page_from_iter+0x7a/0x100 [ 333.502715][ T8897] tun_get_user+0x2035/0x48a0 [ 333.502739][ T8897] ? tun_get_user+0x875/0x48a0 [ 333.502778][ T8897] ? __pfx_tun_get_user+0x10/0x10 [ 333.502821][ T8897] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 333.502841][ T8897] ? tun_get+0x1e/0x2f0 [ 333.502864][ T8897] ? __pfx_lock_release+0x10/0x10 [ 333.502896][ T8897] ? tun_get+0x1e/0x2f0 [ 333.502917][ T8897] ? tun_get+0x27d/0x2f0 [ 333.502941][ T8897] tun_chr_write_iter+0x10d/0x1f0 [ 333.502967][ T8897] vfs_write+0xacf/0xd10 [ 333.502993][ T8897] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 333.503017][ T8897] ? __pfx_vfs_write+0x10/0x10 [ 333.503031][ T8897] ? do_sys_openat2+0x17a/0x1d0 [ 333.503054][ T8897] ? __fget_files+0x2a/0x410 [ 333.503076][ T8897] ? __fget_files+0x2a/0x410 [ 333.503112][ T8897] ksys_write+0x18f/0x2b0 [ 333.503130][ T8897] ? __pfx_ksys_write+0x10/0x10 [ 333.503146][ T8897] ? do_syscall_64+0x100/0x230 [ 333.503171][ T8897] ? do_syscall_64+0xb6/0x230 [ 333.503194][ T8897] do_syscall_64+0xf3/0x230 [ 333.503214][ T8897] ? clear_bhb_loop+0x35/0x90 [ 333.503238][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.503258][ T8897] RIP: 0033:0x7f9182b8b89f [ 333.503273][ T8897] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 333.503287][ T8897] RSP: 002b:00007f9183a73000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 333.503306][ T8897] RAX: ffffffffffffffda RBX: 00007f9182da5fa0 RCX: 00007f9182b8b89f [ 333.503318][ T8897] RDX: 000000000000004c RSI: 0000200000000200 RDI: 00000000000000c8 [ 333.503328][ T8897] RBP: 00007f9183a73090 R08: 0000000000000000 R09: 0000000000000000 [ 333.503339][ T8897] R10: 000000000000004c R11: 0000000000000293 R12: 0000000000000001 [ 333.503349][ T8897] R13: 0000000000000000 R14: 00007f9182da5fa0 R15: 00007ffc8bd728e8 [ 333.503374][ T8897] [ 336.050321][ T8760] veth0_vlan: entered promiscuous mode [ 336.127176][ T8760] veth1_vlan: entered promiscuous mode [ 336.228512][ T8760] veth0_macvtap: entered promiscuous mode [ 336.264560][ T8760] veth1_macvtap: entered promiscuous mode [ 336.311928][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.325828][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.336609][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.347664][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.358007][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.369010][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.379360][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.420212][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.452456][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.507093][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.545540][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.592792][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.806898][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.881098][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.912255][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.942428][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.983204][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.002413][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.085141][ T8925] siw: device registration error -23 [ 337.768848][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.779368][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.830406][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.841057][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.852018][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.866463][ T8760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.877263][ T8760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.888999][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.964557][ T8760] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.005887][ T8760] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.020984][ T8760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.046660][ T8760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.823697][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.841462][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.932265][ T7202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.940196][ T7202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.035217][ T29] audit: type=1804 audit(1738991504.042:41): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.817" name="file0" dev="tmpfs" ino=1083 res=1 errno=0 [ 339.878502][ T8967] netlink: 'syz.3.822': attribute type 2 has an invalid length. [ 342.742408][ T57] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 343.062560][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 343.077544][ T57] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.098335][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.110795][ T57] usb 2-1: Product: syz [ 343.115778][ T57] usb 2-1: Manufacturer: syz [ 343.122534][ T57] usb 2-1: SerialNumber: syz [ 343.164500][ T8998] overlayfs: missing 'lowerdir' [ 343.381672][ T57] usb 2-1: config 0 descriptor?? [ 343.832931][ T57] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 343.936750][ T8988] cgroup: subsys name conflicts with all [ 344.040832][ T29] audit: type=1326 audit(1738991509.062:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.3.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x0 [ 344.303345][ T2150] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 344.598472][ T2150] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.635722][ T2150] usb 7-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 344.778944][ T2150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.842670][ T2150] usb 7-1: config 0 descriptor?? [ 345.103060][ T2150] usbhid 7-1:0.0: can't add hid device: -71 [ 345.119694][ T2150] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 345.150964][ T2150] usb 7-1: USB disconnect, device number 3 [ 345.540850][ T9029] siw: device registration error -23 [ 346.167844][ T57] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 346.193858][ T57] usb 2-1: USB disconnect, device number 14 [ 347.799970][ T9046] FAULT_INJECTION: forcing a failure. [ 347.799970][ T9046] name failslab, interval 1, probability 0, space 0, times 0 [ 347.830871][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.847'. [ 347.867153][ T9046] CPU: 1 UID: 0 PID: 9046 Comm: syz.7.845 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 