last executing test programs: 16m17.692512161s ago: executing program 4 (id=25): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) rseq(0x0, 0x0, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x4fa6, @empty, 0x7}}, 0x4, 0xdbf, 0x5, 0x9, 0x4, 0x8, 0x3}, &(0x7f0000000040)=0x9c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 16m10.127055718s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000011000000"], 0x24}}, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000001480)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80140, 0x1d) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x1) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0xdbfc90b32760784e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="18009418b13468198e3c620018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09332a1da2b10000000000005509010000000000950000000000000018350000040000008035200008000000bf91000000000000b7020000020000008500000084000000b7000000000000009500"/133], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x15, &(0x7f0000000400)=""/21, 0x41100, 0x48, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000680)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x10000, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r5, r5], &(0x7f0000000880), 0x10, 0x4, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x72) 16m8.758575673s ago: executing program 4 (id=35): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076000d4b25bd70000000000003f200000000000108000a"], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x80000001) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@default, @remote, @remote, @rose, @netrom, @netrom, @netrom]}, &(0x7f0000000200)=0x48) accept$ax25(r4, &(0x7f00000003c0)={{}, [@rose, @default, @netrom, @rose, @rose, @netrom]}, &(0x7f0000000440)=0x48) accept4$ax25(r4, &(0x7f00000004c0)={{0x3, @null}, [@remote, @netrom, @bcast, @bcast, @rose, @netrom, @rose]}, &(0x7f00000002c0)=0x48, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c00000075cacd84a14ddd12154ad813a673ff29bc08a74c004f72537bebd780cd96e684879aa690db7bcbc8853c1655d81daaeec0cd30520a08ce87f4f347ff9d42cde2cc654ad14dc640f33cee5e0abec2545be986282d5aa4b9fa2f53105d5873248b8b72bac774ff296d07cfdf79d87bc5", @ANYBLOB="855b7d813e707e5bf3a182d8c823f9303cf227acf893d09921a09fe06cbf3768bfec544a46c091ffab17050996886d65ff48988e3726ece17392d2d865954106186ddd16e789c36ca75b3e17edd8f71522fb6e2b7f0cf2ca1da7f4c5a855bb7446bc7f304efdec8396da5d72ab56fbeeef7d9631bf2c0b139ba0b0d2d81629998a1404dcec780dbbbdb86437639bd53577d715f6d8bd3f2478b59e71bfb60580cd85a5bd471763522055d851e0579b6ffd29604edc3b8e45965da9745d7a2e4efdabe6df6a70478ce56ae9c12d56ee0585973df1ef954ddb6d662b15068fa011f7156ce98262", @ANYBLOB="050029bd7000000000004400f80008000300", @ANYRES32=r9, @ANYBLOB="0a001800030303030303000034002380050005000a000000080009000200000008001a000300"], 0x5c}}, 0x40010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r12, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r15, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r16, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x58, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x200, 0x36}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4b}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1e1f, 0x68}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 16m7.708560597s ago: executing program 4 (id=40): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000280)={0x20, 0x23, 0x30, {0x30, 0x7e8e703122aff25f, "682f0e555b6a587b42f78d07b1826d455cfb6b9daedaf68961c61926f551b49eff72cb8f284cfe263ded424c45c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x5a5, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x63, 0x7, 0x59, 0x40, 0x30}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x0, 0x6}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x410}}]}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x500000, 0x0) write$char_usb(r4, &(0x7f0000000880)="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", 0x1000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "a2d0378a42aa3b5a", "f4433a90e46cf107c720504e1c52960c", "99afd84b", "6301f96c9335ba21"}, 0x28) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="61ea935ac46ea5fb01136a4893a6239a30d6076166856fae42df149d21114508656ec3839452fdc5a2014fe68a8bed5bce9eb93e5f836a7063e41a9ce90636b8864c40ac13"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m3.902869524s ago: executing program 4 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xea, &(0x7f0000000500)=""/234, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x2040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c804}, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x4000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r2 = fanotify_init(0x4, 0x0) fanotify_mark(r2, 0x1, 0x40000011, r1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_async', 0x101581, 0x100) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) write$tcp_mem(r4, &(0x7f0000000540)={0xffffffff7fffffff, 0x20, 0x0, 0x20, 0x4}, 0x48) memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 16m2.014619922s ago: executing program 4 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xf, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r1, 0xffffffffffffffff, 0x0) 15m46.992455169s ago: executing program 32 (id=53): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) rseq(0x0, 0x0, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$kcm(0x10, 0x2, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x4fa6, @empty, 0x7}}, 0x4, 0xdbf, 0x5, 0x9, 0x4, 0x8, 0x3}, &(0x7f0000000040)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 15m46.657373539s ago: executing program 33 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xf, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r1, 0xffffffffffffffff, 0x0) 13m45.334077982s ago: executing program 1 (id=269): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) setgid(r0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000000040)=0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000003a"]) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000010ac05360240000102030109021e0001010140780904000202030102"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 13m40.621570181s ago: executing program 1 (id=277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)={0x1}) r2 = dup(0xffffffffffffffff) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(r2, 0x7d29, 0xd853, 0x1, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) readahead(r4, 0x0, 0x0) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 13m36.748717581s ago: executing program 1 (id=281): syz_usb_connect(0x4, 0x24, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x23, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x275, @private1, 0x80000000}], 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LL', 0x2, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30"], 0xe8}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f00003b7000/0x4000)=nil, 0x4000, 0x1004003}) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x80) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13m31.974416969s ago: executing program 1 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setpriority(0x2, 0x0, 0x3ff) mq_notify(r2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 13m29.44262878s ago: executing program 1 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1300) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$smackfs_load(0xffffffffffffffff, &(0x7f0000002a80)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x36) openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004bc0), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000340)={0x2, 0x0, 0x6, 0x14, 0xb9, &(0x7f00000009c0)="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"}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) 13m27.058817093s ago: executing program 1 (id=297): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xfffffffffffffffe, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x4, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 13m10.835632798s ago: executing program 34 (id=297): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xfffffffffffffffe, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x4, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 11m36.72356006s ago: executing program 5 (id=470): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r5, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000200)={@remote, @random="0000dcf6177a", @void, {@mpls_uc={0x8864, {[], @llc={@llc={0xaa, 0xdc, 'T'}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, '\x00', '\x00', '\x00', 0x3}) 11m27.227474847s ago: executing program 5 (id=489): syz_usb_connect(0x4, 0x24, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x23, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x275, @private1, 0x80000000}], 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LL', 0x2, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001000010000000000000000000000000a"], 0xe8}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f00003b7000/0x4000)=nil, 0x4000, 0x1004003}) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x80) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11m22.499196322s ago: executing program 5 (id=496): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x200000100000011, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x3}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000001480)}}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4008af04, &(0x7f0000000280)=0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 11m16.652351047s ago: executing program 5 (id=504): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f00000001c0)={0x0, 0x97a8, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m12.547065305s ago: executing program 5 (id=510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06055c8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x80) 11m10.624905544s ago: executing program 5 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1661, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket(0x840000000002, 0x3, 0xff) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) fanotify_init(0x200, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xffff8b97}, 0x1c) sendmmsg$inet6(r4, &(0x7f000000afc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="b5e893", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001940)="d4", 0x1}], 0x1}}], 0x2, 0x20080) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 10m58.631550659s ago: executing program 7 (id=527): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000380)={{r1, 0x8001, 0x9, 0xffff, 0x8, 0x8, 0x8000000000000001, 0xb, 0x8, 0x61, 0xfff, 0x8, 0x7fff, 0x4, 0x436}, 0x20, [0x0, 0x0, 0x0, 0x0]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x1, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000845) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r6 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) read$msr(r0, &(0x7f0000000500)=""/96, 0x60) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r8, &(0x7f0000000580)='./file0\x00') 10m56.133450132s ago: executing program 7 (id=530): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c64d1, &(0x7f0000000000)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000001c0)={0x0, 0x9, 0xa929, 0x4, 0x4, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 10m55.114301315s ago: executing program 35 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1661, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket(0x840000000002, 0x3, 0xff) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) fanotify_init(0x200, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xffff8b97}, 0x1c) sendmmsg$inet6(r4, &(0x7f000000afc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="b5e893", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001940)="d4", 0x1}], 0x1}}], 0x2, 0x20080) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 10m52.467763277s ago: executing program 7 (id=537): gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}]}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 10m46.662733028s ago: executing program 7 (id=544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x2, 0x4, 0x0, 0x8000, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0xfb, 0x800, 0x7}]}}}}}}}}, 0x0) 10m46.210975273s ago: executing program 7 (id=545): socket$inet(0xa, 0x801, 0x84) socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) open(0x0, 0x169042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) creat(&(0x7f0000000000)='./file0\x00', 0x2a) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0xe2, 0x3}}, 0x28) waitid(0x0, r6, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r6, 0x0, 0x4, 0x0) keyctl$link(0x8, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x800) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000100)) 10m44.301034395s ago: executing program 7 (id=546): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c64d1, &(0x7f0000000000)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000001c0)={0x0, 0x9, 0xa929, 0x4, 0x4, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 10m28.581499172s ago: executing program 36 (id=546): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c64d1, &(0x7f0000000000)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000001c0)={0x0, 0x9, 0xa929, 0x4, 0x4, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 8m13.740519882s ago: executing program 8 (id=798): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x5}) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x4000423) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x800000000000002, 0x1000) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6000000}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x3c}}, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r9, &(0x7f00000000c0)=""/4092, 0xffc) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x8}]}}}]}, 0x40}}, 0x4000080) 8m10.529332516s ago: executing program 8 (id=804): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b39373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d336d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1011}}, 0x1006) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000029c0)={0x8, 0x2b50, {r3}, {r2}, 0xdf0e, 0x8}) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/mnt\x00') 8m7.138997287s ago: executing program 8 (id=811): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) rseq(0x0, 0x0, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x24060400) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 8m4.211430566s ago: executing program 8 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x21adc51, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic='\r', @generic="198eaad0b8a7e56d7bd9", @typed={0x4}, @generic="93"]}]}, 0x38}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x0, 0x0, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8m0.613815539s ago: executing program 8 (id=823): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000"], 0x0) timer_create(0x9, 0x0, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000280)={0x20, 0x23, 0x30, {0x30, 0x7e8e703122aff25f, "682f0e555b6a587b42f78d07b1826d455cfb6b9daedaf68961c61926f551b49eff72cb8f284cfe263ded424c45c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x5a5, &(0x7f0000001e40)=ANY=[@ANYBLOB="12010102f50364403c413881aa3501020301090293050208fd20060904a9090e33e76f010905080c100080870a072501c005ff7f090504020002010eb809050a030002b70601072501020408000725010306020009050500ff0360400109050800ff0301050b9a31355452972cfb3755ef8330a759ababfbc8bb6ad1ada80bc6bec9df7161285e0070569f88cb6047f4a32cd101f882ad2fddab84ddbb8c5b2f8447325d8ecd04695467c696e37f9c0ae342e5116d311fbef380997b04e2df95dd2e4c822571715437217041211014cb4cdd2552749cdbfd0abc720738241f43c661b9d06e5e660dde824676c22d2644576b3a5ce75e5f9db50ca392681b37c50905000010000006f507250101ff0200bc08587094ae64b9c7fa8b5a2c20c0165434292d29c1007383f4d79ef907d354a5cf67a21dd9ec0140095dcd9f6e949326150c9735cf3d9a15d39f0f045db0562edf1b94e8312e50fdd1ec03a94bea163ccc764db536b37310266320c919928fd41eb1f9e0e9646c47a3609e09b9f8a5e592a1f6b80b3657f875362f3f45e400f8039072908491e2694e214fc2312cfcf91ae2302b19e2e20f63bdf54f63059b891d3bd7a6160e3aba70054eb15f575d8d3e583c72bece3588c8cd4509050010200008040709050200ff03060905f5014d743bc1cdeb7f44d19340ca017115681314945450f40bd28b4e51716aff5f61d4c062079c41df6fda4bceee66b56d26f2ea82e107e25e2b2fda36f5367a1a30a3f0d7b6cc123aa86ae0b448009e6b9b847ecc38e64419407ddf1ca622c14e36fe4737882d1b866e098002cc2ec0a1caf2f6f8f9b4294965a013986bb01dbfaae3fb9d1997e4f3d087d65a7765ca359d3c553f658099d65c5f199f6aa4382a39e5c527b18c1abf3da47f698ad7a7f5e39d9bfdc78bedd62287d4c0c42efa898d91762ee16e81af143220b258d90bbc1b04c04f7a5b90b74c15773d0b7521bd60db83a780fdbd6fd42dcfffde5cc28f975c02312287991fe18a1b6e090503000800050074072501820e09004408878c3a7256ac2122709ef5ef7df5b0709c4a5ed3e37826a0cc58d0fccc783bd3688aca645a84f823bdf4bb1c5759894750bd481abfcaacabf15028a6e19a29401920090502020002070500090502022000030a2b8911d44f71d7b150f6eba06750984cac836d7adb9b2911e14e1deb18583e6cacb3d410f7a772d1c7e78c5a5c3e0479b230f0601589e94bdebe965efbfbd776a4c0c375e51332ea571531ed200aab34bca7540f27bcd0839c01c46eb09c42e3531ae2be259b95a238db8eafaf62fd2ba8b56e64972a68ea129f5baef04d0a74a506ca8c1d0d55262fd609050810000410020509050103100004077f090503002000050404090447060dffffff0c0e24020105010e090f43e9676e10072401be800110102402020500ff07077740482d26002c0824020109040300072401090e01100905060008000500ccfa225a8c4c0f9a0c0208fbafa4a77508baf13f7c4373d3b00a3418b6373b0a79357ca8eb5d8a5a22a20fa959b556b6edd451865c1cd54c67d54ef7c8bc4ee577cb6e51e4ca7ceb311867d3f7d71b3914f5060df0a4e142e435fedbe733f43e59cae03232e87b3b0e294ef36ccd84ae61c1e7758cc736f2649a546e5d38343becee400cce2135d2a684ffb24bef4a3a1766398303ddfa293661c42ffd4aad9b097698f0711c98f2babe4e65aaee13c1dd515e906700f8fa3fdef49aedf1cb792e8ee3ca225e84cbedd5aee991c0ffaa6b7073a87faf78c110f316ab32142251fff87e51424b9ab1b730c9f91e19a71eceb5ba3ad004f654b2d36809050a0140020809060905041000020409090725010008030009050501400002f95c09050500ef03000103072501010288be090500104000737e040725010207000009050210080018084b09050b02080002407609050400ff038a070607250103fc0004090504040004000807090507081000070407090505032000f800780905020c400004030c"], &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x63, 0x7, 0x59, 0x40, 0x30}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x0, 0x6}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x410}}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x500000, 0x0) write$char_usb(r5, &(0x7f0000000880)="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", 0x1000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "a2d0378a42aa3b5a", "f4433a90e46cf107c720504e1c52960c", "99afd84b", "6301f96c9335ba21"}, 0x28) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="61ea935ac46ea5fb01136a4893a6239a30d6076166856fae42df149d21114508656ec3839452fdc5a2014fe68a8bed5bce9eb93e5f836a7063e41a9ce90636b8864c40ac13"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m59.403591367s ago: executing program 8 (id=827): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000050000000000000000000013a2594237ca9e5637ce4a1e534942308837f54aedaea992610be425596946d01720046a334f8b4850a00824785aca"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f040000000000005504000001ed0aff2400000017ffffffcc40000000000000730a00fe00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaad61, 0x20, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008604"]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x280100, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20044000) listen(r6, 0x5) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000440)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 7m57.013206909s ago: executing program 37 (id=827): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000050000000000000000000013a2594237ca9e5637ce4a1e534942308837f54aedaea992610be425596946d01720046a334f8b4850a00824785aca"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f040000000000005504000001ed0aff2400000017ffffffcc40000000000000730a00fe00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaad61, 0x20, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008604"]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x280100, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20044000) listen(r6, 0x5) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000440)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 23.249194267s ago: executing program 0 (id=1889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x4, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000300)={0x28, 0x6, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r6, 0x0, 0x2fff, 0x1, &(0x7f0000000340)="f6", 0x5}) 22.170069006s ago: executing program 9 (id=1892): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x4, 0x101801) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 20.861352428s ago: executing program 9 (id=1893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)="0033b6034b136b6826e2bdd33180c63c5ce810086da8cf417a995aef70d6418f966313e952b83ad849dd3aeb119cb9e97b4a9d37caa4c952dd121ec9776bfd58617a8b50d604dd4ffd53c737b73eb166a1b23d84da5da6c2f4ede1a122fd04915c93", 0x62}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r3], 0x8) 18.728474305s ago: executing program 9 (id=1897): madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}]}}) 14.754672433s ago: executing program 0 (id=1904): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x0) 14.684594882s ago: executing program 3 (id=1905): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x4, 0x101801) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13.85597447s ago: executing program 3 (id=1906): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r1, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x4, 0x101801) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) read$FUSE(r5, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13.141255645s ago: executing program 3 (id=1908): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x4, 0x101801) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 11.716610953s ago: executing program 3 (id=1911): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x597}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x1c16, &(0x7f00000004c0)={0x0, 0x18e9, 0x100, 0x2, 0x24c}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, r2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) r4 = userfaultfd(0x801) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000003c0)={&(0x7f000030b000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x406, r5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 9.386282166s ago: executing program 9 (id=1915): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.646192081s ago: executing program 3 (id=1916): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe40400000056bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a05cbee30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c3157f00000000000000a06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630000000002232017810e743bdaf879946547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e6dafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e097585ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb50409fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4d8521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060fd2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3bca426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db00000000000001f915268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde000006c06d4d551e81ee73459cf1c00000000000000000000628a663ed417be6ff5b172cba4a1ec629a39ec253c087b1e9ce84e25b8717ae8581bf28c16a8bbda8d69358e885ddf5387e419c64847b8953070cdefe7d6a35197638e929f8f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x7ffd, [0x1, 0x4], 0x3}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 8.407092664s ago: executing program 6 (id=1917): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x4, 0x101801) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0200bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.714556773s ago: executing program 9 (id=1919): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r1, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x4, 0x101801) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) read$FUSE(r5, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.68625833s ago: executing program 6 (id=1920): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 6.499632068s ago: executing program 2 (id=1921): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f00000013c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r3 = memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00 \x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03&`\xd5\xe7\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x98(\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\xba\xb4+v\xb7i\a\x7f\v(\x11>\x9b\x1c\xd7', 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x0, [{0x8, 0xfffffffd}, {0x9}, {}, {0x10000000, 0x6}, {}, {0x400000, 0xfffffffe}, {0xffffffff, 0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) unshare(0x2c020400) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000240), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) 6.21655207s ago: executing program 2 (id=1922): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, 0x0, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000140)=ANY=[], 0x2b, r3) ioprio_set$uid(0x64e25c6620fde0c3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000240)=[{0xfff2, 0x8, 0x9, 0xffffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r4, 0x2}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000100", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x7378b51ddbf67cf8, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x76b3}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x4004000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 6.159173822s ago: executing program 6 (id=1923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000380)='V', 0x1}], 0x1) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 6.004847792s ago: executing program 2 (id=1924): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x4, 0x101801) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.947141615s ago: executing program 6 (id=1925): openat$tun(0xffffffffffffff9c, 0x0, 0x20500, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3dc, 0x9, 0x1, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f00000002c0)=0x9c) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.871087356s ago: executing program 0 (id=1926): vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f00000000c0)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) recvmsg(r7, &(0x7f000000a8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) 4.982194153s ago: executing program 2 (id=1927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)="0033b6034b136b6826e2bdd33180c63c5ce810086da8cf417a995aef70d6418f966313e952b83ad849dd3aeb119cb9e97b4a9d37caa4c952dd121ec9776bfd58617a8b50d604dd4ffd53c737b73eb166a1b23d84da5da6c2f4ede1a122fd04915c93", 0x62}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r3], 0x8) 4.043146879s ago: executing program 3 (id=1928): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x597}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x1c16, &(0x7f00000004c0)={0x0, 0x18e9, 0x100, 0x2, 0x24c}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, r2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) r4 = userfaultfd(0x801) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000003c0)={&(0x7f000030b000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x406, r5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.912132096s ago: executing program 0 (id=1929): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.757248013s ago: executing program 2 (id=1930): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x4, 0x101801) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) read$FUSE(r3, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.571031922s ago: executing program 0 (id=1931): vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f00000000c0)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) setreuid(0x0, 0xee00) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) recvmsg(r7, &(0x7f000000a8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) 2.543715606s ago: executing program 6 (id=1932): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f00000013c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r3 = memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00 \x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03&`\xd5\xe7\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x98(\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\xba\xb4+v\xb7i\a\x7f\v(\x11>\x9b\x1c\xd7', 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x0, [{0x8, 0xfffffffd}, {0x9}, {}, {0x10000000, 0x6}, {}, {0x400000, 0xfffffffe}, {0xffffffff, 0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) unshare(0x2c020400) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000240), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) 1.625776056s ago: executing program 2 (id=1933): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.361935097s ago: executing program 6 (id=1934): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0c00018008000000", @ANYRES32=0x0, @ANYBLOB="a027c15fe75692974d472649c0651ffbd5e51573395d8b456d75d0daa51b324fb89e53173b07d3eb87be683cc96ddf6891a29f64039473a5b264b532bc01786ba0c7917e38ede8efe839a0b6ab78927c7133088b70abae6e049e4e3e7a1c1a099f8ee82b21560a15fcd5d0f09b3e16d1bbbf9ccf7b1a6b9ea00271091769e7861ce3d650c3d01165c86fd04b188c103e3b718cff447199f935e4391d082041a53824e76dc25085e31f34087e6622288449a2f691508496fd8c8379df9135282538ce8388eb41747415b488e7838301eac791a3044f882296a14362ec88eeac686956"], 0x24}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4, 0xffffffff}}, 0x2e) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4367000000fa4b69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r5, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0xbfd1, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x15d) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) 453.63097ms ago: executing program 9 (id=1935): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, 0x0, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000140)=ANY=[], 0x2b, r3) ioprio_set$uid(0x64e25c6620fde0c3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000240)=[{0xfff2, 0x8, 0x9, 0xffffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r4, 0x2}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000100", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x7378b51ddbf67cf8, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x76b3}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x4004000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 0s ago: executing program 0 (id=1936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): type=1326 audit(1738510738.170:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 697.437334][ T29] audit: type=1326 audit(1738510738.170:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 697.697733][ T29] audit: type=1326 audit(1738510738.170:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 697.730426][ T29] audit: type=1326 audit(1738510738.170:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 697.761493][ T29] audit: type=1326 audit(1738510738.170:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 697.805667][ T29] audit: type=1326 audit(1738510738.170:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 697.834424][ T29] audit: type=1326 audit(1738510738.170:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 697.860859][ T9567] FAULT_INJECTION: forcing a failure. [ 697.860859][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 697.889415][ T5956] usb 3-1: USB disconnect, device number 30 [ 697.912788][ T9567] CPU: 1 UID: 0 PID: 9567 Comm: syz.0.960 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 697.912821][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 697.912882][ T9567] Call Trace: [ 697.912892][ T9567] [ 697.912900][ T9567] dump_stack_lvl+0x241/0x360 [ 697.912932][ T9567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.913006][ T9567] ? __pfx__printk+0x10/0x10 [ 697.913030][ T9567] ? fs_reclaim_acquire+0x93/0x130 [ 697.913055][ T9567] ? __pfx___might_resched+0x10/0x10 [ 697.913074][ T9567] should_fail_ex+0x40a/0x550 [ 697.913095][ T9567] should_failslab+0xac/0x100 [ 697.913115][ T9567] __kmalloc_noprof+0xdd/0x4c0 [ 697.913134][ T9567] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 697.913161][ T9567] tomoyo_realpath_from_path+0xcf/0x5e0 [ 697.913194][ T9567] tomoyo_path2_perm+0x396/0xbb0 [ 697.913212][ T9567] ? mark_lock+0x9a/0x360 [ 697.913236][ T9567] ? tomoyo_path2_perm+0x364/0xbb0 [ 697.913255][ T9567] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 697.913299][ T9567] ? current_check_refer_path+0x9dc/0xd60 [ 697.913325][ T9567] tomoyo_path_rename+0x16b/0x1e0 [ 697.913342][ T9567] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 697.913369][ T9567] security_path_rename+0x266/0x4e0 [ 697.913392][ T9567] do_renameat2+0x94a/0x13f0 [ 697.913430][ T9567] ? __pfx_do_renameat2+0x10/0x10 [ 697.913451][ T9567] ? __virt_addr_valid+0x183/0x530 [ 697.913472][ T9567] ? __virt_addr_valid+0x183/0x530 [ 697.913494][ T9567] ? __check_object_size+0x47a/0x730 [ 697.913521][ T9567] ? getname_flags+0x1e3/0x540 [ 697.913539][ T9567] ? do_syscall_64+0x100/0x230 [ 697.913561][ T9567] __x64_sys_renameat2+0xce/0xe0 [ 697.913580][ T9567] do_syscall_64+0xf3/0x230 [ 697.913600][ T9567] ? clear_bhb_loop+0x35/0x90 [ 697.913624][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.913645][ T9567] RIP: 0033:0x7fd1a278cda9 [ 697.913658][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.913671][ T9567] RSP: 002b:00007fd1a356d038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 697.913687][ T9567] RAX: ffffffffffffffda RBX: 00007fd1a29a5fa0 RCX: 00007fd1a278cda9 [ 697.913699][ T9567] RDX: ffffffffffffff9c RSI: 0000000020000480 RDI: ffffffffffffff9c [ 697.913709][ T9567] RBP: 00007fd1a356d090 R08: 0000000000000002 R09: 0000000000000000 [ 697.913719][ T9567] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 697.913728][ T9567] R13: 0000000000000000 R14: 00007fd1a29a5fa0 R15: 00007ffee6eecc28 [ 697.913750][ T9567] [ 697.913907][ T9567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 698.286062][ T29] audit: type=1326 audit(1738510738.170:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 698.321902][ T29] audit: type=1326 audit(1738510738.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 698.489704][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.9.961'. [ 700.307732][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.962'. [ 702.004263][ T5956] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 702.175593][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 702.217548][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.258922][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.358435][ T5956] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 702.709236][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.926522][ T5956] usb 1-1: config 0 descriptor?? [ 703.212793][ T9585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.275914][ T9585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.992386][ T5956] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 704.105872][ T5956] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 704.115360][ T5956] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -71 [ 704.166005][ T5956] usb 1-1: USB disconnect, device number 4 [ 704.339742][ T9608] 9pnet_fd: Insufficient options for proto=fd [ 704.448991][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.973'. [ 704.618109][ T9615] fuse: Bad value for 'fd' [ 708.417725][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.981'. [ 708.436181][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.9.981'. [ 709.540478][ T9654] 9pnet_fd: Insufficient options for proto=fd [ 714.197271][ T9693] FAULT_INJECTION: forcing a failure. [ 714.197271][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 714.393973][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.6.995 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 714.393997][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 714.394007][ T9693] Call Trace: [ 714.394012][ T9693] [ 714.394019][ T9693] dump_stack_lvl+0x241/0x360 [ 714.394053][ T9693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.394077][ T9693] ? __pfx__printk+0x10/0x10 [ 714.394100][ T9693] ? __kmalloc_cache_noprof+0x48/0x390 [ 714.394121][ T9693] ? __pfx___might_resched+0x10/0x10 [ 714.394141][ T9693] should_fail_ex+0x40a/0x550 [ 714.394161][ T9693] should_failslab+0xac/0x100 [ 714.394180][ T9693] __kmalloc_cache_noprof+0x70/0x390 [ 714.394199][ T9693] ? sctp_copy_one_addr+0x328/0x680 [ 714.394218][ T9693] sctp_copy_one_addr+0x328/0x680 [ 714.394236][ T9693] sctp_bind_addr_copy+0xad/0x3b0 [ 714.394251][ T9693] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 714.394276][ T9693] sctp_connect_new_asoc+0x2f3/0x6c0 [ 714.394298][ T9693] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 714.394316][ T9693] ? sctp_sendmsg+0xbb9/0x3520 [ 714.394337][ T9693] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 714.394355][ T9693] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 714.394373][ T9693] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 714.394391][ T9693] sctp_sendmsg+0x219a/0x3520 [ 714.394421][ T9693] ? __pfx_sctp_sendmsg+0x10/0x10 [ 714.394439][ T9693] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 714.394472][ T9693] ? inet_sendmsg+0x330/0x390 [ 714.394490][ T9693] __sock_sendmsg+0x1a6/0x270 [ 714.394511][ T9693] __sys_sendto+0x363/0x4c0 [ 714.394537][ T9693] ? __pfx___sys_sendto+0x10/0x10 [ 714.394566][ T9693] ? __fget_files+0x2a/0x410 [ 714.394592][ T9693] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 714.394613][ T9693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 714.394636][ T9693] __x64_sys_sendto+0xde/0x100 [ 714.394667][ T9693] do_syscall_64+0xf3/0x230 [ 714.394687][ T9693] ? clear_bhb_loop+0x35/0x90 [ 714.394711][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.394731][ T9693] RIP: 0033:0x7f462898cda9 [ 714.394745][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.394757][ T9693] RSP: 002b:00007f462985a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 714.394774][ T9693] RAX: ffffffffffffffda RBX: 00007f4628ba5fa0 RCX: 00007f462898cda9 [ 714.394785][ T9693] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000003 [ 714.394794][ T9693] RBP: 00007f462985a090 R08: 000000002005ffe4 R09: 000000000000001c [ 714.394804][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.394813][ T9693] R13: 0000000000000000 R14: 00007f4628ba5fa0 R15: 00007ffd4a07fa38 [ 714.394834][ T9693] [ 717.260931][ T9708] 9pnet_fd: Insufficient options for proto=fd [ 717.390138][ T9715] FAULT_INJECTION: forcing a failure. [ 717.390138][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 717.408664][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.9.1002 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 717.408697][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 717.408710][ T9715] Call Trace: [ 717.408717][ T9715] [ 717.408728][ T9715] dump_stack_lvl+0x241/0x360 [ 717.408769][ T9715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.408802][ T9715] ? __pfx__printk+0x10/0x10 [ 717.408837][ T9715] ? fs_reclaim_acquire+0x93/0x130 [ 717.408873][ T9715] ? __pfx___might_resched+0x10/0x10 [ 717.408901][ T9715] should_fail_ex+0x40a/0x550 [ 717.408930][ T9715] should_failslab+0xac/0x100 [ 717.408958][ T9715] __kmalloc_noprof+0xdd/0x4c0 [ 717.408985][ T9715] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 717.409018][ T9715] ? __lock_acquire+0x1397/0x2100 [ 717.409048][ T9715] tomoyo_realpath_from_path+0xcf/0x5e0 [ 717.409093][ T9715] tomoyo_check_open_permission+0x258/0x4f0 [ 717.409125][ T9715] ? tomoyo_check_open_permission+0x207/0x4f0 [ 717.409155][ T9715] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 717.409223][ T9715] ? do_raw_spin_unlock+0x13c/0x8b0 [ 717.409244][ T9715] ? tomoyo_file_open+0x165/0x220 [ 717.409270][ T9715] security_file_open+0xac/0x250 [ 717.409303][ T9715] do_dentry_open+0x320/0x1960 [ 717.409337][ T9715] ? vfs_open+0x31/0x370 [ 717.409368][ T9715] vfs_open+0x3b/0x370 [ 717.409404][ T9715] path_openat+0x2c81/0x3590 [ 717.409469][ T9715] ? __pfx_path_openat+0x10/0x10 [ 717.409524][ T9715] do_filp_open+0x27f/0x4e0 [ 717.409558][ T9715] ? __pfx_do_filp_open+0x10/0x10 [ 717.409588][ T9715] ? do_raw_spin_lock+0x14f/0x370 [ 717.409645][ T9715] do_sys_openat2+0x13e/0x1d0 [ 717.409675][ T9715] ? __pfx_do_sys_openat2+0x10/0x10 [ 717.409698][ T9715] ? __fget_files+0x2a/0x410 [ 717.409726][ T9715] ? __fget_files+0x2a/0x410 [ 717.409757][ T9715] __x64_sys_openat+0x247/0x2a0 [ 717.409787][ T9715] ? __pfx___x64_sys_openat+0x10/0x10 [ 717.409820][ T9715] ? do_syscall_64+0x100/0x230 [ 717.409852][ T9715] ? do_syscall_64+0xb6/0x230 [ 717.409883][ T9715] do_syscall_64+0xf3/0x230 [ 717.409910][ T9715] ? clear_bhb_loop+0x35/0x90 [ 717.409943][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.409973][ T9715] RIP: 0033:0x7fdaf4b8b710 [ 717.409993][ T9715] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 717.410010][ T9715] RSP: 002b:00007fdaf29f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 717.410033][ T9715] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdaf4b8b710 [ 717.410048][ T9715] RDX: 0000000000000000 RSI: 00007fdaf29f5c10 RDI: 00000000ffffff9c [ 717.410062][ T9715] RBP: 00007fdaf29f5c10 R08: 0000000000000000 R09: 0000000000000000 [ 717.410075][ T9715] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 717.410088][ T9715] R13: 0000000000000000 R14: 00007fdaf4da5fa0 R15: 00007ffc25bec2c8 [ 717.410120][ T9715] [ 717.751461][ T9715] ERROR: Out of memory at tomoyo_realpath_from_path. [ 718.026021][ T5879] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 718.241311][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.325710][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.337111][ T8] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 718.466463][ T5879] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 719.665900][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.688511][ T5879] usb 4-1: config 0 descriptor?? [ 719.707296][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.749996][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 720.866652][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 720.880554][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.891637][ T8] usb 3-1: config 0 descriptor?? [ 721.307386][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 721.321612][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 721.358636][ T5879] usb 4-1: USB disconnect, device number 26 [ 721.414749][ T8] usb 3-1: can't set config #0, error -71 [ 721.425607][ T8] usb 3-1: USB disconnect, device number 31 [ 721.539324][ T9730] FAULT_INJECTION: forcing a failure. [ 721.539324][ T9730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.700837][ T9735] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.975929][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.9.1006 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 721.975963][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 721.975976][ T9730] Call Trace: [ 721.975984][ T9730] [ 721.975996][ T9730] dump_stack_lvl+0x241/0x360 [ 721.976036][ T9730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.976071][ T9730] ? __pfx__printk+0x10/0x10 [ 721.976108][ T9730] ? snprintf+0xda/0x120 [ 721.976132][ T9730] should_fail_ex+0x40a/0x550 [ 721.976159][ T9730] _copy_to_user+0x31/0xb0 [ 721.976181][ T9730] simple_read_from_buffer+0xca/0x150 [ 721.976206][ T9730] proc_fail_nth_read+0x1e9/0x250 [ 721.976233][ T9730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.976253][ T9730] ? rw_verify_area+0x243/0x630 [ 721.976275][ T9730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.976294][ T9730] vfs_read+0x1f8/0xb40 [ 721.976317][ T9730] ? fdget_pos+0x254/0x320 [ 721.976337][ T9730] ? __pfx___mutex_lock+0x10/0x10 [ 721.976357][ T9730] ? __pfx_vfs_read+0x10/0x10 [ 721.976381][ T9730] ? __fget_files+0x2a/0x410 [ 721.976401][ T9730] ? __fget_files+0x395/0x410 [ 721.976419][ T9730] ? __fget_files+0x2a/0x410 [ 721.976444][ T9730] ksys_read+0x18f/0x2b0 [ 721.976468][ T9730] ? __pfx_ksys_read+0x10/0x10 [ 721.976492][ T9730] ? do_syscall_64+0x100/0x230 [ 721.976513][ T9730] ? do_syscall_64+0xb6/0x230 [ 721.976534][ T9730] do_syscall_64+0xf3/0x230 [ 721.976553][ T9730] ? clear_bhb_loop+0x35/0x90 [ 721.976577][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.976597][ T9730] RIP: 0033:0x7fdaf4b8b7bc [ 721.976611][ T9730] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 721.976623][ T9730] RSP: 002b:00007fdaf29d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 721.976639][ T9730] RAX: ffffffffffffffda RBX: 00007fdaf4da6080 RCX: 00007fdaf4b8b7bc [ 721.976650][ T9730] RDX: 000000000000000f RSI: 00007fdaf29d50a0 RDI: 0000000000000006 [ 721.976659][ T9730] RBP: 00007fdaf29d5090 R08: 0000000000000000 R09: 0000000000000000 [ 721.976668][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.976677][ T9730] R13: 0000000000000000 R14: 00007fdaf4da6080 R15: 00007ffc25bec2c8 [ 721.976698][ T9730] [ 723.410203][ T9733] 9pnet: Could not find request transport:  [ 726.145833][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 726.601223][ T5956] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 726.836875][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.865929][ T5956] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 726.875050][ T5956] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 726.913519][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.925923][ T5879] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 726.946465][ T5956] usb 4-1: config 0 descriptor?? [ 727.095655][ T5879] usb 10-1: device descriptor read/64, error -71 [ 727.281484][ T9786] netlink: 'syz.0.1025': attribute type 6 has an invalid length. [ 727.779044][ T5879] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 727.835299][ T9783] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.1023'. [ 727.870755][ T9783] netlink: 'syz.6.1023': attribute type 4 has an invalid length. [ 727.935804][ T5879] usb 10-1: device descriptor read/64, error -71 [ 728.066098][ T5879] usb usb10-port1: attempt power cycle [ 729.318163][ T9791] block nbd2: shutting down sockets [ 729.335852][ T5879] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 729.411437][ T8849] usb 4-1: USB disconnect, device number 27 [ 729.465780][ T5879] usb 10-1: device descriptor read/8, error -71 [ 729.738565][ T5879] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 730.643170][ T5879] usb 10-1: device not accepting address 11, error -71 [ 730.676794][ T5879] usb usb10-port1: unable to enumerate USB device [ 731.129137][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'. [ 731.884858][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.015690][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.577535][ T9871] fuse: Invalid rootmode [ 734.815436][ T9888] FAULT_INJECTION: forcing a failure. [ 734.815436][ T9888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.985614][ T9888] CPU: 0 UID: 0 PID: 9888 Comm: syz.6.1037 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 734.985657][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 734.985671][ T9888] Call Trace: [ 734.985679][ T9888] [ 734.985688][ T9888] dump_stack_lvl+0x241/0x360 [ 734.985731][ T9888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.985770][ T9888] ? __pfx__printk+0x10/0x10 [ 734.985798][ T9888] ? do_vfs_ioctl+0xf07/0x2e40 [ 734.985836][ T9888] should_fail_ex+0x40a/0x550 [ 734.985871][ T9888] _copy_from_user+0x2d/0xb0 [ 734.985897][ T9888] get_user_ifreq+0xc3/0x200 [ 734.985923][ T9888] inet_ioctl+0x33b/0x4f0 [ 734.985952][ T9888] ? __pfx_inet_ioctl+0x10/0x10 [ 734.985977][ T9888] ? tomoyo_path_number_perm+0x679/0x860 [ 734.986025][ T9888] ? __lock_acquire+0x1397/0x2100 [ 734.986055][ T9888] ? tomoyo_path_number_perm+0x206/0x860 [ 734.986102][ T9888] sock_do_ioctl+0x158/0x460 [ 734.986136][ T9888] ? __pfx_sock_do_ioctl+0x10/0x10 [ 734.986184][ T9888] ? __asan_memset+0x23/0x50 [ 734.986222][ T9888] ? smack_file_ioctl+0x29e/0x3a0 [ 734.986252][ T9888] sock_ioctl+0x626/0x8e0 [ 734.986276][ T9888] ? __pfx_sock_ioctl+0x10/0x10 [ 734.986299][ T9888] ? __fget_files+0x2a/0x410 [ 734.986330][ T9888] ? __fget_files+0x2a/0x410 [ 734.986361][ T9888] ? __pfx_sock_ioctl+0x10/0x10 [ 734.986385][ T9888] __se_sys_ioctl+0xf5/0x170 [ 734.986420][ T9888] do_syscall_64+0xf3/0x230 [ 734.986448][ T9888] ? clear_bhb_loop+0x35/0x90 [ 734.986478][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.986506][ T9888] RIP: 0033:0x7f462898cda9 [ 734.986525][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.986541][ T9888] RSP: 002b:00007f462985a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.986564][ T9888] RAX: ffffffffffffffda RBX: 00007f4628ba5fa0 RCX: 00007f462898cda9 [ 734.986578][ T9888] RDX: 0000000020000200 RSI: 0000000000008917 RDI: 0000000000000003 [ 734.986591][ T9888] RBP: 00007f462985a090 R08: 0000000000000000 R09: 0000000000000000 [ 734.986603][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.986614][ T9888] R13: 0000000000000000 R14: 00007f4628ba5fa0 R15: 00007ffd4a07fa38 [ 734.986644][ T9888] [ 735.462007][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 735.954587][ T9898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.603613][ T8] usb 4-1: device descriptor read/all, error -71 [ 738.028080][ T9911] FAULT_INJECTION: forcing a failure. [ 738.028080][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 738.041100][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.3.1044 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 738.041128][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 738.041142][ T9911] Call Trace: [ 738.041151][ T9911] [ 738.041161][ T9911] dump_stack_lvl+0x241/0x360 [ 738.041205][ T9911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.041239][ T9911] ? __pfx__printk+0x10/0x10 [ 738.041287][ T9911] should_fail_ex+0x40a/0x550 [ 738.041316][ T9911] should_failslab+0xac/0x100 [ 738.041344][ T9911] ? skb_clone+0x20c/0x390 [ 738.041363][ T9911] kmem_cache_alloc_noprof+0x70/0x380 [ 738.041398][ T9911] skb_clone+0x20c/0x390 [ 738.041424][ T9911] __netlink_deliver_tap+0x3cc/0x7f0 [ 738.041470][ T9911] ? netlink_deliver_tap+0x2e/0x1b0 [ 738.041502][ T9911] netlink_deliver_tap+0x19d/0x1b0 [ 738.041536][ T9911] netlink_unicast+0x7c4/0x990 [ 738.041563][ T9911] ? irqentry_exit+0x63/0x90 [ 738.041600][ T9911] ? __pfx_netlink_unicast+0x10/0x10 [ 738.041630][ T9911] ? netlink_sendmsg+0x862/0xcb0 [ 738.041671][ T9911] netlink_sendmsg+0x8e4/0xcb0 [ 738.041719][ T9911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.041753][ T9911] ? ____sys_sendmsg+0x406/0x7e0 [ 738.041781][ T9911] ? __sock_sendmsg+0x20/0x270 [ 738.041811][ T9911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.041841][ T9911] __sock_sendmsg+0x221/0x270 [ 738.041869][ T9911] ____sys_sendmsg+0x52a/0x7e0 [ 738.041911][ T9911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.041952][ T9911] ? __fget_files+0x2a/0x410 [ 738.041983][ T9911] ? __fget_files+0x2a/0x410 [ 738.042019][ T9911] __sys_sendmsg+0x269/0x350 [ 738.042057][ T9911] ? __pfx___sys_sendmsg+0x10/0x10 [ 738.042143][ T9911] ? __pfx___schedule+0x10/0x10 [ 738.042178][ T9911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 738.042207][ T9911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 738.042245][ T9911] ? do_syscall_64+0xb6/0x230 [ 738.042276][ T9911] do_syscall_64+0xf3/0x230 [ 738.042302][ T9911] ? clear_bhb_loop+0x35/0x90 [ 738.042333][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.042360][ T9911] RIP: 0033:0x7f0c0bb8cda9 [ 738.042378][ T9911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.042396][ T9911] RSP: 002b:00007f0c0c910038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.042417][ T9911] RAX: ffffffffffffffda RBX: 00007f0c0bda6160 RCX: 00007f0c0bb8cda9 [ 738.042432][ T9911] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000007 [ 738.042444][ T9911] RBP: 00007f0c0c910090 R08: 0000000000000000 R09: 0000000000000000 [ 738.042457][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.042470][ T9911] R13: 0000000000000000 R14: 00007f0c0bda6160 R15: 00007fff61acd808 [ 738.042502][ T9911] [ 739.835905][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 740.135777][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 740.174082][ T9] usb 3-1: config 0 has an invalid interface number: 100 but max is 0 [ 740.451911][ T9] usb 3-1: config 0 has no interface number 0 [ 740.482360][ T9] usb 3-1: New USB device found, idVendor=115f, idProduct=5501, bcdDevice=48.2e [ 740.515641][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.535611][ T9] usb 3-1: Product: syz [ 740.545846][ T9] usb 3-1: Manufacturer: syz [ 740.584666][ T9] usb 3-1: SerialNumber: syz [ 740.634443][ T9] usb 3-1: config 0 descriptor?? [ 740.678641][ T9] usb 3-1: bad CDC descriptors [ 740.725327][ T5880] IPVS: starting estimator thread 0... [ 740.775652][ T8849] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 740.848684][ T9937] IPVS: using max 28 ests per chain, 67200 per kthread [ 740.915615][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 740.943858][ T5880] usb 3-1: USB disconnect, device number 32 [ 740.966611][ T8849] usb 4-1: Using ep0 maxpacket: 8 [ 741.705668][ T8849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.738271][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.755744][ T8] usb 10-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 741.798113][ T8849] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 741.805537][ T8] usb 10-1: config 0 interface 0 has no altsetting 0 [ 741.848831][ T8849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 741.848907][ T8] usb 10-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 741.907146][ T8849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 741.924355][ T8849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 741.971085][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.986570][ T8] usb 10-1: config 0 descriptor?? [ 742.012373][ T8849] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 742.032467][ T8849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 742.082767][ T8849] usb 4-1: Product: syz [ 742.099263][ T8849] usb 4-1: Manufacturer: syz [ 742.123164][ T8849] usb 4-1: SerialNumber: syz [ 742.419162][ T8849] usb 4-1: config 0 descriptor?? [ 742.640107][ T8849] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 742.709117][ T8849] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 743.526887][ T9948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.543041][ T8849] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 743.562992][ T8849] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 743.586028][ T9948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.604613][ T8849] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 743.684955][ T9949] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.722179][ T8] usb 10-1: string descriptor 0 read error: -71 [ 743.876177][ T8] usb 10-1: USB disconnect, device number 12 [ 744.267139][ T8849] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 744.311715][ T8849] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 744.371409][ T8849] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 744.966547][ T8849] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 744.979160][ T8849] usb 4-1: USB disconnect, device number 30 [ 746.920761][ T9988] afs: Unknown parameter 'docal' [ 747.130357][ T9992] FAULT_INJECTION: forcing a failure. [ 747.130357][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 747.144561][ T9992] CPU: 0 UID: 0 PID: 9992 Comm: syz.2.1066 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 747.144596][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 747.144609][ T9992] Call Trace: [ 747.144618][ T9992] [ 747.144626][ T9992] dump_stack_lvl+0x241/0x360 [ 747.144670][ T9992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.144704][ T9992] ? __pfx__printk+0x10/0x10 [ 747.144739][ T9992] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 747.144771][ T9992] ? __pfx___might_resched+0x10/0x10 [ 747.144800][ T9992] should_fail_ex+0x40a/0x550 [ 747.144829][ T9992] should_failslab+0xac/0x100 [ 747.144857][ T9992] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 747.144886][ T9992] ? rcu_is_watching+0x15/0xb0 [ 747.144916][ T9992] ? key_alloc+0x388/0xff0 [ 747.144942][ T9992] kmemdup_noprof+0x2a/0x60 [ 747.144974][ T9992] key_alloc+0x388/0xff0 [ 747.145008][ T9992] keyring_alloc+0x44/0xb0 [ 747.145036][ T9992] lookup_user_key+0x54d/0x1500 [ 747.145079][ T9992] ? __pfx_lookup_user_key+0x10/0x10 [ 747.145116][ T9992] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 747.145206][ T9992] ? __might_fault+0xc6/0x120 [ 747.145243][ T9992] ? strncpy_from_user+0x146/0x270 [ 747.145268][ T9992] __se_sys_add_key+0x2fa/0x490 [ 747.145294][ T9992] ? irqentry_exit+0x63/0x90 [ 747.145324][ T9992] ? __pfx___se_sys_add_key+0x10/0x10 [ 747.145361][ T9992] ? __x64_sys_add_key+0x20/0xc0 [ 747.145392][ T9992] do_syscall_64+0xf3/0x230 [ 747.145420][ T9992] ? clear_bhb_loop+0x35/0x90 [ 747.145455][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.145483][ T9992] RIP: 0033:0x7fbcd118cda9 [ 747.145502][ T9992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.145518][ T9992] RSP: 002b:00007fbcd1fb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 747.145540][ T9992] RAX: ffffffffffffffda RBX: 00007fbcd13a6160 RCX: 00007fbcd118cda9 [ 747.145556][ T9992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 747.145569][ T9992] RBP: 00007fbcd1fb5090 R08: fffffffffffffffe R09: 0000000000000000 [ 747.145583][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.145595][ T9992] R13: 0000000000000000 R14: 00007fbcd13a6160 R15: 00007fff610c3fa8 [ 747.145626][ T9992] [ 747.643798][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.130689][T10000] xt_connbytes: Forcing CT accounting to be enabled [ 748.139644][T10000] Cannot find add_set index 0 as target [ 750.180021][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 750.191249][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 750.673990][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'. [ 750.684231][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1072'. [ 751.299399][T10020] xt_connbytes: Forcing CT accounting to be enabled [ 751.333373][T10020] --map-set only usable from mangle table [ 751.435941][ T5879] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 751.645618][ T877] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 751.672020][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.694473][ T5879] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.717531][ T5879] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 751.846684][ T877] usb 10-1: Using ep0 maxpacket: 32 [ 751.980857][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.360118][ T877] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 752.399852][ T5879] usb 4-1: config 0 descriptor?? [ 752.418374][ T877] usb 