last executing test programs: 3m4.909321847s ago: executing program 2 (id=1016): socket$inet_dccp(0x2, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324152, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235000800000f300f013b3e363666410fc73266b8a8008ee00f0126660f10244dda54aa956440e30044813304a8bc56c4a17969d7c48159e4b100100000", 0x44}], 0x1, 0x41, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x5000000) 3m3.019034838s ago: executing program 2 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa9, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m1.759543013s ago: executing program 2 (id=1028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf6, 0x0, 0x1, '\x00', 0x1}) 2m58.101787979s ago: executing program 2 (id=1036): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88e82, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x401) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x6c}, 0x8, 0x3000000000002}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 2m57.857596049s ago: executing program 2 (id=1038): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb25, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x50}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, r3, 0x3, 0x40, 0x7, 0x2, {0x4, 0x1, 0x3, 0x65, 0x200, 0x802, 0x0, 0x5, 0x4cab, 0xe154, 0x1000, 0x1, 0x165, 0xf9, "fe1d00009b13010001000000000caa0000000900000021001000"}}) 2m57.63904099s ago: executing program 2 (id=1041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)={0x100, 0x112, 0x16}, 0x18) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x200000005) chdir(&(0x7f0000000540)='./cgroup\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000001c0)="d5012e1ad3215e01a725ad40a030182ce37251f11e2c7ca7c29c26022ec677a917b4671cccf90d377f45adcc3befbcb1d8bfa3fad04f5655085ecb8f221230cd93be89291ab379102965a5294dabf22b27f7e502840a7d2131af6e254ea36beccacebd4092bfbc244c66ba312c80638ca96b8e7ca83082dd3d79499ec468998e52f3c2a7c36b4b6174c578ce6a5936d0123015012a09e237c3e6aa3077e825549c168566eae23a677a945280736fa9a27312c4905b76eb30306ad7751662c2e30d20") ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) 2m42.442083582s ago: executing program 32 (id=1041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)={0x100, 0x112, 0x16}, 0x18) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x200000005) chdir(&(0x7f0000000540)='./cgroup\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000001c0)="d5012e1ad3215e01a725ad40a030182ce37251f11e2c7ca7c29c26022ec677a917b4671cccf90d377f45adcc3befbcb1d8bfa3fad04f5655085ecb8f221230cd93be89291ab379102965a5294dabf22b27f7e502840a7d2131af6e254ea36beccacebd4092bfbc244c66ba312c80638ca96b8e7ca83082dd3d79499ec468998e52f3c2a7c36b4b6174c578ce6a5936d0123015012a09e237c3e6aa3077e825549c168566eae23a677a945280736fa9a27312c4905b76eb30306ad7751662c2e30d20") ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) 11.222970099s ago: executing program 5 (id=1604): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, 0x0, 0xe5cfc840e58aaf34) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x3, 0x2, 0x20000}}, 0x2e) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r5 = socket(0x28, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000380)='./file0\x00', r8, r9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6, r9}}, './file0\x00'}) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000005280)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r10}, 0x90) io_cancel(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5b, 0xcf, 0x9b, 0x8, 0xc72, 0x12, 0x4a2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x6, 0x0, 0x39, 0x6f, 0x83}}]}}]}}, 0x0) 9.669445834s ago: executing program 5 (id=1617): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x4000) 9.24415441s ago: executing program 5 (id=1618): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xa00, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000034}, 0x80) tkill(r2, 0xb) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) 9.133874836s ago: executing program 5 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0x28, r3, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x28}}, 0x20000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x26}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "638d69aacc0ab1f4b5c39d51e1d54c04"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xd}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xb, 0x34, @random="765f13efc84bb5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "14fa1559c70397bbafca52117c4c10ca"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3f}]}, 0x84}}, 0x840) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x7, 0x401, 0x0, 0x0, {0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x4008000) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000140)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000002202000000000020000000000001900"/32, @ANYRES32=0xee00, @ANYBLOB="08000500ac1414bb"], 0x2c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r12, &(0x7f0000003cc0)=[{{0x0, 0x41, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8.925188429s ago: executing program 1 (id=1620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40000120, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000dc0)={0x3d, 0x0, [{0x100000, 0x28, &(0x7f0000000200)=""/40}, {0xeeee8000, 0x1000, &(0x7f0000001400)=""/4096}, {0xd000, 0xff, &(0x7f00000008c0)=""/255}, {0x4, 0xffffffffffffff55, &(0x7f0000000240)}, {0xeeee0000, 0xce, &(0x7f00000009c0)=""/206}, {0xeeef0000, 0x90, &(0x7f0000000b00)=""/144}, {0xf000, 0x40, &(0x7f00000002c0)=""/64}, {0x6000, 0x1000, &(0x7f0000002400)=""/4096}, {0x4000, 0x34, &(0x7f0000000740)=""/41}, {0x8000000, 0x2e, &(0x7f0000000bc0)=""/46}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$UHID_CREATE2(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011"], 0x129) read(r6, &(0x7f0000005480)=""/213, 0xd5) 8.00416542s ago: executing program 5 (id=1621): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa9, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 7.633228992s ago: executing program 1 (id=1623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) socket$inet6(0xa, 0x2, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3}]}) write$ppp(r1, &(0x7f0000000140)="3888", 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000001440)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r6, &(0x7f0000000300), 0x0}, 0x20) timer_create(0x0, 0x0, &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6a3}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 7.450012578s ago: executing program 0 (id=1624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_complete(0x0) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xb5c, 0x69f1, 0x3ffffffd, 0x827, r4}) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c01000010000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="800000000088000014000300766c616e3100000000000000000000000800040007000000e0001680dc00018014000b"], 0x11c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x1, 0x0, 0x0, 0x13, 0x1, 0x2}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1, 0xfffffff1, 0x0, @void, @value}, 0x28) tkill(0xffffffffffffffff, 0x9) 6.674265639s ago: executing program 3 (id=1625): pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x8f) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xbc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xb5) close_range(r0, r3, 0x0) 6.507797571s ago: executing program 4 (id=1626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@struct={0x4, 0x8, 0x0, 0x4, 0x1, 0x7fe00000, [{0x8, 0x1, 0x7fff}, {0x6, 0x4, 0x2}, {0x2, 0x4}, {0x8, 0x1, 0xb}, {0x6, 0x0, 0x2}, {0x5}, {0xd, 0x2, 0x8}, {0x7, 0x2, 0x69918a48}]}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f0000000600)=""/4096, 0x89, 0x1000, 0x1, 0xff, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x6, [@union={0x10, 0x3, 0x0, 0x5, 0x0, 0xffff, [{0x0, 0x0, 0x6}, {0x4, 0x1, 0x1}, {0x5, 0x5, 0x10000}]}, @float={0xb, 0x0, 0x0, 0x10, 0x8}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x3}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x14}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x9, [{0xb, 0x200}]}, @struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x5, [{0x5, 0x5, 0x4}, {0x9, 0x4, 0x2}, {0x8, 0x0, 0x7}, {0x6, 0x5, 0x4}]}]}, {0x0, [0x61, 0x2e, 0x30, 0x0]}}, &(0x7f0000000300)=""/91, 0xda, 0x5b, 0x0, 0xffffff80, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000010000000080000f7ffffff40000000", @ANYRES32=r0, @ANYBLOB="05002a6100"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05000000050000000400"/28], 0x50) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x86) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000b40), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a000000000000000000000000000000000000000000000100000000200002"], 0x6c}}, 0x0) 6.482085288s ago: executing program 3 (id=1627): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010003", 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b5f470787f70e06d038e7ff7fc6e5539b3267078b089b3b083841090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674d0095df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xffffffffffffff49}}, 0x1006) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) r3 = getpid() prctl$PR_MCE_KILL(0x43, 0x0, 0x1) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r7, 0x8926, 0x4000000000000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x761c, 0x5326, 0x30, 0x0, 0x0) 6.429923667s ago: executing program 0 (id=1628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$phonet(0x23, 