347.867180][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 347.867190][ T9046] Call Trace: [ 347.867196][ T9046] [ 347.867203][ T9046] dump_stack_lvl+0x241/0x360 [ 347.867231][ T9046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.867253][ T9046] ? __pfx__printk+0x10/0x10 [ 347.867277][ T9046] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 347.867298][ T9046] ? __pfx___might_resched+0x10/0x10 [ 347.867318][ T9046] should_fail_ex+0x40a/0x550 [ 347.867340][ T9046] should_failslab+0xac/0x100 [ 347.867359][ T9046] kmem_cache_alloc_node_noprof+0x77/0x380 [ 347.867378][ T9046] ? __alloc_skb+0x1c3/0x440 [ 347.867402][ T9046] __alloc_skb+0x1c3/0x440 [ 347.867424][ T9046] ? __pfx___alloc_skb+0x10/0x10 [ 347.867442][ T9046] ? netlink_autobind+0xd6/0x2f0 [ 347.867455][ T9046] ? netlink_autobind+0x2b0/0x2f0 [ 347.867470][ T9046] netlink_sendmsg+0x638/0xcb0 [ 347.867491][ T9046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.867511][ T9046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.867522][ T9046] __sock_sendmsg+0x221/0x270 [ 347.867540][ T9046] ____sys_sendmsg+0x52a/0x7e0 [ 347.867566][ T9046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.867577][ T9046] ? __fget_files+0x2a/0x410 [ 347.867595][ T9046] ? __fget_files+0x2a/0x410 [ 347.867616][ T9046] __sys_sendmsg+0x269/0x350 [ 347.867631][ T9046] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.867652][ T9046] ? do_sys_openat2+0x17a/0x1d0 [ 347.867685][ T9046] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.867703][ T9046] ? do_syscall_64+0x100/0x230 [ 347.867722][ T9046] ? do_syscall_64+0xb6/0x230 [ 347.867739][ T9046] do_syscall_64+0xf3/0x230 [ 347.867755][ T9046] ? clear_bhb_loop+0x35/0x90 [ 347.867774][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.867790][ T9046] RIP: 0033:0x7f79bd78cde9 [ 347.867802][ T9046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.867812][ T9046] RSP: 002b:00007f79be66f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.867827][ T9046] RAX: ffffffffffffffda RBX: 00007f79bd9a5fa0 RCX: 00007f79bd78cde9 [ 347.867837][ T9046] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000004 [ 347.867845][ T9046] RBP: 00007f79be66f090 R08: 0000000000000000 R09: 0000000000000000 [ 347.867853][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.867860][ T9046] R13: 0000000000000000 R14: 00007f79bd9a5fa0 R15: 00007ffc20c21218 [ 347.867879][ T9046] [ 350.592296][ T41] block nbd0: Possible stuck request ffff8880257be000: control (read@0,4096B). Runtime 210 seconds [ 350.719886][ T9062] syz.1.849 (9062): drop_caches: 2 [ 350.942440][ T29] audit: type=1326 audit(1738991515.962:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9075 comm="syz.5.854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9182b8cde9 code=0x0 [ 351.020652][ T29] audit: type=1804 audit(1738991515.962:44): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.853" name="/newroot/8/file0" dev="tmpfs" ino=60 res=1 errno=0 [ 351.817349][ T29] audit: type=1804 audit(1738991516.842:45): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.857" name="file0" dev="tmpfs" ino=1138 res=1 errno=0 [ 351.845611][ T5896] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 351.902468][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 352.084866][ T8] usb 8-1: config 1 has an invalid interface number: 159 but max is 0 [ 352.112643][ T8] usb 8-1: config 1 has no interface number 0 [ 352.134677][ T8] usb 8-1: config 1 interface 159 altsetting 182 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 352.192533][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 352.219492][ T5896] usb 2-1: config 1 interface 0 altsetting 170 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.243795][ T9095] netlink: 'syz.5.858': attribute type 2 has an invalid length. [ 352.326757][ T5896] usb 2-1: config 1 interface 0 altsetting 170 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.495613][ T5896] usb 2-1: config 1 interface 0 has no altsetting 0 [ 352.591534][ T5896] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 352.697465][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.866284][ T5896] usb 2-1: Product: syz [ 352.882231][ T5896] usb 2-1: Manufacturer: 厎ٮ푱ᐹ᫢ꑎ齟蕨栄ʋ觶촺元眻⭰슏燢퍎矁풣襦Ž [ 352.910572][ T5896] usb 2-1: SerialNumber: syz [ 353.009626][ T8] usb 8-1: config 1 interface 159 has no altsetting 0 [ 353.040039][ T8] usb 8-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=c4.9d [ 353.062244][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.070311][ T8] usb 8-1: Product: 혻 [ 353.090618][ T8] usb 8-1: Manufacturer: 䝔葍 [ 353.157374][ T5896] usbhid 2-1:1.0: can't add hid device: -71 [ 353.189612][ T5896] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 353.249151][ T5896] usb 2-1: USB disconnect, device number 15 [ 353.825498][ T8] rndis_host 8-1:1.159: skipping garbage [ 353.839644][ T8] usb 8-1: bad CDC descriptors [ 353.860658][ T8] cdc_acm 8-1:1.159: skipping garbage [ 353.990699][ T8] usb 8-1: USB disconnect, device number 2 [ 354.584098][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.6.868'. [ 354.669989][ T9120] netlink: 'syz.7.869': attribute type 24 has an invalid length. [ 355.502339][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 355.989326][ T9147] netlink: 'syz.7.876': attribute type 2 has an invalid length. [ 356.455790][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.7.881'. [ 356.478620][ T9158] veth0_to_batadv: entered promiscuous mode [ 356.496692][ T9158] veth0_to_batadv: entered allmulticast mode [ 356.524195][ T9158] FAULT_INJECTION: forcing a failure. [ 356.524195][ T9158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.547844][ T9158] CPU: 1 UID: 0 PID: 9158 Comm: syz.7.881 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 356.547869][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 356.547879][ T9158] Call Trace: [ 356.547885][ T9158] [ 356.547893][ T9158] dump_stack_lvl+0x241/0x360 [ 356.547924][ T9158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.547948][ T9158] ? __pfx__printk+0x10/0x10 [ 356.547973][ T9158] ? __pfx_lock_release+0x10/0x10 [ 356.548000][ T9158] should_fail_ex+0x40a/0x550 [ 356.548024][ T9158] _copy_from_user+0x2d/0xb0 [ 356.548042][ T9158] copy_msghdr_from_user+0xae/0x680 [ 356.548068][ T9158] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 356.548086][ T9158] ? __fget_files+0x2a/0x410 [ 356.548110][ T9158] ? __fget_files+0x2a/0x410 [ 356.548137][ T9158] __sys_sendmsg+0x209/0x350 [ 356.548159][ T9158] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.548187][ T9158] ? do_sys_openat2+0x17a/0x1d0 [ 356.548232][ T9158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.548253][ T9158] ? do_syscall_64+0x100/0x230 [ 356.548277][ T9158] ? do_syscall_64+0xb6/0x230 [ 356.548301][ T9158] do_syscall_64+0xf3/0x230 [ 356.548321][ T9158] ? clear_bhb_loop+0x35/0x90 [ 356.548344][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.548364][ T9158] RIP: 0033:0x7f79bd78cde9 [ 356.548380][ T9158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.548393][ T9158] RSP: 002b:00007f79be66f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.548410][ T9158] RAX: ffffffffffffffda RBX: 00007f79bd9a5fa0 RCX: 00007f79bd78cde9 [ 356.548422][ T9158] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 356.548432][ T9158] RBP: 00007f79be66f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.548442][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.548452][ T9158] R13: 0000000000000000 R14: 00007f79bd9a5fa0 R15: 00007ffc20c21218 [ 356.548476][ T9158] [ 356.749075][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.962793][ T29] audit: type=1804 audit(1738991521.992:46): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.880" name="/newroot/189/file0" dev="tmpfs" ino=1065 res=1 errno=0 [ 356.972282][ T9164] team_slave_0: entered promiscuous mode [ 356.989383][ T9164] team_slave_1: entered promiscuous mode [ 357.152796][ T9164] macvlan2: entered promiscuous mode [ 357.162006][ T9164] team0: entered promiscuous mode [ 357.191265][ T9164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 357.251055][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.7.883'. [ 357.366473][ T9164] bridge0: port 3(macvlan2) entered blocking state [ 357.435363][ T9164] bridge0: port 3(macvlan2) entered disabled state [ 357.467262][ T9164] macvlan2: entered allmulticast mode [ 357.518246][ T9164] team0: entered allmulticast mode [ 357.560160][ T9164] team_slave_0: entered allmulticast mode [ 357.579316][ T9164] team_slave_1: entered allmulticast mode [ 357.620330][ T9164] bridge0: port 3(macvlan2) entered blocking state [ 357.628758][ T9164] bridge0: port 3(macvlan2) entered forwarding state [ 357.759097][ T9183] overlayfs: failed to resolve './file0': -2 [ 357.780849][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 358.012474][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.7.891'. [ 358.087033][ T9194] netlink: 'syz.5.892': attribute type 2 has an invalid length. [ 359.265508][ T9201] FAULT_INJECTION: forcing a failure. [ 359.265508][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 359.282582][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.7.895 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 359.282608][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 359.282618][ T9201] Call Trace: [ 359.282624][ T9201] [ 359.282631][ T9201] dump_stack_lvl+0x241/0x360 [ 359.282663][ T9201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.282686][ T9201] ? __pfx__printk+0x10/0x10 [ 359.282711][ T9201] ? fs_reclaim_acquire+0x93/0x130 [ 359.282728][ T9201] ? __pfx___might_resched+0x10/0x10 [ 359.282750][ T9201] should_fail_ex+0x40a/0x550 [ 359.282773][ T9201] should_failslab+0xac/0x100 [ 359.282795][ T9201] __kmalloc_noprof+0xdd/0x4c0 [ 359.282814][ T9201] ? tomoyo_encode+0x26f/0x540 [ 359.282835][ T9201] tomoyo_encode+0x26f/0x540 [ 359.282856][ T9201] tomoyo_realpath_from_path+0x59e/0x5e0 [ 359.282884][ T9201] tomoyo_path_number_perm+0x236/0x860 [ 359.282905][ T9201] ? __lock_acquire+0x1397/0x2100 [ 359.282927][ T9201] ? tomoyo_path_number_perm+0x206/0x860 [ 359.282951][ T9201] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 359.283010][ T9201] ? __fget_files+0x2a/0x410 [ 359.283033][ T9201] ? __fget_files+0x2a/0x410 [ 359.283058][ T9201] security_file_ioctl+0xc6/0x2a0 [ 359.283082][ T9201] __se_sys_ioctl+0x46/0x170 [ 359.283101][ T9201] do_syscall_64+0xf3/0x230 [ 359.283122][ T9201] ? clear_bhb_loop+0x35/0x90 [ 359.283147][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.283166][ T9201] RIP: 0033:0x7f79bd78cde9 [ 359.283182][ T9201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.283195][ T9201] RSP: 002b:00007f79be66f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.283214][ T9201] RAX: ffffffffffffffda RBX: 00007f79bd9a5fa0 RCX: 00007f79bd78cde9 [ 359.283226][ T9201] RDX: 0000200000000080 RSI: 0000000000005402 RDI: 0000000000000003 [ 359.283236][ T9201] RBP: 00007f79be66f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.283247][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.283257][ T9201] R13: 0000000000000000 R14: 00007f79bd9a5fa0 R15: 00007ffc20c21218 [ 359.283283][ T9201] [ 359.283299][ T9201] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.741728][ T9205] usb usb8: usbfs: process 9205 (syz.7.897) did not claim interface 0 before use [ 359.890925][ T9208] syz.1.898 (9208): drop_caches: 2 [ 360.223482][ T2150] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 360.443421][ T2150] usb 8-1: device descriptor read/64, error -71 [ 360.682246][ T2150] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 360.874384][ T9215] overlay: ./bus is not a directory [ 361.233183][ T2150] usb 8-1: device descriptor read/64, error -71 [ 361.476785][ T2150] usb usb8-port1: attempt power cycle [ 361.599362][ T9227] trusted_key: encrypted_key: master key parameter '' is invalid [ 362.352301][ T2150] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 362.386754][ T2150] usb 8-1: device descriptor read/8, error -71 [ 362.412770][ T29] audit: type=1326 audit(1738991527.442:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 362.435457][ T29] audit: type=1326 audit(1738991527.442:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 362.456731][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.465672][ T29] audit: type=1326 audit(1738991527.442:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 362.526815][ T29] audit: type=1326 audit(1738991527.442:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3378cde9 code=0x7ffc0000 [ 362.632286][ T2150] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 362.663659][ T2150] usb 8-1: device descriptor read/8, error -71 [ 362.743759][ T9236] FAULT_INJECTION: forcing a failure. [ 362.743759][ T9236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.793121][ T9236] CPU: 1 UID: 0 PID: 9236 Comm: syz.5.907 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 362.793148][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.793157][ T9236] Call Trace: [ 362.793164][ T9236] [ 362.793171][ T9236] dump_stack_lvl+0x241/0x360 [ 362.793201][ T9236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.793222][ T9236] ? __pfx__printk+0x10/0x10 [ 362.793245][ T9236] ? __pfx_lock_release+0x10/0x10 [ 362.793271][ T9236] should_fail_ex+0x40a/0x550 [ 362.793292][ T9236] _copy_from_user+0x2d/0xb0 [ 362.793311][ T9236] core_sys_select+0x639/0x910 [ 362.793338][ T9236] ? __pfx_core_sys_select+0x10/0x10 [ 362.793359][ T9236] ? ksys_write+0x22a/0x2b0 [ 362.793398][ T9236] ? __pfx_set_user_sigmask+0x10/0x10 [ 362.793416][ T9236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.793437][ T9236] ? __fget_files+0x2a/0x410 [ 362.793463][ T9236] __se_sys_pselect6+0x321/0x3e0 [ 362.793486][ T9236] ? __pfx___se_sys_pselect6+0x10/0x10 [ 362.793504][ T9236] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.793523][ T9236] ? do_syscall_64+0x100/0x230 [ 362.793544][ T9236] ? __x64_sys_pselect6+0x21/0xf0 [ 362.793562][ T9236] do_syscall_64+0xf3/0x230 [ 362.793581][ T9236] ? clear_bhb_loop+0x35/0x90 [ 362.793602][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.793622][ T9236] RIP: 0033:0x7f9182b8cde9 [ 362.793634][ T9236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.793663][ T9236] RSP: 002b:00007f9183a52038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 362.793681][ T9236] RAX: ffffffffffffffda RBX: 00007f9182da6080 RCX: 00007f9182b8cde9 [ 362.793692][ T9236] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 362.793702][ T9236] RBP: 00007f9183a52090 R08: 0000000000000000 R09: 0000000000000000 [ 362.793712][ T9236] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 362.793722][ T9236] R13: 0000000000000000 R14: 00007f9182da6080 R15: 00007ffc8bd728e8 [ 362.793747][ T9236] [ 363.004335][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.031467][ T2150] usb usb8-port1: unable to enumerate USB device [ 363.231760][ T9152] Set syz1 is full, maxelem 65536 reached [ 364.561074][ T9256] siw: device registration error -23 [ 366.560425][ T9271] FAULT_INJECTION: forcing a failure. [ 366.560425][ T9271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.589816][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.1.917 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 366.589843][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.589853][ T9271] Call Trace: [ 366.589859][ T9271] [ 366.589866][ T9271] dump_stack_lvl+0x241/0x360 [ 366.589898][ T9271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.589920][ T9271] ? __pfx__printk+0x10/0x10 [ 366.589945][ T9271] ? __pfx_lock_release+0x10/0x10 [ 366.589972][ T9271] should_fail_ex+0x40a/0x550 [ 366.589995][ T9271] _copy_from_user+0x2d/0xb0 [ 366.590013][ T9271] copy_msghdr_from_user+0xae/0x680 [ 366.590040][ T9271] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 366.590057][ T9271] ? __fget_files+0x2a/0x410 [ 366.590080][ T9271] ? __fget_files+0x2a/0x410 [ 366.590107][ T9271] __sys_sendmsg+0x209/0x350 [ 366.590128][ T9271] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.590156][ T9271] ? do_sys_openat2+0x17a/0x1d0 [ 366.590199][ T9271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 366.590220][ T9271] ? do_syscall_64+0x100/0x230 [ 366.590243][ T9271] ? do_syscall_64+0xb6/0x230 [ 366.590266][ T9271] do_syscall_64+0xf3/0x230 [ 366.590286][ T9271] ? clear_bhb_loop+0x35/0x90 [ 366.590309][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.590329][ T9271] RIP: 0033:0x7fd7f638cde9 [ 366.590344][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.590358][ T9271] RSP: 002b:00007fd7f71d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.590375][ T9271] RAX: ffffffffffffffda RBX: 00007fd7f65a5fa0 RCX: 00007fd7f638cde9 [ 366.590388][ T9271] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 366.590399][ T9271] RBP: 00007fd7f71d8090 R08: 0000000000000000 R09: 0000000000000000 [ 366.590408][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.590418][ T9271] R13: 0000000000000000 R14: 00007fd7f65a5fa0 R15: 00007ffc96214a88 [ 366.590451][ T9271] [ 366.788612][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.853984][ T9273] netlink: 24 bytes leftover after parsing attributes in process `syz.7.918'. [ 367.049870][ T9277] netlink: 168 bytes leftover after parsing attributes in process `syz.5.919'. [ 367.280638][ T9282] Cannot find add_set index 512 as target [ 368.679430][ T9290] siw: device registration error -23 [ 368.713372][ T9291] siw: device registration error -23 [ 368.817232][ T9294] FAULT_INJECTION: forcing a failure. [ 368.817232][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.830938][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.1.923 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 368.830962][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.830973][ T9294] Call Trace: [ 368.830979][ T9294] [ 368.830987][ T9294] dump_stack_lvl+0x241/0x360 [ 368.831018][ T9294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.831042][ T9294] ? __pfx__printk+0x10/0x10 [ 368.831067][ T9294] ? __pfx_lock_release+0x10/0x10 [ 368.831096][ T9294] should_fail_ex+0x40a/0x550 [ 368.831119][ T9294] _copy_from_iter+0x1e9/0x1c20 [ 368.831141][ T9294] ? mark_lock+0x9a/0x360 [ 368.831164][ T9294] ? __lock_acquire+0x1397/0x2100 [ 368.831191][ T9294] ? __pfx__copy_from_iter+0x10/0x10 [ 368.831217][ T9294] ? smack_socket_sendmsg+0x178/0x540 [ 368.831250][ T9294] bcm_sendmsg+0x157/0x7a0 [ 368.831270][ T9294] ? __pfx_bcm_sendmsg+0x10/0x10 [ 368.831289][ T9294] ? __import_iovec+0x590/0x870 [ 368.831312][ T9294] ? __pfx_bcm_sendmsg+0x10/0x10 [ 368.831325][ T9294] __sock_sendmsg+0x221/0x270 [ 368.831347][ T9294] ____sys_sendmsg+0x52a/0x7e0 [ 368.831370][ T9294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.831385][ T9294] ? __fget_files+0x2a/0x410 [ 368.831408][ T9294] ? __fget_files+0x2a/0x410 [ 368.831436][ T9294] __sys_sendmsg+0x269/0x350 [ 368.831456][ T9294] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.831484][ T9294] ? do_sys_openat2+0x17a/0x1d0 [ 368.831535][ T9294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.831557][ T9294] ? do_syscall_64+0x100/0x230 [ 368.831581][ T9294] ? do_syscall_64+0xb6/0x230 [ 368.831604][ T9294] do_syscall_64+0xf3/0x230 [ 368.831624][ T9294] ? clear_bhb_loop+0x35/0x90 [ 