last executing test programs: 7m22.336089507s ago: executing program 3 (id=2589): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2808b08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x50) creat(0x0, 0x109) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m20.504192796s ago: executing program 3 (id=2596): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x20682) r1 = dup(r0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) listen(0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x193900, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40046f41, 0x20000502) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xc0842) r9 = dup(r8) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x401}, &(0x7f0000000280)=0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r1}, 0x8) (async) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0xfa5, 0x0}) 7m18.472084717s ago: executing program 3 (id=2607): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0xfc, 0xfff00002}, {0x16, 0x0, 0x40}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 7m16.716191983s ago: executing program 3 (id=2615): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8, &(0x7f00000002c0), &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000080601010000000000000000000000000500010007"], 0x1c}}, 0x0) 7m12.496925059s ago: executing program 3 (id=2627): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) syz_open_procfs(0x0, &(0x7f0000002300)='auxv\x00') sendmmsg$unix(r2, &(0x7f00000083c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000240)="08d10227dd7b30644ba8a3700feb78c6cf4a3f1db7f2becfe5213540cd83f4baf720bec0dc6cb55f85f21c8fe4838523117d6e63bb5ca10d983491ba3e21b9743daf1419c0d67d18dd8ce3c2ba3eb9275cf8acc1c59a848e038a27413da18bfc7953a62a0648e580ff746b432a907969", 0x70}, {&(0x7f0000000340)="965bcdc6550475b08be191d6ee3a1ee8df22f871572e2fd4b6ae50d4fc9fb6dfdd9d0636687dbc854f60972a0138b4b99dff6b4d9507c71cfd6979f3ef906b02ceb775795ba4a1e7d66b743864b96e61f847bf2c593167b7c1650315dd11a6b78c0f1b4a6918", 0x66}, {&(0x7f0000000680)="91d3a3b59bf4e6829142a23dd2253038103992eba5df6552653d784a93c8b33209a2b4651f44aac0ff0b8c3f37af7be2aed866b2e29772a87bb74b82a83f52756deb4037cd909af9dd21054b31ee50227a5a7d2e1b36630b8230c250bab50262fd1b386d07fcc6bc538eaa4acd883cde40d98660323330308eef2500ae4684cb037df73c1cca495b62cc251a34b2f40eaa15bda9306786f69ba47fd13d663a6bee61cc1f25366b86e11c22391fcb87b1cd4ba7cd91d0e9de7f6b2010b3d7365d132cd894ab5d826a1b6f276f48a63fbc7a9b31f901d22925220d72b819f8f22a09958f5d69c05d2539cba889ba1728e38618e4", 0xf3}, {&(0x7f0000000780)="e8161211a1f122960e2f1b953ff5920bc8a13363dc8d2abc741ae5d17792cc13263d57c7bd4f4dcf5f359907ec3b0e2e3380d0a56b824b148399db50e1f81caecb06e93b98205efc51f18da77dd55342678feead5b8255d3effd0cb1f351d0a23138410c84976b5038f0368acc62b13e4b58e8307a96062f12b6dda1e66ddf4c680eec67dc0ded4d25c0e5303276a6d09efe810f72979510cf9847a0085fbf5e5f67c91e768f42e2d27719ba7607df6508149822c43b923b53877241ca4d718a61ea204af23400f7329c85120d7ecd668742cb8598c2863e00dd82006478a61a3c35216fd5134109", 0xe8}, {&(0x7f0000000100)="fc3c65d79c22c4f0", 0x8}, {&(0x7f00000002c0)="65eac56011e85d4bcc024153", 0xc}, {&(0x7f0000000980)="5fa97dac3cde62a18f3019eb8ae46c4a0e3e8f7c91e46c4af9e29efb784c7847042305a55a9e8ba502252ad9a71d0a9795f399971d528aefc332a3a24321194e464d255b4975eb18519c35cf582df6e0055a96cd254f68160e6e273a62ae0592e953abc98bd59643ce0c78b670853729adb6b170f3c07f1fa04b2498c6e29f52b72afeb5f3c489cde2b262ae65c052de86d6069c622cec745446af23404b47d92549ffdb790a62c6bb823e", 0xab}, {&(0x7f0000000a40)="74928790c32a63408e693909369d18d311950b17c3e9762ed93378820cd7e7e2bf4c35ed713f6510d45454928c5607b3e53aeae0902913a47a7b48422d8d1f4a3b9dfc87a73b0a54415f456b16b024eed4ea1d18988394551b8f157389cc807c108af337bcffdeea538d6af223197f768a6f650e9cbbbc4b1f015dcff65efa93b5513e5163bf49846e79b1583a93cdb0f4dafbb4132e621677f94ff4a21ddbf5294b2a4e8faaea8d88420139844be16acfe7029c69c6e8ba8f5da91a37c96ec68b93bda5c8c6ae5d4d2910e233b50d374387767c15e70afbacbb2ece7ea4686c4e219ecbad989044a682", 0xea}], 0x8, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r5}}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r2, r1, r1]}}], 0xc8, 0x40094}}, {{&(0x7f00000025c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000002640)="96f99fa90f61e1a9dd9edea336b326e4fc63af3bd15510eafd8b4c3749b3634e4f02ae52ea6d1c70407f9fa1b10a9851368f32a5cc2646dc2f37dd779e2c8170d6993404814071e90ccfd522783a5189c8c2022b141d134f1d765b478682735e322be1348312c84dc6027b75aeb527fa1da6aa567b77be6702d7d20c448a4baed313f27205de230c3a1c48d3603aa2ac2e9a30e19b6eb785c337fa531e13b8d6d11a11139fe676e26d65e7672413d3b02f15cd576b604874bb5f1be761b316e3da23797230d588db97", 0xc9}], 0x1, 0x0, 0x0, 0x10}}, {{&(0x7f0000002740)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000000400)="f9597b6808dee7b9c82159debcbc76066b898e5f735a71086a5e50fa28588992a191c3cf309dc3a3f4ad31ae24564ce90e44345a3d0ad47d0d88cfb9903c78edcbc15427f914", 0x46}], 0x1, &(0x7f0000002880)=[@rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c}}], 0x88, 0x10}}, {{0x0, 0x0, &(0x7f0000004280), 0x0, &(0x7f00000042c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(0x0, 0xd) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000bc0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;=\x82\'\xf7)\n\xa9\xc1\xc8\x97\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\x8d\xf4\xa2\xc3\x9e=\xa0 \xe6\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\x00'/392, 0x3) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0x78) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000000c0)=0x8, 0x4) r8 = socket$unix(0x1, 0x2, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendfile(r6, r7, &(0x7f00000001c0), 0x10001) fcntl$addseals(r7, 0x409, 0x8) fallocate(r7, 0x3, 0x0, 0x3) 7m11.370356731s ago: executing program 3 (id=2631): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r3 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000400000014000400"], 0x58}}, 0x0) 6m55.874866492s ago: executing program 32 (id=2631): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r3 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000400000014000400"], 0x58}}, 0x0) 16.029383198s ago: executing program 1 (id=3707): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000c050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001", @ANYBLOB="49237c578ace62a7129ec530d34231f37075a6e6eb7d92ef54159623e816e9e112baabdd5f902bf612a6cd389de5432251ddce36e904292f46498bea3cf3bbb0dc00bd1a384ae085e05268013b02e56cf5216e8936ada2659fe5ff5bb4084c2f1592fab8a39f49277298a896fc3c241f9099d6c4f0c9862ba0a51949879b8267e7b06147006ed6d19e1024da01f9965eee94e04c73d2131f7e52dafbeb2616262f14465ade0ee6be077875910c730911ed54e0ecc1d2cd50aaf3c5ea1d898a214b9d573e4003152bcd62f57c64e54badf9a6a4bef01cdeb6d84b5638ee76ba9677ef5a14e067fdf27f62d2a265fe38584c7ddd0eb2"], 0x48) r1 = dup(r0) fsmount(r1, 0x1, 0xfb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010000220000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800080004000000"], 0x3c}}, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x58c9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_netlabel(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB='0000'], 0x56) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xdb42) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000001c0)) close_range(r8, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) syz_pidfd_open(r9, 0x0) 14.116217902s ago: executing program 4 (id=3715): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104c000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000100)={0x2, r5, 0xd9f, 0x1, 0x9, 0x1, 0x1d40, 0x9, 0x5}) 14.075128802s ago: executing program 1 (id=3716): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000540)={0x1d, r4, 0x1, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xff, 0x4}, 0x1}, 0x18) sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x800) 13.37230106s ago: executing program 4 (id=3718): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d98c2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x10000000009}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r1, &(0x7f00000000c0), 0x0, 0x0, 0x1) 11.786643553s ago: executing program 0 (id=3722): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xf89, 0x69, 0x2, 0x22000, r4, 0x25f, '\x00', 0x0, r5, 0x3, 0x3, 0x3, 0xc, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r0}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) 8.536339213s ago: executing program 0 (id=3731): r0 = socket$pppoe(0x18, 0x1, 0x0) pread64(r0, &(0x7f00000002c0)=""/160, 0xa0, 0x5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x27ad, 0x5}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x1ab340, 0x1) finit_module(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x1080003}]}}) r4 = socket$rxrpc(0x21, 0x2, 0xa) fcntl$getownex(r4, 0x5, 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000000c0)={0x1, 0x1, 0xffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) 8.162816904s ago: executing program 0 (id=3732): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 8.049402403s ago: executing program 4 (id=3733): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x10000) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000080)=""/173, 0xad) read$msr(r0, &(0x7f0000000140)=""/52, 0x34) read(r0, &(0x7f0000000180)=""/83, 0x53) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x3) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x6, 0x44, {0x44, 0x2a, "be80748669389beaa4a38fcf000281b445f401bf07f8f7de15faab433f239eea331a3ff98c3947ed94f7dfc12f97fe372303431dd7a744ff0e117f40f366d8000093"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000340)={0x0, 0xf, 0x5a, {0x5, 0xf, 0x5a, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x9b, 0x6, 0x7, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0x0, 0x7ff, 0x20}, @wireless={0xb, 0x10, 0x1, 0x8, 0xec, 0x8, 0x9, 0x7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x5a, "59a212ea8d4ca295be89feae854ea823"}, @ssp_cap={0x20, 0x10, 0xa, 0xf9, 0x5, 0x401, 0x0, 0x7b8e, [0x0, 0xffffc0, 0x0, 0xff0000, 0xc000]}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x5, "5c4eb3e2", "6ca1e2e1"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x60, 0x10, 0x5, 0xb, 0xa, 0xdac}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0xe4ecad35170aed4d, 0x11, 0xe0, "6cdd1f93d32eebf49514798fe0f98a13d63df2f2241fd965bfb58e2046266a1f812b7c3babe7625dd8801568e41dc0a05b2eb60434c258df73ea9e341d952e4582ad14bae2b05d2d11a67cfdcfec7c6ee68528601be77819083fc06f6e31fce3f0bdcf3739f76272956eb091d2e8a4f0f2a7454a5e61865010325f112c23d303353172dc5f1af0bce18a59e2c8d3ad8345be82fc843aa191c87d5c3e66ebb841fced3272cb84f60211726129463f3f09a8c9ba68e3064b374ff594451c6a4c595844e3880a2dba1c9174f52d31bf10b8e4d2de02f9d6cc52126598c0f7ac52c3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0xb, 0x2, 'FW'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="4bed2a77bfe2"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x19, 0x2, "2213"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x98e}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000000900)={0x40, 0x21, 0x1}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x31ac, &(0x7f0000000a00)={[{0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}, {0x11, 0x4e00, "bd00b8728ca4fd6ecba9e1dc5becd20297"}, {0x40, 0x4e00, "37429cb4693b16810aa2557fba772a4a197d1feb9fe5af450950b2b6c7ca3b020c786b736799a9b105e6cd8479125b92e7c7ce8f1843e5e255060b4a19c3c858"}, {0xa4, 0x4e00, "aa92b5068f321bf20963364db3e8dd474419a3bde40a0fa5fa238a1d4c78e22981d3891060a16e6a377870952183941efdd398040d98b3a66f8d46f92c91b2761c16c54136a10be744c9754d1e9c30e523101151e6a828fdfa90db717e79b864538329d313061a34c8c15e9b66f50349cb263c484163a900940a76e2bd79e4c615a04d9bb4b827cc65ba730edf934b31c53ab48656b4810f0d42b8022b5cc73d8f0580a7"}, {0x5f, 0x4e00, "7bcc78c487c0a45b819e4eb6a001bb16b2bf4d656dceb91117b0fa801600ad44de05cf69ee6217508277b4f5b71caf87573e396a5a41524bc8ab41227aff9ca8b170bcb0df2e7c48bc4ced8e6694f8f84aabe140c5868f58d6531872159b10"}, {0x34, 0x4e00, "d1c3eb3df11733cbfc7193cf54f46f973f7e72ef81da011471be28e3f637c2b304305c8edcb57e3926ebf922710e984fa79e45f6"}]}) r2 = syz_usb_connect$cdc_ecm(0x5, 0x60, &(0x7f0000003bc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x1, 0x80, 0x10, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "fde23a3eaf"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x530, 0x4, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x7f, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xd, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0xff, 0x5}}}}}]}}]}}, &(0x7f0000003ec0)={0xa, &(0x7f0000003c40)={0xa, 0x6, 0x310, 0x3, 0x0, 0xff, 0xff, 0xfb}, 0x18, &(0x7f0000003c80)={0x5, 0xf, 0x18, 0x1, [@generic={0x13, 0x10, 0x0, "3ebe7decfc21a4c683d6324e7568b1db"}]}, 0x2, [{0xfb, &(0x7f0000003cc0)=@string={0xfb, 0x3, "edbf38e91accf47e335c5e0d923c401365bbf727cadec1f7a5995293cc22147e1d2c18585287ae967160b4974fc2c0b041c0bee9ece18bf23cb548d9ff46a1a2b26fe8f99ffbabad7369a718b1b25296a37645c4bd06c37f5c0f6758ecb88daa19c6a6a8c45aa8db09381f02efd2f156950b9616d42cf93b2f52b97e1d5fdb6bfdfed1dee39808e28b91469ff3094ebca0defe6b0dfd012fd1f817660e783442c076128efb7e2206359b2d9ac77fbf644d1217f538c0b01e9a6e90fc9a1043cb57f715ad2bcaaa5ff7876be678f37ce8a4c9d8ef8e231e7e5cf4958d6be921b4fc3eb2e0fdb28854ca6b14ae0903cdadfecc7ac0b7d756b2de"}}, {0xe6, &(0x7f0000003dc0)=@string={0xe6, 0x3, "025bf1cc8a93289a27b4c62a5e68f87d6d2d3d4b571a7a3b6694a0c055d75ea93aeeb0cf169a25a3129b0de53300e78bc46cbf605ef29ee7ab5e02aee47650a8f1f792732cfeaf001fad8864d0859dcd6fdee121255f6ad4a0101c6c9b4c9e50746657c7ff0522793c40e96b5631d867840835485ebd9a6f93fd79775da2ff6d980867fabb2e1e2022be1ccd02c2cd05cd08e71da9e9e4ac49c758e6e65feee2e4b1a176484e8c4c63d83d0c19842e854e5a8277d318e9a2b88a878d327d68d977a53db46abbb33cfcd3ec11d7554fcc1ec87727e8bc128528312b934594cc0c3799ca0b"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000004040)={0x14, &(0x7f0000003f00)={0x0, 0x23, 0xc9, {0xc9, 0xc, "3bffbb1cfc451df22fc46dbcd64f1048c18c0f5c24f540e1c0a3ebf498946bd6ca87c859017d8a80a6f35605b45d38bbe0d17c3283b4a6b5610491be67dbee70f22c598e51819181ed037976d4cc525cb8dce98fd953352234cd94ee18363aafd5e14f9515393f9e6b73cc81cba15a0e7a36c81e4479caa9dfdb9087cc13be26cf013b33e583bde9fdfb7b03266161b610221d296fda2cf4f2c12e484928b8a41affac15fbd116dbc214a76fbb5706a289e058f63ac28eff11a1357b5418bc0c0c930fe3354d73"}}, &(0x7f0000004000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004180)={0x1c, &(0x7f0000004080)={0x0, 0x7, 0x7a, "df3538023fca5673afa78ac675f9c6a0ab8d0abdbdd9e487d55bf33aa8090965593989738b8354fd7fdbbca04c7a7dcfb922c1519773b8baaf84d109e9660580823d2df793863c7cd1e7b74c8fa918019431275188e970f999703eaa7e35284904effa8e774933214a2645bba58dcf6da5b4ae59bc963f8bf0d1"}, &(0x7f0000004100)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000004140)={0x0, 0x8, 0x1, 0x9}}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4) syz_usb_disconnect(r2) r3 = signalfd4(r0, &(0x7f00000041c0)={[0x8]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000004200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r4, &(0x7f0000004240)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x6}}}, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000044c0)={&(0x7f00000043c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004440)=[0x0], &(0x7f0000004480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000004500)={&(0x7f0000004280)=[0x0, 0x0], &(0x7f00000042c0)=[{}], &(0x7f0000004340)=[0x0], &(0x7f0000004380)=[0x0, 0x0], 0x1, 0x1, 0x2, 0x0, r5}) openat$dir(0xffffffffffffff9c, &(0x7f0000004580)='./file0\x00', 0x840, 0x2) socket(0x1e, 0x6, 0xdc) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, &(0x7f00000045c0)) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x11c, &(0x7f0000004640)={[{0x4c, 0x4e00, "d95d34746463208744aa4f8414db923154c18573a419427d562a3fcee9d5089a995fdf344bbb9d2ac65dbb971db57d30333a4a48d79160a4a683667d6650da9b2afcadaa79c8ce28c2b1f476"}, {0xc6, 0x4e00, "04f9aca77685e908a022ec5790aeb67b60fa2cc11b267993ea1356979349f4482b72de556605de9ca5c6134e1d854fb22de4d8311d4553a0102370edcbaa9b71a8ef383c07b5e00cdc874a59730d76854931d1d1f7f626fc49f5cfc36eb96ac12675b2be2aebef31a73f4834ee2d7fed08e00cd4a0017aecdfc17cb97c0c757d4754f915aaa28816db0998b19f37e5556ed04d8c5b809b92684dc89a231ce0c4ac02b073e7ae11e9bdcbe0ada77fa22d6afde8db15278e032964ac66c40afe8198ed444ca552"}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x101080, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000047c0), 0x208401, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000004800)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, [{0x9, 0x6, 0x7fff, '\x00', 0x2000}, {0xa8, 0xffffffffffffffff, 0x7, '\x00', 0x200}, {0x80, 0x8000000000000000, 0x7fff, '\x00', 0x200}, {0x8, 0xffff, 0x9, '\x00', 0x780}, {0x2, 0x2, 0x9, '\x00', 0x1104}]}) syz_emit_vhci(&(0x7f0000004940)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) fcntl$getown(r0, 0x9) 8.011804089s ago: executing program 0 (id=3734): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x8, 0x0, [], [0x4], [0x0, 0x0, 0x100, 0xd], [0x4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]}) syz_usb_connect(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0x5a, 0xa5, 0x20, 0x105b, 0x1799, 0x36e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x4, 0x4, 0xff, 0x1, 0x1, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x8, 0xd0, 0x0, 0x9, [@generic={0x7, 0x5, "f1af53e87f"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0x0, 0x6, [@generic={0x7, 0x5, "a902e86f4c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7f, 0x9, 0xff}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x1, 0x8, 0xbb}}]}}]}}]}}, 0x0) 7.006170724s ago: executing program 1 (id=3736): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18171, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5d0, @void, @value}, 0x94) fsopen(&(0x7f0000000400)='xfs\x00', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x6}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) close(0xffffffffffffffff) 5.444316245s ago: executing program 1 (id=3740): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 5.385070124s ago: executing program 1 (id=3742): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608024c6588a8", 0x0, 0xd01, 0x2a0, 0x2000, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.312020565s ago: executing program 1 (id=3743): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d98c2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x10000000009}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r1, &(0x7f00000000c0), 0x0, 0x0, 0x1) 5.104733493s ago: executing program 0 (id=3744): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 5.104369283s ago: executing program 5 (id=3745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f000002"], 0x50) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) fstat(r4, &(0x7f0000001200)) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000340)={0x2b, 0x101, 0x4, 0x8, 0x781, 0x81}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 5.047650827s ago: executing program 0 (id=3746): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000540)={0x1d, r4, 0x1, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xff, 0x4}, 0x1}, 0x18) sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x800) 4.368230643s ago: executing program 4 (id=3747): unshare(0x2c060000) unshare(0x24020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x6f, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) 3.976173641s ago: executing program 5 (id=3748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, 0x0, &(0x7f0000000180)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a30000000000500048000000000140007800800084000000c7e05001500ff00000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) 2.843467311s ago: executing program 5 (id=3749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xec) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"691a2d8900", 0x0, 0x0, {0x4, 0xc}, {0x4, 0xbffffe}, 0x5, [0x3, 0x4000003, 0x80009, 0x1, 0x9753, 0x400, 0x7fffffff, 0x2, 0x5, 0x7, 0x10001, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x6]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000280)) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r7, r7}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='befs\x00', 0x0, 0x0) 2.170675824s ago: executing program 4 (id=3751): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180), &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x305908c, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x3, 0x0, 0x7, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) 2.102321312s ago: executing program 2 (id=3752): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.018998398s ago: executing program 5 (id=3753): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000640)={0x3, 0x0, [{0x9b, 0x0, 0x9}, {0xc0010a60}, {0x981, 0x0, 0xffff}]}) execveat(r2, &(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={[&(0x7f00000006c0)='\xbb\xbb\xbb\xbb\xbb\xbb']}, &(0x7f0000000900)={[&(0x7f0000000740)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000780)='\\*(\'*\x00', &(0x7f00000007c0)='-\x00', &(0x7f0000000800)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000840)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000880)='}{\x00', &(0x7f00000008c0)='\xc3]!+@.#*@,}^!.{)-\x00']}, 0x100) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/226, 0xe2}, {&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000040)=""/58, 0x3a}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/252, 0xfc}], 0x1}}], 0x2, 0x102, &(0x7f00000005c0)={0x0, 0x3938700}) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3e8, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000010) 1.910103997s ago: executing program 2 (id=3754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x4004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x800) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x2110000, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv2(r2, 0x0, 0x0, 0xd0d, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee01) ioctl$GIO_UNIMAP(r3, 0x4b66, 0x0) rename(&(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f00000002c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, 0x0, 0x0) ioperm(0x5, 0x3d, 0x80000000001f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.826355357s ago: executing program 4 (id=3755): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001000000000904000002e964c2000905040000000000000705a6"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000020000007020000940001800500020001000000080006001d000000"], 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000090601020000000000000000030000080900020073797a3000000000700008800c00078008000940000000020c00078005001500100000000c0007800800080000000000100007800c0019400000000000000f0b0c000780060005404e2200000c000780080006400000d80d100007800a001100aaaaaaaaaa3d0000100007800a00110000000000000000000900020073797a320000000008000940000000070900020073797a300000000008000940"], 0xc0}, 0x1, 0x0, 0x0, 0x20048010}, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.24518481s ago: executing program 2 (id=3756): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.13541257s ago: executing program 2 (id=3757): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000400)=0xfffffffffffffd7f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0x32, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) 1.077014094s ago: executing program 5 (id=3758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f000002"], 0x50) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) fstat(r4, &(0x7f0000001200)) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000340)={0x2b, 0x101, 0x4, 0x8, 0x781, 0x81}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 668.403118ms ago: executing program 2 (id=3759): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, 0x0, &(0x7f0000000180)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a30000000000500048000000000140007800800084000000c7e05001500ff00000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) 9.229822ms ago: executing program 5 (id=3760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, 0x0, &(0x7f0000000180)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a30000000000500048000000000140007800800084000000c7e05001500ff00000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) 0s ago: executing program 2 (id=3761): unshare(0x2c060000) unshare(0x24020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x6f, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): 1244.688776][ T29] audit: type=1326 audit(1738122757.860:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17232 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0d2578cda9 code=0x7ffc0000 [ 1244.792721][ T29] audit: type=1326 audit(1738122757.860:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17232 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2578cda9 code=0x7ffc0000 [ 1244.904705][T17256] bridge_slave_0: left allmulticast mode [ 1244.914931][T17256] bridge_slave_0: left promiscuous mode [ 1244.930968][T17256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.123714][T17256] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1246.988343][T17275] No such timeout policy "syz1" [ 1247.515289][T17123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.965051][T17123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.371038][T17285] Bluetooth: MGMT ver 1.23 [ 1249.711253][ T2150] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1249.941805][ T2150] usb 6-1: Using ep0 maxpacket: 32 [ 1250.241721][ T2150] usb 6-1: New USB device found, idVendor=0421, idProduct=9a40, bcdDevice=65.5d [ 1250.375141][ T2150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.410930][ T2150] usb 6-1: Product: syz [ 1250.430060][T17123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.430716][ T2150] usb 6-1: Manufacturer: syz [ 1250.465173][ T2150] usb 6-1: SerialNumber: syz [ 1250.470900][T17298] netlink: 'syz.0.3225': attribute type 10 has an invalid length. [ 1250.490784][T17298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1250.534586][ T2150] usb 6-1: config 0 descriptor?? [ 1250.542795][ T2150] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1250.735866][T17123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.902964][T13312] usb 6-1: USB disconnect, device number 3 [ 1251.373898][T17308] binder: 17300:17308 ioctl c0306201 20000680 returned -14 [ 1251.383947][ T54] Bluetooth: hci0: command 0x1407 tx timeout [ 1251.391199][ T5822] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1251.472579][T17312] random: crng reseeded on system resumption [ 1251.549602][T17123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1251.585418][T17123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1251.611155][T17123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1251.628288][ T5872] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1251.641457][T17123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1251.796448][T17123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.803652][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 1251.920841][ T5872] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1252.092373][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.156559][ T5872] usb 3-1: Product: syz [ 1252.249609][ T5872] usb 3-1: Manufacturer: syz [ 1252.390764][ T5872] usb 3-1: SerialNumber: syz [ 1252.402488][ T5872] usb 3-1: config 0 descriptor?? [ 1252.412725][ T5872] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input82 [ 1252.422282][T17123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.451719][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.458888][T13821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.474057][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.481254][T13821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.730015][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.768825][T17123] veth0_vlan: entered promiscuous mode [ 1252.784406][T17123] veth1_vlan: entered promiscuous mode [ 1252.809546][T17123] veth0_macvtap: entered promiscuous mode [ 1252.820008][T17123] veth1_macvtap: entered promiscuous mode [ 1252.837951][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.849231][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.860396][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.871493][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.881871][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.892803][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.893115][ T5870] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1252.910405][T15448] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1252.912021][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.934549][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.944958][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.955935][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.967182][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.978212][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.988228][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.006083][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.044312][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.074219][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.078269][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'. [ 1253.084887][T15448] usb 6-1: Using ep0 maxpacket: 8 [ 1253.099096][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 1253.111018][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.121176][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.133078][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1253.146096][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.157255][ T5870] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1253.167341][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.176015][T15448] usb 6-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1253.187874][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.197999][T15448] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 1253.210699][ T5870] usb 5-1: config 0 descriptor?? [ 1253.216268][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.231698][T15448] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1253.245465][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.255611][T15448] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1253.262541][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.274280][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.287182][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.298511][T15448] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1253.308290][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.318453][T15448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.326633][T15448] usb 6-1: Product: syz [ 1253.340273][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.357102][T15448] usb 6-1: Manufacturer: syz [ 1253.373742][T15448] usb 6-1: SerialNumber: syz [ 1253.378631][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.392288][T17123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.403379][T17318] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1253.419353][T17123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.444451][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.469603][T17123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.497411][T17123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.516197][T17123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.534658][T17123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.629996][T15448] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 1253.772847][ T2150] usb 3-1: USB disconnect, device number 65 [ 1253.785313][T15448] usb 6-1: USB disconnect, device number 4 [ 1253.794819][T15448] usblp0: removed [ 1253.802216][T17230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.841163][T17230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.908162][T13821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.950416][T17332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3234'. [ 1253.961125][T13821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.135811][T17342] FAULT_INJECTION: forcing a failure. [ 1255.135811][T17342] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.170231][T17342] CPU: 0 UID: 0 PID: 17342 Comm: syz.0.3237 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1255.170261][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1255.170272][T17342] Call Trace: [ 1255.170279][T17342] [ 1255.170287][T17342] dump_stack_lvl+0x241/0x360 [ 1255.170312][T17342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.170330][T17342] ? __pfx__printk+0x10/0x10 [ 1255.170355][T17342] ? __kmalloc_cache_noprof+0x48/0x390 [ 1255.170377][T17342] ? __pfx___might_resched+0x10/0x10 [ 1255.170395][T17342] ? __mutex_lock+0x397/0x1010 [ 1255.170420][T17342] should_fail_ex+0x40a/0x550 [ 1255.170444][T17342] should_failslab+0xac/0x100 [ 1255.170467][T17342] __kmalloc_cache_noprof+0x70/0x390 [ 1255.170486][T17342] ? flow_change+0x447/0x1b10 [ 1255.170519][T17342] flow_change+0x447/0x1b10 [ 1255.170549][T17342] ? __pfx_flow_change+0x10/0x10 [ 1255.170569][T17342] ? tcf_chain_tp_insert_unique+0x996/0xa70 [ 1255.170607][T17342] ? __pfx_flow_change+0x10/0x10 [ 1255.170632][T17342] tc_new_tfilter+0x1112/0x1a70 [ 1255.170672][T17342] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1255.170702][T17342] ? rcu_read_unlock+0x87/0xa0 [ 1255.170742][T17342] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1255.170761][T17342] rtnetlink_rcv_msg+0x791/0xcf0 [ 1255.170777][T17342] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1255.170799][T17342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1255.170823][T17342] ? ref_tracker_free+0x643/0x7e0 [ 1255.170848][T17342] netlink_rcv_skb+0x1e3/0x430 [ 1255.170872][T17342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1255.170891][T17342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1255.170932][T17342] ? netlink_deliver_tap+0x2e/0x1b0 [ 1255.170954][T17342] netlink_unicast+0x7f6/0x990 [ 1255.170981][T17342] ? __pfx_netlink_unicast+0x10/0x10 [ 1255.170999][T17342] ? __virt_addr_valid+0x45f/0x530 [ 1255.171021][T17342] ? __phys_addr_symbol+0x2f/0x70 [ 1255.171039][T17342] ? __check_object_size+0x47a/0x730 [ 1255.171063][T17342] netlink_sendmsg+0x8e4/0xcb0 [ 1255.171095][T17342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.171127][T17342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.171146][T17342] __sock_sendmsg+0x221/0x270 [ 1255.171167][T17342] ____sys_sendmsg+0x52a/0x7e0 [ 1255.171197][T17342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1255.171218][T17342] ? __fget_files+0x2a/0x410 [ 1255.171242][T17342] ? __fget_files+0x2a/0x410 [ 1255.171271][T17342] __sys_sendmsg+0x269/0x350 [ 1255.171298][T17342] ? __pfx___sys_sendmsg+0x10/0x10 [ 1255.171333][T17342] ? do_sys_openat2+0x17a/0x1d0 [ 1255.171381][T17342] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1255.171404][T17342] ? do_syscall_64+0x100/0x230 [ 1255.171427][T17342] ? do_syscall_64+0xb6/0x230 [ 1255.171450][T17342] do_syscall_64+0xf3/0x230 [ 1255.171469][T17342] ? clear_bhb_loop+0x35/0x90 [ 1255.171495][T17342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.171522][T17342] RIP: 0033:0x7f68f6f8cda9 [ 1255.171538][T17342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.171553][T17342] RSP: 002b:00007f68f4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.171571][T17342] RAX: ffffffffffffffda RBX: 00007f68f71a5fa0 RCX: 00007f68f6f8cda9 [ 1255.171584][T17342] RDX: 0000000020000800 RSI: 0000000020006040 RDI: 0000000000000005 [ 1255.171596][T17342] RBP: 00007f68f4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.171607][T17342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1255.171617][T17342] R13: 0000000000000000 R14: 00007f68f71a5fa0 R15: 00007ffebc042978 [ 1255.171644][T17342] [ 1258.282661][ T5870] usbhid 5-1:0.0: can't add hid device: -32 [ 1258.289649][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1258.423253][ T5870] usb 5-1: USB disconnect, device number 60 [ 1259.711059][ T5870] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1260.151753][T17387] xt_hashlimit: size too large, truncated to 1048576 [ 1260.231307][T13818] Bluetooth: hci5: Frame reassembly failed (-84) [ 1260.265067][ T5870] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1260.299666][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.350521][ T5870] usb 5-1: Product: syz [ 1260.355060][ T5870] usb 5-1: Manufacturer: syz [ 1260.359850][ T5870] usb 5-1: SerialNumber: syz [ 1260.375234][ T5870] usb 5-1: config 0 descriptor?? [ 1260.388639][ T5870] usb 5-1: interface 1 not found [ 1261.668096][ T8718] usb 5-1: USB disconnect, device number 61 [ 1261.714147][T17392] Bluetooth: hci4: command 0x0406 tx timeout [ 1261.824977][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1261.824995][ T29] audit: type=1326 audit(1738122777.550:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1261.999545][ T29] audit: type=1326 audit(1738122777.550:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1262.786739][ T29] audit: type=1326 audit(1738122777.550:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1262.811356][ T29] audit: type=1326 audit(1738122777.550:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1262.821303][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout [ 1262.834283][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1262.915369][ T29] audit: type=1326 audit(1738122777.580:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1262.959983][T17411] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3256'. [ 1263.056403][ T29] audit: type=1326 audit(1738122777.580:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1263.090999][ T29] audit: type=1326 audit(1738122777.580:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1263.288959][ T29] audit: type=1326 audit(1738122777.580:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1263.381930][ T29] audit: type=1326 audit(1738122777.580:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1263.479534][ T29] audit: type=1326 audit(1738122777.580:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17403 comm="syz.0.