0x2, 0x1) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000010000000", 0xfe60) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000018008000000000000000000080200000000400050000000008001000000000001215fe171d6c7f096dd547e0653d04a58b75bfd0395f4f17144df7d54795d78b8d73091ebd887a56fcb49d56f4a099a53bd5a424a8c7"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x18, r6, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0xa60d000000000000}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) socket(0xa, 0x40000000002, 0x0) unshare(0x2a020480) write(r9, &(0x7f0000000040)="05000000010001", 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) 6.406749861s ago: executing program 4 (id=1629): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040050be0170000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000200000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x57}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x8, 0x0) clock_gettime(0x3, &(0x7f0000000340)={0x0, 0x0}) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {r6, r7+10000000}}, 0x0) timerfd_gettime(r5, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030f1f0004000000000007000000300002"], 0x44}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x40, 0x5, 0x3, 0x8}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008001}, 0x4004010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\t'], 0x0}, 0x0) 6.257522781s ago: executing program 1 (id=1630): socket$alg(0x26, 0x5, 0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) dup(r0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100), &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$media(&(0x7f0000000ac0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x11, 0xa, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000100)="014f76", 0x3}) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x21, r7, 0x202, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000001240)) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10e) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) 6.084217328s ago: executing program 0 (id=1631): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r0, &(0x7f0000001080)=""/4097, 0x1001) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) accept4$tipc(r0, &(0x7f0000000400), &(0x7f00000005c0)=0x10, 0x80000) read$fb(r0, &(0x7f0000000180)=""/145, 0x91) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecf14cb9cca7480ef407000000e3bd6efbbf4ae7220b0013200d000106ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) close(r1) syz_emit_ethernet(0xb6, &(0x7f0000000600)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x80, 0x3a, 0x0, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e597c5", 0x0, 0x6c, 0x0, @loopback, @dev, [@routing={0x73, 0x8, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @mcast1, @private2]}], "cc8790a4d5ee3a09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xfffffffffffffdbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="e0", 0x0, 0x2, 0x0, 0xfffffff7}, 0x50) 5.797933095s ago: executing program 0 (id=1632): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0xfd, {0xfd, 0x23, "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"}}, &(0x7f0000000400)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "0de8ce4c7ceb9065f55460599a0d70ed74200a2e07539097db444c0ad287b19d4e40343df6b4821dd9afb51475af6023cf85486b446b85ed33dc360739456a67e92255f661e6681e6a8d282f9eef4a5acba1652162601004b15a7b0e61633f2ebda3164e189e91444cb35503e4da6c3e0850edc2ef0a0b0bd8f7862373247f2618f86f5b6483a20c6bde"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "d1f18dc1e4929fdf7044b9b5cbd90371"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x3ff, 0x1ef00, 0x9, [0x5f00, 0xff00c0, 0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x18, "e9293e2b5015406bffea37210ed2e390"}, @ss_container_id={0x14, 0x10, 0x4, 0xf1, "f3abf627befa7bf6cf2ce708ef571321"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x4, 0xe3, "9012ae92", "29f18ff9"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x81, 0x80, 0x0, 0x9, 0x84}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000640)={0x20, 0x10, 0x95, "29bbf0092bd9edd721c7e86201e37915ca898f6ec70c212a1d7034ccaf5faaccdc3e2756e428296e79e2d198808ce575623eee20c7d6b247dee50bff3532c74134a31f930effe9bfad42880a0c5ee105593edde38ad45fa4107938069f8415be228e0480d5c6c013f319569ea5699bc4cab46a9365a51d83a191581b5bf565cf71d35298e0803ff3bb1f414681be3c1ffd7afdab1e"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1000, 0x40}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x21f}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "6ee8"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000840)={0x40, 0x13, 0x6, @random="d3326a94203a"}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "42eb"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xc49}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) write$UHID_INPUT2(r1, 0x0, 0x3f) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x5, 0x2000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x11) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014"], 0x60}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x6, &(0x7f0000000140)={0xfe, "ff7f000000000000a4024afcf76574009178f41acc7495a41e00002fe344ca00"}}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$smack_xattr_label(r4, &(0x7f0000000200)='security.SMACK64\x00', &(0x7f00000001c0)={'(\"\'@'}, 0x5, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x88c0, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback, 0x100}, 0x1c) sendto$inet6(r5, &(0x7f0000000bc0)="0e", 0x1, 0x4000000, 0x0, 0x0) 5.549269652s ago: executing program 3 (id=1633): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f0000001480), 0x6, 0x101a02) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000070000000c00000022"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f80303"], 0x18}}, 0x2000) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.043966299s ago: executing program 1 (id=1634): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000000140)='./cgroup\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r1, &(0x7f0000005740)=[{&(0x7f0000000040)="0af3", 0x2}], 0x1) connect$unix(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x17, 0x0, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r4, 0x0, 0x0, 0x41, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) 3.108012367s ago: executing program 3 (id=1635): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x3, 0x3a) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa9, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"7977ee7e0efcaf849d4a9e692725c167974978bc3384749308ea2fdc550efb860d64d03b6aadf6f5633fc34801a5bf5497152176421555198b577ac8aea82d470d9080c933c73eeeeb2ba3da691fdc30136e01d06bc9a6eee12ba43f5431bdefdf5628e9977b29e57ac6e534a8b975d3462b4e710fdae6d55aec75f81482e77b1b24e0656c05bb9cf8908231f9cbe89217129f11e6529bcfbf2f072e8aa4a2e7dc79d350c7302a533cdd147853e7aefa04abd8af397cb2c70fd39710cd724c2d61115509d2d5203371f585e03d46955dc979dfbef58be2993a2ce749ed0acacee1b9565f817928915d2ce26968c20807a1793d3f16072c562d53efa251e2cafcaebf43d6c0298739fd4a1ad494797197b3645c66adc5fde4cc5598073c9cbbf0c95db2f1dbf71f31e2e5b36fde27d0926e606093254348db086e8725b4a59b67531e82f2d5df8ff5753be08bef7d641690327895587ca375b04b03703da59178c74501649e1a36dfe20236736628578c874b305e9ec2b554311ef5656d3abc8744f895c47708d08db551fec50d3df32a76452bc4aeea7fde6fbb53bb915391f6fd0ec4920edee0a231f040aba53cdaceab7873cd5771019dc2b1987e5572b2ffa991dfb8a307470cd5b98f4e870a45f0fd58a45a9af32a210424b1088cf25ef749426d50bf0e71bc8210de503459e83a60f21afda8aadf4651dd490789c3a9e0ed4f6e74ab3ba212f690bd4fafb822b1f4c9304d2e20aaf69114f30c60242bd75a71f9dd4d8d35565387137f30b73066c82b7b3135c924d2befd995e73b073461cdc84a5ccce2f7c0cf9fc2e40b9c1986b9d6818ceabcb89589a4252c35ed3de8e7eb18792080041bf4fb52b95ff0c29c2400234e913ae3fca12df8b8161ae64f158879a0c94b71893f566f60b2d8e549c666fd7d9cd225be5301aad6d3a8500baf60e5e8becd86b091296bcda6e84a465fede305cb5ccc2ced52f95dc622cba24d3620b4881577b63a7e64038cb45f82bf803ee9289dda2f94bb1a3d16e866014debe105f568f23b28655aad474857609e85354a35bde31eb8a3e68f4d641c4b33442e12dd3fe1c2465569cef38bdae8cc5ffa8f15e02b1e58ea08ac2fbe584c349d202224e541beb16f53052f682f550392fee682f276f823ad00189fa85121f1f8afdab5d5a81fea16701207cb714bf5a1c9badf9255cd0fc9b4e100bb57057ae74294155e4c8d4736ed6cc34f58643eae55f4d8feccd965756f1c750efd6867532dd2c084491247e81bdb252f31dc451ebacdd546fc0871b1a1a9ca694e2731f5845b769c39797c5bc092ad2511533338c67db2f6289b70d83d4616ce74cea66637d4b9294afc4044996bd34efb405553200cdfed58899590d547bf5528af1c0bc7af7621693f4f810bfe1c498fca540a26cfadf34fede0541e7fe656a8284ce7a623284fe0f212c35e4a5cfa5ec3d27019a532f70c1cdbce4ab0ea137673f6b7da2af396ad86b74dd279507ece3dc67a46df64d70583f9d1e8123b1edcb37be8aeffdd9ecaa80608b055a7234e604391c33a88ba4ac5e47a9f1c4ca5da4642ecfc7d74f0b1ced8d4b4b0733bcaa3a87fca24aeb4c75ddc87fcefbf70b50f73cc733ec82e63f54a9d687a8f8b7b80101a667a650db038ebedcf56e259810fa49f7b77b0dd17cb984495bd35d3eff80db3727f082f31b31d9187f68fdb0df94e4bb1e6fdc7021d86c3818d36e95a98dec9b4c91f9d15fc1a48fcaf86c98e00c8def3e958517687e004f1881094aeef06098964819befcc40ea57ef967c453f2b49f2e59d34b3e1175c11c558309d08063fed617fe46cce451c11246d18ac9bfa0334a1babaad468b4fd1c77549a625f435a102b8ddc63231c18ae961b6801c19b7703c3857022de9448f2f5a827f7b48b122e4adb0bd734bfc980db9b37e71b471b4a06a6a7c912b4e498298278e96a63d6c026d901f0ab8e180d47ecb77ff40c8a1ff09e07378bd2f8d1c57eec5c89262b2f6313f2687a25aa60812e0ad6d78bff51c501d1d9a4f6c0fd72253a586a16e4a4b0a06aa17855d25a6689ce96aef404797cd44ac88