368.831647][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.831667][ T9294] RIP: 0033:0x7fd7f638cde9 [ 368.831682][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.831700][ T9294] RSP: 002b:00007fd7f71d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.831718][ T9294] RAX: ffffffffffffffda RBX: 00007fd7f65a5fa0 RCX: 00007fd7f638cde9 [ 368.831729][ T9294] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 368.831739][ T9294] RBP: 00007fd7f71d8090 R08: 0000000000000000 R09: 0000000000000000 [ 368.831750][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.831759][ T9294] R13: 0000000000000000 R14: 00007fd7f65a5fa0 R15: 00007ffc96214a88 [ 368.831785][ T9294] [ 369.273241][ T9276] ALSA: mixer_oss: invalid OSS volume '' [ 369.281614][ T9299] FAULT_INJECTION: forcing a failure. [ 369.281614][ T9299] name failslab, interval 1, probability 0, space 0, times 0 [ 369.294886][ T9299] CPU: 0 UID: 0 PID: 9299 Comm: syz.1.926 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 369.294909][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 369.294919][ T9299] Call Trace: [ 369.294926][ T9299] [ 369.294932][ T9299] dump_stack_lvl+0x241/0x360 [ 369.294964][ T9299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.294988][ T9299] ? __pfx__printk+0x10/0x10 [ 369.295012][ T9299] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 369.295036][ T9299] ? __pfx___might_resched+0x10/0x10 [ 369.295058][ T9299] should_fail_ex+0x40a/0x550 [ 369.295081][ T9299] should_failslab+0xac/0x100 [ 369.295103][ T9299] kmem_cache_alloc_node_noprof+0x77/0x380 [ 369.295122][ T9299] ? __alloc_skb+0x1c3/0x440 [ 369.295147][ T9299] __alloc_skb+0x1c3/0x440 [ 369.295171][ T9299] ? __pfx___alloc_skb+0x10/0x10 [ 369.295194][ T9299] ? netlink_autobind+0xd6/0x2f0 [ 369.295209][ T9299] ? netlink_autobind+0x2b0/0x2f0 [ 369.295229][ T9299] netlink_sendmsg+0x638/0xcb0 [ 369.295254][ T9299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.295282][ T9299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.295296][ T9299] __sock_sendmsg+0x221/0x270 [ 369.295320][ T9299] ____sys_sendmsg+0x52a/0x7e0 [ 369.295344][ T9299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.295359][ T9299] ? __fget_files+0x2a/0x410 [ 369.295381][ T9299] ? __fget_files+0x2a/0x410 [ 369.295408][ T9299] __sys_sendmsg+0x269/0x350 [ 369.295429][ T9299] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.295472][ T9299] ? do_sys_openat2+0x17a/0x1d0 [ 369.295517][ T9299] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.295539][ T9299] ? do_syscall_64+0x100/0x230 [ 369.295563][ T9299] ? do_syscall_64+0xb6/0x230 [ 369.295587][ T9299] do_syscall_64+0xf3/0x230 [ 369.295608][ T9299] ? clear_bhb_loop+0x35/0x90 [ 369.295631][ T9299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.295652][ T9299] RIP: 0033:0x7fd7f638cde9 [ 369.295667][ T9299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.295681][ T9299] RSP: 002b:00007fd7f71d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.295714][ T9299] RAX: ffffffffffffffda RBX: 00007fd7f65a5fa0 RCX: 00007fd7f638cde9 [ 369.295727][ T9299] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 369.295738][ T9299] RBP: 00007fd7f71d8090 R08: 0000000000000000 R09: 0000000000000000 [ 369.295748][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.295758][ T9299] R13: 0000000000000000 R14: 00007fd7f65a5fa0 R15: 00007ffc96214a88 [ 369.295785][ T9299] [ 370.745431][ T5821] Bluetooth: hci5: command 0x0406 tx timeout [ 370.983516][ T9320] openvswitch: netlink: nsh attribute has 32 unknown bytes. [ 370.990862][ T9320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.281627][ T9332] siw: device registration error -23 [ 372.211972][ T9339] netlink: 'syz.6.937': attribute type 2 has an invalid length. [ 373.669403][ T9360] input: syz0 as /devices/virtual/input/input14 [ 374.389139][ T9360] tipc: Failed to obtain node identity [ 374.407576][ T9360] tipc: Enabling of bearer rejected, failed to enable media [ 374.439893][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.944'. [ 376.731138][ T9427] capability: warning: `syz.1.954' uses deprecated v2 capabilities in a way that may be insecure [ 378.557338][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 378.568492][ T9454] netlink: 'syz.3.969': attribute type 3 has an invalid length. [ 379.886498][ T9474] syz.6.977 (9474): drop_caches: 2 [ 380.173388][ T9483] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.978'. [ 380.808743][ T41] block nbd0: Possible stuck request ffff8880257be000: control (read@0,4096B). Runtime 240 seconds [ 381.653326][ T9503] FAULT_INJECTION: forcing a failure. [ 381.653326][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 381.734835][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.5.985 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 381.734853][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 381.734859][ T9503] Call Trace: [ 381.734864][ T9503] [ 381.734869][ T9503] dump_stack_lvl+0x241/0x360 [ 381.734890][ T9503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.734904][ T9503] ? __pfx__printk+0x10/0x10 [ 381.734919][ T9503] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 381.734937][ T9503] ? __pfx___might_resched+0x10/0x10 [ 381.734950][ T9503] should_fail_ex+0x40a/0x550 [ 381.734964][ T9503] should_failslab+0xac/0x100 [ 381.734977][ T9503] kmem_cache_alloc_node_noprof+0x77/0x380 [ 381.734988][ T9503] ? __alloc_skb+0x1c3/0x440 [ 381.735004][ T9503] __alloc_skb+0x1c3/0x440 [ 381.735020][ T9503] ? __pfx___alloc_skb+0x10/0x10 [ 381.735034][ T9503] ? netlink_autobind+0xd6/0x2f0 [ 381.735043][ T9503] ? netlink_autobind+0x2b0/0x2f0 [ 381.735055][ T9503] netlink_sendmsg+0x638/0xcb0 [ 381.735069][ T9503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.735084][ T9503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.735093][ T9503] __sock_sendmsg+0x221/0x270 [ 381.735106][ T9503] ____sys_sendmsg+0x52a/0x7e0 [ 381.735120][ T9503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.735128][ T9503] ? __fget_files+0x2a/0x410 [ 381.735141][ T9503] ? __fget_files+0x2a/0x410 [ 381.735157][ T9503] __sys_sendmsg+0x269/0x350 [ 381.735169][ T9503] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.735184][ T9503] ? do_sys_openat2+0x17a/0x1d0 [ 381.735209][ T9503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.735222][ T9503] ? do_syscall_64+0x100/0x230 [ 381.735236][ T9503] ? do_syscall_64+0xb6/0x230 [ 381.735249][ T9503] do_syscall_64+0xf3/0x230 [ 381.735261][ T9503] ? clear_bhb_loop+0x35/0x90 [ 381.735275][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.735287][ T9503] RIP: 0033:0x7f9182b8cde9 [ 381.735296][ T9503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.735304][ T9503] RSP: 002b:00007f9183a73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.735316][ T9503] RAX: ffffffffffffffda RBX: 00007f9182da5fa0 RCX: 00007f9182b8cde9 [ 381.735323][ T9503] RDX: 0000000004020804 RSI: 0000200000000000 RDI: 0000000000000003 [ 381.735329][ T9503] RBP: 00007f9183a73090 R08: 0000000000000000 R09: 0000000000000000 [ 381.735335][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.735341][ T9503] R13: 0000000000000000 R14: 00007f9182da5fa0 R15: 00007ffc8bd728e8 [ 381.735355][ T9503] [ 382.000628][ T5868] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 382.162313][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 382.172710][ T5868] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 382.206244][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.258934][ T9517] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.991'. [ 382.283942][ T5868] usb 8-1: Product: syz [ 382.328343][ T5868] usb 8-1: Manufacturer: syz [ 382.346475][ T5868] usb 8-1: SerialNumber: syz [ 382.377180][ T5868] usb 8-1: config 0 descriptor?? [ 382.398781][ T5868] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 382.441060][ T9513] random: crng reseeded on system resumption [ 382.450985][ T5868] usb 8-1: Detected FT232H [ 382.561417][ T9526] hsr0: entered promiscuous mode [ 383.203651][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.212526][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.224576][ T5868] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 383.693778][ T9538] siw: device registration error -23 [ 384.993860][ T5868] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 385.004441][ T9540] Mount JFS Failure: -22 [ 385.008824][ T9540] jfs_mount failed w/return code = -22 [ 385.034289][ T5868] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 385.129396][ T5868] usb 8-1: USB disconnect, device number 7 [ 385.251323][ T5868] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 385.299794][ T5868] ftdi_sio 8-1:0.0: device disconnected [ 385.592580][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 385.762352][ T9560] Mount JFS Failure: -22 [ 385.766705][ T9560] jfs_mount failed w/return code = -22 [ 385.885534][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.006983][ T8] usb 7-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 386.232234][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.255261][ T8] usb 7-1: config 0 descriptor?? [ 386.323939][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 386.382369][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 386.551718][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 386.558802][ T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 387.444610][ T30] INFO: task syz.0.527:7647 blocked for more than 143 seconds. [ 387.481768][ T8] usb 7-1: USB disconnect, device number 4 [ 387.534220][ T30] Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 387.703261][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.723304][ T30] task:syz.0.527 state:D stack:25984 pid:7647 tgid:7646 ppid:5831 task_flags:0x400140 flags:0x00000004 [ 387.750997][ T30] Call Trace: [ 387.933396][ T30] [ 387.936396][ T30] __schedule+0x18bc/0x4c40 [ 387.940963][ T30] ? __pfx___schedule+0x10/0x10 [ 387.969853][ T9573] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 387.976500][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.002429][ T30] ? __pfx_lock_release+0x10/0x10 [ 388.007510][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 388.023412][ T9573] vhci_hcd vhci_hcd.0: Device attached [ 388.032486][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 388.038431][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.072792][ T30] ? schedule+0x90/0x320 [ 388.077101][ T30] schedule+0x14b/0x320 [ 388.081299][ T30] schedule_preempt_disabled+0x13/0x30 [ 388.229016][ T9581] siw: device registration error -23 [ 388.812219][ T30] __mutex_lock+0x817/0x1010 [ 388.816892][ T30] ? __mutex_lock+0x602/0x1010 [ 388.821690][ T30] ? bdev_open+0xf0/0xc50 [ 388.853901][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 388.865755][ T30] ? errseq_sample+0x40/0x70 [ 388.876042][ T30] ? alloc_file_pseudo_noaccount+0x2b2/0x3a0 [ 388.890287][ T30] ? disk_block_events+0xa9/0x120 [ 388.901922][ T30] ? bdev_open+0xb1/0xc50 [ 388.908518][ T30] bdev_open+0xf0/0xc50 [ 388.917962][ T30] ? iput+0x3be/0xa50 [ 388.922355][ T5896] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 388.929384][ T30] bdev_file_open_by_dev+0x1b0/0x220 [ 388.939352][ T30] bdev_file_open_by_path+0x1f9/0x480 [ 388.955026][ T9575] vhci_hcd: connection closed [ 388.957365][ T35] vhci_hcd: stop threads [ 388.959872][ T30] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 388.972185][ T35] vhci_hcd: release socket [ 388.977395][ T35] vhci_hcd: disconnect device [ 388.998986][ T30] ? dput+0x37/0x2b0 [ 389.012214][ T30] btrfs_scan_one_device+0x3c9/0xdd0 [ 389.032417][ T30] ? do_syscall_64+0xf3/0x230 [ 389.052224][ T30] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 389.085160][ T30] btrfs_get_tree+0x33b/0x1a30 [ 389.090015][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 389.115902][ T30] ? __pfx_btrfs_get_tree+0x10/0x10 [ 389.122006][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 389.152436][ T30] ? rcu_is_watching+0x15/0xb0 [ 389.157418][ T30] vfs_get_tree+0x90/0x2b0 [ 389.167654][ T30] fc_mount+0x1b/0xb0 [ 389.176214][ T30] btrfs_get_tree+0x6b1/0x1a30 [ 389.186955][ T30] ? rcu_is_watching+0x15/0xb0 [ 389.197438][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 389.212558][ T30] ? generic_parse_monolithic+0xe9/0x400 [ 389.218252][ T30] ? __pfx_btrfs_get_tree+0x10/0x10 [ 389.242409][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 389.247769][ T30] ? rcu_is_watching+0x15/0xb0 [ 389.262249][ T30] ? cap_capable+0x139/0x450 [ 389.266906][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 389.272817][ T30] vfs_get_tree+0x90/0x2b0 [ 389.277232][ T30] do_new_mount+0x2be/0xb40 [ 389.281727][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 389.286918][ T30] __se_sys_mount+0x2d6/0x3c0 [ 389.291632][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.298126][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 