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1264.160872][T17438] ip6_vti0: entered promiscuous mode [ 1264.168520][T17438] ip6_vti0: left promiscuous mode [ 1264.482700][T17439] xt_ecn: cannot match TCP bits for non-tcp packets [ 1264.673089][T17447] netlink: 'syz.2.3267': attribute type 39 has an invalid length. [ 1265.679054][T17464] binder: 17460:17464 ioctl c0306201 20000680 returned -14 [ 1265.941228][T15448] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1266.445963][T17467] Can't find a SQUASHFS superblock on nullb0 [ 1266.461572][T17467] netlink: 'syz.2.3273': attribute type 10 has an invalid length. [ 1266.469558][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1266.930834][T15448] usb 6-1: Using ep0 maxpacket: 16 [ 1266.953207][T15448] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1266.965199][T15448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.973850][T15448] usb 6-1: Product: syz [ 1266.978655][T15448] usb 6-1: Manufacturer: syz [ 1266.983671][T15448] usb 6-1: SerialNumber: syz [ 1267.050123][T15448] usb 6-1: config 0 descriptor?? [ 1267.070025][T15448] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input83 [ 1267.968789][T17483] ip6_vti0: entered promiscuous mode [ 1267.990900][T17483] ip6_vti0: left promiscuous mode [ 1268.094347][T17485] xt_ecn: cannot match TCP bits for non-tcp packets [ 1269.317147][ T8718] usb 6-1: USB disconnect, device number 5 [ 1269.605055][T17492] FAULT_INJECTION: forcing a failure. [ 1269.605055][T17492] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.618114][T17492] CPU: 0 UID: 0 PID: 17492 Comm: syz.4.3280 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1269.618139][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1269.618159][T17492] Call Trace: [ 1269.618165][T17492] [ 1269.618172][T17492] dump_stack_lvl+0x241/0x360 [ 1269.618197][T17492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.618214][T17492] ? __pfx__printk+0x10/0x10 [ 1269.618239][T17492] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 1269.618259][T17492] ? __pfx___might_resched+0x10/0x10 [ 1269.618272][T17492] should_fail_ex+0x40a/0x550 [ 1269.618285][T17492] should_failslab+0xac/0x100 [ 1269.618298][T17492] ? __d_alloc+0x31/0x670 [ 1269.618312][T17492] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 1269.618324][T17492] ? __pfx_lock_release+0x10/0x10 [ 1269.618338][T17492] __d_alloc+0x31/0x670 [ 1269.618353][T17492] d_alloc_pseudo+0x1f/0xb0 [ 1269.618366][T17492] alloc_file_pseudo+0x123/0x290 [ 1269.618381][T17492] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1269.618400][T17492] anon_inode_getfd+0xce/0x1e0 [ 1269.618413][T17492] btf_new_fd+0x802/0xd30 [ 1269.618431][T17492] ? __pfx_btf_new_fd+0x10/0x10 [ 1269.618446][T17492] ? bpf_btf_load+0xcf/0x1a0 [ 1269.618459][T17492] __sys_bpf+0x6ef/0x810 [ 1269.618470][T17492] ? __pfx___sys_bpf+0x10/0x10 [ 1269.618486][T17492] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1269.618500][T17492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1269.618512][T17492] ? do_syscall_64+0x100/0x230 [ 1269.618528][T17492] __x64_sys_bpf+0x7c/0x90 [ 1269.618537][T17492] do_syscall_64+0xf3/0x230 [ 1269.618549][T17492] ? clear_bhb_loop+0x35/0x90 [ 1269.618564][T17492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.618576][T17492] RIP: 0033:0x7f7f4878cda9 [ 1269.618586][T17492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.618594][T17492] RSP: 002b:00007f7f494fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1269.618606][T17492] RAX: ffffffffffffffda RBX: 00007f7f489a5fa0 RCX: 00007f7f4878cda9 [ 1269.618613][T17492] RDX: 0000000000000028 RSI: 0000000020000140 RDI: 0000000000000012 [ 1269.618619][T17492] RBP: 00007f7f494fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.618625][T17492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.618631][T17492] R13: 0000000000000001 R14: 00007f7f489a5fa0 R15: 00007ffee69fe3b8 [ 1269.618645][T17492] [ 1271.457164][ T8718] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1271.841093][ T8718] usb 6-1: Using ep0 maxpacket: 16 [ 1271.864571][ T8718] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1271.940862][ T8718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.969674][ T8718] usb 6-1: Product: syz [ 1271.983171][ T8718] usb 6-1: Manufacturer: syz [ 1271.987869][ T8718] usb 6-1: SerialNumber: syz [ 1272.004365][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.011925][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.025444][ T8718] usb 6-1: config 0 descriptor?? [ 1272.034051][ T8718] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input84 [ 1272.068116][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.075842][T17509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.085096][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.093443][T17509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.208827][T17509] team0: Port device bridge0 added [ 1272.423944][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3285'. [ 1272.900320][T17524] binder: 17523:17524 ioctl c0306201 0 returned -14 [ 1273.662713][T17524] ip6_vti0: entered promiscuous mode [ 1273.670581][T17524] ip6_vti0: left promiscuous mode [ 1273.798194][T17527] xt_ecn: cannot match TCP bits for non-tcp packets [ 1273.935304][ T5188] usb 6-1: USB disconnect, device number 6 [ 1273.976828][ T54] Bluetooth: hci0: command 0x1407 tx timeout [ 1274.590994][ T2150] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1274.744086][ T5188] hid-generic 0000:0003:0000.001D: unknown main item tag 0x0 [ 1274.757848][ T5188] hid-generic 0000:0003:0000.001D: unknown main item tag 0x0 [ 1275.015757][ T2150] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1275.059201][ T2150] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1275.291213][ T5188] hid-generic 0000:0003:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1275.294623][ T2150] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 1275.331131][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.339219][ T2150] usb 2-1: Product: syz [ 1275.380853][ T2150] usb 2-1: Manufacturer: syz [ 1275.385541][ T2150] usb 2-1: SerialNumber: syz [ 1275.507353][T17546] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1275.517400][T17546] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1275.639737][T17553] delete_channel: no stack [ 1275.645642][T17553] FAULT_INJECTION: forcing a failure. [ 1275.645642][T17553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.658879][T17553] CPU: 1 UID: 0 PID: 17553 Comm: syz.4.3297 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1275.658903][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1275.658914][T17553] Call Trace: [ 1275.658919][T17553] [ 1275.658924][T17553] dump_stack_lvl+0x241/0x360 [ 1275.658943][T17553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1275.658953][T17553] ? __pfx__printk+0x10/0x10 [ 1275.658970][T17553] ? snprintf+0xda/0x120 [ 1275.658981][T17553] should_fail_ex+0x40a/0x550 [ 1275.658995][T17553] _copy_to_user+0x31/0xb0 [ 1275.659006][T17553] simple_read_from_buffer+0xca/0x150 [ 1275.659020][T17553] proc_fail_nth_read+0x1e9/0x250 [ 1275.659033][T17553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.659046][T17553] ? rw_verify_area+0x243/0x630 [ 1275.659060][T17553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.659072][T17553] vfs_read+0x1f8/0xb40 [ 1275.659086][T17553] ? fdget_pos+0x254/0x320 [ 1275.659099][T17553] ? __pfx___mutex_lock+0x10/0x10 [ 1275.659112][T17553] ? __pfx_vfs_read+0x10/0x10 [ 1275.659127][T17553] ? __rcu_read_unlock+0xa1/0x110 [ 1275.659139][T17553] ? __fget_files+0x2a/0x410 [ 1275.659152][T17553] ? __fget_files+0x395/0x410 [ 1275.659163][T17553] ? __fget_files+0x2a/0x410 [ 1275.659179][T17553] ksys_read+0x18f/0x2b0 [ 1275.659189][T17553] ? __pfx_ksys_read+0x10/0x10 [ 1275.659198][T17553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1275.659212][T17553] ? do_syscall_64+0xb6/0x230 [ 1275.659226][T17553] do_syscall_64+0xf3/0x230 [ 1275.659237][T17553] ? clear_bhb_loop+0x35/0x90 [ 1275.659253][T17553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.659265][T17553] RIP: 0033:0x7f7f4878b7bc [ 1275.659275][T17553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1275.659283][T17553] RSP: 002b:00007f7f465f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1275.659295][T17553] RAX: ffffffffffffffda RBX: 00007f7f489a6080 RCX: 00007f7f4878b7bc [ 1275.659302][T17553] RDX: 000000000000000f RSI: 00007f7f465f60a0 RDI: 000000000000000c [ 1275.659308][T17553] RBP: 00007f7f465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.659313][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.659319][T17553] R13: 0000000000000000 R14: 00007f7f489a6080 R15: 00007ffee69fe3b8 [ 1275.659336][T17553] [ 1275.888432][ C1] vkms_vblank_simulate: vblank timer overrun [ 1276.285284][T17551] delete_channel: no stack [ 1276.324650][ T2150] usbhid 2-1:1.0: can't add hid device: -71 [ 1276.804801][ T2150] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1276.895081][ T2150] usb 2-1: USB disconnect, device number 66 [ 1277.693632][T17566] binder: 17561:17566 ioctl c0306201 0 returned -14 [ 1277.776326][T17567] ip6_vti0: entered promiscuous mode [ 1277.783795][T17567] ip6_vti0: left promiscuous mode [ 1277.871971][T17567] xt_ecn: cannot match TCP bits for non-tcp packets [ 1280.400913][ T5188] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1280.990724][ T5188] usb 6-1: Using ep0 maxpacket: 16 [ 1281.006776][ T5188] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1281.038166][ T5188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.060937][ T5188] usb 6-1: Product: syz [ 1281.065289][ T5188] usb 6-1: Manufacturer: syz [ 1281.090067][ T5188] usb 6-1: SerialNumber: syz [ 1281.102198][ T5188] usb 6-1: config 0 descriptor?? [ 1281.118359][ T5188] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input85 [ 1282.320836][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 1282.568477][ T5870] usb 6-1: USB disconnect, device number 7 [ 1283.261417][T17611] binder: 17610:17611 ioctl c0306201 0 returned -14 [ 1283.351336][T17613] ip6_vti0: entered promiscuous mode [ 1283.372229][T17613] ip6_vti0: left promiscuous mode [ 1283.693774][T17614] xt_ecn: cannot match TCP bits for non-tcp packets [ 1285.212634][T17628] xt_hashlimit: size too large, truncated to 1048576 [ 1286.991681][ T54] Bluetooth: hci0: command 0x1407 tx timeout [ 1287.015908][ T5869] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1287.780422][ T5870] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1287.835926][T17653] befs: (nullb0): No write support. Marking filesystem read-only [ 1287.847670][T17653] befs: (nullb0): invalid magic header [ 1287.861945][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 1287.987197][ T5869] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1288.047858][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.106996][ T5869] usb 5-1: Product: syz [ 1288.132585][ T5870] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1288.145310][ T5869] usb 5-1: Manufacturer: syz [ 1288.167991][ T5869] usb 5-1: SerialNumber: syz [ 1288.308120][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1288.391456][ T5869] usb 5-1: config 0 descriptor?? [ 1288.410994][ T5870] usb 6-1: can't read configurations, error -61 [ 1288.860553][ T5869] usb 5-1: can't set config #0, error -71 [ 1288.873388][ T5869] usb 5-1: USB disconnect, device number 62 [ 1288.960880][ T5870] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1289.382441][ T5870] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1289.430484][ T5870] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1289.452992][ T5870] usb 6-1: can't read configurations, error -61 [ 1289.472328][ T5870] usb usb6-port1: attempt power cycle [ 1290.207186][T17675] FAULT_INJECTION: forcing a failure. [ 1290.207186][T17675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.286234][T17675] CPU: 0 UID: 0 PID: 17675 Comm: syz.5.3330 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1290.286263][T17675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1290.286275][T17675] Call Trace: [ 1290.286281][T17675] [ 1290.286289][T17675] dump_stack_lvl+0x241/0x360 [ 1290.286315][T17675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1290.286333][T17675] ? __pfx__printk+0x10/0x10 [ 1290.286358][T17675] ? __pfx_lock_release+0x10/0x10 [ 1290.286387][T17675] should_fail_ex+0x40a/0x550 [ 1290.286410][T17675] _copy_from_user+0x2d/0xb0 [ 1290.286429][T17675] sctp_setsockopt+0xcc/0x11c0 [ 1290.286453][T17675] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1290.286473][T17675] do_sock_setsockopt+0x3af/0x720 [ 1290.286502][T17675] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1290.286529][T17675] ? __fget_files+0x395/0x410 [ 1290.286549][T17675] ? __fget_files+0x2a/0x410 [ 1290.286577][T17675] __x64_sys_setsockopt+0x1ee/0x280 [ 1290.286606][T17675] do_syscall_64+0xf3/0x230 [ 1290.286627][T17675] ? clear_bhb_loop+0x35/0x90 [ 1290.286652][T17675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.286672][T17675] RIP: 0033:0x7f221738cda9 [ 1290.286688][T17675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1290.286703][T17675] RSP: 002b:00007f22151d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1290.286723][T17675] RAX: ffffffffffffffda RBX: 00007f22175a6080 RCX: 00007f221738cda9 [ 1290.286735][T17675] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000003 [ 1290.286747][T17675] RBP: 00007f22151d5090 R08: 0000000000000008 R09: 0000000000000000 [ 1290.286757][T17675] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.286767][T17675] R13: 0000000000000000 R14: 00007f22175a6080 R15: 00007ffc5adfb178 [ 1290.286794][T17675] [ 1291.477736][T17689] binder: 17687:17689 ioctl 4018620d 0 returned -22 [ 1291.941260][T17693] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1292.740746][ T5870] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1292.942240][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 1292.991172][ T5870] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1293.970735][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.978803][ T5870] usb 6-1: Product: syz [ 1294.971438][ T5870] usb 6-1: Manufacturer: syz [ 1294.983402][ T5870] usb 6-1: SerialNumber: syz [ 1294.990258][ T5870] usb 6-1: config 0 descriptor?? [ 1295.823310][ T5870] usb 6-1: can't set config #0, error -71 [ 1295.843784][ T5870] usb 6-1: USB disconnect, device number 11 [ 1296.280853][T17729] befs: (nullb0): No write support. Marking filesystem read-only [ 1296.298098][T17729] befs: (nullb0): invalid magic header [ 1296.920836][T17731] sp0: Synchronizing with TNC [ 1296.943597][ T54] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1299.143564][ T5870] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1299.375327][ T5870] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1299.383246][T17758] binder: 17757:17758 ioctl 4018620d 0 returned -22 [ 1299.403636][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.543462][ T5870] usb 5-1: config 0 descriptor?? [ 1300.070955][ T2150] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1300.599465][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.641784][ T2150] usb 1-1: Using ep0 maxpacket: 16 [ 1300.682546][ T2150] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1300.748995][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.791350][ T2150] usb 1-1: Product: syz [ 1300.815007][ T2150] usb 1-1: Manufacturer: syz [ 1300.837117][ T2150] usb 1-1: SerialNumber: syz [ 1300.881148][ T2150] usb 1-1: config 0 descriptor?? [ 1300.922909][ T2150] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input86 [ 1301.387275][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 1301.397116][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1301.420701][ T5870] usb 5-1: USB disconnect, device number 63 [ 1302.030781][ T5870] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1302.752521][ T5188] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1302.760461][ T8718] usb 1-1: USB disconnect, device number 72 [ 1302.771631][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 1302.837282][ T5870] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1302.863644][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.923352][ T5188] usb 3-1: Using ep0 maxpacket: 8 [ 1303.050158][ T5188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.066114][T17793] Can't find a SQUASHFS superblock on nullb0 [ 1303.080790][ T5870] usb 6-1: Product: syz [ 1303.085926][ T5870] usb 6-1: Manufacturer: syz [ 1303.091029][ T5870] usb 6-1: SerialNumber: syz [ 1303.092193][ T5188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.102790][ T5870] usb 6-1: config 0 descriptor?? [ 