10-1: config 0 has no interface number 0 [ 752.439155][ T877] usb 10-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 752.509943][ T877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.542853][ T877] usb 10-1: Product: syz [ 752.552994][ T877] usb 10-1: Manufacturer: syz [ 752.575522][ T877] usb 10-1: SerialNumber: syz [ 752.595047][ T877] usb 10-1: config 0 descriptor?? [ 752.613896][ T877] hub 10-1:0.89: bad descriptor, ignoring hub [ 752.659687][ T877] hub 10-1:0.89: probe with driver hub failed with error -5 [ 752.727240][ T877] option 10-1:0.89: GSM modem (1-port) converter detected [ 752.780077][ T877] usb 10-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 752.881629][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.332165][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.091354][ T5914] usb 10-1: USB disconnect, device number 13 [ 754.257520][ T5914] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 754.277279][ T5914] option 10-1:0.89: device disconnected [ 755.546000][ T877] usb 4-1: USB disconnect, device number 31 [ 755.938816][T10076] FAULT_INJECTION: forcing a failure. [ 755.938816][T10076] name fail_futex, interval 1, probability 0, space 0, times 1 [ 755.952324][T10076] CPU: 1 UID: 0 PID: 10076 Comm: syz.3.1090 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 755.952351][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 755.952364][T10076] Call Trace: [ 755.952372][T10076] [ 755.952382][T10076] dump_stack_lvl+0x241/0x360 [ 755.952436][T10076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.952471][T10076] ? __pfx__printk+0x10/0x10 [ 755.952518][T10076] should_fail_ex+0x40a/0x550 [ 755.952546][T10076] futex_lock_pi_atomic+0xd2/0xd70 [ 755.952582][T10076] futex_lock_pi+0x255/0xbd0 [ 755.952618][T10076] ? __pfx_futex_lock_pi+0x10/0x10 [ 755.952677][T10076] ? __pfx_futex_wake_mark+0x10/0x10 [ 755.952711][T10076] ? sb_end_write+0xe9/0x1c0 [ 755.952740][T10076] ? vfs_write+0x7fa/0xd10 [ 755.952779][T10076] do_futex+0x29a/0x560 [ 755.952807][T10076] ? __pfx_do_futex+0x10/0x10 [ 755.952826][T10076] ? __fget_files+0x2a/0x410 [ 755.952863][T10076] __se_sys_futex+0x3f9/0x480 [ 755.952893][T10076] ? __pfx___se_sys_futex+0x10/0x10 [ 755.952916][T10076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 755.952946][T10076] ? do_syscall_64+0x100/0x230 [ 755.952977][T10076] ? __x64_sys_futex+0x21/0xf0 [ 755.953002][T10076] do_syscall_64+0xf3/0x230 [ 755.953030][T10076] ? clear_bhb_loop+0x35/0x90 [ 755.953065][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.953094][T10076] RIP: 0033:0x7f0c0bb8cda9 [ 755.953113][T10076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.953130][T10076] RSP: 002b:00007f0c0c931038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 755.953154][T10076] RAX: ffffffffffffffda RBX: 00007f0c0bda6080 RCX: 00007f0c0bb8cda9 [ 755.953169][T10076] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000002000cffc [ 755.953182][T10076] RBP: 00007f0c0c931090 R08: 0000000000000000 R09: 0000000000000000 [ 755.953195][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.953208][T10076] R13: 0000000000000001 R14: 00007f0c0bda6080 R15: 00007fff61acd808 [ 755.953239][T10076] [ 756.163633][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 756.575736][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 756.591500][ T5879] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 756.637294][ T5879] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 756.759740][ T5879] usb 1-1: config 8 has no interface number 0 [ 756.987654][ T5879] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 757.145651][ T5879] usb 1-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 757.181311][ T5879] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 757.208158][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.075928][ T5879] usb 1-1: Product: syz [ 758.081103][ T5879] usb 1-1: Manufacturer: syz [ 758.088850][ T5879] usb 1-1: SerialNumber: syz [ 758.346282][ T5879] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 758.371200][ T5879] usb 1-1: USB disconnect, device number 5 [ 758.686294][T10096] xt_connbytes: Forcing CT accounting to be enabled [ 758.694298][T10096] --map-set only usable from mangle table [ 758.848505][ T8] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 759.304805][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.330982][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.381778][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.400066][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.425630][ T8] usb 4-1: Product: syz [ 759.430178][ T8] usb 4-1: Manufacturer: syz [ 759.434822][ T8] usb 4-1: SerialNumber: syz [ 761.133394][ T8] usb 4-1: 0:2 : does not exist [ 761.795393][T10116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.061936][ T8] usb 4-1: USB disconnect, device number 32 [ 766.699740][T10171] xfrm0: entered allmulticast mode [ 767.515594][ T5880] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 767.820682][ T5880] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 768.099054][ T5880] usb 10-1: config 0 has no interface number 0 [ 768.116314][ T5880] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25604, setting to 64 [ 768.169236][ T5880] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 768.249179][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 768.276345][T10176] 9pnet_virtio: no channels available for device syz [ 768.871026][ T5880] usb 10-1: Manufacturer: syz [ 768.897695][ T5880] usb 10-1: SerialNumber: syz [ 768.904912][ T5880] usb 10-1: config 0 descriptor?? [ 768.944522][T10168] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 769.310224][ T5880] usbtouchscreen 10-1:0.214: Failed to read FW rev: -71 [ 769.318803][ T5880] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 769.335703][ T877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 769.346894][ T5880] usb 10-1: USB disconnect, device number 14 [ 769.424612][ T5914] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 769.527632][ T877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.669917][ T877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.685571][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 769.692951][ T5914] usb 3-1: config 0 has an invalid interface number: 206 but max is 0 [ 770.585948][ T5914] usb 3-1: config 0 has no interface number 0 [ 770.610338][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=6502, bcdDevice=14.b6 [ 770.620403][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.652469][ T877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.672140][ T877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.719184][ T5914] usb 3-1: Product: syz [ 770.723419][ T5914] usb 3-1: Manufacturer: syz [ 770.732745][ T5914] usb 3-1: SerialNumber: syz [ 770.739900][ T5914] usb 3-1: config 0 descriptor?? [ 770.745154][ T877] usb 1-1: Product: syz [ 770.752016][ T5914] em28xx 3-1:0.206: New device syz syz @ 480 Mbps (2040:6502, interface 206, class 206) [ 770.762174][ T5914] em28xx 3-1:0.206: Video interface 206 found: bulk [ 770.764430][ T877] usb 1-1: Manufacturer: syz [ 770.833008][ T877] usb 1-1: SerialNumber: syz [ 770.857059][ T877] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 771.278750][ T877] usb 1-1: USB disconnect, device number 6 [ 771.979059][ T5914] em28xx 3-1:0.206: unknown em28xx chip ID (0) [ 772.080985][ T5914] em28xx 3-1:0.206: reading from i2c device at 0xa0 failed (error=-5) [ 772.102442][ T5914] em28xx 3-1:0.206: board has no eeprom [ 772.187227][ T5914] em28xx 3-1:0.206: Identified as Hauppauge WinTV HVR 900 (R2) (card=18) [ 772.189807][T10206] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 772.189807][T10206] program syz.0.1126 not setting count and/or reply_len properly [ 772.241631][T10206] tmpfs: Bad value for 'nr_blocks' [ 772.276789][ T5914] em28xx 3-1:0.206: analog set to bulk mode. [ 772.748271][ T5881] em28xx 3-1:0.206: Registering V4L2 extension [ 773.268935][T10215] xfrm0: entered allmulticast mode [ 773.300978][ T5881] em28xx 3-1:0.206: reading from i2c device at 0xb8 failed (error=-5) [ 773.344957][ T5881] em28xx 3-1:0.206: reading from i2c device at 0xba failed (error=-5) [ 773.745641][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 774.457955][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 774.513325][ T5881] em28xx 3-1:0.206: reading from i2c device at 0x84 failed (error=-5) [ 774.527986][ T5881] em28xx 3-1:0.206: reading from i2c device at 0x86 failed (error=-5) [ 774.530969][ T9] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 775.000023][ T9] usb 1-1: config 0 has no interface number 0 [ 775.017079][ T5881] em28xx 3-1:0.206: reading from i2c device at 0x94 failed (error=-5) [ 775.024668][ T9] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12 [ 775.068802][ T5879] usb 3-1: USB disconnect, device number 33 [ 775.071359][ T5881] em28xx 3-1:0.206: reading from i2c device at 0x96 failed (error=-5) [ 775.086115][ T5879] em28xx 3-1:0.206: Disconnecting em28xx [ 775.091876][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.112121][ T9] usb 1-1: Product: syz [ 775.124842][ T9] usb 1-1: Manufacturer: syz [ 775.442507][ T9] usb 1-1: SerialNumber: syz [ 775.681436][ T9] usb 1-1: config 0 descriptor?? [ 775.742987][ T9] usb 1-1: can't set config #0, error -71 [ 775.771060][ T9] usb 1-1: USB disconnect, device number 7 [ 775.804350][ T5881] em28xx 3-1:0.206: Config register raw data: 0xffffffed [ 775.820836][T10235] FAULT_INJECTION: forcing a failure. [ 775.820836][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 775.862312][ T5881] em28xx 3-1:0.206: AC97 chip type couldn't be determined [ 775.875603][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.2.1133 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 775.875633][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 775.875647][T10235] Call Trace: [ 775.875654][T10235] [ 775.875663][T10235] dump_stack_lvl+0x241/0x360 [ 775.875707][T10235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.875742][T10235] ? __pfx__printk+0x10/0x10 [ 775.875789][T10235] should_fail_ex+0x40a/0x550 [ 775.875818][T10235] should_failslab+0xac/0x100 [ 775.875845][T10235] ? skb_clone+0x20c/0x390 [ 775.875864][T10235] kmem_cache_alloc_noprof+0x70/0x380 [ 775.875899][T10235] skb_clone+0x20c/0x390 [ 775.875923][T10235] __netlink_deliver_tap+0x3cc/0x7f0 [ 775.875970][T10235] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.876002][T10235] netlink_deliver_tap+0x19d/0x1b0 [ 775.876037][T10235] netlink_unicast+0x7c4/0x990 [ 775.876075][T10235] ? __pfx_netlink_unicast+0x10/0x10 [ 775.876103][T10235] ? __virt_addr_valid+0x45f/0x530 [ 775.876135][T10235] ? __phys_addr_symbol+0x2f/0x70 [ 775.876164][T10235] ? __check_object_size+0x47a/0x730 [ 775.876195][T10235] netlink_sendmsg+0x8e4/0xcb0 [ 775.876241][T10235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.876288][T10235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.876320][T10235] __sock_sendmsg+0x221/0x270 [ 775.876349][T10235] ____sys_sendmsg+0x52a/0x7e0 [ 775.876393][T10235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.876424][T10235] ? __fget_files+0x2a/0x410 [ 775.876455][T10235] ? __fget_files+0x2a/0x410 [ 775.876500][T10235] __sys_sendmsg+0x269/0x350 [ 775.876540][T10235] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.876587][T10235] ? do_sys_openat2+0x17a/0x1d0 [ 775.876644][T10235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 775.876675][T10235] ? do_syscall_64+0x100/0x230 [ 775.876706][T10235] ? do_syscall_64+0xb6/0x230 [ 775.876737][T10235] do_syscall_64+0xf3/0x230 [ 775.876765][T10235] ? clear_bhb_loop+0x35/0x90 [ 775.876799][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.876828][T10235] RIP: 0033:0x7fbcd118cda9 [ 775.876847][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.876865][T10235] RSP: 002b:00007fbcd1fd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.876888][T10235] RAX: ffffffffffffffda RBX: 00007fbcd13a6080 RCX: 00007fbcd118cda9 [ 775.876904][T10235] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 775.876918][T10235] RBP: 00007fbcd1fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.876931][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.876944][T10235] R13: 0000000000000000 R14: 00007fbcd13a6080 R15: 00007fff610c3fa8 [ 775.876975][T10235] [ 775.877015][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 776.167533][ T5881] em28xx 3-1:0.206: No AC97 audio processor [ 776.173520][ T5881] em28xx 3-1:0.206: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 776.255931][ T5881] em28xx 3-1:0.206: Binding DVB extension [ 776.261758][ T5881] em28xx 3-1:0.206: no endpoint for DVB mode and transfer type 0 [ 776.295164][ T5881] em28xx 3-1:0.206: failed to pre-allocate USB transfer buffers for DVB. [ 776.475508][T10241] --map-set only usable from mangle table [ 776.869238][ T5881] em28xx 3-1:0.206: Registering input extension [ 776.888692][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 776.888713][ T29] audit: type=1326 audit(1738510819.050:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10238 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 776.945902][ T5879] em28xx 3-1:0.206: Closing input extension [ 777.135037][ T5879] em28xx 3-1:0.206: Freeing device [ 777.645746][ T29] audit: type=1326 audit(1738510819.080:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10238 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 777.728621][ T29] audit: type=1326 audit(1738510819.080:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10238 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 777.995586][ T29] audit: type=1326 audit(1738510819.080:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10238 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 778.018118][ T29] audit: type=1326 audit(1738510819.080:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10238 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 778.041379][ T29] audit: type=1326 audit(1738510819.080:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10238 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 778.100039][ T29] audit: type=1326 audit(1738510819.090:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10238 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a278cda9 code=0x7ffc0000 [ 779.981783][T10279] FAULT_INJECTION: forcing a failure. [ 779.981783][T10279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.033792][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.3.1146 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 780.033826][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 780.033839][T10279] Call Trace: [ 780.033848][T10279] [ 780.033859][T10279] dump_stack_lvl+0x241/0x360 [ 780.033901][T10279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.033936][T10279] ? __pfx__printk+0x10/0x10 [ 780.033979][T10279] should_fail_ex+0x40a/0x550 [ 780.034007][T10279] _copy_to_user+0x31/0xb0 [ 780.034030][T10279] do_pagemap_cmd+0xcdc/0x1240 [ 780.034085][T10279] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 780.034126][T10279] ? __fget_files+0x2a/0x410 [ 780.034157][T10279] ? __fget_files+0x2a/0x410 [ 780.034189][T10279] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 780.034213][T10279] __se_sys_ioctl+0xf5/0x170 [ 780.034249][T10279] do_syscall_64+0xf3/0x230 [ 780.034278][T10279] ? clear_bhb_loop+0x35/0x90 [ 780.034312][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.034340][T10279] RIP: 0033:0x7f0c0bb8cda9 [ 780.034358][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.034376][T10279] RSP: 002b:00007f0c0c952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.034399][T10279] RAX: ffffffffffffffda RBX: 00007f0c0bda5fa0 RCX: 00007f0c0bb8cda9 [ 780.034414][T10279] RDX: 00000000200004c0 RSI: 00000000c0606610 RDI: 0000000000000003 [ 780.034428][T10279] RBP: 00007f0c0c952090 R08: 0000000000000000 R09: 0000000000000000 [ 780.034442][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.034454][T10279] R13: 0000000000000000 R14: 00007f0c0bda5fa0 R15: 00007fff61acd808 [ 780.034484][T10279] [ 780.421468][T10284] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 780.421468][T10284] program syz.0.1147 not setting count and/or reply_len properly [ 781.235009][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1151'. [ 781.495597][ T5881] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 782.779739][ T5881] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 782.836802][T10316] netlink: 'syz.0.1156': attribute type 19 has an invalid length. [ 782.877699][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.029146][ T5881] usb 3-1: config 0 descriptor?? [ 783.233611][ T5881] usb-storage 3-1:0.0: USB Mass Storage device detected [ 783.560357][T10320] fuse: Bad value for 'fd' [ 783.613553][ T5881] usb 3-1: USB disconnect, device number 34 [ 786.432014][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 786.438417][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 786.516751][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1166'. [ 786.590131][T10347] ceph: No mds server is up or the cluster is laggy [ 786.987034][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 787.003662][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 789.388274][T10378] capability: warning: `syz.9.1173' uses 32-bit capabilities (legacy support in use) [ 792.273233][T10412] ieee802154 phy0 wpan0: encryption failed: -22 [ 793.609276][T10417] netlink: 'syz.3.1185': attribute type 19 has an invalid length. [ 793.875676][ T5880] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 794.058421][ T5880] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.070228][ T5880] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 794.081593][ T5880] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 794.206525][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.260926][ T5880] usb 10-1: config 0 descriptor?? [ 794.407798][T10438] FAULT_INJECTION: forcing a failure. [ 794.407798][T10438] name failslab, interval 1, probability 0, space 0, times 0 [ 794.449422][T10438] CPU: 0 UID: 0 PID: 10438 Comm: syz.2.1191 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 794.449451][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 794.449463][T10438] Call Trace: [ 794.449469][T10438] [ 794.449475][T10438] dump_stack_lvl+0x241/0x360 [ 794.449506][T10438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.449530][T10438] ? __pfx__printk+0x10/0x10 [ 794.449553][T10438] ? __kmalloc_cache_noprof+0x48/0x390 [ 794.449576][T10438] ? __pfx___might_resched+0x10/0x10 [ 794.449597][T10438] should_fail_ex+0x40a/0x550 [ 794.449617][T10438] should_failslab+0xac/0x100 [ 794.449636][T10438] __kmalloc_cache_noprof+0x70/0x390 [ 794.449655][T10438] ? snd_pcm_oss_change_params_locked+0x1b6/0x3d60 [ 794.449681][T10438] snd_pcm_oss_change_params_locked+0x1b6/0x3d60 [ 794.449702][T10438] ? __pfx___mutex_trylock_common+0x10/0x10 [ 794.449731][T10438] ? rcu_is_watching+0x15/0xb0 [ 794.449755][T10438] ? trace_contention_end+0x3c/0x120 [ 794.449778][T10438] ? __mutex_lock+0x397/0x1010 [ 794.449799][T10438] ? tomoyo_path_number_perm+0x206/0x860 [ 794.449822][T10438] ? snd_pcm_oss_get_active_substream+0x1a9/0x280 [ 794.449846][T10438] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 794.449869][T10438] ? smk_access+0x4ab/0x4e0 [ 794.449896][T10438] snd_pcm_oss_get_active_substream+0x201/0x280 [ 794.449921][T10438] snd_pcm_oss_ioctl+0xb81/0xff0 [ 794.449949][T10438] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 794.449969][T10438] ? __fget_files+0x2a/0x410 [ 794.449990][T10438] ? __fget_files+0x2a/0x410 [ 794.450012][T10438] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 794.450033][T10438] __se_sys_ioctl+0xf5/0x170 [ 794.450058][T10438] do_syscall_64+0xf3/0x230 [ 794.450077][T10438] ? clear_bhb_loop+0x35/0x90 [ 