389.324217][ T30] ? do_syscall_64+0x100/0x230 [ 389.329074][ T30] ? __x64_sys_mount+0x20/0xc0 [ 389.333964][ T30] do_syscall_64+0xf3/0x230 [ 389.338700][ T30] ? clear_bhb_loop+0x35/0x90 [ 389.343511][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.357264][ T30] RIP: 0033:0x7f9571b8cde9 [ 389.361727][ T30] RSP: 002b:00007f956f9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.372305][ T30] RAX: ffffffffffffffda RBX: 00007f9571da5fa0 RCX: 00007f9571b8cde9 [ 389.389331][ T30] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000140 [ 389.401103][ T30] RBP: 00007f9571c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.415423][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.430540][ T30] R13: 0000000000000000 R14: 00007f9571da5fa0 R15: 00007fff4848d3a8 [ 389.442272][ T30] [ 389.445469][ T30] [ 389.445469][ T30] Showing all locks held in the system: [ 389.454937][ T30] 1 lock held by khungtaskd/30: [ 389.459899][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 389.470573][ T30] 2 locks held by kworker/u8:5/969: [ 389.476672][ T30] 3 locks held by kworker/u8:6/1860: [ 389.482076][ T30] 3 locks held by kworker/u8:7/2910: [ 389.509020][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 389.552198][ T30] #1: ffffc9000c12fc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 389.572374][ T30] #2: ffffffff8e93db80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 389.591571][ T30] 2 locks held by getty/5578: [ 389.596638][ T30] #0: ffff88814e7480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.613771][ T30] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 389.624387][ T30] 1 lock held by udevd/5820: [ 389.631340][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 389.641125][ T30] 5 locks held by kworker/1:7/5896: [ 389.646681][ T30] #0: ffff888020ea0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 389.658478][ T30] #1: ffffc90004117c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 389.670781][ T30] #2: ffff888029c30190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 389.680068][ T30] #3: ffff888029c33510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 389.699829][ T30] #4: ffff888145b57f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 389.728875][ T30] 2 locks held by syz.0.527/7647: [ 389.741824][ T30] #0: ffffffff8eec43c8 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree+0x309/0x1a30 [ 389.761037][ T30] #1: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 389.770720][ T30] 1 lock held by syz.4.724/8608: [ 389.782242][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.791724][ T30] 1 lock held by syz.4.724/8610: [ 389.807408][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.820534][ T30] 1 lock held by syz.4.724/8611: [ 389.837067][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.855607][ T30] 1 lock held by syz.4.724/8613: [ 389.860578][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.881801][ T30] 1 lock held by syz.4.724/8616: [ 389.887187][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.902586][ T30] 1 lock held by syz.4.724/8618: [ 389.907570][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.927134][ T30] 1 lock held by syz.4.724/8619: [ 389.954129][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.971938][ T30] 1 lock held by syz.4.724/8620: [ 389.977579][ T30] #0: ffff8881433864c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 389.992240][ T30] 4 locks held by syz.6.992/9528: [ 390.001491][ T30] [ 390.009205][ T30] ============================================= [ 390.009205][ T30] [ 390.032494][ T30] NMI backtrace for cpu 0 [ 390.032511][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 390.032529][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 390.032539][ T30] Call Trace: [ 390.032545][ T30] [ 390.032552][ T30] dump_stack_lvl+0x241/0x360 [ 390.032583][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.032607][ T30] ? __pfx__printk+0x10/0x10 [ 390.032640][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 390.032663][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 390.032678][ T30] ? _printk+0xd5/0x120 [ 390.032699][ T30] ? __pfx__printk+0x10/0x10 [ 390.032720][ T30] ? __wake_up_klogd+0xcc/0x110 [ 390.032738][ T30] ? __pfx__printk+0x10/0x10 [ 390.032761][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 390.032782][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 390.032801][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 390.032822][ T30] watchdog+0x1058/0x10a0 [ 390.032843][ T30] ? watchdog+0x1ea/0x10a0 [ 390.032867][ T30] ? __pfx_watchdog+0x10/0x10 [ 390.032886][ T30] kthread+0x7a9/0x920 [ 390.032905][ T30] ? __pfx_kthread+0x10/0x10 [ 390.032926][ T30] ? __pfx_watchdog+0x10/0x10 [ 390.032945][ T30] ? __pfx_kthread+0x10/0x10 [ 390.032963][ T30] ? __pfx_kthread+0x10/0x10 [ 390.032985][ T30] ? __pfx_kthread+0x10/0x10 [ 390.033003][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.033021][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 390.033040][ T30] ? __pfx_kthread+0x10/0x10 [ 390.033060][ T30] ret_from_fork+0x4b/0x80 [ 390.033077][ T30] ? __pfx_kthread+0x10/0x10 [ 390.033097][ T30] ret_from_fork_asm+0x1a/0x30 [ 390.033127][ T30] [ 390.033133][ T30] Sending NMI from CPU 0 to CPUs 1: [ 390.206854][ C1] NMI backtrace for cpu 1 [ 390.206870][ C1] CPU: 1 UID: 0 PID: 5808 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 390.206889][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 390.206898][ C1] RIP: 0010:kasan_check_range+0x56/0x290 [ 390.206923][ C1] Code: fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 4d 89 c1 49 c1 e9 03 <49> be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 [ 390.206937][ C1] RSP: 0018:ffffc90000a18818 EFLAGS: 00000803 [ 390.206952][ C1] RAX: 0000000000000001 RBX: 1ffffffff2858d08 RCX: ffffffff819b310a [ 390.206964][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c6840 [ 390.206975][ C1] RBP: 000000000001ffff R08: ffffffff942c6847 R09: 1ffffffff2858d08 [ 390.206986][ C1] R10: dffffc0000000000 R11: fffffbfff2858d08 R12: ffff88803517a8d4 [ 390.206998][ C1] R13: dffffc0000000000 R14: 0000000000000100 R15: ffff88803517a918 [ 390.207009][ C1] FS: 0000555590c07500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 390.207023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.207034][ C1] CR2: 0000001b2f80bff8 CR3: 000000007afa4000 CR4: 00000000003526f0 [ 