1303.138387][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input87 [ 1303.387305][ T5188] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1303.397712][ T5188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.741902][ T5188] usb 3-1: config 0 descriptor?? [ 1303.902993][T17802] sp0: Synchronizing with TNC [ 1304.046510][T17804] FAULT_INJECTION: forcing a failure. [ 1304.046510][T17804] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.086202][T17804] CPU: 1 UID: 0 PID: 17804 Comm: syz.1.3370 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1304.086232][T17804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1304.086244][T17804] Call Trace: [ 1304.086250][T17804] [ 1304.086258][T17804] dump_stack_lvl+0x241/0x360 [ 1304.086284][T17804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.086301][T17804] ? __pfx__printk+0x10/0x10 [ 1304.086326][T17804] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1304.086350][T17804] ? __pfx___might_resched+0x10/0x10 [ 1304.086374][T17804] should_fail_ex+0x40a/0x550 [ 1304.086397][T17804] should_failslab+0xac/0x100 [ 1304.086419][T17804] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1304.086440][T17804] ? __alloc_skb+0x1c3/0x440 [ 1304.086465][T17804] __alloc_skb+0x1c3/0x440 [ 1304.086490][T17804] ? __pfx___alloc_skb+0x10/0x10 [ 1304.086510][T17804] ? __rcu_read_unlock+0xa1/0x110 [ 1304.086531][T17804] ? netlink_autobind+0xd6/0x2f0 [ 1304.086546][T17804] ? netlink_autobind+0x2b0/0x2f0 [ 1304.086567][T17804] netlink_sendmsg+0x638/0xcb0 [ 1304.086607][T17804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.086628][T17804] ? __import_iovec+0x1a6/0x870 [ 1304.086657][T17804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.086678][T17804] __sock_sendmsg+0x221/0x270 [ 1304.086700][T17804] ____sys_sendmsg+0x52a/0x7e0 [ 1304.086731][T17804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.086751][T17804] ? __fget_files+0x2a/0x410 [ 1304.086775][T17804] ? __fget_files+0x2a/0x410 [ 1304.086803][T17804] __sys_sendmsg+0x269/0x350 [ 1304.086831][T17804] ? __pfx___sys_sendmsg+0x10/0x10 [ 1304.086865][T17804] ? do_sys_openat2+0x17a/0x1d0 [ 1304.086911][T17804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1304.086934][T17804] ? do_syscall_64+0x100/0x230 [ 1304.086957][T17804] ? do_syscall_64+0xb6/0x230 [ 1304.086979][T17804] do_syscall_64+0xf3/0x230 [ 1304.086999][T17804] ? clear_bhb_loop+0x35/0x90 [ 1304.087023][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.087043][T17804] RIP: 0033:0x7fd85d98cda9 [ 1304.087059][T17804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.087078][T17804] RSP: 002b:00007fd85e7fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.087097][T17804] RAX: ffffffffffffffda RBX: 00007fd85dba5fa0 RCX: 00007fd85d98cda9 [ 1304.087110][T17804] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1304.087121][T17804] RBP: 00007fd85e7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.087131][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.087141][T17804] R13: 0000000000000000 R14: 00007fd85dba5fa0 R15: 00007ffeed56cfc8 [ 1304.087168][T17804] [ 1304.492297][ T5188] holtek_mouse 0003:04D9:A072.001E: item fetching failed at offset 0/2 [ 1304.531263][ T5188] holtek_mouse 0003:04D9:A072.001E: hid parse failed: -22 [ 1304.556639][ T5188] holtek_mouse 0003:04D9:A072.001E: probe with driver holtek_mouse failed with error -22 [ 1304.640741][ T5870] usb 6-1: USB disconnect, device number 12 [ 1305.456126][ T5870] usb 3-1: USB disconnect, device number 66 [ 1305.555865][T17815] vivid-000: kernel_thread() failed [ 1307.213549][T17838] binder: 17834:17838 ioctl 4018620d 0 returned -22 [ 1308.460846][ T2150] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1308.860714][ T2150] usb 3-1: Using ep0 maxpacket: 16 [ 1308.909814][ T2150] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1309.308269][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.810756][ T2150] usb 3-1: Product: syz [ 1309.814988][ T2150] usb 3-1: Manufacturer: syz [ 1309.819684][ T2150] usb 3-1: SerialNumber: syz [ 1309.832664][ T2150] usb 3-1: config 0 descriptor?? [ 1309.851807][ T2150] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 1309.952957][ T8718] usb 3-1: USB disconnect, device number 67 [ 1310.060752][ T5869] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1310.249572][T17865] sp0: Synchronizing with TNC [ 1310.421249][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 1310.452055][ T5869] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1310.480224][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.515856][ T5869] usb 1-1: Product: syz [ 1310.525493][ T5869] usb 1-1: Manufacturer: syz [ 1310.535485][ T5869] usb 1-1: SerialNumber: syz [ 1310.543262][T17869] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1310.563145][ T5869] usb 1-1: config 0 descriptor?? [ 1310.587248][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input89 [ 1311.545293][ T837] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1312.045612][ T5188] usb 1-1: USB disconnect, device number 73 [ 1312.291076][ T837] usb 2-1: Using ep0 maxpacket: 32 [ 1312.359701][ T837] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 1312.373327][ T837] usb 2-1: config 0 has no interface number 0 [ 1312.426922][ T837] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1312.441011][ T837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.449346][ T837] usb 2-1: Product: syz [ 1312.459533][ T837] usb 2-1: Manufacturer: syz [ 1312.469608][ T837] usb 2-1: SerialNumber: syz [ 1312.485988][ T837] usb 2-1: config 0 descriptor?? [ 1312.496933][T17885] fuse: Unknown parameter '0x0000000000000004' [ 1312.516826][ T837] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1313.150924][ T8718] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1313.526398][T17898] binder: BINDER_SET_CONTEXT_MGR already set [ 1313.532548][T17898] binder: 17893:17898 ioctl 4018620d 200002c0 returned -16 [ 1313.840982][ T5869] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1314.140959][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 1314.151852][ T8718] usb 5-1: Using ep0 maxpacket: 32 [ 1314.158811][ T8718] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.162502][ T5869] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1314.170252][ T8718] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.201774][ T837] gspca_topro: Sensor cx0342 [ 1314.209429][ T8718] usb 5-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1314.231725][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.231915][ T8718] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1314.240000][ T5869] usb 6-1: Product: syz [ 1314.240024][ T5869] usb 6-1: Manufacturer: syz [ 1314.240038][ T5869] usb 6-1: SerialNumber: syz [ 1314.259514][ T8718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.328600][ T5869] usb 6-1: config 0 descriptor?? [ 1314.344686][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input90 [ 1315.169543][ T8718] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/0003:0458:5011.001F/input/input91 [ 1315.197702][ T8718] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/0003:0458:5011.001F/input/input92 [ 1315.226347][ T8718] kye 0003:0458:5011.001F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 1315.458487][ T5869] usb 2-1: USB disconnect, device number 67 [ 1315.608605][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1315.608624][ T29] audit: type=1326 audit(1738122831.330:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1315.642481][ T8718] usb 5-1: USB disconnect, device number 64 [ 1315.668114][ T29] audit: type=1326 audit(1738122831.330:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1315.718585][ T29] audit: type=1326 audit(1738122831.330:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68f6f8ecc7 code=0x7ffc0000 [ 1315.766868][ T29] audit: type=1326 audit(1738122831.330:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f68f6f8ec3c code=0x7ffc0000 [ 1315.795530][ T5869] IPVS: starting estimator thread 0... [ 1315.819568][ T29] audit: type=1326 audit(1738122831.330:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68f6f8eb74 code=0x7ffc0000 [ 1315.914996][T17918] IPVS: using max 22 ests per chain, 52800 per kthread [ 1315.958912][ T29] audit: type=1326 audit(1738122831.330:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68f6f8eb74 code=0x7ffc0000 [ 1316.019017][ T29] audit: type=1326 audit(1738122831.330:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f68f6f8ba0a code=0x7ffc0000 [ 1316.052834][ T29] audit: type=1326 audit(1738122831.330:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1316.075234][ T29] audit: type=1326 audit(1738122831.330:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1316.103476][ T29] audit: type=1326 audit(1738122831.330:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17912 comm="syz.0.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1316.191084][T13312] usb 6-1: USB disconnect, device number 13 [ 1317.975381][T17928] vivid-000: kernel_thread() failed [ 1318.446567][T17944] ip6_vti0: entered promiscuous mode [ 1318.455850][T17944] ip6_vti0: left promiscuous mode [ 1318.472277][T17944] xt_ecn: cannot match TCP bits for non-tcp packets [ 1319.710793][ T5869] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1319.850905][ T5869] usb 2-1: device descriptor read/64, error -71 [ 1320.405216][T17961] binder: BINDER_SET_CONTEXT_MGR already set [ 1320.411425][T17961] binder: 17958:17961 ioctl 4018620d 200002c0 returned -16 [ 1320.613791][T17967] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1321.262845][ T5869] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1321.382800][T17973] input: syz1 as /devices/virtual/input/input93 [ 1321.400717][ T5870] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1321.411067][ T5869] usb 2-1: device descriptor read/64, error -71 [ 1321.521062][ T5869] usb usb2-port1: attempt power cycle [ 1321.590714][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 1321.604327][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1321.641382][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.694730][ T5870] usb 1-1: Product: syz [ 1321.699221][ T5870] usb 1-1: Manufacturer: syz [ 1321.736686][ T5870] usb 1-1: SerialNumber: syz [ 1321.809311][ T5870] usb 1-1: config 0 descriptor?? [ 1321.880917][ T5869] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1321.912089][ T5869] usb 2-1: device descriptor read/8, error -71 [ 1321.923300][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input94 [ 1322.195415][ T5869] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1322.436134][ T5869] usb 2-1: device not accepting address 71, error -71 [ 1322.467961][ T5869] usb usb2-port1: unable to enumerate USB device [ 1322.679927][T17990] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 1322.713078][T17990] cramfs: wrong magic [ 1322.786811][T17990] 9pnet_fd: Insufficient options for proto=fd [ 1322.890942][ T46] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1323.062755][ T46] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1323.082810][ T46] usb 6-1: config 0 has no interface number 0 [ 1323.098100][ T46] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 1323.108183][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.117735][ T46] usb 6-1: Product: syz [ 1323.123130][ T46] usb 6-1: Manufacturer: syz [ 1323.127970][ T46] usb 6-1: SerialNumber: syz [ 1323.136825][ T46] usb 6-1: config 0 descriptor?? [ 1323.140873][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 1323.175184][ T5869] usb 1-1: USB disconnect, device number 74 [ 1323.364313][ T46] snd_usb_variax 6-1:0.113: Line 6 Variax Workbench found [ 1323.380966][ T46] usb 6-1: selecting invalid altsetting 1 [ 1323.391091][ T46] snd_usb_variax 6-1:0.113: set_interface failed [ 1323.401732][ T46] snd_usb_variax 6-1:0.113: Line 6 Variax Workbench now disconnected [ 1323.410333][ T46] snd_usb_variax 6-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 1323.423339][ T46] usb 6-1: USB disconnect, device number 14 [ 1323.608895][T18005] netlink: 'syz.2.3425': attribute type 4 has an invalid length. [ 1323.619281][T18005] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3425'. [ 1327.600045][T18037] No such timeout policy "syz1" [ 1328.086042][T18042] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1328.152430][T18042] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1328.169313][T18043] FAULT_INJECTION: forcing a failure. [ 1328.169313][T18043] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.217689][T18043] CPU: 1 UID: 0 PID: 18043 Comm: syz.0.3438 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1328.217716][T18043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1328.217724][T18043] Call Trace: [ 1328.217731][T18043] [ 1328.217739][T18043] dump_stack_lvl+0x241/0x360 [ 1328.217762][T18043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1328.217776][T18043] ? __pfx__printk+0x10/0x10 [ 1328.217799][T18043] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1328.217821][T18043] ? __pfx___might_resched+0x10/0x10 [ 1328.217841][T18043] should_fail_ex+0x40a/0x550 [ 1328.217863][T18043] should_failslab+0xac/0x100 [ 1328.217883][T18043] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1328.217902][T18043] ? __alloc_skb+0x1c3/0x440 [ 1328.217925][T18043] __alloc_skb+0x1c3/0x440 [ 1328.217949][T18043] ? __pfx___alloc_skb+0x10/0x10 [ 1328.217971][T18043] ? netlink_autobind+0xd6/0x2f0 [ 1328.217986][T18043] ? netlink_autobind+0x2b0/0x2f0 [ 1328.218005][T18043] netlink_sendmsg+0x638/0xcb0 [ 1328.218034][T18043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1328.218066][T18043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1328.218086][T18043] __sock_sendmsg+0x221/0x270 [ 1328.218106][T18043] ____sys_sendmsg+0x52a/0x7e0 [ 1328.218135][T18043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1328.218155][T18043] ? __fget_files+0x2a/0x410 [ 1328.218175][T18043] ? __fget_files+0x2a/0x410 [ 1328.218195][T18043] __sys_sendmsg+0x269/0x350 [ 1328.218211][T18043] ? __pfx___sys_sendmsg+0x10/0x10 [ 1328.218231][T18043] ? do_sys_openat2+0x17a/0x1d0 [ 1328.218263][T18043] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1328.218300][T18043] ? do_syscall_64+0x100/0x230 [ 1328.218316][T18043] ? do_syscall_64+0xb6/0x230 [ 1328.218329][T18043] do_syscall_64+0xf3/0x230 [ 1328.218349][T18043] ? clear_bhb_loop+0x35/0x90 [ 1328.218364][T18043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.218379][T18043] RIP: 0033:0x7f68f6f8cda9 [ 1328.218389][T18043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.218397][T18043] RSP: 002b:00007f68f4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1328.218411][T18043] RAX: ffffffffffffffda RBX: 00007f68f71a5fa0 RCX: 00007f68f6f8cda9 [ 1328.218418][T18043] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 1328.218424][T18043] RBP: 00007f68f4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.218432][T18043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.218438][T18043] R13: 0000000000000000 R14: 00007f68f71a5fa0 R15: 00007ffebc042978 [ 1328.218452][T18043] [ 1331.510176][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1331.510194][ T29] audit: type=1326 audit(1738122847.230:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1331.630742][ T29] audit: type=1326 audit(1738122847.230:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1331.729656][ T29] audit: type=1326 audit(1738122847.230:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1332.704773][ T29] audit: type=1326 audit(1738122847.230:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1332.933511][ T5188] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1332.966761][ T29] audit: type=1326 audit(1738122847.230:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1333.065661][ T29] audit: type=1326 audit(1738122847.230:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1333.282965][ T29] audit: type=1326 audit(1738122847.230:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1333.305650][ T29] audit: type=1326 audit(1738122847.230:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1333.327624][ T5188] usb 6-1: Using ep0 maxpacket: 16 [ 1333.333004][ T29] audit: type=1326 audit(1738122847.230:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1333.407069][ T5188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1333.423368][ T29] audit: type=1326 audit(1738122847.230:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18080 comm="syz.0.