794.450101][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.450121][T10438] RIP: 0033:0x7fbcd118cda9 [ 794.450135][T10438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.450148][T10438] RSP: 002b:00007fbcd1ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.450164][T10438] RAX: ffffffffffffffda RBX: 00007fbcd13a5fa0 RCX: 00007fbcd118cda9 [ 794.450175][T10438] RDX: 0000000000000000 RSI: 0000000080045002 RDI: 0000000000000003 [ 794.450184][T10438] RBP: 00007fbcd1ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 794.450193][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.450202][T10438] R13: 0000000000000000 R14: 00007fbcd13a5fa0 R15: 00007fff610c3fa8 [ 794.450223][T10438] [ 795.360238][T10452] ieee802154 phy0 wpan0: encryption failed: -22 [ 796.080905][ T54] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 797.323712][ T5880] usb 10-1: USB disconnect, device number 15 [ 797.758310][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1206'. [ 798.294171][T10500] --map-set only usable from mangle table [ 798.926839][T10502] xt_connbytes: Forcing CT accounting to be enabled [ 798.933904][T10502] --map-set only usable from mangle table [ 799.527982][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 799.537312][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 800.545752][ T5879] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 801.459282][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.705829][ T5879] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.743306][ T5879] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 802.055818][ T5880] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 802.676089][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.025859][ T5879] usb 1-1: config 0 descriptor?? [ 803.031014][T10539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1221'. [ 803.042097][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.053133][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 803.088432][ T5880] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 803.105768][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 803.113828][ T5880] usb 4-1: SerialNumber: syz [ 803.320022][T10545] FAULT_INJECTION: forcing a failure. [ 803.320022][T10545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.375977][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.380833][T10545] CPU: 0 UID: 0 PID: 10545 Comm: syz.9.1224 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 803.380870][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 803.380884][T10545] Call Trace: [ 803.380892][T10545] [ 803.380902][T10545] dump_stack_lvl+0x241/0x360 [ 803.380947][T10545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.380983][T10545] ? __pfx__printk+0x10/0x10 [ 803.381029][T10545] should_fail_ex+0x40a/0x550 [ 803.381058][T10545] _copy_to_user+0x31/0xb0 [ 803.381082][T10545] simple_read_from_buffer+0xca/0x150 [ 803.381113][T10545] proc_fail_nth_read+0x1e9/0x250 [ 803.381151][T10545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.381181][T10545] ? rw_verify_area+0x243/0x630 [ 803.381215][T10545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.381242][T10545] vfs_read+0x1f8/0xb40 [ 803.381277][T10545] ? fdget_pos+0x254/0x320 [ 803.381307][T10545] ? __pfx___mutex_lock+0x10/0x10 [ 803.381336][T10545] ? __pfx_vfs_read+0x10/0x10 [ 803.381373][T10545] ? __fget_files+0x2a/0x410 [ 803.381404][T10545] ? __fget_files+0x395/0x410 [ 803.381430][T10545] ? __fget_files+0x2a/0x410 [ 803.381469][T10545] ksys_read+0x18f/0x2b0 [ 803.381506][T10545] ? __pfx_ksys_read+0x10/0x10 [ 803.381541][T10545] ? do_syscall_64+0x100/0x230 [ 803.381573][T10545] ? do_syscall_64+0xb6/0x230 [ 803.381605][T10545] do_syscall_64+0xf3/0x230 [ 803.381632][T10545] ? clear_bhb_loop+0x35/0x90 [ 803.381668][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.381697][T10545] RIP: 0033:0x7fdaf4b8b7bc [ 803.381717][T10545] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 803.381735][T10545] RSP: 002b:00007fdaf29f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 803.381760][T10545] RAX: ffffffffffffffda RBX: 00007fdaf4da5fa0 RCX: 00007fdaf4b8b7bc [ 803.381777][T10545] RDX: 000000000000000f RSI: 00007fdaf29f60a0 RDI: 0000000000000004 [ 803.381791][T10545] RBP: 00007fdaf29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 803.381804][T10545] R10: 0000000020001240 R11: 0000000000000246 R12: 0000000000000001 [ 803.381818][T10545] R13: 0000000000000000 R14: 00007fdaf4da5fa0 R15: 00007ffc25bec2c8 [ 803.381851][T10545] [ 803.611613][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.669080][ T5880] usb 4-1: 0:2 : does not exist [ 805.674132][ T5880] usb 4-1: unit 5: unexpected type 0x09 [ 805.869496][ T5880] usb 4-1: USB disconnect, device number 33 [ 806.404868][ T877] usb 1-1: USB disconnect, device number 8 [ 807.747659][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'. [ 807.800547][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'. [ 807.837828][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'. [ 807.904133][T10584] FAULT_INJECTION: forcing a failure. [ 807.904133][T10584] name failslab, interval 1, probability 0, space 0, times 0 [ 807.929596][T10584] CPU: 0 UID: 0 PID: 10584 Comm: syz.6.1235 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 807.929629][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 807.929642][T10584] Call Trace: [ 807.929650][T10584] [ 807.929659][T10584] dump_stack_lvl+0x241/0x360 [ 807.929701][T10584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.929734][T10584] ? __pfx__printk+0x10/0x10 [ 807.929768][T10584] ? __kmalloc_noprof+0xb5/0x4c0 [ 807.929796][T10584] ? __pfx___might_resched+0x10/0x10 [ 807.929832][T10584] should_fail_ex+0x40a/0x550 [ 807.929856][T10584] should_failslab+0xac/0x100 [ 807.929880][T10584] __kmalloc_noprof+0xdd/0x4c0 [ 807.929903][T10584] ? __kmalloc_cache_noprof+0x243/0x390 [ 807.929926][T10584] ? alloc_pipe_info+0x1ff/0x4d0 [ 807.929954][T10584] alloc_pipe_info+0x1ff/0x4d0 [ 807.929979][T10584] splice_direct_to_actor+0xa9e/0xc80 [ 807.930017][T10584] ? __pfx_fsnotify+0x10/0x10 [ 807.930037][T10584] ? __pfx_direct_splice_actor+0x10/0x10 [ 807.930062][T10584] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 807.930085][T10584] ? __fget_files+0x2a/0x410 [ 807.930111][T10584] ? __pfx_lock_release+0x10/0x10 [ 807.930140][T10584] do_splice_direct+0x289/0x3e0 [ 807.930170][T10584] ? __pfx_do_splice_direct+0x10/0x10 [ 807.930193][T10584] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 807.930225][T10584] ? rw_verify_area+0x239/0x630 [ 807.930259][T10584] do_sendfile+0x564/0x8a0 [ 807.930294][T10584] ? __pfx_do_sendfile+0x10/0x10 [ 807.930322][T10584] ? __fget_files+0x2a/0x410 [ 807.930355][T10584] __se_sys_sendfile64+0x17c/0x1e0 [ 807.930383][T10584] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 807.930409][T10584] ? do_syscall_64+0x100/0x230 [ 807.930441][T10584] ? do_syscall_64+0xb6/0x230 [ 807.930471][T10584] do_syscall_64+0xf3/0x230 [ 807.930498][T10584] ? clear_bhb_loop+0x35/0x90 [ 807.930531][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.930557][T10584] RIP: 0033:0x7f462898cda9 [ 807.930577][T10584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.930594][T10584] RSP: 002b:00007f462985a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.930617][T10584] RAX: ffffffffffffffda RBX: 00007f4628ba5fa0 RCX: 00007f462898cda9 [ 807.930633][T10584] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 807.930644][T10584] RBP: 00007f462985a090 R08: 0000000000000000 R09: 0000000000000000 [ 807.930656][T10584] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 807.930669][T10584] R13: 0000000000000000 R14: 00007f4628ba5fa0 R15: 00007ffd4a07fa38 [ 807.930696][T10584] [ 808.952593][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.192833][T10596] FAULT_INJECTION: forcing a failure. [ 809.192833][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 809.375895][T10596] CPU: 0 UID: 0 PID: 10596 Comm: syz.9.1238 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 809.375928][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 809.375941][T10596] Call Trace: [ 809.375948][T10596] [ 809.375958][T10596] dump_stack_lvl+0x241/0x360 [ 809.376002][T10596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.376036][T10596] ? __pfx__printk+0x10/0x10 [ 809.376070][T10596] should_fail_ex+0x40a/0x550 [ 809.376090][T10596] should_failslab+0xac/0x100 [ 809.376109][T10596] ? skb_clone+0x20c/0x390 [ 809.376123][T10596] kmem_cache_alloc_noprof+0x70/0x380 [ 809.376153][T10596] skb_clone+0x20c/0x390 [ 809.376169][T10596] __netlink_deliver_tap+0x3cc/0x7f0 [ 809.376200][T10596] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.376222][T10596] netlink_deliver_tap+0x19d/0x1b0 [ 809.376245][T10596] netlink_unicast+0x7c4/0x990 [ 809.376270][T10596] ? __pfx_netlink_unicast+0x10/0x10 [ 809.376289][T10596] ? __virt_addr_valid+0x45f/0x530 [ 809.376311][T10596] ? __phys_addr_symbol+0x2f/0x70 [ 809.376331][T10596] ? __check_object_size+0x47a/0x730 [ 809.376352][T10596] netlink_sendmsg+0x8e4/0xcb0 [ 809.376391][T10596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.376436][T10596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.376466][T10596] __sock_sendmsg+0x221/0x270 [ 809.376495][T10596] ____sys_sendmsg+0x52a/0x7e0 [ 809.376530][T10596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.376551][T10596] ? __fget_files+0x2a/0x410 [ 809.376573][T10596] ? __fget_files+0x2a/0x410 [ 809.376598][T10596] __sys_sendmsg+0x269/0x350 [ 809.376624][T10596] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.376656][T10596] ? do_sys_openat2+0x17a/0x1d0 [ 809.376702][T10596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 809.376723][T10596] ? do_syscall_64+0x100/0x230 [ 809.376745][T10596] ? do_syscall_64+0xb6/0x230 [ 809.376765][T10596] do_syscall_64+0xf3/0x230 [ 809.376785][T10596] ? clear_bhb_loop+0x35/0x90 [ 809.376809][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.376829][T10596] RIP: 0033:0x7fdaf4b8cda9 [ 809.376843][T10596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.376856][T10596] RSP: 002b:00007fdaf29f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.376872][T10596] RAX: ffffffffffffffda RBX: 00007fdaf4da5fa0 RCX: 00007fdaf4b8cda9 [ 809.376883][T10596] RDX: 0000000000000040 RSI: 0000000020000340 RDI: 0000000000000004 [ 809.376892][T10596] RBP: 00007fdaf29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 809.376902][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.376910][T10596] R13: 0000000000000000 R14: 00007fdaf4da5fa0 R15: 00007ffc25bec2c8 [ 809.376933][T10596] [ 811.040786][T10611] Can't find a SQUASHFS superblock on nullb0 [ 813.400687][T10618] Can't find a SQUASHFS superblock on nullb0 [ 814.034932][ T5880] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 814.420852][ T5880] usb 10-1: Using ep0 maxpacket: 16 [ 814.437541][ T5880] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 814.465859][ T5880] usb 10-1: config 0 has no interface number 0 [ 814.478183][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 814.487251][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 814.506393][ T5880] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.836572][ T5880] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 814.850891][ T5880] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 814.862928][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 814.972942][ T5880] usb 10-1: Product: syz [ 814.988644][T10636] netlink: 'syz.2.1251': attribute type 19 has an invalid length. [ 815.046025][ T5880] usb 10-1: SerialNumber: syz [ 815.054390][ T5880] usb 10-1: config 0 descriptor?? [ 815.071082][ T5880] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 815.095748][ T5880] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input17 [ 815.304778][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 816.146071][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 816.157442][T10627] overlay: Unknown parameter 'func' [ 816.212000][T10650] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 816.324426][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.331803][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.339107][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.346426][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.353800][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.361096][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.369089][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.376460][ T8849] usb 10-1: USB disconnect, device number 16 [ 816.385656][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 816.392745][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 816.442385][ T8849] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 816.596747][T10653] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1256'. [ 816.606323][T10653] 1X: renamed from 60X [ 816.670284][T10653] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 817.892103][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 817.901390][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 819.186903][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 819.198887][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 821.441797][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 822.471592][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 822.837082][ T25] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 822.855669][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.962714][ T25] usb 1-1: config 0 descriptor?? [ 823.304239][ T25] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 823.366491][ T25] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 823.376249][T10701] program syz.3.1272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.390866][ T25] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 823.410269][T10701] program syz.3.1272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 826.815512][ T5881] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 826.838437][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1284'. [ 827.005869][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 827.021262][ T5881] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 827.073299][ T5881] usb 3-1: config 0 has no interface number 0 [ 827.174254][ T5881] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 827.407931][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.504879][ T5881] usb 3-1: Product: syz [ 827.556736][ T5881] usb 3-1: Manufacturer: syz [ 827.609867][ T5881] usb 3-1: SerialNumber: syz [ 827.693007][ T5881] usb 3-1: config 0 descriptor?? [ 827.908379][ T5881] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 828.662274][T10752] FAULT_INJECTION: forcing a failure. [ 828.662274][T10752] name failslab, interval 1, probability 0, space 0, times 0 [ 828.675980][T10752] CPU: 0 UID: 0 PID: 10752 Comm: syz.3.1286 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 828.676010][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 828.676024][T10752] Call Trace: [ 828.676031][T10752] [ 828.676040][T10752] dump_stack_lvl+0x241/0x360 [ 828.676083][T10752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 828.676117][T10752] ? __pfx__printk+0x10/0x10 [ 828.676151][T10752] ? kmem_cache_alloc_noprof+0x48/0x380 [ 828.676182][T10752] ? __pfx___might_resched+0x10/0x10 [ 828.676210][T10752] should_fail_ex+0x40a/0x550 [ 828.676238][T10752] should_failslab+0xac/0x100 [ 828.676265][T10752] ? getname_flags+0xb7/0x540 [ 828.676299][T10752] kmem_cache_alloc_noprof+0x70/0x380 [ 828.676332][T10752] getname_flags+0xb7/0x540 [ 828.676363][T10752] user_path_at+0x24/0x60 [ 828.676395][T10752] __se_sys_mount+0x297/0x3c0 [ 828.676420][T10752] ? lockdep_hardirqs_on+0x99/0x150 [ 828.676452][T10752] ? __pfx___se_sys_mount+0x10/0x10 [ 828.676486][T10752] ? __x64_sys_mount+0x20/0xc0 [ 828.676514][T10752] do_syscall_64+0xf3/0x230 [ 828.676543][T10752] ? clear_bhb_loop+0x35/0x90 [ 828.676576][T10752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.676606][T10752] RIP: 0033:0x7f0c0bb8cda9 [ 828.676625][T10752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.676643][T10752] RSP: 002b:00007f0c0c910038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 828.676666][T10752] RAX: ffffffffffffffda RBX: 00007f0c0bda6160 RCX: 00007f0c0bb8cda9 [ 828.676682][T10752] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 828.676695][T10752] RBP: 00007f0c0c910090 R08: 0000000020000900 R09: 0000000000000000 [ 828.676708][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.676721][T10752] R13: 0000000000000000 R14: 00007f0c0bda6160 R15: 00007fff61acd808 [ 828.676751][T10752] [ 829.275713][T10750] 9pnet: Could not find request transport: fd0x0000000000000047 [ 830.134560][ T5881] gspca_spca1528: reg_r err -71 [ 830.139786][ T5881] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 830.200461][ T5881] usb 3-1: USB disconnect, device number 35 [ 834.681177][T10794] process 'syz.6.1298' launched './file1' with NULL argv: empty string added [ 835.381604][T10800] 9pnet: Could not find request transport: fd0x0000000000000047 [ 835.686780][T10810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 836.679417][T10816] fuse: Bad value for 'fd' [ 837.511408][T10827] --map-set only usable from mangle table [ 840.243038][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1310'. [ 840.296243][T10840] 9pnet_fd: Insufficient options for proto=fd [ 840.473979][T10842] 9pnet: Could not find request transport: fd0x0000000000000047 [ 840.709162][T10852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1314'. [ 847.494005][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 847.503506][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'. [ 847.930626][T10896] 9pnet_fd: Insufficient options for proto=fd [ 853.498764][T10953] 9pnet_fd: Insufficient options for proto=fd [ 854.216611][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 860.272754][T10996] 9pnet_fd: Insufficient options for proto=fd [ 864.827911][T11047] FAULT_INJECTION: forcing a failure. [ 864.827911][T11047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.885649][T11047] CPU: 0 UID: 0 PID: 11047 Comm: syz.2.1368 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 864.885681][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 864.885693][T11047] Call Trace: [ 864.885701][T11047] [ 864.885709][T11047] dump_stack_lvl+0x241/0x360 [ 864.885752][T11047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.885785][T11047] ? __pfx__printk+0x10/0x10 [ 864.885819][T11047] ? __pfx_lock_release+0x10/0x10 [ 864.885856][T11047] should_fail_ex+0x40a/0x550 [ 864.885885][T11047] _copy_from_user+0x2d/0xb0 [ 864.885906][T11047] packet_setsockopt+0x320/0x1970 [ 864.885934][T11047] ? __pfx_packet_setsockopt+0x10/0x10 [ 864.885955][T11047] ? __lock_acquire+0x1397/0x2100 [ 864.886006][T11047] ? __pfx_lock_acquire+0x10/0x10 [ 864.886032][T11047] ? __fget_files+0x2a/0x410 [ 864.886062][T11047] ? __pfx_packet_setsockopt+0x10/0x10 [ 864.886082][T11047] do_sock_setsockopt+0x3af/0x720 [ 864.886121][T11047] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 864.886155][T11047] ? __fget_files+0x395/0x410 [ 864.886180][T11047] ? __fget_files+0x2a/0x410 [ 864.886225][T11047] __x64_sys_setsockopt+0x1ee/0x280 [ 864.886262][T11047] do_syscall_64+0xf3/0x230 [ 864.886290][T11047] ? clear_bhb_loop+0x35/0x90 [ 864.886323][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.886350][T11047] RIP: 0033:0x7fbcd118cda9 [ 864.886369][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.886386][T11047] RSP: 002b:00007fbcd1fd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 864.886408][T11047] RAX: ffffffffffffffda RBX: 00007fbcd13a6080 RCX: 00007fbcd118cda9 [ 864.886422][T11047] RDX: 000000000000000f RSI: 0000000000000107 RDI: 0000000000000003 [ 864.886435][T11047] RBP: 00007fbcd1fd6090 R08: 0000000000000004 R09: 0000000000000000 [ 864.886447][T11047] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 