ea0b0e4b45d83f3ca7a4309ae5ba906792f5dff69c2441b1ebfcac855d58af6dd4362421dec895d31f739cd9305459e84991aebbe15ebbd0e48a550ff0bb056c28018d0504b7cf8877e1b7a5dbb5c024b944923883ccff437e4e14969acae0bd12ee77f4636868f1ff2a10148f034442e76087811c9de8b231cbd51724221d05c33dbfa722e170e41630772e3f7844f28207b4658602bacc52fed45b248ea2d036aa36e4f8187740f1de16e7977677586f660f23961eab854e80686fa90b16c6588b6ad1533d094e69879816d61f647d5aa531c82b24a241a131629094fbe72c9062a05d2b5150f0ff3bea7dd6aae30214de785c7cfca9f873adebbf3bcbd582fc4a0d98d2333081eaa964f65c84a27900d6facdbc0ad7b3091ad2f8b949bfdb050b606f7207a451dc527711830d919b5ba38d068b6fc83a629afb5db6482ff22cdf4ee49fd156b99457096d2f226e130da0080ce002b11dc439d8a56cddd356e84ad1c911de65de1d23072433b0c6faf61f9dfebdf16921d0e3136866059b2447d8e89825bb8ceebbcb2066a313fe5df01b1d56137820ac2e09261462e3696c5ea3cd1ca6230ac0fc3060544f915cf7ec57de93fda4a47154268fd1a234cd0298313d746d3c349fbaef83214d6f4d5887e374cc97d34912f5e9b3c06dd84d5db1d9d48c4aaa9feb02d4260041426f231928606a0099d31562b3ec54e8434c0e505e511083fb835035dfa0495f5ad68e647d2e7c645a32715a9ca87ed6c00d5f989df342ac81d37a25bc110437dfd16235bb1383502f652d11c17ed72ea0a7d0f76b7abf6a30e679a8bcd5f564606fa54f5285a771894c35f9dbfec6b1dbbb581e0beb4dd52f4f58b1f4c4ce6ffd45765cc8316dfd539051cab9b8547cd32eab211a416cb753d488a56dcc43cccfedd4b5f694d9f6d19c617910cb2111a880165f7d20221de2f0989dd5aef1da331822a0e0dc40e9a566790f00d70b1f205e6fd6544c420c66a6939b643b0ed4e687a4632fc25a1245ee766b9006b7435a750096478a97be08b75f537d07f348a2dacf55764f5a8f0566e2e9e72f4a9ef412a5dd401d687287ead4e389ab73db5fabab745f71f72f2f80d1d09e4f594476112f19cf5e71a96d989bf8f2a37e8e4b3d6804da561e674ed374bb884cb5f01f0c71c4d6083ed4b11064690c4f458211a2bcbf7fb7f7ac04395a17847c11c139e35bff4ceb57eab20b36ef6ed24b5b5444bc3f08c9a758bcd2487384fd7e082fc84a81cd37b375a1b56ca441db4b520e7e8a4ebe20dcdc8f9e471390cb829becb21ab3f4db34ab5d9b20c8728dea538fcb8db6577a0024cef0c4c2668b0bdfbd89f06d82b9ee2f4f7383ac06250acbe61b448f74530a4365887786aedca104700adf8d4bc7e8159f34aa318bf6a9db41a8752bb3ad9e1fdeb4e56879817ae6a20f29631292e58d89c663234a3b6edbebfc0efdabe41b0d26f93efb735b4db8a86243eca1d3ef2353cf3bc163bf9cc891cea9128e9be654e2708e85bcb30156db98ff31e966a0b90729d648d1889e085f4225aa354018d8b7c6832845512798ce10031b10803bf33f646f39c7cddb6c97c857d91dc95fa21d3355c387dda90b68b3ed5a224b76392c36f8049499255de9820e05954087e2eacec72e231909ebf9ef75e5c97d8b0db2f936f3f9962fe30b92016d39ac5cbdf783950cb7493fc60ed7d999a1a55f2f7417b2b98724faf91523e6b8aee0a741bf914e3d546aa1edfa814c6ec0d11a5e17fe3de552f29970f244c0c62225bec9a200adcafcbd08525b5807e24bd5bb81106742cb077b6badfec4b01a4f637c8af402c563fa455a8f2a5bd26349ede071a3ca949336723024304cd563befbf63511ca2acbc82b02e73da264e09d2649ff1c41d3fb9db00bb4219afe757133e5a62fea13cd781c17822b051f65b79db290b38cba0cc3b93c77347984628d07af6b740144fd891112517dc6e227379f62cd4ab93c5876f66be448c0b8c7a030b2b50ca0e280414a89445a5b56d40dc42539035f37d36d68ab1b9eb6aee59db1199f471d10bb700b5759d657815e5891870ec92e62f3def2a4941abb06e26358fe1c01bc9b47a7053d1ac16fa5a3e0525649071c4580189fccb05c74c00a9f9dad99ec5f01cea0d59e86231d08b5a156c10c54d2c92048e700881dd91e6f6c5c0a7a81d539a946134b1927ff2232c43d82bbfe77aedb99051130aa7edb46b65421560a1b51336fe786a03f1fda212b97118569cc0bb6b261f6449fb2ce189e3b4628a3f1aa5d8d0896bdc35b0e010856c17f7c831d5e08d6f8038e2a02bb59c2aae989f2882d680161d4e9885636367c3b032aafc2a8bd15d9b42026d960b31de4554dc93ef90b885d378d4802922e50f9b9eee2e9b408df42e88680058c1416acdd0f86777d249501692b91c1bf75d9a448f3a656d8895b67ef222e30af17b833a4422ef1fad1880e1d480815293dd9822a4309c12fd0dc5326acdf653af478453117de4a68a9128bc6afd25a89781aab60932352fb64c0b89a18347a3261fe14c89fe9df806988ad0f6fe772b004cb7b7e92349eb0de311c503d1eb7d1237b8f325d4cb4f3464ae30bb1e6ed9c27c0b249543800a436095888f4ffd5fc46ea60b3961786f863bab441aca79519ee59cc568fe6bca1c8e8a6957273654d7474e1b57241f717a35366225f508d5ca94a444ea41e95beaf9835a221beec15322ca14cdd456b8ac3b00d1756850776970d0d009711c4cca9174c8ed27bbd73d6140729a3f2b061d020616ded95e5cd29d6b75059b9933b36610c45e2bff45ec71535285a4893dff99bace5a60445683e8a757e5d7e7768f13d6c46ee00cfb569e09e9ecb358a026a6a10bd8203a3630f19a148904fa1b7d1442e1a7d4eb7f84a91b9e28da3ded306bc2a8ef1a982d2c3f8fcede702edbe831e1cb7ca66d9d60902d78d3b2d7c35b61b5bedcfe2b2a82389c4864ea2cccd8302fb4f7081f17d39d56aae985606a179c48f8b95fdb5775307f6b5866f47dfef7442c22abb070165e8d44e3bc99002c50401de84a4b6398af730e02d211d801cb49400912aa743a0daa04e69f551f596363864b1fbd017ac43b21b18d90c1dfcca04acca249da5b1dd25b0f2316f51d54fc50fd9e08cb5daa78373acb150b938d833ff97f0514f8fc4b03152d1e6fb3c9835f5ce48f63acaf2286fc81ce150f5d35fcd0c8f75088612dfb3478c6782f14e74f98ee0a2ee16539a7d71b4f992e1ad42973d878fc789abe6b0cf07ccc64cd2bd59bc4f0e3dd1eeeabd88d48c682e7eab4cbd2248aa9b079d3f0ce8fdbf36812b54bfdf9007af8b2d2a86fc4d5d02193208bd252da71078cadc54991b65d00ec99b11db0b7997d535fdc1fb516b62325ea7b01020276577d086af65efb1589c73a2b99d6b1bcce1676672ca8a6e43d1643eed3c75d9a50a299e2cd21453caffb055f78ec6cf046313f4766a99880efebf2d5497f816f21d0758329fd16fd8a11ba1446f3e8bff7e33b597bee3284a7bd547834f2df13acc5d05b593c8f41c9efa8340154d0a89c403545fe8908693723a57a4ba5e28677c4f05b53397b51102fab64213f60c05932366c51c59109a3dcd47754c6488f21d7d4e702216d9c3531b303d2344b9ae410c406a6232f33759289009b09dc553171734f62cb", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.537773152s ago: executing program 1 (id=1636): ioperm(0x0, 0x2, 0x7e) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x6) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x8f) pipe2$watch_queue(&(0x7f0000000180), 0x80) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)="98c392bdc1cb1df272b18628d09bd324f519f683116ac67ec7cf627dba8f805342d364e15ebdfd30d15a5641c2d5df3161fb28d3f0b824706bc69cf84ed83efa6de9fd887aff3148fbcf519a0d79fd7a76eaa1f2effecf57d2b04c6f8490b23af206d67946ddb8ea7c640b9ed0dbb875598e116b0ca65755e6f4b68271efbda2b80a677e092bd02c957e171080323bfa05b184c03e8af4c8ed01eea94a2da8af783b65a3481d412dfb720d80d412fcc23b939e7039b35934d21a10f4a62b1cfcb57cbd374d0aea045017ad9a13950e8d29d11aea90fe585bf633f2bf8f54bc6167", 0xe1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0x10000000098) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES8], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.537378488s ago: executing program 3 (id=1637): pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x8f) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xbc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xb5) close_range(r0, r3, 0x0) 1.224875129s ago: executing program 4 (id=1638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x601) ioctl$USBDEVFS_BULK(r1, 0x80045515, 0x0) 1.224051431s ago: executing program 3 (id=1639): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x8000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 886.21052ms ago: executing program 4 (id=1640): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 550.764394ms ago: executing program 0 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$phonet(0x23, 0x2, 0x1) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000010000000", 0xfe60) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000018008000000000000000000080200000000400050000000008001000000000001215fe171d6c7f096dd547e0653d04a58b75bfd0395f4f17144df7d54795d78b8d73091ebd887a56fcb49d56f4a099a53bd5a424a8c7"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x18, r6, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0xa60d000000000000}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) socket(0xa, 0x40000000002, 0x0) unshare(0x2a020480) write(r9, &(0x7f0000000040)="05000000010001", 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) 550.078111ms ago: executing program 1 (id=1642): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe0300850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x38000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 549.570107ms ago: executing program 4 (id=1643): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) 193.708951ms ago: executing program 4 (id=1644): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x1, 0xfffffffe, 0xffffffff, {0x8}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x69962253951682fe, 0x0, 0x19, "d4b2313cf4bee3e44b2bbcd124ece060eb2494b925684214788cd7a5a317279b42495ce97d35878db4c207d87d364cfe0639cecf4bf25bbe8e58b920a39a688d", "e12d63539587ea80d964a35d5f9f7154e942f97bec91bc069605b582b1893720e42865937264867e32cfee0a619f32f319ce8361ebc954080cc232eb397bf5f6", "6435117e2194de8ef387a19a8f0257dfe7923bb2638b5bc85d2c857045524e35"}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) 36.982306ms ago: executing program 5 (id=1645): munlockall() (async) munlockall() socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() unshare(0x22020400) (async) unshare(0x22020400) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000c0000000000000000000007000008000500", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x40000001}, 0x11) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (async) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x1) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000300)=[{0x28, 0x81, 0x0, 0xfffff01c}, {0x16, 0x0, 0x1, 0x732}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000300)=[{0x28, 0x81, 0x0, 0xfffff01c}, {0x16, 0x0, 0x1, 0x732}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) ppoll(&(0x7f0000000340)=[{r6, 0x4}, {0xffffffffffffffff, 0x402}, {r7, 0x8290}, {r5, 0x8000}, {r7, 0x2000}, {0xffffffffffffffff, 0x2}], 0x6, &(0x7f0000000180), &(0x7f00000001c0)={[0xffe]}, 0x8) (async) ppoll(&(0x7f0000000340)=[{r6, 0x4}, {0xffffffffffffffff, 0x402}, {r7, 0x8290}, {r5, 