390.207049][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.207059][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.207069][ C1] Call Trace: [ 390.207074][ C1] [ 390.207080][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 390.207099][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 390.207120][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 390.207143][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 390.207160][ C1] ? nmi_handle+0x14f/0x5a0 [ 390.207187][ C1] ? nmi_handle+0x2a/0x5a0 [ 390.207208][ C1] ? kasan_check_range+0x56/0x290 [ 390.207225][ C1] ? default_do_nmi+0x63/0x160 [ 390.207241][ C1] ? exc_nmi+0x123/0x1f0 [ 390.207256][ C1] ? end_repeat_nmi+0xf/0x53 [ 390.207280][ C1] ? mark_lock+0x9a/0x360 [ 390.207300][ C1] ? kasan_check_range+0x56/0x290 [ 390.207318][ C1] ? kasan_check_range+0x56/0x290 [ 390.207337][ C1] ? kasan_check_range+0x56/0x290 [ 390.207355][ C1] [ 390.207360][ C1] [ 390.207367][ C1] mark_lock+0x9a/0x360 [ 390.207388][ C1] __lock_acquire+0xc3e/0x2100 [ 390.207412][ C1] lock_acquire+0x1ed/0x550 [ 390.207430][ C1] ? debug_object_deactivate+0x158/0x390 [ 390.207451][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 390.207472][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 390.207492][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.207514][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 390.207532][ C1] ? debug_object_deactivate+0x158/0x390 [ 390.207550][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 390.207567][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 390.207587][ C1] debug_object_deactivate+0x158/0x390 [ 390.207605][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 390.207627][ C1] ? slab_free_after_rcu_debug+0x11a/0x280 [ 390.207644][ C1] rcu_core+0xa30/0x17a0 [ 390.207670][ C1] ? __pfx_rcu_core+0x10/0x10 [ 390.207690][ C1] ? __run_timer_base+0x178/0x8e0 [ 390.207708][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 390.207731][ C1] ? mark_lock+0x9a/0x360 [ 390.207752][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 390.207772][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.207791][ C1] ? sched_clock_cpu+0x76/0x490 [ 390.207817][ C1] handle_softirqs+0x2d4/0x9b0 [ 390.207835][ C1] ? do_softirq+0x11b/0x1e0 [ 390.207850][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 390.207868][ C1] do_softirq+0x11b/0x1e0 [ 390.207881][ C1] [ 390.207886][ C1] [ 390.207892][ C1] ? __pfx_do_softirq+0x10/0x10 [ 390.207915][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 390.207935][ C1] ? rcu_is_watching+0x15/0xb0 [ 390.207959][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 390.207982][ C1] ? tcp_recvmsg+0x23c/0x920 [ 390.208001][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 390.208028][ C1] tcp_recvmsg+0x23c/0x920 [ 390.208049][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 390.208072][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 390.208087][ C1] ? inet_recvmsg+0xde/0x2d0 [ 390.208103][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 390.208122][ C1] inet_recvmsg+0x150/0x2d0 [ 390.208139][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 390.208156][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 390.208185][ C1] sock_recvmsg+0x1ae/0x280 [ 390.208206][ C1] sock_read_iter+0x2c4/0x3d0 [ 390.208225][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 390.208246][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 390.208265][ C1] vfs_read+0x975/0xb40 [ 390.208290][ C1] ? __pfx_vfs_read+0x10/0x10 [ 390.208314][ C1] ? rcu_is_watching+0x15/0xb0 [ 390.208341][ C1] ksys_read+0x18f/0x2b0 [ 390.208356][ C1] ? __pfx_ksys_read+0x10/0x10 [ 390.208370][ C1] ? do_syscall_64+0x100/0x230 [ 390.208392][ C1] ? do_syscall_64+0xb6/0x230 [ 390.208413][ C1] do_syscall_64+0xf3/0x230 [ 390.208434][ C1] ? clear_bhb_loop+0x35/0x90 [ 390.208456][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.208476][ C1] RIP: 0033:0x7f1a5238b7bd [ 390.208490][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 81 1d 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 390.208503][ C1] RSP: 002b:00007ffff82e27c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.208518][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1a5238b7bd [ 390.208529][ C1] RDX: 0000000000000004 RSI: 00007ffff82e27dc RDI: 0000000000000003 [ 390.208539][ C1] RBP: 0000000000000000 R08: 000000002088705a R09: 7fffffffffffffff [ 390.208550][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff82e2bf0 [ 390.208560][ C1] R13: 0000000000000004 R14: 00007ffff82e27dc R15: 00007ffff82e2870 [ 390.208577][ C1] [ 390.810501][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 390.817392][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 390.827903][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 390.837972][ T30] Call Trace: [ 390.841257][ T30] [ 390.844189][ T30] dump_stack_lvl+0x241/0x360 [ 390.848975][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.854191][ T30] ? __pfx__printk+0x10/0x10 [ 390.858789][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 390.864769][ T30] ? vscnprintf+0x5d/0x90 [ 390.869089][ T30] panic+0x349/0x880 [ 390.873065][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 390.879212][ T30] ? __pfx_panic+0x10/0x10 [ 390.883632][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 390.889013][ T30] ? __irq_work_queue_local+0x137/0x410 [ 390.894561][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 390.899935][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 390.906082][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 390.912240][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 390.918405][ T30] watchdog+0x1097/0x10a0 [ 390.922728][ T30] ? watchdog+0x1ea/0x10a0 [ 390.927135][ T30] ? __pfx_watchdog+0x10/0x10 [ 390.931808][ T30] kthread+0x7a9/0x920 [ 390.935880][ T30] ? __pfx_kthread+0x10/0x10 [ 390.940465][ T30] ? __pfx_watchdog+0x10/0x10 [ 390.945138][ T30] ? __pfx_kthread+0x10/0x10 [ 390.949722][ T30] ? __pfx_kthread+0x10/0x10 [ 390.954301][ T30] ? __pfx_kthread+0x10/0x10 [ 390.958877][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.964092][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 390.969284][ T30] ? __pfx_kthread+0x10/0x10 [ 390.973866][ T30] ret_from_fork+0x4b/0x80 [ 390.978289][ T30] ? __pfx_kthread+0x10/0x10 [ 390.982875][ T30] ret_from_fork_asm+0x1a/0x30 [ 390.987642][ T30] [ 390.990915][ T30] Kernel Offset: disabled [ 390.995233][ T30] Rebooting in 86400 seconds..