864.886459][T11047] R13: 0000000000000001 R14: 00007fbcd13a6080 R15: 00007fff610c3fa8 [ 864.886486][T11047] [ 864.907207][T11046] 9pnet_fd: Insufficient options for proto=fd [ 866.345736][ T5881] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 866.835919][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.395594][ T5881] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 867.406762][ T5881] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 867.416046][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.428105][ T5881] usb 3-1: config 0 descriptor?? [ 869.450932][ T5880] usb 3-1: USB disconnect, device number 36 [ 870.409649][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.149523][T11105] 9pnet_fd: Insufficient options for proto=fd [ 872.369805][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 872.579720][T11120] 9pnet_fd: Insufficient options for proto=fd [ 872.827500][T11119] tmpfs: Bad value for 'mpol' [ 874.170142][T11134] --map-set only usable from mangle table [ 875.359531][T11143] 9pnet_fd: Insufficient options for proto=fd [ 875.389360][T11143] netlink: 'syz.3.1395': attribute type 33 has an invalid length. [ 875.397595][T11143] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1395'. [ 875.549758][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1395'. [ 875.835662][T11152] 9pnet_fd: Insufficient options for proto=fd [ 877.781519][T11173] --map-set only usable from mangle table [ 878.734453][T11177] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1404'. [ 878.813694][T11177] 9pnet_fd: Insufficient options for proto=fd [ 884.373668][T11218] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1418'. [ 884.463288][T11222] --map-set only usable from mangle table [ 884.887938][T11218] 9pnet_fd: Insufficient options for proto=fd [ 885.943891][ T25] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 886.125606][ T25] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 886.187403][ T25] usb 1-1: USB disconnect, device number 9 [ 891.197263][T11267] fuse: Bad value for 'fd' [ 891.369593][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1431'. [ 897.339811][T11325] fuse: Bad value for 'fd' [ 900.279060][T11341] xfrm0: entered allmulticast mode [ 904.535583][T11368] --map-set only usable from mangle table [ 908.686613][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 910.763706][T11407] FAULT_INJECTION: forcing a failure. [ 910.763706][T11407] name failslab, interval 1, probability 0, space 0, times 0 [ 910.874638][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.3.1467 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 910.874669][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 910.874683][T11407] Call Trace: [ 910.874691][T11407] [ 910.874700][T11407] dump_stack_lvl+0x241/0x360 [ 910.874744][T11407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.874778][T11407] ? __pfx__printk+0x10/0x10 [ 910.874814][T11407] ? fs_reclaim_acquire+0x93/0x130 [ 910.874849][T11407] ? __pfx___might_resched+0x10/0x10 [ 910.874878][T11407] should_fail_ex+0x40a/0x550 [ 910.874907][T11407] should_failslab+0xac/0x100 [ 910.874935][T11407] __kmalloc_noprof+0xdd/0x4c0 [ 910.874963][T11407] ? ima_alloc_init_template+0x8b/0x6e0 [ 910.874999][T11407] ima_alloc_init_template+0x8b/0x6e0 [ 910.875031][T11407] ? take_dentry_name_snapshot+0x211/0x530 [ 910.875067][T11407] ima_store_measurement+0x289/0x6f0 [ 910.875107][T11407] ? __pfx_ima_store_measurement+0x10/0x10 [ 910.875141][T11407] ? ima_d_path+0x222/0x270 [ 910.875204][T11407] process_measurement+0x150b/0x1fb0 [ 910.875255][T11407] ? __pfx_process_measurement+0x10/0x10 [ 910.875347][T11407] ima_file_mmap+0x1cd/0x220 [ 910.875383][T11407] ? __pfx_ima_file_mmap+0x10/0x10 [ 910.875408][T11407] ? __up_read+0x2c2/0x6b0 [ 910.875440][T11407] ? smack_mmap_file+0x639/0x680 [ 910.875467][T11407] ? __pfx___up_read+0x10/0x10 [ 910.875505][T11407] security_mmap_file+0x7aa/0xa40 [ 910.875539][T11407] __se_sys_remap_file_pages+0x3af/0xc00 [ 910.875580][T11407] ? __fget_files+0x2a/0x410 [ 910.875610][T11407] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 910.875649][T11407] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 910.875681][T11407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 910.875709][T11407] ? do_syscall_64+0x100/0x230 [ 910.875741][T11407] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 910.875778][T11407] do_syscall_64+0xf3/0x230 [ 910.875806][T11407] ? clear_bhb_loop+0x35/0x90 [ 910.875840][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.875869][T11407] RIP: 0033:0x7f0c0bb8cda9 [ 910.875888][T11407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.875906][T11407] RSP: 002b:00007f0c0c931038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 910.875930][T11407] RAX: ffffffffffffffda RBX: 00007f0c0bda6080 RCX: 00007f0c0bb8cda9 [ 910.875945][T11407] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 [ 910.875958][T11407] RBP: 00007f0c0c931090 R08: 0000000000000000 R09: 0000000000000000 [ 910.875971][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.875983][T11407] R13: 0000000000000001 R14: 00007f0c0bda6080 R15: 00007fff61acd808 [ 910.876016][T11407] [ 911.325525][ T29] audit: type=1804 audit(1738510953.380:77): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=add_template_measure cause=ENOMEM comm="syz.3.1467" name="dev/zero" dev="tmpfs" ino=1221 res=0 errno=0 [ 912.655713][T11423] ieee802154 phy0 wpan0: encryption failed: -22 [ 916.145590][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 918.444561][T11465] ieee802154 phy0 wpan0: encryption failed: -22 [ 918.455732][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1486'. [ 918.558516][T11466] 9pnet_fd: Insufficient options for proto=fd [ 919.178072][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 919.187716][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 920.778540][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1494'. [ 921.067458][T11485] 9pnet_fd: Insufficient options for proto=fd [ 922.565779][ T7938] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 922.772798][ T7938] usb 10-1: Using ep0 maxpacket: 32 [ 922.791305][ T7938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.828995][ T7938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.860706][ T7938] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 923.419949][ T7938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.465987][ T7938] usb 10-1: config 0 descriptor?? [ 923.519281][ T7938] hub 10-1:0.0: USB hub found [ 923.681202][ T7938] hub 10-1:0.0: 1 port detected [ 923.736009][T11510] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.568131][T11518] fuse: Bad value for 'fd' [ 925.108781][ T7997] usb 10-1: USB disconnect, device number 17 [ 926.125864][T11528] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1507'. [ 926.137261][T11528] 9pnet_fd: Insufficient options for proto=fd [ 926.303037][T11534] Cannot find add_set index 0 as target [ 931.830535][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.637074][T11590] --map-set only usable from mangle table [ 936.935742][T11616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 937.100739][T11618] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 937.126963][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.145435][T11618] CIFS mount error: No usable UNC path provided in device string! [ 937.145435][T11618] [ 937.156344][T11618] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 939.071997][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1539'. [ 939.072039][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1539'. [ 940.297467][T11651] FAULT_INJECTION: forcing a failure. [ 940.297467][T11651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.545953][T11651] CPU: 0 UID: 0 PID: 11651 Comm: syz.6.1544 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 940.545987][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 940.546001][T11651] Call Trace: [ 940.546009][T11651] [ 940.546017][T11651] dump_stack_lvl+0x241/0x360 [ 940.546059][T11651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.546093][T11651] ? __pfx__printk+0x10/0x10 [ 940.546126][T11651] ? __pfx_lock_release+0x10/0x10 [ 940.546161][T11651] should_fail_ex+0x40a/0x550 [ 940.546188][T11651] _copy_from_user+0x2d/0xb0 [ 940.546209][T11651] copy_msghdr_from_user+0xae/0x680 [ 940.546242][T11651] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 940.546266][T11651] ? __fget_files+0x2a/0x410 [ 940.546296][T11651] ? __fget_files+0x2a/0x410 [ 940.546332][T11651] __sys_sendmsg+0x209/0x350 [ 940.546370][T11651] ? __pfx___sys_sendmsg+0x10/0x10 [ 940.546415][T11651] ? do_sys_openat2+0x17a/0x1d0 [ 940.546469][T11651] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 940.546498][T11651] ? do_syscall_64+0x100/0x230 [ 940.546529][T11651] ? do_syscall_64+0xb6/0x230 [ 940.546558][T11651] do_syscall_64+0xf3/0x230 [ 940.546585][T11651] ? clear_bhb_loop+0x35/0x90 [ 940.546618][T11651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.546647][T11651] RIP: 0033:0x7f462898cda9 [ 940.546672][T11651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.546690][T11651] RSP: 002b:00007f462985a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.546713][T11651] RAX: ffffffffffffffda RBX: 00007f4628ba5fa0 RCX: 00007f462898cda9 [ 940.546729][T11651] RDX: 0000000000000003 RSI: 0000000020000500 RDI: 0000000000000004 [ 940.546742][T11651] RBP: 00007f462985a090 R08: 0000000000000000 R09: 0000000000000000 [ 940.546754][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.546766][T11651] R13: 0000000000000000 R14: 00007f4628ba5fa0 R15: 00007ffd4a07fa38 [ 940.546796][T11651] [ 941.631726][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 941.890262][T11664] tipc: Started in network mode [ 941.895168][T11664] tipc: Node identity f2fs_bman, cluster identity 8 [ 942.122066][T11670] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1550'. [ 943.973379][T11685] syz.6.1554: attempt to access beyond end of device [ 943.973379][T11685] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 944.115949][T11685] EXT4-fs (loop6): unable to read superblock [ 944.241852][T11691] netlink: 'syz.2.1553': attribute type 8 has an invalid length. [ 946.858959][T11709] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1561'. [ 946.892141][T11709] 9pnet_fd: Insufficient options for proto=fd [ 947.201698][T11720] FAULT_INJECTION: forcing a failure. [ 947.201698][T11720] name failslab, interval 1, probability 0, space 0, times 0 [ 947.215156][T11720] CPU: 0 UID: 0 PID: 11720 Comm: syz.9.1564 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 947.215184][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 947.215197][T11720] Call Trace: [ 947.215205][T11720] [ 947.215213][T11720] dump_stack_lvl+0x241/0x360 [ 947.215257][T11720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.215291][T11720] ? __pfx__printk+0x10/0x10 [ 947.215326][T11720] ? kmem_cache_alloc_noprof+0x48/0x380 [ 947.215360][T11720] ? __pfx___might_resched+0x10/0x10 [ 947.215387][T11720] should_fail_ex+0x40a/0x550 [ 947.215414][T11720] should_failslab+0xac/0x100 [ 947.215439][T11720] ? vm_area_dup+0x27/0x290 [ 947.215467][T11720] kmem_cache_alloc_noprof+0x70/0x380 [ 947.215499][T11720] vm_area_dup+0x27/0x290 [ 947.215532][T11720] __split_vma+0x1cb/0xc50 [ 947.215572][T11720] ? __pfx___split_vma+0x10/0x10 [ 947.215606][T11720] ? mas_find+0x950/0xbb0 [ 947.215640][T11720] vms_gather_munmap_vmas+0x4c1/0x1600 [ 947.215690][T11720] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 947.215713][T11720] ? ring_buffer_lock_reserve+0x1d67/0x21c0 [ 947.215744][T11720] ? unwind_next_frame+0x18e6/0x22d0 [ 947.215791][T11720] do_vmi_align_munmap+0x3ff/0x6f0 [ 947.215814][T11720] ? __lock_acquire+0x1397/0x2100 [ 947.215849][T11720] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 947.215909][T11720] ? mas_find+0x8c0/0xbb0 [ 947.215940][T11720] do_vmi_munmap+0x24e/0x2d0 [ 947.215971][T11720] do_munmap+0x18a/0x240 [ 947.216006][T11720] ? __pfx_do_munmap+0x10/0x10 [ 947.216054][T11720] ? __pfx_down_write_killable+0x10/0x10 [ 947.216097][T11720] __se_sys_mremap+0x10c1/0x1b20 [ 947.216139][T11720] ? __pfx___se_sys_mremap+0x10/0x10 [ 947.216179][T11720] ? trace_sys_enter+0x74/0x120 [ 947.216214][T11720] ? __pfx_lock_release+0x10/0x10 [ 947.216248][T11720] ? __might_fault+0xc6/0x120 [ 947.216281][T11720] ? trace_sys_enter+0x74/0x120 [ 947.216308][T11720] ? rcu_is_watching+0x15/0xb0 [ 947.216340][T11720] ? trace_sys_enter+0x25/0x120 [ 947.216368][T11720] ? __x64_sys_mremap+0x20/0xc0 [ 947.216396][T11720] do_syscall_64+0xf3/0x230 [ 947.216424][T11720] ? clear_bhb_loop+0x35/0x90 [ 947.216458][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.216486][T11720] RIP: 0033:0x7fdaf4b8cda9 [ 947.216506][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.216523][T11720] RSP: 002b:00007fdaf29b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 947.216545][T11720] RAX: ffffffffffffffda RBX: 00007fdaf4da6160 RCX: 00007fdaf4b8cda9 [ 947.216561][T11720] RDX: 0000000000002000 RSI: 00000000006aa000 RDI: 0000000020638000 [ 947.216574][T11720] RBP: 00007fdaf29b4090 R08: 00000000205c0000 R09: 0000000000000000 [ 947.216588][T11720] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 947.216601][T11720] R13: 0000000000000000 R14: 00007fdaf4da6160 R15: 00007ffc25bec2c8 [ 947.216633][T11720] [ 948.752079][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 948.925657][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 948.940575][ T25] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 948.986582][ T25] usb 3-1: config 0 has no interface number 0 [ 948.995323][ T25] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=a9.32 [ 949.044621][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.075547][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 949.145039][ T25] usb 3-1: config 0 descriptor?? [ 949.275734][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 949.287715][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.328798][ T8] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 949.346560][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.453444][ T8] usb 1-1: Product: syz [ 949.506380][ T8] usb 1-1: Manufacturer: syz [ 949.542472][ T8] usb 1-1: SerialNumber: syz [ 949.575923][ T7938] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 949.753780][ T8] usb 1-1: config 0 descriptor?? [ 949.816008][ T29] audit: type=1326 audit(1738510991.970:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 949.911165][ T8] cdc_ether 1-1:0.0: skipping garbage [ 949.939475][ T7938] usb 4-1: Using ep0 maxpacket: 16 [ 950.003833][ T29] audit: type=1326 audit(1738510991.980:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 950.004095][ T8] usb 1-1: bad CDC descriptors [ 950.155936][ T7938] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 950.215581][ T29] audit: type=1326 audit(1738510991.980:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 950.220252][ T7938] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 950.285585][ T8] usb 1-1: unsupported MDLM descriptors [ 950.330578][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1572'. [ 950.342999][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1572'. [ 951.018933][ T29] audit: type=1326 audit(1738510991.980:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 951.059308][ T7938] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 951.201887][ T29] audit: type=1326 audit(1738510991.980:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 951.203064][ T7938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 951.389950][ T7938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.405263][ T29] audit: type=1326 audit(1738510992.000:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 951.445317][ T7938] usb 4-1: Product: syz [ 951.475525][ T7938] usb 4-1: Manufacturer: syz [ 951.495111][ T7938] usb 4-1: SerialNumber: syz [ 951.504160][ T5879] usb 1-1: USB disconnect, device number 10 [ 951.539089][ T29] audit: type=1326 audit(1738510992.000:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 951.601963][ T29] audit: type=1326 audit(1738510992.010:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 951.602936][ T25] usb 3-1: string descriptor 0 read error: -71 [ 951.602985][ T25] usb 3-1: Found multiple Units with ID 1 [ 951.612065][ T25] usb 3-1: USB disconnect, device number 37 [ 951.731992][ T29] audit: type=1326 audit(1738510992.010:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 951.732083][ T29] audit: type=1326 audit(1738510992.010:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11724 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcd118cda9 code=0x7ffc0000 [ 951.989503][ T7938] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 952.140703][T11757] autofs: Unknown parameter 'B.A9b{ ]àG8gI Wȣ'qj$~l0B0Jr1^H3;@A g [ 952.140703][T11757] 4GAQu( i"Ejwgߘq~&s!s <9E7Gm ˹B"8s\ϙc*?YFz'D2E$j3u\˩)o_oY#c-8By 4`T' [ 952.947578][ T7938] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 953.610522][ T7938] usb 4-1: USB disconnect, device number 34 [ 955.461175][T11789] ipvlan2: entered allmulticast mode [ 955.466716][T11789] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 955.476435][T11789] batman_adv: batadv0: Adding interface: ipvlan2 [ 955.482838][T11789] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.508829][T11789] batman_adv: batadv0: Interface activated: ipvlan2 [ 957.697432][T11811] FAULT_INJECTION: forcing a failure. [ 957.697432][T11811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.734605][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.9.1589 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 957.734637][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 957.734651][T11811] Call Trace: [ 957.734658][T11811] [ 957.734668][T11811] dump_stack_lvl+0x241/0x360 [ 957.734708][T11811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 957.734740][T11811] ? __pfx__printk+0x10/0x10 [ 957.734773][T11811] ? __pfx_lock_release+0x10/0x10 [ 957.734808][T11811] should_fail_ex+0x40a/0x550 [ 957.734836][T11811] _copy_from_iter+0x1e9/0x1c20 [ 957.734874][T11811] ? skb_set_owner_w+0x246/0x380 [ 957.734915][T11811] ? __pfx__copy_from_iter+0x10/0x10 [ 957.734947][T11811] ? __pfx__copy_from_iter+0x10/0x10 [ 957.734981][T11811] ? __virt_addr_valid+0x183/0x530 [ 957.735010][T11811] ? __virt_addr_valid+0x45f/0x530 [ 957.735039][T11811] ? page_copy_sane+0x46/0x260 [ 957.735072][T11811] copy_page_from_iter+0x7a/0x100 [ 957.735106][T11811] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 957.735142][T11811] tun_get_user+0x193c/0x48a0 [ 957.735189][T11811] ? __lock_acquire+0x1397/0x2100 [ 957.735224][T11811] ? __pfx_tun_get_user+0x10/0x10 [ 957.735283][T11811] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 957.735309][T11811] ? tun_get+0x1e/0x2f0 [ 957.735339][T11811] ? __pfx_lock_release+0x10/0x10 [ 957.735382][T11811] ? tun_get+0x1e/0x2f0 [ 957.735410][T11811] ? tun_get+0x27d/0x2f0 [ 957.735441][T11811] tun_chr_write_iter+0x10d/0x1f0 [ 957.735474][T11811] vfs_write+0xacf/0xd10 [ 957.735510][T11811] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 957.735541][T11811] ? __pfx_vfs_write+0x10/0x10 [ 957.735568][T11811] ? do_sys_openat2+0x17a/0x1d0 [ 957.735597][T11811] ? __fget_files+0x2a/0x410 [ 957.735625][T11811] ? __fget_files+0x2a/0x410 [ 957.735660][T11811] ksys_write+0x18f/0x2b0 [ 957.735695][T11811] ? __pfx_ksys_write+0x10/0x10 [ 957.735729][T11811] ? do_syscall_64+0x100/0x230 [ 957.735759][T11811] ? do_syscall_64+0xb6/0x230 [ 957.735787][T11811] do_syscall_64+0xf3/0x230 [ 957.735813][T11811] ? clear_bhb_loop+0x35/0x90 [ 957.735846][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.735874][T11811] RIP: 0033:0x7fdaf4b8b85f [ 957.735893][T11811] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 957.735912][T11811] RSP: 