0x8000}, {r7, 0x2000}, {0xffffffffffffffff, 0x2}], 0x6, &(0x7f0000000180), &(0x7f00000001c0)={[0xffe]}, 0x8) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x81000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002980), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002980), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETGROUP(r9, 0x400454ce, 0x0) 0s ago: executing program 0 (id=1646): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000000140)='./cgroup\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r1, &(0x7f0000005740)=[{&(0x7f0000000040)="0af3", 0x2}], 0x1) connect$unix(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x17, 0x0, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r4, 0x0, 0x0, 0x41, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) kernel console output (not intermixed with test programs): +0x1e9/0x250 [ 416.422510][ T9364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.428113][ T9364] ? rw_verify_area+0x55e/0x6f0 [ 416.433014][ T9364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.438616][ T9364] vfs_read+0x1fc/0xb70 [ 416.442834][ T9364] ? __pfx___mutex_lock+0x10/0x10 [ 416.447919][ T9364] ? __pfx_vfs_read+0x10/0x10 [ 416.452654][ T9364] ? __fget_files+0x2a/0x410 [ 416.457336][ T9364] ? __fget_files+0x395/0x410 [ 416.462055][ T9364] ? __fget_files+0x2a/0x410 [ 416.466698][ T9364] ksys_read+0x18f/0x2b0 [ 416.471028][ T9364] ? __pfx_ksys_read+0x10/0x10 [ 416.475844][ T9364] ? do_syscall_64+0x100/0x230 [ 416.480655][ T9364] ? do_syscall_64+0xb6/0x230 [ 416.485378][ T9364] do_syscall_64+0xf3/0x230 [ 416.489922][ T9364] ? clear_bhb_loop+0x35/0x90 [ 416.494644][ T9364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.500595][ T9364] RIP: 0033:0x7f7ac118473c [ 416.505051][ T9364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.524711][ T9364] RSP: 002b:00007f7ac1ee3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.533212][ T9364] RAX: ffffffffffffffda RBX: 00007f7ac1375fa0 RCX: 00007f7ac118473c [ 416.541246][ T9364] RDX: 000000000000000f RSI: 00007f7ac1ee30a0 RDI: 0000000000000004 [ 416.549274][ T9364] RBP: 00007f7ac1ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 416.557309][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.565334][ T9364] R13: 0000000000000000 R14: 00007f7ac1375fa0 R15: 00007ffc63547e98 [ 416.573377][ T9364] [ 417.291806][ T9367] ./file0: Can't lookup blockdev [ 417.639282][ T2147] usb 1-1: reset high-speed USB device number 38 using dummy_hcd [ 418.854206][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 419.349672][ T9386] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 419.358758][ T9386] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 420.180391][ T5904] usb 1-1: USB disconnect, device number 38 [ 420.903162][ T9394] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 420.955900][ T9395] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 421.235999][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.250871][ T9394] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 421.293756][ T5904] hid-steam 0003:28DE:1205.000E: Steam Controller 'XXXXXXXXXX' disconnected [ 421.517440][ T9400] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 421.771805][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'. [ 422.528955][ T9411] netlink: 72 bytes leftover after parsing attributes in process `syz.4.970'. [ 422.874516][ T9422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.387858][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 425.430042][ T9439] ./file0: Can't lookup blockdev [ 427.453022][ T9447] program syz.2.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.470729][ T9447] Process accounting resumed [ 428.022830][ T9445] Process accounting resumed [ 428.490516][ T9458] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 430.646930][ T9477] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 430.656269][ T9477] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 431.379061][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 431.423814][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 431.500107][ T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 431.508793][ T9490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.517509][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.579394][ T5904] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 431.689952][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.989'. [ 431.693696][ T9496] futex_wake_op: syz.2.994 tries to shift op by 35; fix this program [ 431.696125][ T9496] overlay: Unknown parameter 'func' [ 431.753950][ T5866] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 431.774927][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 431.778038][ T5904] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 431.778073][ T5904] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 431.778144][ T5904] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.778192][ T5904] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 431.778222][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.832860][ T5904] usbtmc 5-1:16.0: bulk endpoints not found [ 431.942120][ T2147] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 432.091346][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 432.102188][ T9486] IPVS: Error joining to the multicast group [ 432.118671][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 432.130049][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 432.137892][ T2147] usb 3-1: device descriptor read/64, error -71 [ 432.142658][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.195323][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.215675][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.223876][ T25] usb 4-1: Product: syz [ 432.229381][ T25] usb 4-1: Manufacturer: syz [ 432.234392][ T25] usb 4-1: SerialNumber: syz [ 432.242038][ T25] usb 4-1: config 0 descriptor?? [ 432.253742][ T25] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 432.263285][ T25] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 432.388083][ T2147] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 432.527936][ T2147] usb 3-1: device descriptor read/64, error -71 [ 432.799276][ T2147] usb usb3-port1: attempt power cycle [ 433.147923][ T2147] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 433.188756][ T25] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 433.189021][ T2147] usb 3-1: device descriptor read/8, error -71 [ 433.376914][ T9518] ./file0: Can't lookup blockdev [ 433.977886][ T2147] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 433.988812][ T9521] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1000'. [ 434.003626][ T2147] usb 3-1: device descriptor read/8, error -71 [ 434.301592][ T2147] usb usb3-port1: unable to enumerate USB device [ 434.339000][ T25] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 434.350223][ T25] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 434.365075][ T25] em28xx 4-1:0.0: No AC97 audio processor [ 434.473281][ T5867] usb 5-1: USB disconnect, device number 28 [ 434.906869][ T9531] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3791650816 (7583301632 ns) > initial count (4596232 ns). Using initial count to start timer. [ 435.133857][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 435.175373][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 435.229584][ T9538] tipc: Failed to remove unknown binding: 66,1,1/0:183555156/183555158 [ 435.238952][ T9538] tipc: Failed to remove unknown binding: 66,1,1/0:183555156/183555158 [ 436.268015][ T25] usb 4-1: USB disconnect, device number 41 [ 436.268869][ T25] em28xx 4-1:0.0: Disconnecting em28xx [ 436.301835][ T25] em28xx 4-1:0.0: Freeing device [ 436.887952][ T9562] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 436.888074][ T9562] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 440.456989][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.463386][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.602362][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 440.877023][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 441.668001][ T5870] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 441.814185][ T5870] usb 4-1: device descriptor read/64, error -71 [ 442.057955][ T5870] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 442.358043][ T5870] usb 4-1: device descriptor read/64, error -71 [ 442.478748][ T5870] usb usb4-port1: attempt power cycle [ 443.017925][ T5870] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 443.041192][ T5870] usb 4-1: device descriptor read/8, error -71 [ 443.604481][ T9630] program syz.0.