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1333.687161][ T5188] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1333.795232][ T5188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.098501][ T5188] usb 6-1: Product: syz [ 1334.102824][ T5188] usb 6-1: Manufacturer: syz [ 1334.107444][ T5188] usb 6-1: SerialNumber: syz [ 1334.115363][ T5188] usb 6-1: config 0 descriptor?? [ 1334.142456][ T5188] hub 6-1:0.0: bad descriptor, ignoring hub [ 1334.148422][ T5188] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1334.273347][ T5188] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input95 [ 1334.433855][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.465603][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.727091][ T5870] usb 6-1: USB disconnect, device number 15 [ 1336.343137][T18116] binder: 18115:18116 ioctl 4018620d 0 returned -22 [ 1337.180966][ T5869] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1337.460709][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 1337.771426][ T5869] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1337.930759][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.938822][ T5869] usb 6-1: Product: syz [ 1337.955387][ T5869] usb 6-1: Manufacturer: syz [ 1337.980747][ T5869] usb 6-1: SerialNumber: syz [ 1337.987508][ T5869] usb 6-1: config 0 descriptor?? [ 1338.004513][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input96 [ 1338.521683][T18133] befs: (nullb0): No write support. Marking filesystem read-only [ 1338.538636][T18133] befs: (nullb0): invalid magic header [ 1338.737148][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1338.737167][ T29] audit: type=1326 audit(1738122854.460:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1338.790115][ T29] audit: type=1326 audit(1738122854.490:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1339.002284][ T29] audit: type=1326 audit(1738122854.500:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1339.033650][ T29] audit: type=1326 audit(1738122854.500:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1339.087007][T18139] can: request_module (can-proto-0) failed. [ 1339.122726][ T29] audit: type=1326 audit(1738122854.500:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1340.023490][ T5870] usb 6-1: USB disconnect, device number 16 [ 1340.064683][ T29] audit: type=1326 audit(1738122854.500:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1340.131985][ T29] audit: type=1326 audit(1738122854.510:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1340.162742][ T29] audit: type=1326 audit(1738122854.510:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1340.197892][ T29] audit: type=1326 audit(1738122854.510:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1340.225246][ T29] audit: type=1326 audit(1738122854.510:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18134 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1342.166764][T18173] No such timeout policy "syz1" [ 1342.428614][T18174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1342.435210][T18174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1342.448647][T18174] vhci_hcd vhci_hcd.0: Device attached [ 1342.461871][T18175] vhci_hcd: connection closed [ 1342.853388][T13807] vhci_hcd: stop threads [ 1342.920764][T13807] vhci_hcd: release socket [ 1342.930920][T13807] vhci_hcd: disconnect device [ 1342.990837][ T5870] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1342.999103][ T5870] usb 33-1: enqueue for inactive port 0 [ 1343.091973][ T5870] vhci_hcd: vhci_device speed not set [ 1343.928283][T18186] binder: 18185:18186 ioctl 4018620d 0 returned -22 [ 1344.067844][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1344.067865][ T29] audit: type=1326 audit(1738122859.780:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1344.135564][ T29] audit: type=1326 audit(1738122859.780:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1344.188812][ T29] audit: type=1326 audit(1738122859.830:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1344.811163][ T29] audit: type=1326 audit(1738122859.830:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1345.294785][ T29] audit: type=1326 audit(1738122859.830:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1345.372539][ T8718] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1345.443520][ T29] audit: type=1326 audit(1738122859.840:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1345.465247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.472633][ T29] audit: type=1326 audit(1738122859.840:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1345.494474][ T29] audit: type=1326 audit(1738122859.840:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1345.521581][ T29] audit: type=1326 audit(1738122859.840:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1345.743103][ T8718] usb 5-1: Using ep0 maxpacket: 16 [ 1345.772883][ T29] audit: type=1326 audit(1738122859.840:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18187 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f221738cda9 code=0x7ffc0000 [ 1345.813220][ T8718] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1345.828583][ T8718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.850774][ T8718] usb 5-1: Product: syz [ 1345.854996][ T8718] usb 5-1: Manufacturer: syz [ 1345.945108][ T8718] usb 5-1: SerialNumber: syz [ 1345.959016][ T8718] usb 5-1: config 0 descriptor?? [ 1345.967284][T18204] FAULT_INJECTION: forcing a failure. [ 1345.967284][T18204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.051082][T18204] CPU: 1 UID: 0 PID: 18204 Comm: syz.5.3479 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1346.051117][T18204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1346.051128][T18204] Call Trace: [ 1346.051142][T18204] [ 1346.051151][T18204] dump_stack_lvl+0x241/0x360 [ 1346.051191][T18204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.051209][T18204] ? __pfx__printk+0x10/0x10 [ 1346.051238][T18204] ? snprintf+0xda/0x120 [ 1346.051258][T18204] should_fail_ex+0x40a/0x550 [ 1346.051283][T18204] _copy_to_user+0x31/0xb0 [ 1346.051302][T18204] simple_read_from_buffer+0xca/0x150 [ 1346.051327][T18204] proc_fail_nth_read+0x1e9/0x250 [ 1346.051350][T18204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.051372][T18204] ? rw_verify_area+0x243/0x630 [ 1346.051395][T18204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.051417][T18204] vfs_read+0x1f8/0xb40 [ 1346.051441][T18204] ? fdget_pos+0x254/0x320 [ 1346.051464][T18204] ? __pfx___mutex_lock+0x10/0x10 [ 1346.051485][T18204] ? __pfx_vfs_read+0x10/0x10 [ 1346.051511][T18204] ? __fget_files+0x2a/0x410 [ 1346.051533][T18204] ? __fget_files+0x395/0x410 [ 1346.051553][T18204] ? __fget_files+0x2a/0x410 [ 1346.051582][T18204] ksys_read+0x18f/0x2b0 [ 1346.051600][T18204] ? __pfx_ksys_read+0x10/0x10 [ 1346.051618][T18204] ? do_syscall_64+0x100/0x230 [ 1346.051642][T18204] ? do_syscall_64+0xb6/0x230 [ 1346.051663][T18204] do_syscall_64+0xf3/0x230 [ 1346.051684][T18204] ? clear_bhb_loop+0x35/0x90 [ 1346.051708][T18204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.051729][T18204] RIP: 0033:0x7f221738b7bc [ 1346.051745][T18204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1346.051759][T18204] RSP: 002b:00007f22151f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1346.051778][T18204] RAX: ffffffffffffffda RBX: 00007f22175a5fa0 RCX: 00007f221738b7bc [ 1346.051790][T18204] RDX: 000000000000000f RSI: 00007f22151f60a0 RDI: 0000000000000004 [ 1346.051801][T18204] RBP: 00007f22151f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.051812][T18204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.051822][T18204] R13: 0000000000000000 R14: 00007f22175a5fa0 R15: 00007ffc5adfb178 [ 1346.051850][T18204] [ 1346.064074][ T8718] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input97 [ 1346.280847][ T5870] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1346.470738][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 1346.478020][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.502853][ T5870] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1346.520708][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.719513][ T5870] usb 3-1: Product: syz [ 1346.752432][ T5870] usb 3-1: Manufacturer: syz [ 1346.757383][ T5870] usb 3-1: SerialNumber: syz [ 1347.268298][T18217] No such timeout policy "syz1" [ 1347.952879][ T5870] usb 3-1: config 0 descriptor?? [ 1348.059081][ T8718] usb 5-1: USB disconnect, device number 65 [ 1348.248715][ T5870] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 1348.272513][ T5870] sr9700 3-1:0.0: probe with driver sr9700 failed with error -22 [ 1349.567010][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1349.567028][ T29] audit: type=1326 audit(1738122865.290:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1349.834902][ T29] audit: type=1326 audit(1738122865.340:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1349.924978][ T29] audit: type=1326 audit(1738122865.340:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1350.312522][ T29] audit: type=1326 audit(1738122865.340:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1350.593853][ T29] audit: type=1326 audit(1738122865.340:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1350.797179][ T29] audit: type=1326 audit(1738122865.340:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1350.888485][T18246] netlink: 'syz.4.3488': attribute type 4 has an invalid length. [ 1350.917784][T18246] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3488'. [ 1350.951688][T13312] usb 3-1: USB disconnect, device number 68 [ 1350.953047][ T29] audit: type=1326 audit(1738122865.340:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1351.003148][ T29] audit: type=1326 audit(1738122865.340:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1351.157308][ T29] audit: type=1326 audit(1738122865.340:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1351.423577][T13312] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1351.455696][ T29] audit: type=1326 audit(1738122865.350:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd85d98cda9 code=0x7ffc0000 [ 1351.702374][T13312] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1351.747600][T13312] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1351.767418][T13312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1351.778348][T13312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1351.827171][T18260] FAULT_INJECTION: forcing a failure. [ 1351.827171][T18260] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.840319][T13312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1351.853331][T18260] CPU: 0 UID: 0 PID: 18260 Comm: syz.2.3494 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1351.853358][T18260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1351.853368][T18260] Call Trace: [ 1351.853379][T18260] [ 1351.853386][T18260] dump_stack_lvl+0x241/0x360 [ 1351.853412][T18260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1351.853429][T18260] ? __pfx__printk+0x10/0x10 [ 1351.853454][T18260] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 1351.853485][T18260] should_fail_ex+0x40a/0x550 [ 1351.853509][T18260] should_failslab+0xac/0x100 [ 1351.853530][T18260] __kmalloc_cache_noprof+0x70/0x390 [ 1351.853550][T18260] ? sctp_add_bind_addr+0x89/0x3a0 [ 1351.853571][T18260] sctp_add_bind_addr+0x89/0x3a0 [ 1351.853592][T18260] sctp_do_bind+0x5d2/0x950 [ 1351.853624][T18260] sctp_connect_new_asoc+0x277/0x6c0 [ 1351.853647][T18260] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1351.853666][T18260] ? sctp_sendmsg+0xbb9/0x3520 [ 1351.853690][T18260] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 1351.853709][T18260] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1351.853730][T18260] sctp_sendmsg+0x219a/0x3520 [ 1351.853766][T18260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1351.853786][T18260] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1351.853823][T18260] ? inet_sendmsg+0x330/0x390 [ 1351.853852][T18260] __sock_sendmsg+0x1a6/0x270 [ 1351.853875][T18260] ____sys_sendmsg+0x52a/0x7e0 [ 1351.853906][T18260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1351.853926][T18260] ? __fget_files+0x2a/0x410 [ 1351.853949][T18260] ? __fget_files+0x2a/0x410 [ 1351.853976][T18260] __sys_sendmmsg+0x36a/0x720 [ 1351.854010][T18260] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1351.854044][T18260] ? __pfx_lock_release+0x10/0x10 [ 1351.854063][T18260] ? kstrtouint_from_user+0x128/0x190 [ 1351.854107][T18260] ? ksys_write+0x22a/0x2b0 [ 1351.854123][T18260] ? __pfx_lock_release+0x10/0x10 [ 1351.854149][T18260] ? sb_end_write+0xe9/0x1c0 [ 1351.854169][T18260] ? vfs_write+0x7fa/0xd10 [ 1351.854187][T18260] ? __mutex_unlock_slowpath+0x227/0x800 [ 1351.854233][T18260] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1351.854257][T18260] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1351.854279][T18260] ? do_syscall_64+0x100/0x230 [ 1351.854311][T18260] __x64_sys_sendmmsg+0xa0/0xb0 [ 1351.854336][T18260] do_syscall_64+0xf3/0x230 [ 1351.854355][T18260] ? clear_bhb_loop+0x35/0x90 [ 1351.854380][T18260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.854400][T18260] RIP: 0033:0x7f0d2578cda9 [ 1351.854417][T18260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.854431][T18260] RSP: 002b:00007f0d2656e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1351.854450][T18260] RAX: ffffffffffffffda RBX: 00007f0d259a5fa0 RCX: 00007f0d2578cda9 [ 1351.854463][T18260] RDX: 0000000000000002 RSI: 0000000020002f00 RDI: 0000000000000003 [ 1351.854474][T18260] RBP: 00007f0d2656e090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.854484][T18260] R10: 000000002004d000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.854494][T18260] R13: 0000000000000000 R14: 00007f0d259a5fa0 R15: 00007ffdd77c38b8 [ 1351.854521][T18260] [ 1351.857153][T13312] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1352.412793][T13312] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1352.430375][T13312] usb 1-1: Product: syz [ 1352.443262][T13312] usb 1-1: Manufacturer: syz [ 1352.708421][T13312] cdc_wdm 1-1:1.0: skipping garbage [ 1352.737919][T18267] binder: 18266:18267 ioctl 4018620d 0 returned -22 [ 1353.321327][ T8718] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1353.490903][ T8718] usb 2-1: Using ep0 maxpacket: 16 [ 1353.573073][ T8718] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1353.596320][ T8718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.604476][T13312] cdc_wdm 1-1:1.0: skipping garbage [ 1353.604704][T18272] overlayfs: failed to resolve './file0': -2 [ 1353.621744][ T8718] usb 2-1: Product: syz [ 1353.625963][ T8718] usb 2-1: Manufacturer: syz [ 1353.631046][T13312] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1353.636991][T13312] cdc_wdm 1-1:1.0: Unknown control protocol [ 1353.670851][ T8718] usb 2-1: SerialNumber: syz [ 1353.680455][ T8718] usb 2-1: config 0 descriptor?? [ 1353.686176][T13312] usb 1-1: USB disconnect, device number 75 [ 1353.833175][ T8718] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input98 [ 1354.857135][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1354.857154][ T29] audit: type=1326 audit(1738122870.580:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.039023][ T29] audit: type=1326 audit(1738122870.580:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.061178][ T29] audit: type=1326 audit(1738122870.580:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.084216][ T29] audit: type=1326 audit(1738122870.580:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.106076][ T29] audit: type=1326 audit(1738122870.580:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.127955][ T29] audit: type=1326 audit(1738122870.620:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.819610][ T5869] usb 2-1: USB disconnect, device number 72 [ 1355.840336][ T29] audit: type=1326 audit(1738122870.620:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.862682][ T29] audit: type=1326 audit(1738122870.620:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.886214][ T29] audit: type=1326 audit(1738122870.630:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1355.910740][ T29] audit: type=1326 audit(1738122870.630:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18281 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1356.829873][T18301] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1356.904578][T18306] ip6_vti0: entered promiscuous mode [ 1356.920958][T18306] ip6_vti0: left promiscuous mode [ 1356.965502][T18306] xt_ecn: cannot match TCP bits for non-tcp packets [ 1357.013038][T18310] /dev/nullb0: Can't open blockdev [ 1357.022710][T18307] VFS: could not find a valid V7 on nullb0. [ 1357.839103][T18322] binder: BINDER_SET_CONTEXT_MGR already set [ 1357.845411][T18322] binder: 18314:18322 ioctl 4018620d 200002c0 returned -16 [ 1357.892946][ T5870] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1358.481601][T18326] FAULT_INJECTION: forcing a failure. [ 1358.481601][T18326] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.509380][T18326] CPU: 1 UID: 0 PID: 18326 Comm: syz.2.3514 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1358.509408][T18326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1358.509419][T18326] Call Trace: [ 1358.509425][T18326] [ 1358.509433][T18326] dump_stack_lvl+0x241/0x360 [ 1358.509457][T18326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.509473][T18326] ? __pfx__printk+0x10/0x10 [ 1358.509509][T18326] should_fail_ex+0x40a/0x550 [ 1358.509534][T18326] should_failslab+0xac/0x100 [ 1358.509554][T18326] ? skb_clone+0x20c/0x390 [ 1358.509569][T18326] kmem_cache_alloc_noprof+0x70/0x380 [ 1358.509595][T18326] skb_clone+0x20c/0x390 [ 1358.509614][T18326] __netlink_deliver_tap+0x3cc/0x7f0 [ 1358.509649][T18326] ? netlink_deliver_tap+0x2e/0x1b0 [ 1358.509670][T18326] netlink_deliver_tap+0x19d/0x1b0 [ 1358.509693][T18326] netlink_unicast+0x7c4/0x990 [ 1358.509730][T18326] ? __pfx_netlink_unicast+0x10/0x10 [ 1358.509749][T18326] ? __virt_addr_valid+0x45f/0x530 [ 1358.509771][T18326] ? __phys_addr_symbol+0x2f/0x70 [ 1358.509792][T18326] ? __check_object_size+0x47a/0x730 [ 1358.509820][T18326] netlink_sendmsg+0x8e4/0xcb0 [ 1358.509853][T18326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1358.509886][T18326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1358.509905][T18326] __sock_sendmsg+0x221/0x270 [ 1358.509926][T18326] ____sys_sendmsg+0x52a/0x7e0 [ 1358.509956][T18326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1358.509975][T18326] ? __fget_files+0x2a/0x410 [ 1358.509998][T18326] ? __fget_files+0x2a/0x410 [ 1358.510025][T18326] __sys_sendmsg+0x269/0x350 [ 1358.510051][T18326] ? __pfx___sys_sendmsg+0x10/0x10 [ 1358.510084][T18326] ? do_sys_openat2+0x17a/0x1d0 [ 1358.510130][T18326] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1358.510152][T18326] ? do_syscall_64+0x100/0x230 [ 1358.510175][T18326] ? do_syscall_64+0xb6/0x230 [ 1358.510196][T18326] do_syscall_64+0xf3/0x230 [ 1358.510215][T18326] ? clear_bhb_loop+0x35/0x90 [ 1358.510238][T18326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.510258][T18326] RIP: 0033:0x7f0d2578cda9 [ 1358.510273][T18326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.510287][T18326] RSP: 002b:00007f0d2656e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.510306][T18326] RAX: ffffffffffffffda RBX: 00007f0d259a5fa0 RCX: 00007f0d2578cda9 [ 1358.510318][T18326] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1358.510329][T18326] RBP: 00007f0d2656e090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.510340][T18326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.510350][T18326] R13: 0000000000000000 R14: 00007f0d259a5fa0 R15: 00007ffdd77c38b8 [ 1358.510377][T18326] [ 1358.809672][ T54] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 1359.030850][ T46] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1359.074133][ T5870] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1359.085300][ T5870] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1359.102398][ T5870] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1359.130700][ T5870] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1359.139799][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.291010][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 1359.316752][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1359.435471][T18340] No such timeout policy "syz1" [ 1359.781455][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.796265][ T46] usb 5-1: Product: syz [ 1359.804767][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1359.812090][ T46] usb 5-1: Manufacturer: syz [ 1359.818798][ T46] usb 5-1: SerialNumber: syz [ 1359.848338][ T46] usb 5-1: config 0 descriptor?? [ 1359.884200][ T46] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input99 [ 1359.916589][ T5870] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1360.084899][ T5870] usb 2-1: USB disconnect, device number 73 [ 1360.163478][T18344] ip6_vti0: entered promiscuous mode [ 1360.200651][T18344] ip6_vti0: left promiscuous mode [ 1360.222969][T18344] xt_ecn: cannot match TCP bits for non-tcp packets [ 1361.150432][ T8718] usb 5-1: USB disconnect, device number 66 [ 1361.330696][ T5870] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1361.431898][T18357] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3524'. [ 1361.740700][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 1361.771779][ T5870] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 1361.780016][ T5870] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1361.811800][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1362.036499][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 213, changing to 7 [ 1362.053847][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.062047][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 16887, setting to 1024 [ 1362.080348][ T5870] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1362.089781][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.099899][ T5870] usb 2-1: Product: syz [ 1362.105185][ T5870] usb 2-1: Manufacturer: syz [ 1362.136946][ T5870] usb 2-1: SerialNumber: syz [ 1362.547977][ T5870] usb 2-1: config 0 descriptor?? [ 1362.667705][ T5870] hub 2-1:0.0: bad descriptor, ignoring hub [ 1362.710689][ T5870] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1362.757481][ T5870] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input100 [ 1362.828294][ T5870] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 1362.838845][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1362.847762][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 1362.861889][ T5822] Bluetooth: hci3: hardware error 0x00 [ 1362.954055][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 1362.980836][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 1363.313513][ T5870] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 1363.382073][ T5870] usb 2-1: USB disconnect, device number 74 [ 1364.402071][T18380] No such timeout policy "syz1" [ 1365.052308][T18386] netlink: 'syz.2.3531': attribute type 1 has an invalid length. [ 1365.060117][T18386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1365.067388][T18386] IPv6: NLM_F_CREATE should be set when creating new route [ 1365.121828][ T5822] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1365.181784][T18386] netlink: 'syz.2.3531': attribute type 1 has an invalid length. [ 1365.259290][T18386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1365.380405][T18397] binder: BINDER_SET_CONTEXT_MGR already set [ 1365.386690][T18397] binder: 18388:18397 ioctl 4018620d 200002c0 returned -16 [ 1365.782108][T13312] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1366.061028][ T2150] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1366.117242][T13312] usb 2-1: Using ep0 maxpacket: 16 [ 1366.135655][T13312] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1366.162959][T13312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.191619][T13312] usb 2-1: Product: syz [ 1366.196055][T13312] usb 2-1: Manufacturer: syz [ 1366.336561][T13312] usb 2-1: SerialNumber: syz [ 1366.343712][T13312] usb 2-1: config 0 descriptor?? [ 1366.365041][T13312] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input101 [ 1367.377372][T18408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1367.401302][ T2150] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1367.835488][ T2150] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1367.850457][ T2150] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1367.862859][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.113448][T13312] usb 2-1: USB disconnect, device number 75 [ 1368.282160][ T2150] usb 5-1: can't set config #27, error -71 [ 1368.318613][ T2150] usb 5-1: USB disconnect, device number 67 [ 1368.575644][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1369.400982][T18425] No such timeout policy "syz1" [ 1371.581480][T18442] Can't find a SQUASHFS superblock on nullb0 [ 1371.589468][T18442] netlink: 'syz.5.3548': attribute type 10 has an invalid length. [ 1371.597786][T18442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1371.607320][T18442] bridge0: port 1(macvlan1) entered blocking state [ 1371.614031][T18442] bridge0: port 1(macvlan1) entered disabled state [ 1371.620887][T18442] macvlan1: entered allmulticast mode [ 1371.626294][T18442] veth1_vlan: entered allmulticast mode [ 1371.633174][T18442] macvlan1: entered promiscuous mode [ 1371.639361][T18442] bridge0: port 1(macvlan1) entered blocking state [ 1371.646011][T18442] bridge0: port 1(macvlan1) entered forwarding state [ 1372.181657][T18452] binder: BINDER_SET_CONTEXT_MGR already set [ 1372.187930][T18452] binder: 18448:18452 ioctl 4018620d 200002c0 returned -16 [ 1372.900989][T15448] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1373.080790][T15448] usb 1-1: Using ep0 maxpacket: 16 [ 1373.109564][T15448] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1373.118762][T15448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.140774][T15448] usb 1-1: Product: syz [ 1373.145158][T15448] usb 1-1: Manufacturer: syz [ 1373.150713][T15448] usb 1-1: SerialNumber: syz [ 1373.163457][T15448] usb 1-1: config 0 descriptor?? [ 1373.180782][ T5872] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1373.184224][T15448] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input102 [ 1373.444303][ T5872] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1373.468738][ T5872] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1373.493849][ T5872] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1373.503558][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.521750][T18455] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1373.533939][ T5872] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1373.743215][ T5872] usb 3-1: USB disconnect, device number 69 [ 1375.193558][ T8718] usb 1-1: USB disconnect, device number 76 [ 1377.388482][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'. [ 1378.654324][T18492] No such timeout policy "syz1" [ 1380.472643][T18507] No such timeout policy "syz1" [ 1380.812151][ T46] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1381.062825][ T46] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1381.094770][ T46] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1381.125253][ T46] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1381.168773][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.203515][T18504] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1381.224298][ T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1382.418123][T18516] No such timeout policy "syz1" [ 1382.461510][ T46] usb 6-1: USB disconnect, device number 17 [ 1383.973373][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1384.506236][T18532] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1384.962829][T18537] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1386.344238][T18556] syzkaller0: entered promiscuous mode [ 1386.349831][T18556] syzkaller0: entered allmulticast mode [ 1386.455389][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3583'. [ 1386.628327][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3583'. [ 1388.235441][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 1389.102359][ T46] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1389.441208][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 1389.599320][ T46] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1389.860699][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.868849][ T46] usb 2-1: Product: syz [ 1389.873744][ T46] usb 2-1: Manufacturer: syz [ 1389.878368][ T46] usb 2-1: SerialNumber: syz [ 1389.902596][ T46] usb 2-1: config 0 descriptor?? [ 1389.913461][ T46] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1390.217982][ T46] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1390.228910][ T46] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1390.245695][ T46] usb 2-1: USB disconnect, device number 76 [ 1390.876128][T18600] binder: 18599:18600 ioctl c0306201 0 returned -14 [ 1391.438985][ T8718] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1391.618463][ T8718] usb 2-1: Using ep0 maxpacket: 16 [ 1391.637593][ T8718] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1391.647084][ T8718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.655558][ T8718] usb 2-1: Product: syz [ 1391.659970][ T8718] usb 2-1: Manufacturer: syz [ 1391.665373][ T8718] usb 2-1: SerialNumber: syz [ 1391.672282][ T8718] usb 2-1: config 0 descriptor?? [ 1391.681922][ T8718] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input103 [ 1393.600120][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1393.888308][ T8718] usb 2-1: USB disconnect, device number 77 [ 1394.415762][T18613] Can't find a SQUASHFS superblock on nullb0 [ 1394.429727][T18613] netlink: 'syz.0.3595': attribute type 10 has an invalid length. [ 1394.437999][T18613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3595'. [ 1396.693554][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3598'. [ 1398.935755][T18656] binder: 18655:18656 ioctl c0306201 0 returned -14 [ 1400.090607][ T2150] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1400.420003][ T2150] usb 3-1: Using ep0 maxpacket: 16 [ 1400.490925][ T2150] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1400.605671][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.722010][ T2150] usb 3-1: Product: syz [ 1400.786727][ T2150] usb 3-1: Manufacturer: syz [ 1400.887946][ T2150] usb 3-1: SerialNumber: syz [ 1401.044238][ T2150] usb 3-1: config 0 descriptor?? [ 1401.123715][ T2150] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input104 [ 1401.590053][T18676] No such timeout policy "syz1" [ 1402.768905][ T5872] usb 3-1: USB disconnect, device number 70 [ 1403.232405][T18692] Bluetooth: hci5: Frame reassembly failed (-84) [ 1403.445467][ T8926] Bluetooth: hci5: Frame reassembly failed (-84) [ 1404.743701][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3618'. [ 1404.911745][T18712] FAULT_INJECTION: forcing a failure. [ 1404.911745][T18712] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.924879][T18712] CPU: 1 UID: 0 PID: 18712 Comm: syz.0.3620 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1404.924921][T18712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1404.924944][T18712] Call Trace: [ 1404.924958][T18712] [ 1404.924974][T18712] dump_stack_lvl+0x241/0x360 [ 1404.925002][T18712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1404.925019][T18712] ? __pfx__printk+0x10/0x10 [ 1404.925064][T18712] should_fail_ex+0x40a/0x550 [ 1404.925088][T18712] should_failslab+0xac/0x100 [ 1404.925107][T18712] ? xfrm_state_alloc+0x26/0x320 [ 1404.925126][T18712] kmem_cache_alloc_noprof+0x70/0x380 [ 1404.925152][T18712] xfrm_state_alloc+0x26/0x320 [ 1404.925175][T18712] xfrm_state_find+0x406c/0x64c0 [ 1404.925221][T18712] ? xfrm_state_find+0x436/0x64c0 [ 1404.925245][T18712] ? __pfx_xfrm_state_find+0x10/0x10 [ 1404.925265][T18712] ? __rt6_find_exception_rcu+0x128/0x4c0 [ 1404.925302][T18712] ? __pfx_validate_chain+0x10/0x10 [ 1404.925335][T18712] xfrm_resolve_and_create_bundle+0x80d/0x33b0 [ 1404.925383][T18712] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1404.925409][T18712] ? __pfx_lock_acquire+0x10/0x10 [ 1404.925430][T18712] ? xfrm_sk_policy_lookup+0x93/0x840 [ 1404.925466][T18712] ? xfrm_sk_policy_lookup+0x7ef/0x840 [ 1404.925487][T18712] ? xfrm_sk_policy_lookup+0x93/0x840 [ 1404.925511][T18712] ? xfrm_expand_policies+0x3fb/0x690 [ 1404.925535][T18712] xfrm_lookup_with_ifid+0x366/0x1f70 [ 1404.925554][T18712] ? ip6_dst_lookup_tail+0xbd8/0x14f0 [ 1404.925577][T18712] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1404.925599][T18712] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1404.925617][T18712] ? __pfx_lock_release+0x10/0x10 [ 1404.925635][T18712] ? ima_match_policy+0x111/0x2230 [ 1404.925668][T18712] xfrm_lookup_route+0x3c/0x1c0 [ 1404.925689][T18712] ip6_dst_lookup_flow+0x13e/0x180 [ 1404.925710][T18712] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1404.925729][T18712] ? __pfx_validate_chain+0x10/0x10 [ 1404.925751][T18712] ? rawv6_sendmsg+0xfa2/0x2410 [ 1404.925775][T18712] rawv6_sendmsg+0x121b/0x2410 [ 1404.925793][T18712] ? mark_lock+0x9a/0x360 [ 1404.925833][T18712] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1404.925860][T18712] ? smack_socket_sendmsg+0x178/0x540 [ 1404.925886][T18712] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1404.925910][T18712] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 1404.925948][T18712] ? sock_rps_record_flow+0x1a/0x400 [ 1404.925975][T18712] ? inet_sendmsg+0x330/0x390 [ 1404.926003][T18712] __sock_sendmsg+0x1a6/0x270 [ 1404.926092][T18712] ____sys_sendmsg+0x52a/0x7e0 [ 1404.926134][T18712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1404.926153][T18712] ? __fget_files+0x2a/0x410 [ 1404.926176][T18712] ? __fget_files+0x2a/0x410 [ 1404.926206][T18712] __sys_sendmmsg+0x36a/0x720 [ 1404.926241][T18712] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1404.926288][T18712] ? __pfx_lock_release+0x10/0x10 [ 1404.926308][T18712] ? kstrtouint_from_user+0x128/0x190 [ 1404.926353][T18712] ? ksys_write+0x22a/0x2b0 [ 1404.926370][T18712] ? __pfx_lock_release+0x10/0x10 [ 1404.926398][T18712] ? sb_end_write+0xe9/0x1c0 [ 1404.926420][T18712] ? vfs_write+0x7fa/0xd10 [ 1404.926439][T18712] ? __mutex_unlock_slowpath+0x227/0x800 [ 1404.926487][T18712] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1404.926513][T18712] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1404.926536][T18712] ? do_syscall_64+0x100/0x230 [ 1404.926561][T18712] __x64_sys_sendmmsg+0xa0/0xb0 [ 1404.926586][T18712] do_syscall_64+0xf3/0x230 [ 1404.926607][T18712] ? clear_bhb_loop+0x35/0x90 [ 1404.926632][T18712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.926653][T18712] RIP: 0033:0x7f68f6f8cda9 [ 1404.926670][T18712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.926685][T18712] RSP: 002b:00007f68f4db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1404.926705][T18712] RAX: ffffffffffffffda RBX: 00007f68f71a6160 RCX: 00007f68f6f8cda9 [ 1404.926718][T18712] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000009 [ 1404.926729][T18712] RBP: 00007f68f4db4090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.926741][T18712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.926751][T18712] R13: 0000000000000000 R14: 00007f68f71a6160 R15: 00007ffebc042978 [ 1404.926780][T18712] [ 1405.342653][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 1405.349601][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1406.537983][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3622'. [ 1407.983625][T18720] hsr_slave_1 (unregistering): left promiscuous mode [ 1408.030255][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1408.030273][ T29] audit: type=1326 audit(1738122923.750:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.096882][ T29] audit: type=1326 audit(1738122923.750:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.169960][ T29] audit: type=1326 audit(1738122923.760:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.306318][ T29] audit: type=1326 audit(1738122923.760:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.360702][T13312] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1408.393526][ T29] audit: type=1326 audit(1738122923.760:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.481167][ T29] audit: type=1326 audit(1738122923.760:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.500770][T13312] usb 5-1: device descriptor read/64, error -71 [ 1408.567560][ T29] audit: type=1326 audit(1738122923.760:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.695457][ T29] audit: type=1326 audit(1738122923.770:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.775516][ T29] audit: type=1326 audit(1738122923.770:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.802029][T13312] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1408.840797][ T29] audit: type=1326 audit(1738122923.770:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4878cda9 code=0x7ffc0000 [ 1408.951226][T13312] usb 5-1: device descriptor read/64, error -71 [ 1409.062721][T13312] usb usb5-port1: attempt power cycle [ 1410.567615][T18745] gre1: entered promiscuous mode [ 1410.746085][T13312] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1410.895137][T13312] usb 5-1: device descriptor read/8, error -71 [ 1411.360949][T18759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1412.378167][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1414.177303][T18778] No such timeout policy "syz1" [ 1415.570812][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 1416.485486][T18800] befs: (nullb0): No write support. Marking filesystem read-only [ 1416.499601][T18800] befs: (nullb0): invalid magic header [ 1417.149646][T18807] netlink: 'syz.0.3646': attribute type 9 has an invalid length. [ 1417.473426][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1417.473477][ T29] audit: type=1326 audit(1738122933.170:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1417.711283][T18813] Can't find a SQUASHFS superblock on nullb0 [ 1417.752539][ T5872] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1417.752677][T18813] netlink: 'syz.5.3648': attribute type 10 has an invalid length. [ 1417.768197][T18813] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1418.097512][ T29] audit: type=1326 