002b:00007fdaf29d5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 957.735935][T11811] RAX: ffffffffffffffda RBX: 00007fdaf4da6080 RCX: 00007fdaf4b8b85f [ 957.735950][T11811] RDX: 0000000000000fc5 RSI: 0000000020000fc0 RDI: 00000000000000c8 [ 957.735963][T11811] RBP: 00007fdaf29d5090 R08: 0000000000000000 R09: 0000000000000000 [ 957.735976][T11811] R10: 0000000000000fc5 R11: 0000000000000293 R12: 0000000000000001 [ 957.735988][T11811] R13: 0000000000000001 R14: 00007fdaf4da6080 R15: 00007ffc25bec2c8 [ 957.736017][T11811] [ 958.335309][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 958.344549][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 958.462692][T11818] random: crng reseeded on system resumption [ 960.062769][T11827] ISOFS: Unable to identify CD-ROM format. [ 960.894158][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1594'. [ 961.150335][T11832] kvm: pic: non byte write [ 961.528081][T11837] netlink: zone id is out of range [ 961.536575][T11837] netlink: zone id is out of range [ 961.541961][T11837] netlink: zone id is out of range [ 961.556509][T11837] netlink: zone id is out of range [ 961.564238][T11837] netlink: zone id is out of range [ 961.570399][T11837] netlink: set zone limit has 8 unknown bytes [ 962.462603][T11852] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 962.788347][T11852] loop9: detected capacity change from 0 to 7 [ 962.879758][T11852] Dev loop9: unable to read RDB block 7 [ 962.898825][T11852] loop9: unable to read partition table [ 962.916619][T11852] loop9: partition table beyond EOD, truncated [ 962.923995][T11852] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 966.026482][T11877] cifs: Unknown parameter 'mode' [ 970.440126][T11912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1623'. [ 970.505110][T11915] 9pnet_fd: Insufficient options for proto=fd [ 970.875704][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 970.884774][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 971.269578][T11921] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 971.293667][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 972.796512][T11938] FAULT_INJECTION: forcing a failure. [ 972.796512][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 972.809956][T11938] CPU: 0 UID: 0 PID: 11938 Comm: syz.0.1629 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 972.809987][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 972.809999][T11938] Call Trace: [ 972.810006][T11938] [ 972.810015][T11938] dump_stack_lvl+0x241/0x360 [ 972.810056][T11938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.810086][T11938] ? __wake_up_klogd+0xcc/0x110 [ 972.810107][T11938] should_fail_ex+0x40a/0x550 [ 972.810126][T11938] should_failslab+0xac/0x100 [ 972.810145][T11938] ? skb_clone+0x20c/0x390 [ 972.810159][T11938] kmem_cache_alloc_noprof+0x70/0x380 [ 972.810182][T11938] skb_clone+0x20c/0x390 [ 972.810209][T11938] __netlink_deliver_tap+0x3cc/0x7f0 [ 972.810240][T11938] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.810261][T11938] netlink_deliver_tap+0x19d/0x1b0 [ 972.810284][T11938] netlink_unicast+0x7c4/0x990 [ 972.810309][T11938] ? __pfx_netlink_unicast+0x10/0x10 [ 972.810328][T11938] ? __virt_addr_valid+0x45f/0x530 [ 972.810350][T11938] ? __phys_addr_symbol+0x2f/0x70 [ 972.810370][T11938] ? __check_object_size+0x47a/0x730 [ 972.810391][T11938] netlink_sendmsg+0x8e4/0xcb0 [ 972.810422][T11938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.810454][T11938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.810475][T11938] __sock_sendmsg+0x221/0x270 [ 972.810495][T11938] ____sys_sendmsg+0x52a/0x7e0 [ 972.810523][T11938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.810544][T11938] ? __fget_files+0x2a/0x410 [ 972.810565][T11938] ? __fget_files+0x2a/0x410 [ 972.810590][T11938] __sys_sendmsg+0x269/0x350 [ 972.810616][T11938] ? __pfx___sys_sendmsg+0x10/0x10 [ 972.810648][T11938] ? do_sys_openat2+0x17a/0x1d0 [ 972.810685][T11938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 972.810705][T11938] ? do_syscall_64+0x100/0x230 [ 972.810727][T11938] ? do_syscall_64+0xb6/0x230 [ 972.810748][T11938] do_syscall_64+0xf3/0x230 [ 972.810766][T11938] ? clear_bhb_loop+0x35/0x90 [ 972.810790][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.810810][T11938] RIP: 0033:0x7fd1a278cda9 [ 972.810824][T11938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.810836][T11938] RSP: 002b:00007fd1a354c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.810852][T11938] RAX: ffffffffffffffda RBX: 00007fd1a29a6080 RCX: 00007fd1a278cda9 [ 972.810870][T11938] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000005 [ 972.810879][T11938] RBP: 00007fd1a354c090 R08: 0000000000000000 R09: 0000000000000000 [ 972.810888][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.810897][T11938] R13: 0000000000000000 R14: 00007fd1a29a6080 R15: 00007ffee6eecc28 [ 972.810918][T11938] [ 972.811025][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 975.353893][T11962] Cannot find add_set index 0 as target [ 977.585150][ T5880] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 977.907197][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 977.925302][ T5880] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 977.949675][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 977.983212][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 978.008149][ T5880] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 978.035419][ T5880] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 978.119702][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.763011][ T5880] usb 1-1: GET_CAPABILITIES returned 0 [ 978.780450][ T5880] usbtmc 1-1:16.0: can't read capabilities [ 978.971645][ T7997] usb 1-1: USB disconnect, device number 11 [ 979.168280][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1647'. [ 981.973753][T12006] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1649'. [ 983.632022][T12052] --map-set only usable from mangle table [ 984.341498][T12046] kvm: pic: non byte write [ 984.627350][T12061] --map-set only usable from mangle table [ 985.993170][T12080] kvm: pic: non byte write [ 986.355554][ T5880] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 986.525456][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 986.541316][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.570135][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.594314][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 986.627658][ T5880] usb 1-1: New USB device found, idVendor=056a, idProduct=04b5, bcdDevice= 0.00 [ 986.654745][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.688113][ T5880] usb 1-1: config 0 descriptor?? [ 987.280818][ T5880] wacom 0003:056A:04B5.000A: Unknown device_type for 'HID 056a:04b5'. Ignoring. [ 987.965525][ T5880] usb 1-1: USB disconnect, device number 12 [ 990.980811][T12127] FAULT_INJECTION: forcing a failure. [ 990.980811][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 990.996020][T12127] CPU: 0 UID: 0 PID: 12127 Comm: syz.2.1685 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 990.996054][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 990.996067][T12127] Call Trace: [ 990.996074][T12127] [ 990.996084][T12127] dump_stack_lvl+0x241/0x360 [ 990.996127][T12127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.996162][T12127] ? __pfx__printk+0x10/0x10 [ 990.996196][T12127] ? __kmalloc_noprof+0xb5/0x4c0 [ 990.996225][T12127] ? __pfx___might_resched+0x10/0x10 [ 990.996254][T12127] should_fail_ex+0x40a/0x550 [ 990.996282][T12127] should_failslab+0xac/0x100 [ 990.996309][T12127] __kmalloc_noprof+0xdd/0x4c0 [ 990.996337][T12127] ? _ib_alloc_device+0x3b/0x670 [ 990.996373][T12127] _ib_alloc_device+0x3b/0x670 [ 990.996415][T12127] rxe_net_add+0x21/0xf0 [ 990.996439][T12127] rxe_newlink+0xde/0x1a0 [ 990.996471][T12127] nldev_newlink+0x5c0/0x640 [ 990.996501][T12127] ? __pfx_nldev_newlink+0x10/0x10 [ 990.996607][T12127] ? down_read+0x82b/0xa40 [ 990.996631][T12127] ? __lock_acquire+0x1397/0x2100 [ 990.996664][T12127] ? cap_capable+0x139/0x450 [ 990.996687][T12127] ? safesetid_security_capable+0xb2/0x1d0 [ 990.996719][T12127] ? bpf_lsm_capable+0x9/0x10 [ 990.996739][T12127] ? security_capable+0x7e/0x2d0 [ 990.996767][T12127] ? __pfx_nldev_newlink+0x10/0x10 [ 990.996790][T12127] rdma_nl_rcv+0x6dd/0x9e0 [ 990.996823][T12127] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 990.996847][T12127] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 990.996872][T12127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 990.996906][T12127] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 990.996937][T12127] netlink_unicast+0x7f6/0x990 [ 990.996968][T12127] ? __pfx_netlink_unicast+0x10/0x10 [ 990.996989][T12127] ? security_netlink_send+0x38/0x280 [ 990.997011][T12127] ? __sanitizer_cov_trace_pc+0x11/0x70 [ 990.997034][T12127] netlink_sendmsg+0x8e4/0xcb0 [ 990.997071][T12127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.997107][T12127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.997132][T12127] __sock_sendmsg+0x221/0x270 [ 990.997156][T12127] ____sys_sendmsg+0x52a/0x7e0 [ 990.997189][T12127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.997214][T12127] ? __fget_files+0x2a/0x410 [ 990.997239][T12127] ? __fget_files+0x2a/0x410 [ 990.997268][T12127] __sys_sendmsg+0x269/0x350 [ 990.997299][T12127] ? __pfx___sys_sendmsg+0x10/0x10 [ 990.997347][T12127] ? __pfx_sched_clock_cpu+0x10/0x10 [ 990.997382][T12127] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 990.997409][T12127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 990.997431][T12127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 990.997452][T12127] ? __irq_exit_rcu+0x105/0x220 [ 990.997471][T12127] ? do_syscall_64+0xb6/0x230 [ 990.997496][T12127] do_syscall_64+0xf3/0x230 [ 990.997517][T12127] ? clear_bhb_loop+0x35/0x90 [ 990.997545][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.997568][T12127] RIP: 0033:0x7fbcd118cda9 [ 990.997584][T12127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.997599][T12127] RSP: 002b:00007fbcd1fd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.997617][T12127] RAX: ffffffffffffffda RBX: 00007fbcd13a6080 RCX: 00007fbcd118cda9 [ 990.997631][T12127] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 990.997641][T12127] RBP: 00007fbcd1fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 990.997652][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.997662][T12127] R13: 0000000000000000 R14: 00007fbcd13a6080 R15: 00007fff610c3fa8 [ 990.997686][T12127] [ 990.998876][T12127] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 993.271286][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.504562][T12156] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 994.504706][T12156] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 994.504756][T12156] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 998.459617][T12198] netlink: zone id is out of range [ 998.481770][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 998.492948][T12198] netlink: zone id is out of range [ 998.522640][T12198] netlink: zone id is out of range [ 998.585192][T12198] netlink: zone id is out of range [ 998.620504][T12198] netlink: zone id is out of range [ 998.646620][T12198] netlink: set zone limit has 8 unknown bytes [ 1001.810027][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 1001.819805][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 1002.297061][T12227] dlm: no local IP address has been set [ 1002.303132][T12227] dlm: cannot start dlm midcomms -107 [ 1002.606810][ T7997] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1003.495791][ T7997] usb 10-1: Using ep0 maxpacket: 32 [ 1003.511365][ T7997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.535567][ T7997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.598383][ T7997] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1003.617977][ T7997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.642972][ T7997] usb 10-1: config 0 descriptor?? [ 1003.674050][ T7997] hub 10-1:0.0: USB hub found [ 1003.800567][T12241] netlink: zone id is out of range [ 1003.807528][T12241] netlink: zone id is out of range [ 1003.814084][T12241] netlink: zone id is out of range [ 1003.823966][T12241] netlink: zone id is out of range [ 1003.833068][T12241] netlink: zone id is out of range [ 1003.844148][T12241] netlink: set zone limit has 8 unknown bytes [ 1003.879361][ T7997] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 1004.208282][ T7997] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1005.555865][ T5878] usb 10-1: USB disconnect, device number 18 [ 1006.753233][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 1006.762871][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 1012.530919][T12309] Cannot find add_set index 0 as target [ 1016.190254][ T1338] Bluetooth: hci3: Frame reassembly failed (-84) [ 1017.738125][T12338] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1748'. [ 1017.807392][T12338] 9pnet_fd: Insufficient options for proto=fd [ 1017.985725][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1017.985768][T11431] Bluetooth: hci3: command 0x1003 tx timeout [ 1020.852691][T12360] --map-set only usable from mangle table [ 1022.715524][T12376] 9pnet: Could not find request transport:  [ 1026.555551][T12424] 9pnet: Could not find request transport:  [ 1029.107802][T11431] Bluetooth: hci3: command 0x1003 tx timeout [ 1029.116117][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1029.900628][ T5880] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1030.186090][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 1030.207001][ T5880] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1030.214811][ T5880] usb 10-1: no configurations [ 1030.242924][ T5880] usb 10-1: can't read configurations, error -22 [ 1031.175711][ T5880] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1031.411524][T12474] 9pnet: Could not find request transport:  [ 1032.325389][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 1032.402827][ T5880] usb 10-1: device descriptor read/all, error -71 [ 1032.403079][ T5880] usb usb10-port1: attempt power cycle [ 1033.339018][T12492] --map-set only usable from mangle table [ 1033.892821][T12493] xt_connbytes: Forcing CT accounting to be enabled [ 1033.900124][T12493] --map-set only usable from mangle table [ 1037.156662][T12512] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1798'. [ 1039.234323][T12522] 9pnet: Could not find request transport:  [ 1041.198143][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1809'. [ 1041.409729][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.409811][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.903173][T12576] FAULT_INJECTION: forcing a failure. [ 1043.903173][T12576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.025760][T12576] CPU: 0 UID: 0 PID: 12576 Comm: syz.2.1815 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 1044.025792][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1044.025806][T12576] Call Trace: [ 1044.025814][T12576] [ 1044.025822][T12576] dump_stack_lvl+0x241/0x360 [ 1044.025865][T12576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.025899][T12576] ? __pfx__printk+0x10/0x10 [ 1044.025931][T12576] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.025959][T12576] ? __pfx_lock_release+0x10/0x10 [ 1044.025986][T12576] ? _raw_spin_lock_irq+0xdf/0x120 [ 1044.026014][T12576] should_fail_ex+0x40a/0x550 [ 1044.026043][T12576] _copy_from_user+0x2d/0xb0 [ 1044.026064][T12576] restore_altstack+0x99/0x150 [ 1044.026091][T12576] ? __pfx_restore_altstack+0x10/0x10 [ 1044.026122][T12576] ? __task_pid_nr_ns+0x28/0x450 [ 1044.026158][T12576] __do_sys_rt_sigreturn+0x194/0x280 [ 1044.026185][T12576] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1044.026211][T12576] ? do_syscall_64+0x100/0x230 [ 1044.026241][T12576] ? do_syscall_64+0xb6/0x230 [ 1044.026280][T12576] do_syscall_64+0xf3/0x230 [ 1044.026307][T12576] ? clear_bhb_loop+0x35/0x90 [ 1044.026340][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.026368][T12576] RIP: 0033:0x7fbcd1128fa9 [ 1044.026386][T12576] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1044.026402][T12576] RSP: 002b:00007fbcd1ff6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1044.026425][T12576] RAX: ffffffffffffffda RBX: 00007fbcd13a5fa0 RCX: 00007fbcd1128fa9 [ 1044.026440][T12576] RDX: 00007fbcd1ff6a80 RSI: 00007fbcd1ff6bb0 RDI: 0000000000000021 [ 1044.026455][T12576] RBP: 00007fbcd1ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.026467][T12576] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1044.026480][T12576] R13: 0000000000000000 R14: 00007fbcd13a5fa0 R15: 00007fff610c3fa8 [ 1044.026510][T12576] [ 1047.055094][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 1052.394934][T12635] blktrace: Concurrent blktraces are not allowed on loop8 [ 1053.440018][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1833'. [ 1054.726181][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.066277][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 1057.066322][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 1058.450039][T12680] 9pnet: Could not find request transport:  [ 1058.778028][T12692] blktrace: Concurrent blktraces are not allowed on loop8 [ 1061.449653][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1853'. [ 1061.917707][T12715] usb usb8: usbfs: process 12715 (syz.0.1854) did not claim interface 0 before use [ 1063.067270][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 1063.113061][ T9874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.156142][ T9874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.515973][ T5944] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1063.816541][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 1063.835240][ T5944] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1063.843972][ T5944] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1063.856290][ T5944] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1064.082285][ T5944] usb 1-1: config 250 has no interface number 0 [ 1064.139478][ T5944] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1064.187186][ T5944] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1064.225535][ T5944] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1064.263233][ T5944] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1064.324342][ T5944] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1064.372310][ T5944] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1064.409054][ T5944] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1064.449652][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1064.515094][ T5944] usb 1-1: Product: syz [ 1064.552960][ T5944] usb 1-1: SerialNumber: syz [ 1064.699922][ T5944] hub 1-1:250.228: bad descriptor, ignoring hub [ 1064.744047][ T5944] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1064.948465][ T5944] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1065.098699][ T5944] usb 1-1: USB disconnect, device number 13 [ 1065.117448][ T5944] usblp0: removed [ 1065.385573][T12750] blktrace: Concurrent blktraces are not allowed on loop8 [ 1066.325624][ T8849] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1066.389875][T12757] 9pnet_fd: Insufficient options for proto=fd [ 1066.489306][ T8849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.554036][ T8849] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1066.592630][ T8849] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1066.604093][T12759] 9pnet: Could not find request transport:  [ 1066.637898][ T8849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.686920][ T8849] usb 3-1: config 0 descriptor?? [ 1069.540761][ T5878] usb 3-1: USB disconnect, device number 38 [ 1070.607197][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 1070.619378][T12801] 9pnet_fd: Insufficient options