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.616860][ T9630] Process accounting resumed [ 443.624461][ T5870] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 443.690039][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 443.790502][ T5870] usb 4-1: device descriptor read/8, error -71 [ 443.898583][ T5870] usb usb4-port1: unable to enumerate USB device [ 444.086648][ T9628] Process accounting resumed [ 445.988057][ T5870] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 446.318946][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 446.327124][ T5870] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 446.335465][ T5870] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 446.368848][ T9683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'. [ 446.386264][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.399558][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.428254][ T5870] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.448174][ T5870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.474207][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.701009][ T5870] usb 4-1: usb_control_msg returned -32 [ 446.707065][ T5870] usbtmc 4-1:16.0: can't read capabilities [ 447.941805][ T9688] Process accounting resumed [ 448.394106][ T9691] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 448.500033][ T9687] Process accounting resumed [ 448.716200][ T9701] gretap0: entered promiscuous mode [ 448.722271][ T9701] macsec1: entered promiscuous mode [ 448.727843][ T9701] macsec1: entered allmulticast mode [ 448.733179][ T9701] gretap0: entered allmulticast mode [ 449.934185][ T5870] usb 4-1: USB disconnect, device number 46 [ 450.649371][ T9712] FAULT_INJECTION: forcing a failure. [ 450.649371][ T9712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.703663][ T9712] CPU: 1 UID: 0 PID: 9712 Comm: syz.3.1049 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 450.714448][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.724538][ T2147] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 450.724691][ T9712] Call Trace: [ 450.724705][ T9712] [ 450.738534][ T9712] dump_stack_lvl+0x241/0x360 [ 450.743261][ T9712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.748510][ T9712] ? __pfx__printk+0x10/0x10 [ 450.753149][ T9712] ? __pfx_lock_release+0x10/0x10 [ 450.758217][ T9712] should_fail_ex+0x3b0/0x4e0 [ 450.762937][ T9712] _copy_from_user+0x2f/0xc0 [ 450.767568][ T9712] do_ip6t_set_ctl+0x73a/0x1270 [ 450.772459][ T9712] ? __pfx___mutex_trylock_common+0x10/0x10 [ 450.778391][ T9712] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 450.783712][ T9712] ? __pfx_lock_release+0x10/0x10 [ 450.788778][ T9712] ? rcu_is_watching+0x15/0xb0 [ 450.793598][ T9712] ? trace_contention_end+0x3c/0x120 [ 450.798953][ T9712] ? __mutex_unlock_slowpath+0x21e/0x790 [ 450.804637][ T9712] ? __pfx___mutex_lock+0x10/0x10 [ 450.809711][ T9712] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.815757][ T9712] nf_setsockopt+0x295/0x2c0 [ 450.820403][ T9712] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 450.826349][ T9712] do_sock_setsockopt+0x3af/0x720 [ 450.831424][ T9712] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 450.837029][ T9712] ? __fget_files+0x395/0x410 [ 450.841745][ T9712] ? __fget_files+0x2a/0x410 [ 450.846386][ T9712] __x64_sys_setsockopt+0x1ee/0x280 [ 450.851645][ T9712] do_syscall_64+0xf3/0x230 [ 450.856181][ T9712] ? clear_bhb_loop+0x35/0x90 [ 450.860932][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.866874][ T9712] RIP: 0033:0x7f7ac1185d29 [ 450.871328][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.883718][ T2147] usb 1-1: Using ep0 maxpacket: 8 [ 450.890948][ T9712] RSP: 002b:00007f7ac1ee3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.890983][ T9712] RAX: ffffffffffffffda RBX: 00007f7ac1375fa0 RCX: 00007f7ac1185d29 [ 450.891001][ T9712] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 450.891016][ T9712] RBP: 00007f7ac1ee3090 R08: 0000000000000370 R09: 0000000000000000 [ 450.891032][ T9712] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.891048][ T9712] R13: 0000000000000000 R14: 00007f7ac1375fa0 R15: 00007ffc63547e98 [ 450.915642][ T2147] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 450.920474][ T9712] [ 450.920587][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.966119][ T2147] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 450.976471][ T2147] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.987930][ T2147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.997797][ T2147] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 451.010826][ T2147] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 451.020042][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.039333][ T2147] usbtmc 1-1:16.0: bulk endpoints not found [ 451.058098][ T5870] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 451.066223][ T9714] ceph: Path missing in source [ 451.380766][ T9724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.388638][ T9724] IPv6: NLM_F_CREATE should be set when creating new route [ 451.748878][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 451.763463][ T9698] IPVS: Error joining to the multicast group [ 452.091616][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 452.105965][ T5870] usb 5-1: not running at top speed; connect to a high speed hub [ 452.121243][ T5870] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 452.155043][ T5870] usb 5-1: config 8 has no interface number 0 [ 452.155607][ T5870] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 452.155757][ T5870] usb 5-1: config 8 interface 24 has no altsetting 0 [ 452.173052][ T5870] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 452.173428][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.173655][ T5870] usb 5-1: Product: syz [ 452.173996][ T5870] usb 5-1: Manufacturer: syz [ 452.174230][ T5870] usb 5-1: SerialNumber: syz [ 452.263785][ T9708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 452.783789][ T5870] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 452.792116][ T5870] usb 5-1: USB disconnect, device number 29 [ 453.913921][ T5870] usb 1-1: USB disconnect, device number 40 [ 454.628177][ T9750] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 454.910351][ T9752] batadv1: entered promiscuous mode [ 455.374880][ T9750] bond1: entered promiscuous mode [ 455.381448][ T9750] bond1: entered allmulticast mode [ 455.447624][ T9755] Cannot find del_set index 29 as target [ 463.878784][ T9809] syzkaller0: entered promiscuous mode [ 463.899144][ T9811] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 463.930392][ T9809] syzkaller0: entered allmulticast mode [ 463.990525][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.000189][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.008603][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.020335][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.049331][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 464.204986][ T9802] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 464.213285][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.221434][ T9802] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 464.638088][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 464.638109][ T29] audit: type=1326 audit(1737106455.443:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.685585][ T29] audit: type=1326 audit(1737106455.443:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.718595][ T29] audit: type=1326 audit(1737106455.443:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.774409][ T29] audit: type=1326 audit(1737106455.443:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.796422][ T5824] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 464.817505][ T29] audit: type=1326 audit(1737106455.443:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.840184][ T9826] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 464.867327][ T29] audit: type=1326 audit(1737106455.543:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.896620][ T29] audit: type=1326 audit(1737106455.563:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.918527][ T29] audit: type=1326 audit(1737106455.563:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 464.940311][ T29] audit: type=1326 audit(1737106455.563:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48c5f7cce7 code=0x7ffc0000 [ 464.965306][ T29] audit: type=1326 audit(1737106455.563:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9820 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48c5f21f29 code=0x7ffc0000 [ 466.447312][ T5824] Bluetooth: hci5: command tx timeout [ 467.894524][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 468.059935][ T25] usb 5-1: config 0 has an invalid interface number: 242 but max is 0 [ 468.084591][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.102238][ T25] usb 5-1: config 0 has no interface number 0 [ 468.137634][ T25] usb 5-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 468.159651][ T25] usb 5-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 468.205917][ T25] usb 5-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 468.231721][ T25] usb 5-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 468.266599][ T25] usb 5-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 468.296075][ T25] usb 5-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 468.341859][ T25] usb 5-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 468.376293][ T25] usb 5-1: config 0 interface 242 has no altsetting 0 [ 468.433091][ T25] usb 5-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 468.444799][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.459097][ T25] usb 5-1: Product: syz [ 468.477873][ T25] usb 5-1: Manufacturer: syz [ 468.483475][ T25] usb 5-1: SerialNumber: syz [ 468.511903][ T25] usb 5-1: config 0 descriptor?? [ 468.518720][ T9843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 468.537959][ T5824] Bluetooth: hci5: command tx timeout [ 468.860803][ T9844] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 468.867781][ T9844] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.886266][ T9844] vhci_hcd vhci_hcd.0: Device attached [ 469.165152][ T25] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 470.437992][ T9845] vhci_hcd: connection reset by peer [ 470.438525][ T5870] usb 5-1: USB disconnect, device number 30 [ 470.481702][ T11] vhci_hcd: stop threads [ 470.506763][ T9853] overlayfs: missing 'workdir' [ 