audit(1738122933.170:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1418.221027][ T29] audit: type=1326 audit(1738122933.170:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1418.281172][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 1418.315273][ T5872] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1418.334871][ T29] audit: type=1326 audit(1738122933.180:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1418.360801][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.378381][ T5872] usb 1-1: Product: syz [ 1418.476385][ T5872] usb 1-1: Manufacturer: syz [ 1418.490231][ T5872] usb 1-1: SerialNumber: syz [ 1418.495814][ T29] audit: type=1326 audit(1738122933.180:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6f8cda9 code=0x7ffc0000 [ 1418.519725][ T5872] usb 1-1: config 0 descriptor?? [ 1419.535795][ T29] audit: type=1326 audit(1738122933.190:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68f6f8b710 code=0x7ffc0000 [ 1419.820351][ T5872] gspca_main: se401-2.14.0 probing 047d:5003 [ 1419.890366][ T29] audit: type=1326 audit(1738122933.190:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f6f8c9ab code=0x7ffc0000 [ 1419.942838][ T29] audit: type=1326 audit(1738122933.190:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f6f8c9ab code=0x7ffc0000 [ 1420.000925][ T29] audit: type=1326 audit(1738122933.230:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f6f8c9ab code=0x7ffc0000 [ 1420.224532][ T29] audit: type=1326 audit(1738122933.260:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18804 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f6f8c9ab code=0x7ffc0000 [ 1420.249976][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1421.656405][ T5872] gspca_se401: read req failed req 0x06 error -19 [ 1421.672742][ T5872] usb 1-1: USB disconnect, device number 77 [ 1423.250646][ T2150] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1424.044087][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.552967][ T2150] usb 2-1: config 162 has an invalid interface number: 63 but max is 1 [ 1424.630733][ T2150] usb 2-1: config 162 has an invalid interface number: 172 but max is 1 [ 1424.639139][ T2150] usb 2-1: config 162 has no interface number 0 [ 1424.670773][ T2150] usb 2-1: config 162 has no interface number 1 [ 1424.677426][ T2150] usb 2-1: config 162 interface 63 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1424.733985][ T2150] usb 2-1: config 162 interface 172 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1424.765862][ T2150] usb 2-1: config 162 interface 172 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1425.057446][ T2150] usb 2-1: config 162 interface 172 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1425.320797][ T2150] usb 2-1: config 162 interface 172 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 1425.338675][T18881] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1425.393280][ T2150] usb 2-1: config 162 interface 172 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1425.426360][ T2150] usb 2-1: config 162 interface 63 has no altsetting 0 [ 1425.441129][ T2150] usb 2-1: config 162 interface 172 has no altsetting 0 [ 1425.663389][ T2150] usb 2-1: string descriptor 0 read error: -71 [ 1425.669790][ T2150] usb 2-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=cf.0b [ 1426.280283][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.419705][ T2150] usb 2-1: can't set config #162, error -71 [ 1427.429411][ T2150] usb 2-1: USB disconnect, device number 78 [ 1427.524363][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1427.584753][T18896] FAULT_INJECTION: forcing a failure. [ 1427.584753][T18896] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.620924][T18896] CPU: 0 UID: 0 PID: 18896 Comm: syz.4.3672 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1427.620951][T18896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1427.620961][T18896] Call Trace: [ 1427.620967][T18896] [ 1427.620975][T18896] dump_stack_lvl+0x241/0x360 [ 1427.621001][T18896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.621017][T18896] ? __pfx__printk+0x10/0x10 [ 1427.621039][T18896] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 1427.621063][T18896] ? __pfx___might_resched+0x10/0x10 [ 1427.621079][T18896] ? __mutex_trylock_common+0x183/0x2e0 [ 1427.621104][T18896] should_fail_ex+0x40a/0x550 [ 1427.621124][T18896] should_failslab+0xac/0x100 [ 1427.621144][T18896] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 1427.621163][T18896] ? kobject_set_name_vargs+0x61/0x120 [ 1427.621182][T18896] ? __mutex_lock+0x397/0x1010 [ 1427.621206][T18896] kstrdup+0x39/0xb0 [ 1427.621229][T18896] kobject_set_name_vargs+0x61/0x120 [ 1427.621251][T18896] dev_set_name+0xd5/0x120 [ 1427.621275][T18896] ? wiphy_new_nm+0x714/0x19a0 [ 1427.621293][T18896] ? __pfx_dev_set_name+0x10/0x10 [ 1427.621316][T18896] ? __kmalloc_noprof+0x2a5/0x4c0 [ 1427.621334][T18896] ? wiphy_new_nm+0x625/0x19a0 [ 1427.621353][T18896] wiphy_new_nm+0x72e/0x19a0 [ 1427.621368][T18896] ? ieee80211_alloc_hw_nm+0x8f9/0x1ea0 [ 1427.621387][T18896] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1427.621406][T18896] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 1427.621429][T18896] ? mac80211_hwsim_new_radio+0xf7/0x4a90 [ 1427.621456][T18896] mac80211_hwsim_new_radio+0x1db/0x4a90 [ 1427.621499][T18896] ? rcu_is_watching+0x15/0xb0 [ 1427.621522][T18896] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1427.621540][T18896] ? kstrndup+0x5c/0xb0 [ 1427.621560][T18896] ? __asan_memcpy+0x40/0x70 [ 1427.621586][T18896] hwsim_new_radio_nl+0xece/0x2290 [ 1427.621618][T18896] ? __pfx___nla_validate_parse+0x10/0x10 [ 1427.621643][T18896] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1427.621692][T18896] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 1427.621717][T18896] genl_rcv_msg+0xb14/0xec0 [ 1427.621744][T18896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1427.621790][T18896] ? __pfx_lock_acquire+0x10/0x10 [ 1427.621810][T18896] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1427.621833][T18896] ? __pfx___might_resched+0x10/0x10 [ 1427.621872][T18896] netlink_rcv_skb+0x1e3/0x430 [ 1427.621895][T18896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1427.621914][T18896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1427.621968][T18896] genl_rcv+0x28/0x40 [ 1427.621984][T18896] netlink_unicast+0x7f6/0x990 [ 1427.622014][T18896] ? __pfx_netlink_unicast+0x10/0x10 [ 1427.622033][T18896] ? __virt_addr_valid+0x45f/0x530 [ 1427.622056][T18896] ? __phys_addr_symbol+0x2f/0x70 [ 1427.622074][T18896] ? __check_object_size+0x47a/0x730 [ 1427.622096][T18896] netlink_sendmsg+0x8e4/0xcb0 [ 1427.622127][T18896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.622160][T18896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.622180][T18896] __sock_sendmsg+0x221/0x270 [ 1427.622200][T18896] ____sys_sendmsg+0x52a/0x7e0 [ 1427.622229][T18896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1427.622248][T18896] ? __fget_files+0x2a/0x410 [ 1427.622271][T18896] ? __fget_files+0x2a/0x410 [ 1427.622298][T18896] __sys_sendmsg+0x269/0x350 [ 1427.622325][T18896] ? __pfx___sys_sendmsg+0x10/0x10 [ 1427.622359][T18896] ? do_sys_openat2+0x17a/0x1d0 [ 1427.622406][T18896] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1427.622427][T18896] ? do_syscall_64+0x100/0x230 [ 1427.622451][T18896] ? do_syscall_64+0xb6/0x230 [ 1427.622471][T18896] do_syscall_64+0xf3/0x230 [ 1427.622489][T18896] ? clear_bhb_loop+0x35/0x90 [ 1427.622512][T18896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.622532][T18896] RIP: 0033:0x7f7f4878cda9 [ 1427.622547][T18896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.622561][T18896] RSP: 002b:00007f7f494fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.622580][T18896] RAX: ffffffffffffffda RBX: 00007f7f489a5fa0 RCX: 00007f7f4878cda9 [ 1427.622593][T18896] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1427.622604][T18896] RBP: 00007f7f494fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.622614][T18896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.622625][T18896] R13: 0000000000000000 R14: 00007f7f489a5fa0 R15: 00007ffee69fe3b8 [ 1427.622651][T18896] [ 1431.620862][ T5870] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1431.800667][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 1431.828193][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1431.873249][ T5870] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1431.903281][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 1431.926262][ T5870] usb 2-1: Product: syz [ 1431.942158][ T5870] usb 2-1: Manufacturer: syz [ 1431.961008][ T5870] usb 2-1: SerialNumber: syz [ 1432.000048][ T5870] usb 2-1: config 0 descriptor?? [ 1432.029180][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1432.092641][ T5870] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1433.082257][ T5188] usb 2-1: USB disconnect, device number 79 [ 1434.790762][ T5870] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1435.300846][ T5870] usb 3-1: device descriptor read/64, error -71 [ 1435.860836][ T5188] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1436.066991][ T5870] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1436.150796][ T5188] usb 1-1: device descriptor read/64, error -71 [ 1436.240671][ T5870] usb 3-1: device descriptor read/64, error -71 [ 1436.361789][ T5870] usb usb3-port1: attempt power cycle [ 1436.420747][ T5188] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1436.582541][ T5188] usb 1-1: device descriptor read/64, error -71 [ 1436.752492][ T5188] usb usb1-port1: attempt power cycle [ 1437.330786][T13312] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1437.692420][T18989] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1437.727952][T18989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1437.743077][T13312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.770727][T13312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1437.784532][T13312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1437.798405][T13312] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1438.282183][T13312] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1438.291426][ T5188] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1438.299340][T13312] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1438.309350][T13312] usb 5-1: Manufacturer: syz [ 1438.334656][T13312] usb 5-1: config 0 descriptor?? [ 1438.512411][ T5188] usb 1-1: device not accepting address 80, error -71 [ 1438.889654][ T5870] IPVS: starting estimator thread 0... [ 1438.956743][T13312] rc_core: IR keymap rc-hauppauge not found [ 1438.970672][T13312] Registered IR keymap rc-empty [ 1438.980078][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.006384][T19004] IPVS: using max 27 ests per chain, 64800 per kthread [ 1439.040840][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.091930][T13312] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1439.132364][T13312] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input105 [ 1439.179297][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.230953][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.260862][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.282994][T19013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1439.290108][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.311001][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.332317][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.362673][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.389044][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.396660][ T5188] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1439.423272][ T5188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.435808][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.443140][ T5188] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1439.457356][ T5188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.465711][ T8718] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1439.474419][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.501242][ T5188] usb 1-1: config 0 descriptor?? [ 1439.511231][T13312] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1439.531856][T13312] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1439.543227][T13312] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1439.556191][T13312] usb 5-1: USB disconnect, device number 72 [ 1439.641061][ T8718] usb 3-1: Using ep0 maxpacket: 32 [ 1439.653786][ T8718] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1439.670909][ T8718] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1439.679620][ T8718] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1439.712377][ T8718] usb 3-1: config 1 has no interface number 0 [ 1439.718604][ T8718] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1439.751052][ T8718] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1439.780705][ T8718] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1439.789843][ T8718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.831862][ T8718] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1440.051785][T19012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.096949][T19012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.099520][ T5188] uclogic 0003:28BD:0071.0020: interface is invalid, ignoring [ 1440.158664][ T5870] usb 1-1: USB disconnect, device number 81 [ 1440.850343][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 1441.332024][ T5870] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1441.492636][ T5870] usb 1-1: config index 0 descriptor too short (expected 1298, got 18) [ 1441.501297][ T5870] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1441.509639][ T5870] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1441.522379][ T5870] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1441.541838][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.550009][ T5870] usb 1-1: Product: syz [ 1441.561859][ T5870] usb 1-1: Manufacturer: syz [ 1441.572934][ T5870] usb 1-1: SerialNumber: syz [ 1441.593204][ T5870] usb 1-1: config 0 descriptor?? [ 1442.238397][T19048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.305389][ T8718] snd_usb_pod 3-1:1.1: set_interface failed [ 1442.326667][ T8718] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1442.341408][ T8718] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1442.426183][ T8718] usb 3-1: USB disconnect, device number 74 [ 1442.433566][ T5870] usb 1-1: Firmware version (0.0) predates our first public release. [ 1442.455669][ T5870] usb 1-1: Please update to version 0.2 or newer [ 1442.643637][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'. [ 1442.657730][ T5870] usb 1-1: USB disconnect, device number 82 [ 1443.610654][T19058] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1443.614356][T19061] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1444.890686][ T5870] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1445.240897][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 1445.557016][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1446.139730][ T5870] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1446.187504][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.348049][ T5870] usb 1-1: Product: syz [ 1446.360640][ T5870] usb 1-1: Manufacturer: syz [ 1446.750835][ T5870] usb 1-1: SerialNumber: syz [ 1446.811358][ T5870] usb 1-1: config 0 descriptor?? [ 1446.836047][ T5870] usb 1-1: can't set config #0, error -71 [ 1446.921485][ T5870] usb 1-1: USB disconnect, device number 83 [ 1447.511604][ T8718] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1447.591187][ T46] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1447.821058][ T8718] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1447.842983][ T8718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.865075][ T8718] usb 5-1: Product: syz [ 1447.878361][ T8718] usb 5-1: Manufacturer: syz [ 1447.893693][ T8718] usb 5-1: SerialNumber: syz [ 1447.907725][ T8718] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1447.970661][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 1447.970914][T13312] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1447.988039][ T46] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1448.025436][ T46] usb 1-1: config 0 has no interface number 0 [ 1448.049507][ T46] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1448.092779][ T46] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1448.121042][ T46] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1448.178417][ T46] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x81 has invalid maxpacket 57427, setting to 1024 [ 1448.217514][ T46] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1448.252553][ T46] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1448.311975][ T46] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1448.354550][ T46] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1448.401913][ T46] usb 1-1: config 0 interface 239 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 4 [ 1448.456499][ T46] usb 1-1: config 0 interface 239 has no altsetting 0 [ 1448.483241][ T46] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1448.517619][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.839449][ T46] usb 1-1: Product: syz [ 1448.872517][ T46] usb 1-1: Manufacturer: syz [ 1448.908426][ T46] usb 1-1: SerialNumber: syz [ 1449.041151][ T46] usb 1-1: config 0 descriptor?? [ 1449.056647][T19108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.068156][T19091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1449.104160][T19108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.112508][T19091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1449.373948][ T5822] Bluetooth: hci5: BCM: Reset failed (-71) [ 1449.395220][ T46] usb 1-1: USB disconnect, device number 84 [ 1449.487061][T13312] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1449.502947][T13312] ath9k_htc: Failed to initialize the device [ 1449.554774][T13312] usb 5-1: ath9k_htc: USB layer deinitialized [ 1449.778099][T15448] usb 5-1: USB disconnect, device number 73 [ 1449.982024][ T46] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1450.281054][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.306867][ T46] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1450.645575][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.668818][ T46] usb 3-1: config 0 descriptor?? [ 1450.692427][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 1451.211977][ T46] pwc: send_video_command error -71 [ 1451.217210][ T46] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1451.243472][ T46] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1451.294928][ T46] usb 3-1: USB disconnect, device number 75 [ 1452.695519][T19141] befs: (nullb0): No write support. Marking filesystem read-only [ 1452.705100][T19141] befs: (nullb0): invalid magic header [ 1452.888351][ T46] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1453.990684][ T5188] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1454.406184][ T5188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.429982][ T5188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1454.459549][ T5188] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1454.480150][ T5188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1454.511791][ T5188] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1454.528249][ T5188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.554434][ T5188] usb 5-1: Product: syz [ 1454.564449][ T5188] usb 5-1: Manufacturer: syz [ 1454.579508][ T5188] usb 5-1: SerialNumber: syz [ 1454.607544][ T5188] usb 5-1: config 0 descriptor?? [ 1454.627499][ T5188] usb 5-1: ucan: probing device on interface #0 [ 1454.634215][ T5188] usb 5-1: ucan: invalid endpoint configuration [ 1454.651487][ T5188] usb 5-1: ucan: probe failed; try to update the device firmware [ 1455.197052][T19172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3755'. [ 1560.140535][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1560.147547][ C0] rcu: 1-...!: (6 ticks this GP) idle=939c/1/0x4000000000000000 softirq=79829/79835 fqs=3 [ 1560.159427][ C0] rcu: (detected by 0, t=10502 jiffies, g=97781, q=227 ncpus=2) [ 1560.167174][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1560.167218][ C1] NMI backtrace for cpu 1 [ 1560.167231][ C1] CPU: 1 UID: 0 PID: 19169 Comm: syz.5.3760 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1560.167248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1560.167260][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1560.167290][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 1560.167304][ C1] RSP: 0018:ffffc90000a18ad0 EFLAGS: 00000046 [ 1560.167319][ C1] RAX: 0000000000000001 RBX: 1ffffffff34c3a42 RCX: 0000000000000001 [ 1560.167331][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a61d208 [ 1560.167341][ C1] RBP: dffffc0000000000 R08: ffffffff9a61d20b R09: 1ffffffff34c3a41 [ 1560.167354][ C1] R10: dffffc0000000000 R11: fffffbfff34c3a42 R12: 1ffffffff34c3a43 [ 1560.167366][ C1] R13: ffffffff9a61d218 R14: ffffffff9a61d210 R15: ffffffff9a61d208 [ 1560.167378][ C1] FS: 00007f22151f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1560.167393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1560.167404][ C1] CR2: 000000110c28f70c CR3: 0000000035222000 CR4: 00000000003526f0 [ 1560.167419][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1560.167429][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1560.167439][ C1] Call Trace: [ 1560.167447][ C1] [ 1560.167456][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1560.167474][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1560.167503][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1560.167519][ C1] ? nmi_handle+0x2a/0x5a0 [ 1560.167548][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1560.167566][ C1] ? nmi_handle+0x14f/0x5a0 [ 1560.167586][ C1] ? nmi_handle+0x2a/0x5a0 [ 1560.167608][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1560.167629][ C1] ? default_do_nmi+0x63/0x160 [ 1560.167653][ C1] ? exc_nmi+0x123/0x1f0 [ 1560.167675][ C1] ? end_repeat_nmi+0xf/0x53 [ 1560.167703][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1560.167725][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1560.167747][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1560.167768][ C1] [ 1560.167773][ C1] [ 1560.167779][ C1] do_raw_spin_unlock+0x13c/0x8b0 [ 1560.167800][ C1] _raw_spin_unlock_irqrestore+0x81/0x140 [ 1560.167819][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1560.167842][ C1] debug_object_activate+0x3f7/0x580 [ 1560.167864][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1560.167880][ C1] ? advance_sched+0xa02/0xca0 [ 1560.167899][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1560.167915][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1560.167934][ C1] enqueue_hrtimer+0x30/0x3c0 [ 1560.167959][ C1] __hrtimer_run_queues+0x6cb/0xd30 [ 1560.167992][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1560.168013][ C1] ? sched_clock+0x4a/0x70 [ 1560.168031][ C1] ? read_tsc+0x9/0x20 [ 1560.168046][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1560.168069][ C1] hrtimer_interrupt+0x403/0xa40 [ 1560.168103][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1560.168125][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1560.168144][ C1] [ 1560.168149][ C1] [ 1560.168156][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1560.168177][ C1] RIP: 0010:preempt_count_add+0x6/0x190 [ 1560.168194][ C1] Code: 48 8b 3c 24 e8 6b d2 95 00 eb 8c e9 ee fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 89 fb 48 c7 c0 80 d9 3c 9a 48 c1 e8 03 49 bf 00 00 00 00 [ 1560.168206][ C1] RSP: 0018:ffffc9000cc16760 EFLAGS: 00000202 [ 1560.168220][ C1] RAX: 0000000000000001 RBX: 1ffff92001982d08 RCX: ffffc9000cc174a0 [ 1560.168232][ C1] RDX: dffffc0000000000 RSI: ffffffff820b2904 RDI: 0000000000000001 [ 1560.168243][ C1] RBP: ffffc9000cc16878 R08: 0000000000000009 R09: ffffc9000cc16930 [ 1560.168253][ C1] R10: ffffc9000cc16890 R11: ffffffff81ab1ef0 R12: dffffc0000000000 [ 1560.168265][ C1] R13: ffffc9000cc16840 R14: ffffffff820b2904 R15: 0000000000000000 [ 1560.168277][ C1] ? __handle_mm_fault+0x4c44/0x70f0 [ 1560.168301][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1560.168320][ C1] ? __handle_mm_fault+0x4c44/0x70f0 [ 1560.168344][ C1] unwind_next_frame+0xb0/0x22d0 [ 1560.168370][ C1] ? __do_fault+0x135/0x390 [ 1560.168387][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1560.168404][ C1] arch_stack_walk+0x11c/0x150 [ 1560.168428][ C1] ? __handle_mm_fault+0x4c44/0x70f0 [ 1560.168452][ C1] stack_trace_save+0x118/0x1d0 [ 1560.168471][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1560.168502][ C1] save_stack+0xfb/0x1f0 [ 1560.168517][ C1] ? mark_lock+0x9a/0x360 [ 1560.168538][ C1] ? __pfx_save_stack+0x10/0x10 [ 1560.168552][ C1] ? post_alloc_hook+0x1f4/0x240 [ 1560.168573][ C1] ? get_page_from_freelist+0x3651/0x37a0 [ 1560.168589][ C1] ? __alloc_frozen_pages_noprof+0x292/0x710 [ 1560.168605][ C1] ? alloc_pages_mpol+0x311/0x660 [ 1560.168623][ C1] ? folio_alloc_mpol_noprof+0x36/0x70 [ 1560.168640][ C1] ? shmem_alloc_and_add_folio+0x4a0/0x1090 [ 1560.168659][ C1] ? shmem_get_folio_gfp+0x621/0x1840 [ 1560.168674][ C1] ? shmem_fault+0x220/0x5b0 [ 1560.168690][ C1] ? __do_fault+0x135/0x390 [ 1560.168705][ C1] ? __handle_mm_fault+0x4c44/0x70f0 [ 1560.168734][ C1] __set_page_owner+0x92/0x800 [ 1560.168749][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1560.168770][ C1] ? get_page_from_freelist+0x895/0x37a0 [ 1560.168786][ C1] ? __pfx_lock_release+0x10/0x10 [ 1560.168806][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1560.168826][ C1] post_alloc_hook+0x1f4/0x240 [ 1560.168850][ C1] get_page_from_freelist+0x3651/0x37a0 [ 1560.168876][ C1] ? __pfx___might_resched+0x10/0x10 [ 1560.168895][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1560.168926][ C1] __alloc_frozen_pages_noprof+0x292/0x710 [ 1560.168944][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1560.168971][ C1] alloc_pages_mpol+0x311/0x660 [ 1560.168993][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1560.169011][ C1] ? filemap_get_entry+0x123/0x3b0 [ 1560.169029][ C1] ? __pfx_lock_release+0x10/0x10 [ 1560.169051][ C1] folio_alloc_mpol_noprof+0x36/0x70 [ 1560.169071][ C1] shmem_alloc_and_add_folio+0x4a0/0x1090 [ 1560.169096][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1560.169116][ C1] ? shmem_allowable_huge_orders+0x40b/0x420 [ 1560.169135][ C1] shmem_get_folio_gfp+0x621/0x1840 [ 1560.169160][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1560.169182][ C1] shmem_fault+0x220/0x5b0 [ 1560.169203][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1560.169221][ C1] ? __pfx_lock_release+0x10/0x10 [ 1560.169245][ C1] __do_fault+0x135/0x390 [ 1560.169263][ C1] __handle_mm_fault+0x4c44/0x70f0 [ 1560.169284][ C1] ? mark_lock+0x9a/0x360 [ 1560.169317][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1560.169343][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1560.169363][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1560.169389][ C1] ? follow_page_pte+0x25a/0x1460 [ 1560.169405][ C1] ? follow_page_pte+0x86a/0x1460 [ 1560.169420][ C1] ? __pfx_lock_release+0x10/0x10 [ 1560.169442][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1560.169467][ C1] ? __pfx___might_resched+0x10/0x10 [ 1560.169486][ C1] handle_mm_fault+0x2c1/0x7e0 [ 1560.169519][ C1] __get_user_pages+0x1a92/0x4140 [ 1560.169561][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1560.169585][ C1] ? __pfx_mt_find+0x10/0x10 [ 1560.169614][ C1] populate_vma_page_range+0x264/0x330 [ 1560.169639][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1560.169661][ C1] ? userfaultfd_unmap_complete+0x30c/0x360 [ 1560.169690][ C1] __mm_populate+0x27a/0x460 [ 1560.169715][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1560.169743][ C1] vm_mmap_pgoff+0x303/0x430 [ 1560.169770][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1560.169793][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1560.169813][ C1] ? do_syscall_64+0x100/0x230 [ 1560.169832][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 1560.169854][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1560.169875][ C1] do_syscall_64+0xf3/0x230 [ 1560.169894][ C1] ? clear_bhb_loop+0x35/0x90 [ 1560.169917][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.169937][ C1] RIP: 0033:0x7f221738cda9 [ 1560.169952][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1560.169964][ C1] RSP: 002b:00007f22151f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1560.169979][ C1] RAX: ffffffffffffffda RBX: 00007f22175a5fa0 RCX: 00007f221738cda9 [ 1560.169990][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000000020000000 [ 1560.170002][ C1] RBP: 00007f221740e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 1560.170013][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1560.170023][ C1] R13: 0000000000000000 R14: 00007f22175a5fa0 R15: 00007ffc5adfb178 [ 1560.170042][ C1] [ 1560.170211][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g97781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1561.054821][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1561.064803][ C0] rcu: RCU grace-period kthread stack dump: [ 1561.070695][ C0] task:rcu_preempt state:R running task stack:25624 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1561.084220][ C0] Call Trace: [ 1561.087514][ C0] [ 1561.090459][ C0] __schedule+0x18bc/0x4c40 [ 1561.094984][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1561.100909][ C0] ? __pfx___schedule+0x10/0x10 [ 1561.105782][ C0] ? __pfx_lock_release+0x10/0x10 [ 1561.110831][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1561.115780][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1561.122131][ C0] ? schedule+0x90/0x320 [ 1561.126384][ C0] schedule+0x14b/0x320 [ 1561.130558][ C0] schedule_timeout+0x15a/0x290 [ 1561.135420][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1561.140812][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1561.146108][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1561.151932][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1561.156796][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1561.162017][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1561.168184][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1561.173481][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1561.179394][ C0] ? finish_swait+0xd4/0x1e0 [ 1561.184001][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1561.189218][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1561.193826][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1561.199035][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1561.204947][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1561.209986][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1561.215204][ C0] kthread+0x7a9/0x920 [ 1561.219283][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.223887][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1561.229098][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.233698][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.238303][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.242904][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.248111][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1561.253320][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.257925][ C0] ret_from_fork+0x4b/0x80 [ 1561.262353][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.266961][ C0] ret_from_fork_asm+0x1a/0x30 [ 1561.271747][ C0] [ 1561.274773][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1561.281100][ C0] CPU: 0 UID: 0 PID: 19172 Comm: syz.4.3755 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1561.291514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1561.301576][ C0] RIP: 0010:smp_call_function_many_cond+0x1bae/0x2d30 [ 1561.308359][ C0] Code: 89 e6 83 e6 01 31 ff e8 a0 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 50 e4 0b 00 eb 41 f3 90 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 03 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 2b e4 0b [ 1561.327976][ C0] RSP: 0018:ffffc9000ccc7940 EFLAGS: 00000246 [ 1561.334055][ C0] RAX: dffffc0000000000 RBX: 1ffff110170e88c1 RCX: 0000000000080000 [ 1561.342034][ C0] RDX: ffffc90014ed4000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1561.350010][ C0] RBP: ffffc9000ccc7b40 R08: ffffffff81b37820 R09: 1ffffffff2858d08 [ 1561.357989][ C0] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: ffff8880b863f988 [ 1561.366058][ C0] R13: ffff8880b8744608 R14: ffff8880b863f980 R15: 0000000000000001 [ 1561.374043][ C0] FS: 00007f7f465f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1561.382980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1561.389576][ C0] CR2: 0000000000000000 CR3: 0000000033dc8000 CR4: 00000000003526f0 [ 1561.397563][ C0] DR0: 0000000000000000 DR1: 000000000000000b DR2: 0000000000000000 [ 1561.405550][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1561.413528][ C0] Call Trace: [ 1561.416814][ C0] [ 1561.419665][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1561.426016][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1561.431678][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1561.437507][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 1561.442905][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1561.449158][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1561.454554][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1561.460220][ C0] ? update_process_times+0x242/0x2f0 [ 1561.465606][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1561.470735][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1561.476202][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1561.481612][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1561.487346][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 1561.492299][ C0] ? read_tsc+0x9/0x20 [ 1561.496382][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1561.502468][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1561.507615][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1561.513785][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1561.519605][ C0] [ 1561.522543][ C0] [ 1561.525483][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1561.531657][ C0] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 1561.537838][ C0] ? smp_call_function_many_cond+0x1bae/0x2d30 [ 1561.544018][ C0] ? __schedule+0x1000/0x4c40 [ 1561.548708][ C0] ? __schedule+0x1000/0x4c40 [ 1561.553489][ C0] ? __pfx___text_poke+0x10/0x10 [ 1561.558446][ C0] ? __pfx___might_resched+0x10/0x10 [ 1561.563741][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1561.570085][ C0] ? __pfx___might_resched+0x10/0x10 [ 1561.575390][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1561.580425][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1561.585557][ C0] text_poke_bp_batch+0x352/0xb30 [ 1561.590586][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1561.596586][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1561.602837][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1561.607875][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1561.613432][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1561.619685][ C0] ? __jump_label_update+0x379/0x3a0 [ 1561.624983][ C0] text_poke_finish+0x30/0x50 [ 1561.629669][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1561.635658][ C0] static_key_slow_inc_cpuslocked+0x80/0xf0 [ 1561.641569][ C0] static_key_slow_inc+0x1a/0x30 [ 1561.646561][ C0] kvm_dev_ioctl+0x1855/0x2460 [ 1561.651384][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1561.656571][ C0] ? __fget_files+0x2a/0x410 [ 1561.661185][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1561.666317][ C0] __se_sys_ioctl+0xf5/0x170 [ 1561.670918][ C0] do_syscall_64+0xf3/0x230 [ 1561.675435][ C0] ? clear_bhb_loop+0x35/0x90 [ 1561.680127][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.686033][ C0] RIP: 0033:0x7f7f4878cda9 [ 1561.690454][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1561.710155][ C0] RSP: 002b:00007f7f465f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.718583][ C0] RAX: ffffffffffffffda RBX: 00007f7f489a6080 RCX: 00007f7f4878cda9 [ 1561.726560][ C0] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 1561.734535][ C0] RBP: 00007f7f4880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.742513][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1561.750492][ C0] R13: 0000000000000000 R14: 00007f7f489a6080 R15: 00007ffee69fe3b8 [ 1561.758485][ C0]