for proto=fd [ 1070.624092][T12804] blktrace: Concurrent blktraces are not allowed on loop8 [ 1071.683096][T12805] 9pnet: Could not find request transport:  [ 1074.046193][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1886'. [ 1074.810113][T12831] Cannot find add_set index 0 as target [ 1079.202599][T12856] blktrace: Concurrent blktraces are not allowed on loop8 [ 1083.972639][T12881] FAULT_INJECTION: forcing a failure. [ 1083.972639][T12881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.024621][T12881] CPU: 0 UID: 0 PID: 12881 Comm: syz.6.1902 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 1084.024665][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1084.024678][T12881] Call Trace: [ 1084.024687][T12881] [ 1084.024696][T12881] dump_stack_lvl+0x241/0x360 [ 1084.024739][T12881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1084.024773][T12881] ? __pfx__printk+0x10/0x10 [ 1084.024807][T12881] ? __pfx_lock_release+0x10/0x10 [ 1084.024834][T12881] ? __lock_acquire+0x1397/0x2100 [ 1084.024868][T12881] should_fail_ex+0x40a/0x550 [ 1084.024896][T12881] _copy_from_user+0x2d/0xb0 [ 1084.024918][T12881] kstrtouint_from_user+0xc6/0x190 [ 1084.024949][T12881] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1084.024981][T12881] ? __pfx_lock_acquire+0x10/0x10 [ 1084.025019][T12881] proc_fail_nth_write+0xaa/0x2d0 [ 1084.025045][T12881] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1084.025068][T12881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1084.025099][T12881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1084.025131][T12881] vfs_write+0x29f/0xd10 [ 1084.025166][T12881] ? fdget_pos+0x254/0x320 [ 1084.025207][T12881] ? __pfx_vfs_write+0x10/0x10 [ 1084.025236][T12881] ? __asan_memset+0x23/0x50 [ 1084.025272][T12881] ? __fget_files+0x2a/0x410 [ 1084.025300][T12881] ? __fget_files+0x395/0x410 [ 1084.025324][T12881] ? __fget_files+0x2a/0x410 [ 1084.025361][T12881] ksys_write+0x18f/0x2b0 [ 1084.025397][T12881] ? __pfx_ksys_write+0x10/0x10 [ 1084.025429][T12881] ? __secure_computing+0x125/0x370 [ 1084.025471][T12881] do_syscall_64+0xf3/0x230 [ 1084.025499][T12881] ? clear_bhb_loop+0x35/0x90 [ 1084.025533][T12881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.025561][T12881] RIP: 0033:0x7f462898b85f [ 1084.025581][T12881] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1084.025606][T12881] RSP: 002b:00007f462985a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1084.025629][T12881] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f462898b85f [ 1084.025650][T12881] RDX: 0000000000000001 RSI: 00007f462985a0a0 RDI: 0000000000000005 [ 1084.025663][T12881] RBP: 00007f462985a090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.025676][T12881] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1084.025689][T12881] R13: 0000000000000000 R14: 00007f4628ba5fa0 R15: 00007ffd4a07fa38 [ 1084.025721][T12881] [ 1090.110790][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1914'. [ 1092.344212][T12950] --map-set only usable from mangle table [ 1092.617808][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 1092.627137][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'. [ 1093.595728][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1097.279766][T12984] --map-set only usable from mangle table [ 1203.885286][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1203.892310][ C1] rcu: 0-...!: (2 ticks this GP) idle=492c/1/0x4000000000000000 softirq=49213/49215 fqs=0 [ 1203.904203][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1323/1:b..l [ 1203.912192][ C1] rcu: (detected by 1, t=10506 jiffies, g=61293, q=122 ncpus=2) [ 1203.919953][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1203.919996][ C0] NMI backtrace for cpu 0 [ 1203.920012][ C0] CPU: 0 UID: 0 PID: 12994 Comm: syz.6.1934 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 1203.920032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1203.920044][ C0] RIP: 0010:taprio_set_budgets+0x1e1/0x370 [ 1203.920069][ C0] Code: 97 34 f8 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 b7 94 34 f8 48 89 e8 31 d2 48 f7 33 <48> 89 c5 bf 11 00 00 00 4c 89 fe e8 6f 8b d0 f7 49 83 ff 10 0f 87 [ 1203.920084][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000046 [ 1203.920099][ C0] RAX: 0000000000000000 RBX: ffff8880284122e0 RCX: dffffc0000000000 [ 1203.920112][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880284122e0 [ 1203.920123][ C0] RBP: 0000000000000000 R08: ffff8880284122e7 R09: 1ffff1100508245c [ 1203.920135][ C0] R10: dffffc0000000000 R11: ffffed100508245d R12: 0000000000000000 [ 1203.920147][ C0] R13: ffff88802fde1c00 R14: ffff88802fde1c00 R15: 0000000000000000 [ 1203.920159][ C0] FS: 00007f46298396c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1203.920174][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1203.920185][ C0] CR2: 0000000020003c80 CR3: 00000000587f6000 CR4: 00000000003526f0 [ 1203.920200][ C0] DR0: 0400000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 1203.920211][ C0] DR3: 0000000000000010 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1203.920221][ C0] Call Trace: [ 1203.920230][ C0] [ 1203.920239][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1203.920258][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1203.920282][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1203.920299][ C0] ? nmi_handle+0x2a/0x5a0 [ 1203.920331][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1203.920350][ C0] ? nmi_handle+0x14f/0x5a0 [ 1203.920373][ C0] ? nmi_handle+0x2a/0x5a0 [ 1203.920396][ C0] ? taprio_set_budgets+0x1e1/0x370 [ 1203.920413][ C0] ? default_do_nmi+0x63/0x160 [ 1203.920440][ C0] ? exc_nmi+0x123/0x1f0 [ 1203.920465][ C0] ? end_repeat_nmi+0xf/0x53 [ 1203.920495][ C0] ? taprio_set_budgets+0x1e1/0x370 [ 1203.920520][ C0] ? taprio_set_budgets+0x1e1/0x370 [ 1203.920538][ C0] ? taprio_set_budgets+0x1e1/0x370 [ 1203.920555][ C0] [ 1203.920560][ C0] [ 1203.920571][ C0] advance_sched+0x98d/0xca0 [ 1203.920594][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1203.920610][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 1203.920645][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1203.920669][ C0] ? sched_clock+0x4a/0x70 [ 1203.920687][ C0] ? read_tsc+0x9/0x20 [ 1203.920704][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1203.920728][ C0] hrtimer_interrupt+0x403/0xa40 [ 1203.920765][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1203.920791][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1203.920812][ C0] [ 1203.920817][ C0] [ 1203.920823][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1203.920848][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 1203.920868][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 3e 2d 33 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 63 5b 9d f5 65 8b 05 64 97 13 74 85 c0 74 43 48 c7 04 24 0e 36 [ 1203.920882][ C0] RSP: 0018:ffffc9000b91fba0 EFLAGS: 00000206 [ 1203.920896][ C0] RAX: 614bcaeee3ffc100 RBX: 1ffff92001723f78 RCX: ffffffff819b3cba [ 1203.920908][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aa680 RDI: 0000000000000001 [ 1203.920920][ C0] RBP: ffffc9000b91fc30 R08: ffffffff942c3847 R09: 1ffffffff2858708 [ 1203.920932][ C0] R10: dffffc0000000000 R11: fffffbfff2858709 R12: dffffc0000000000 [ 1203.920945][ C0] R13: 1ffff92001723f74 R14: ffffc9000b91fbc0 R15: 0000000000000246 [ 1203.920962][ C0] ? mark_lock+0x9a/0x360 [ 1203.920987][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1203.921008][ C0] ? read_tsc+0x9/0x20 [ 1203.921028][ C0] clock_was_set+0x686/0x810 [ 1203.921055][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 1203.921079][ C0] ? do_settimeofday64+0x328/0x5e0 [ 1203.921096][ C0] ? timekeeping_update_from_shadow+0x308/0x3b0 [ 1203.921117][ C0] do_settimeofday64+0x343/0x5e0 [ 1203.921134][ C0] ? irqentry_exit+0x63/0x90 [ 1203.921157][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 1203.921175][ C0] ? l1oip_dctrl+0x46a/0xa90 [ 1203.921192][ C0] ? do_sys_settimeofday64+0xcf/0x250 [ 1203.921210][ C0] ? do_sys_settimeofday64+0x159/0x250 [ 1203.921232][ C0] __x64_sys_clock_settime+0x23a/0x280 [ 1203.921255][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1203.921282][ C0] do_syscall_64+0xf3/0x230 [ 1203.921304][ C0] ? clear_bhb_loop+0x35/0x90 [ 1203.921329][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.921352][ C0] RIP: 0033:0x7f462898cda9 [ 1203.921368][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.921382][ C0] RSP: 002b:00007f4629839038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1203.921398][ C0] RAX: ffffffffffffffda RBX: 00007f4628ba6080 RCX: 00007f462898cda9 [ 1203.921410][ C0] RDX: 0000000000000000 RSI: 0000000020003c80 RDI: 0000000000000000 [ 1203.921421][ C0] RBP: 00007f4628a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.921431][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1203.921441][ C0] R13: 0000000000000000 R14: 00007f4628ba6080 R15: 00007ffd4a07fa38 [ 1203.921461][ C0] [ 1203.921988][ C1] task:kworker/u8:8 state:R running task stack:20176 pid:1323 tgid:1323 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1204.460935][ C1] Workqueue: bat_events batadv_nc_worker [ 1204.466646][ C1] Call Trace: [ 1204.469948][ C1] [ 1204.472911][ C1] __schedule+0x18bc/0x4c40 [ 1204.477473][ C1] ? __pfx___schedule+0x10/0x10 [ 1204.482358][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1204.488386][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1204.493709][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1204.498854][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1204.504624][ C1] irqentry_exit+0x5e/0x90 [ 1204.509072][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1204.515088][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 1204.520407][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9a a4 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1204.540128][ C1] RSP: 0018:ffffc900041df940 EFLAGS: 00000206 [ 1204.546232][ C1] RAX: 0000000000000001 RBX: 1ffff9200083bf34 RCX: ffff8880279846e8 [ 1204.554352][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fac60 [ 1204.562370][ C1] RBP: ffffc900041dfaa0 R08: ffffffff942c3847 R09: 1ffffffff2858708 [ 1204.570374][ C1] R10: dffffc0000000000 R11: fffffbfff2858709 R12: 1ffff9200083bf30 [ 1204.578379][ C1] R13: dffffc0000000000 R14: ffffc900041df9a0 R15: 0000000000000246 [ 1204.586413][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1204.591483][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1204.596462][ C1] ? __pfx_lock_release+0x10/0x10 [ 1204.601525][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1204.607552][ C1] batadv_nc_worker+0xec/0x610 [ 1204.612359][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1204.617341][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1204.622353][ C1] ? process_scheduled_works+0x976/0x1840 [ 1204.628120][ C1] process_scheduled_works+0xa66/0x1840 [ 1204.633729][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1204.639759][ C1] ? assign_work+0x364/0x3d0 [ 1204.644393][ C1] worker_thread+0x870/0xd30 [ 1204.649036][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1204.654103][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1204.659255][ C1] kthread+0x7a9/0x920 [ 1204.663362][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.667995][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1204.673144][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.677773][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.682407][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.687035][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1204.692269][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1204.697506][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.702135][ C1] ret_from_fork+0x4b/0x80 [ 1204.706585][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.711211][ C1] ret_from_fork_asm+0x1a/0x30 [ 1204.716026][ C1] [ 1204.719070][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g61293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1204.730292][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1204.740285][ C1] rcu: RCU grace-period kthread stack dump: [ 1204.746192][ C1] task:rcu_preempt state:R running task stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1204.759732][ C1] Call Trace: [ 1204.763046][ C1] [ 1204.766096][ C1] __schedule+0x18bc/0x4c40 [ 1204.770674][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1204.776618][ C1] ? __pfx___schedule+0x10/0x10 [ 1204.781510][ C1] ? __pfx_lock_release+0x10/0x10 [ 1204.786580][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1204.791545][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1204.797911][ C1] ? schedule+0x90/0x320 [ 1204.802179][ C1] schedule+0x14b/0x320 [ 1204.806368][ C1] schedule_timeout+0x15a/0x290 [ 1204.811245][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1204.816660][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1204.821993][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1204.827575][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1204.832811][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1204.837698][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1204.842937][ C1] ? rcu_gp_init+0x1256/0x1630 [ 1204.847741][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1204.852758][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1204.858082][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1204.864014][ C1] ? finish_swait+0xd4/0x1e0 [ 1204.868637][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1204.873872][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1204.878503][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1204.883737][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1204.889672][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1204.894736][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1204.899978][ C1] kthread+0x7a9/0x920 [ 1204.904082][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.908709][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1204.913949][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.918571][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.923205][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.927830][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1204.933060][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1204.938288][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.942923][ C1] ret_from_fork+0x4b/0x80 [ 1204.947377][ C1] ? __pfx_kthread+0x10/0x10 [ 1204.952002][ C1] ret_from_fork_asm+0x1a/0x30 [ 1204.956813][ C1] [ 1204.959857][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1204.966202][ C1] CPU: 1 UID: 0 PID: 5939 Comm: kworker/u8:11 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 1204.976813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1204.986899][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1204.993444][ C1] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 1205.000250][ C1] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 b0 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 60 e4 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 1205.019889][ C1] RSP: 0018:ffffc90004917640 EFLAGS: 00000293 [ 1205.025997][ C1] RAX: ffffffff81b37835 RBX: 1ffff110170c8c6d RCX: ffff88807c6a9e00 [ 1205.034003][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1205.042001][ C1] RBP: ffffc90004917840 R08: ffffffff81b37800 R09: 1ffffffff2858708 [ 1205.050004][ C1] R10: dffffc0000000000 R11: fffffbfff2858709 R12: ffff8880b873f988 [ 1205.058009][ C1] R13: ffff8880b8646368 R14: ffff8880b873f980 R15: 0000000000000000 [ 1205.066014][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1205.074977][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1205.081588][ C1] CR2: 00007fd1a34d56c0 CR3: 000000000e738000 CR4: 00000000003526f0 [ 1205.089594][ C1] DR0: 0400000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 1205.097599][ C1] DR3: 0000000000000010 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1205.105599][ C1] Call Trace: [ 1205.108904][ C1] [ 1205.111775][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1205.118149][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1205.123832][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1205.129695][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1205.135988][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1205.141411][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1205.147098][ C1] ? update_process_times+0x242/0x2f0 [ 1205.152510][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1205.157654][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1205.163147][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 1205.168578][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1205.174331][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 1205.179299][ C1] ? read_tsc+0x9/0x20 [ 1205.183399][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1205.189510][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1205.194686][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1205.200887][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1205.206732][ C1] [ 1205.209684][ C1] [ 1205.212645][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1205.218849][ C1] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 1205.225044][ C1] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 1205.231241][ C1] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 1205.237444][ C1] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 1205.243556][ C1] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 1205.249673][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 1205.255783][ C1] ? perf_event_text_poke+0x258/0x330 [ 1205.261193][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1205.267559][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1205.273317][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1205.279283][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1205.284336][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1205.289490][ C1] text_poke_bp_batch+0x726/0xb30 [ 1205.294558][ C1] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 1205.300668][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1205.306259][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1205.312540][ C1] ? process_scheduled_works+0x976/0x1840 [ 1205.318293][ C1] text_poke_finish+0x30/0x50 [ 1205.323002][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1205.329016][ C1] static_key_disable_cpuslocked+0xd2/0x1c0 [ 1205.334955][ C1] static_key_disable+0x1a/0x20 [ 1205.339846][ C1] toggle_allocation_gate+0x1bf/0x260 [ 1205.345265][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1205.351191][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1205.357604][ C1] process_scheduled_works+0xa66/0x1840 [ 1205.363211][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1205.369254][ C1] ? assign_work+0x364/0x3d0 [ 1205.373894][ C1] worker_thread+0x870/0xd30 [ 1205.378542][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1205.383608][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1205.388772][ C1] kthread+0x7a9/0x920 [ 1205.392899][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.397536][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1205.402679][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.407311][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.411941][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.416570][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1205.421800][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1205.427033][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.431662][ C1] ret_from_fork+0x4b/0x80 [ 1205.436111][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.440736][ C1] ret_from_fork_asm+0x1a/0x30 [ 1205.445546][ C1]