470.515416][ T11] vhci_hcd: release socket [ 470.547890][ T11] vhci_hcd: disconnect device [ 470.577997][ T5824] Bluetooth: hci5: command tx timeout [ 472.760410][ T5824] Bluetooth: hci5: command tx timeout [ 473.058440][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 473.388816][ T973] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 473.448511][ T5867] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 473.597026][ T973] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 473.647848][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 473.684945][ T973] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 473.707935][ T5867] usb 1-1: config 4 has an invalid interface number: 98 but max is 0 [ 473.770666][ T5867] usb 1-1: config 4 has no interface number 0 [ 473.776844][ T5867] usb 1-1: config 4 interface 98 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 473.791714][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.817264][ T973] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 473.835372][ T5867] usb 1-1: config 4 interface 98 has no altsetting 0 [ 473.847496][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.869347][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.869948][ T5867] usb 1-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=2e.17 [ 473.876647][ T9813] bridge_slave_0: entered allmulticast mode [ 473.887586][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.892801][ T9813] bridge_slave_0: entered promiscuous mode [ 473.907606][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.911812][ T5867] usb 1-1: Product: syz [ 473.915290][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.926151][ T9813] bridge_slave_1: entered allmulticast mode [ 473.933492][ T9813] bridge_slave_1: entered promiscuous mode [ 473.939502][ T5867] usb 1-1: Manufacturer: syz [ 473.944247][ T5867] usb 1-1: SerialNumber: syz [ 474.008870][ T9892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 474.016521][ T9892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 474.061415][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.074553][ T5867] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 474.087516][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.157562][ T9813] team0: Port device team_slave_0 added [ 474.180702][ T9813] team0: Port device team_slave_1 added [ 474.248649][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.272796][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.310297][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.332205][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.345395][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.384241][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.536351][ T9813] hsr_slave_0: entered promiscuous mode [ 474.551941][ T9813] hsr_slave_1: entered promiscuous mode [ 474.572250][ T9813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.581122][ T9813] Cannot create hsr debugfs directory [ 474.666977][ T25] vhci_hcd: vhci_device speed not set [ 474.888940][ T9942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.951258][ T9942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.060229][ T5867] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 475.067252][ T5867] gspca_pac7302 1-1:4.98: probe with driver gspca_pac7302 failed with error -110 [ 475.115544][ T973] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 475.124327][ T973] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 475.134197][ T973] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 475.145517][ T973] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 475.224110][ T973] usb 4-1: USB disconnect, device number 47 [ 475.623680][ T9813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.708481][ T9813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.735776][ T9813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 475.904513][ T9813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.918023][ T973] usb 1-1: USB disconnect, device number 41 [ 476.332884][ T9956] overlayfs: missing 'workdir' [ 476.996979][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 476.996999][ T29] audit: type=1326 audit(1737106467.793:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020096][ T29] audit: type=1326 audit(1737106467.793:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020150][ T29] audit: type=1326 audit(1737106467.803:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020191][ T29] audit: type=1326 audit(1737106467.803:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020231][ T29] audit: type=1326 audit(1737106467.803:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020270][ T29] audit: type=1326 audit(1737106467.803:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020309][ T29] audit: type=1326 audit(1737106467.803:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020347][ T29] audit: type=1326 audit(1737106467.803:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020386][ T29] audit: type=1326 audit(1737106467.803:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.020426][ T29] audit: type=1326 audit(1737106467.803:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 477.022284][ T9964] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1102'. [ 477.041028][ T9964] xt_cgroup: path and classid specified [ 477.050342][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.094174][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.111418][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.111472][ T9914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.125891][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.125942][ T7267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.235129][ T9813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.235160][ T9813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.580908][ T9976] hugetlbfs: syz.1.1106 (9976): Using mlock ulimits for SHM_HUGETLB is obsolete [ 477.719157][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.215351][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 478.378417][ T9813] veth0_vlan: entered promiscuous mode [ 478.454384][ T9813] veth1_vlan: entered promiscuous mode [ 478.508689][ T9813] veth0_macvtap: entered promiscuous mode [ 478.512367][ T9813] veth1_macvtap: entered promiscuous mode [ 478.535626][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.582407][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.582434][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.582456][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.582470][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.582489][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.582504][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.582522][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.584076][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.785682][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.785713][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.785729][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.785747][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.785760][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.785778][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.785792][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.785809][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.786823][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.790138][ T9813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.790176][ T9813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.790205][ T9813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.790234][ T9813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.499628][ T7267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.507519][ T7267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.555060][T10004] overlayfs: missing 'workdir' [ 479.596698][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.604991][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.528245][T10000] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 480.677970][T10000] usb 1-1: Using ep0 maxpacket: 32 [ 480.685209][T10000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.710066][T10000] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 480.720988][T10000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.730506][T10000] usb 1-1: Product: syz [ 480.730534][T10000] usb 1-1: Manufacturer: syz [ 480.730554][T10000] usb 1-1: SerialNumber: syz [ 480.744152][T10000] usb 1-1: config 0 descriptor?? [ 480.757964][T10000] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 480.774679][T10032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.448019][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 481.598447][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 481.600780][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 481.600807][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 481.603011][ T5910] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 481.603036][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.603075][ T5910] usb 6-1: Product: syz [ 481.603088][ T5910] usb 6-1: Manufacturer: syz [ 481.603101][ T5910] usb 6-1: SerialNumber: syz [ 481.605010][ T5910] usb 6-1: config 0 descriptor?? [ 481.608331][ T5910] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 481.608359][ T5910] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 482.012436][T10056] FAULT_INJECTION: forcing a failure. [ 482.012436][T10056] name failslab, interval 1, probability 0, space 0, times 0 [ 482.026487][T10056] CPU: 0 UID: 0 PID: 10056 Comm: syz.3.1130 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 482.037298][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 482.047380][T10056] Call Trace: [ 482.050673][T10056] [ 482.053616][T10056] dump_stack_lvl+0x241/0x360 [ 482.058335][T10056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.063575][T10056] ? __pfx__printk+0x10/0x10 [ 482.068190][T10056] ? kmem_cache_alloc_noprof+0x48/0x380 [ 482.073802][T10056] ? __pfx___might_resched+0x10/0x10 [ 482.079167][T10056] should_fail_ex+0x3b0/0x4e0 [ 482.083887][T10056] should_failslab+0xac/0x100 [ 482.088625][T10056] ? io_submit_one+0x154/0x18a0 [ 482.093596][T10056] kmem_cache_alloc_noprof+0x70/0x380 [ 482.099006][T10056] io_submit_one+0x154/0x18a0 [ 482.103726][T10056] ? __pfx_io_submit_one+0x10/0x10 [ 482.108866][T10056] ? __might_fault+0xaa/0x120 [ 482.113570][T10056] ? __pfx_lock_release+0x10/0x10 [ 482.118710][T10056] ? lookup_ioctx+0x94/0x6a0 [ 482.123344][T10056] ? __might_fault+0xaa/0x120 [ 482.128166][T10056] ? __might_fault+0xc6/0x120 [ 482.132863][T10056] __se_sys_io_submit+0x171/0x2e0 [ 482.138105][T10056] ? __pfx___se_sys_io_submit+0x10/0x10 [ 482.143723][T10056] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.149829][T10056] ? do_syscall_64+0x100/0x230 [ 482.154628][T10056] ? do_syscall_64+0xb6/0x230 [ 482.159330][T10056] do_syscall_64+0xf3/0x230 [ 482.163860][T10056] ? clear_bhb_loop+0x35/0x90 [ 482.168565][T10056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.174509][T10056] RIP: 0033:0x7f7ac1185d29 [ 482.178968][T10056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.198599][T10056] RSP: 002b:00007f7ac1ee3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 482.207041][T10056] RAX: ffffffffffffffda RBX: 00007f7ac1375fa0 RCX: 00007f7ac1185d29 [ 482.215027][T10056] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 00007f7ac1ec2000 [ 482.223107][T10056] RBP: 00007f7ac1ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 482.231092][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.239081][T10056] R13: 0000000000000000 R14: 00007f7ac1375fa0 R15: 00007ffc63547e98 [ 482.247076][T10056] [ 482.640584][ T5910] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 482.656858][ T5910] em28xx 6-1:0.0: Config register raw data: 0x41 [ 482.677977][ T5866] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 482.837956][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 482.846718][ T5866] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 482.867792][ T5866] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 482.888066][ T5866] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.933909][T10057] ./file0: Can't lookup blockdev [ 482.991067][ T5866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.015774][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.047590][ T5866] usb 4-1: Product: syz [ 483.057896][ T5866] usb 4-1: Manufacturer: syz [ 483.062566][ T5866] usb 4-1: SerialNumber: syz [ 483.190440][T10069] overlayfs: failed to clone upperpath [ 483.460317][T10073] x_tables: unsorted underflow at hook 3 [ 483.527523][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.539816][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.638359][T10000] gspca_sunplus: reg_r err -110 [ 483.644205][T10000] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 484.169697][ T5910] usb 1-1: USB disconnect, device number 42 [ 484.296644][T10000] usb 6-1: USB disconnect, device number 2 [ 484.304324][T10000] em28xx 6-1:0.0: Disconnecting em28xx [ 484.320662][T10000] em28xx 6-1:0.0: Freeing device [ 485.809754][ T5866] usb 4-1: 0:27 : does not exist [ 485.924110][ T5866] usb 4-1: USB disconnect, device number 48 [ 486.076082][T10072] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1136'. [ 486.476779][T10097] kvm: pic: non byte write [ 486.492727][T10097] kvm: pic: non byte write [ 486.497297][T10097] FAULT_INJECTION: forcing a failure. [ 486.497297][T10097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.507919][ T5866] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 486.536876][T10097] CPU: 1 UID: 0 PID: 10097 Comm: syz.5.1142 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 486.547719][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 486.557812][T10097] Call Trace: [ 486.561126][T10097] [ 486.564073][T10097] dump_stack_lvl+0x241/0x360 [ 486.568775][T10097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.573992][T10097] ? __pfx__printk+0x10/0x10 [ 486.578603][T10097] ? snprintf+0xda/0x120 [ 486.582865][T10097] should_fail_ex+0x3b0/0x4e0 [ 486.587558][T10097] _copy_to_user+0x31/0xb0 [ 486.591998][T10097] simple_read_from_buffer+0xca/0x150 [ 486.597395][T10097] proc_fail_nth_read+0x1e9/0x250 [ 486.602445][T10097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.608016][T10097] ? rw_verify_area+0x55e/0x6f0 [ 486.612882][T10097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.618471][T10097] vfs_read+0x1fc/0xb70 [ 486.622648][T10097] ? __pfx___mutex_lock+0x10/0x10 [ 486.627696][T10097] ? __pfx_vfs_read+0x10/0x10 [ 486.632402][T10097] ? __fget_files+0x2a/0x410 [ 486.637019][T10097] ? __fget_files+0x395/0x410 [ 486.641708][T10097] ? __fget_files+0x2a/0x410 [ 486.646317][T10097] ksys_read+0x18f/0x2b0 [ 486.650579][T10097] ? __pfx_ksys_read+0x10/0x10 [ 486.655360][T10097] ? do_syscall_64+0x100/0x230 [ 486.660146][T10097] ? do_syscall_64+0xb6/0x230 [ 486.664840][T10097] do_syscall_64+0xf3/0x230 [ 486.669368][T10097] ? clear_bhb_loop+0x35/0x90 [ 486.674064][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.680002][T10097] RIP: 0033:0x7fef1c38473c [ 486.684427][T10097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 486.704064][T10097] RSP: 002b:00007fef1d135030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.712517][T10097] RAX: ffffffffffffffda RBX: 00007fef1c576080 RCX: 00007fef1c38473c [ 486.720509][T10097] RDX: 000000000000000f RSI: 00007fef1d1350a0 RDI: 0000000000000006 [ 486.728493][T10097] RBP: 00007fef1d135090 R08: 0000000000000000 R09: 0000000000000000 [ 486.736478][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.744469][T10097] R13: 0000000000000000 R14: 00007fef1c576080 R15: 00007ffec4ecacb8 [ 486.752493][T10097] [ 486.988200][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 487.002226][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 487.013432][ T5866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 487.023880][ T5866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 487.156807][ T5866] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 487.222779][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.276496][ T5866] usb 1-1: Product: syz [ 487.310827][ T5866] usb 1-1: Manufacturer: syz [ 487.340870][ T5866] usb 1-1: SerialNumber: syz [ 487.368046][ T5866] usb 1-1: config 0 descriptor?? [ 487.383785][T10091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 487.491899][ T5866] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 487.536286][ T5866] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 487.588473][ T5866] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 487.646704][ T5866] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 487.691156][ T5866] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 487.776162][ T5866] usb 1-1: USB disconnect, device number 43 [ 487.828697][ T5866] mcba_usb 1-1:0.0 can0: device disconnected [ 488.653190][T10101] program syz.3.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.671776][T10101] Process accounting resumed [ 489.209141][T10100] Process accounting resumed [ 489.507384][T10118] netlink: 'syz.1.1150': attribute type 2 has an invalid length. [ 489.568320][T10118] fþ: entered promiscuous mode [ 489.680133][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 489.680156][ T29] audit: type=1326 audit(1737106480.483:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 490.094247][ T29] audit: type=1326 audit(1737106480.543:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 490.186784][ T29] audit: type=1326 audit(1737106480.543:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 490.298074][ T29] audit: type=1326 audit(1737106480.553:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 490.319811][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.336439][ T29] audit: type=1326 audit(1737106480.563:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71a9784690 code=0x7ffc0000 [ 490.375161][ T29] audit: type=1326 audit(1737106480.643:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 490.436415][ T29] audit: type=1326 audit(1737106480.643:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 490.696147][T10134] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 490.705278][T10134] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 491.371326][T10138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.545552][T10136] syzkaller0: entered promiscuous mode [ 491.597337][T10136] syzkaller0: entered allmulticast mode [ 491.599251][T10143] overlayfs: failed to clone upperpath [ 493.107938][T10000] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 493.158806][ T5910] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 493.267910][T10000] usb 5-1: Using ep0 maxpacket: 8 [ 493.282999][T10000] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 493.294392][T10000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.325542][T10000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.335942][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 493.343824][T10000] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 493.360283][T10000] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 493.370406][T10000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.379091][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 493.391145][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 493.405229][T10000] usb 5-1: config 0 descriptor?? [ 493.412261][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.422356][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.431148][ T5910] usb 4-1: Product: syz [ 493.435461][ T5910] usb 4-1: Manufacturer: syz [ 493.440178][ T5910] usb 4-1: SerialNumber: syz [ 493.449863][ T5910] usb 4-1: config 0 descriptor?? [ 493.466828][ T5910] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 493.478303][ T5910] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 493.878736][T10000] usbhid 5-1:0.0: can't add hid device: -71 [ 493.885237][T10000] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.899957][T10000] usb 5-1: USB disconnect, device number 31 [ 494.095525][ T5910] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 494.106933][ T5910] em28xx 4-1:0.0: Config register raw data: 0x41 [ 494.726601][T10158] ./file0: Can't lookup blockdev [ 496.067039][ T5866] usb 4-1: USB disconnect, device number 49 [ 496.074168][ T5866] em28xx 4-1:0.0: Disconnecting em28xx [ 496.082277][ T5866] em28xx 4-1:0.0: Freeing device [ 496.469559][T10178] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1168'. [ 496.536097][ T29] audit: type=1326 audit(1737106487.333:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.569899][ T29] audit: type=1326 audit(1737106487.363:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.607606][ T29] audit: type=1326 audit(1737106487.363:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.635748][ T29] audit: type=1326 audit(1737106487.363:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.673757][ T29] audit: type=1326 audit(1737106487.363:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.705763][ T29] audit: type=1326 audit(1737106487.363:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.741473][ T29] audit: type=1326 audit(1737106487.363:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.763539][ T29] audit: type=1326 audit(1737106487.363:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.826086][ T29] audit: type=1326 audit(1737106487.363:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48c5f84690 code=0x7ffc0000 [ 496.865892][ T29] audit: type=1326 audit(1737106487.363:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10177 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 496.887972][ T5910] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 498.288401][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 498.301874][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 498.313491][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.326841][ T5910] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 498.338198][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.346279][ T5910] usb 6-1: Product: syz [ 498.350562][ T5910] usb 6-1: Manufacturer: syz [ 498.355208][ T5910] usb 6-1: SerialNumber: syz [ 498.362094][ T5910] usb 6-1: config 0 descriptor?? [ 498.371757][ T5910] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 498.384194][ T5910] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 498.957768][T10000] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 499.572448][ T5910] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 499.580010][ T5910] em28xx 6-1:0.0: Config register raw data: 0x41 [ 499.737985][T10000] usb 5-1: Using ep0 maxpacket: 8 [ 499.757288][T10000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.770643][T10000] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 499.779860][T10000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.791634][T10000] usb 5-1: config 0 descriptor?? [ 500.088505][T10183] ./file0: Can't lookup blockdev [ 500.139245][T10000] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 500.173067][T10221] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 500.184365][T10221] netlink: 'syz.3.1182': attribute type 11 has an invalid length. [ 500.192682][T10221] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1182'. [ 500.326449][T10205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.335516][T10205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.361130][T10223] FAULT_INJECTION: forcing a failure. [ 500.361130][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 500.375895][T10223] CPU: 0 UID: 0 PID: 10223 Comm: syz.3.1183 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 500.386696][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 500.396795][T10223] Call Trace: [ 500.400188][T10223] [ 500.403166][T10223] dump_stack_lvl+0x241/0x360 [ 500.407880][T10223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.413099][T10223] ? __pfx__printk+0x10/0x10 [ 500.417725][T10223] ? fs_reclaim_acquire+0x93/0x130 [ 500.422880][T10223] ? __pfx___might_resched+0x10/0x10 [ 500.428198][T10223] should_fail_ex+0x3b0/0x4e0 [ 500.432899][T10223] should_failslab+0xac/0x100 [ 500.437633][T10223] __kmalloc_cache_noprof+0x70/0x390 [ 500.442934][T10223] ? netlbl_catmap_setbit+0x1bc/0x3a0 [ 500.448425][T10223] netlbl_catmap_setbit+0x1bc/0x3a0 [ 500.453753][T10223] smk_netlbl_mls+0x1e0/0x630 [ 500.458460][T10223] smk_import_entry+0x35e/0x610 [ 500.463434][T10223] smk_write_net6addr+0x700/0x18b0 [ 500.468664][T10223] ? __pfx_smk_write_net6addr+0x10/0x10 [ 500.474228][T10223] ? rcu_read_lock_any_held+0xb7/0x160 [ 500.479720][T10223] ? __pfx_smk_write_net6addr+0x10/0x10 [ 500.485306][T10223] vfs_write+0x2a3/0xd30 [ 500.489588][T10223] ? __pfx_vfs_write+0x10/0x10 [ 500.494376][T10223] ? __fget_files+0x2a/0x410 [ 500.498984][T10223] ? __fget_files+0x395/0x410 [ 500.503806][T10223] ? __fget_files+0x2a/0x410 [ 500.508416][T10223] ksys_write+0x18f/0x2b0 [ 500.512812][T10223] ? __pfx_ksys_write+0x10/0x10 [ 500.517713][T10223] ? do_syscall_64+0x100/0x230 [ 500.522509][T10223] ? do_syscall_64+0xb6/0x230 [ 500.527201][T10223] do_syscall_64+0xf3/0x230 [ 500.531723][T10223] ? clear_bhb_loop+0x35/0x90 [ 500.536421][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.542428][T10223] RIP: 0033:0x7f7ac1185d29 [ 500.547031][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.566653][T10223] RSP: 002b:00007f7ac1ee3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.575178][T10223] RAX: ffffffffffffffda RBX: 00007f7ac1375fa0 RCX: 00007f7ac1185d29 [ 500.583166][T10223] RDX: 00000000000000b0 RSI: 0000000020000380 RDI: 0000000000000003 [ 500.591158][T10223] RBP: 00007f7ac1ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 500.599148][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.607243][T10223] R13: 0000000000000000 R14: 00007f7ac1375fa0 R15: 00007ffc63547e98 [ 500.615355][T10223] [ 500.770770][T10000] usb 5-1: USB disconnect, device number 32 [ 501.256047][T10000] usb 6-1: USB disconnect, device number 3 [ 501.263096][T10000] em28xx 6-1:0.0: Disconnecting em28xx [ 501.271789][T10000] em28xx 6-1:0.0: Freeing device [ 501.792725][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.799340][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.446432][T10255] netlink: 'syz.1.1194': attribute type 1 has an invalid length. [ 503.732431][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 503.732452][ T29] audit: type=1326 audit(1737106494.523:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 503.837819][ T29] audit: type=1326 audit(1737106494.533:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 503.900575][ T29] audit: type=1326 audit(1737106494.533:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 503.957860][ T29] audit: type=1326 audit(1737106494.533:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 504.004380][ T29] audit: type=1326 audit(1737106494.533:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 504.087851][ T29] audit: type=1326 audit(1737106494.563:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48c5f84690 code=0x7ffc0000 [ 504.151305][ T29] audit: type=1326 audit(1737106494.563:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 504.247941][ T29] audit: type=1326 audit(1737106494.563:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 504.388718][ T29] audit: type=1326 audit(1737106494.563:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 505.026936][ T29] audit: type=1326 audit(1737106494.563:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 505.565827][T10298] tmpfs: Bad value for 'mpol' [ 505.747520][ T5830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 506.008584][ T5830] usb 6-1: device descriptor read/64, error -71 [ 506.312551][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 506.443182][T10308] dummy0: entered promiscuous mode [ 506.466082][ T5830] usb 6-1: device descriptor read/64, error -71 [ 506.471677][T10308] dummy0: left promiscuous mode [ 506.579930][ T5830] usb usb6-port1: attempt power cycle [ 506.918379][ T5830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 506.963529][ T5830] usb 6-1: device descriptor read/8, error -71 [ 507.217884][ T973] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 507.999824][ T5830] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 508.027982][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 508.046443][ T5830] usb 6-1: device descriptor read/8, error -71 [ 508.299274][ T973] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 508.307600][ T973] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.335373][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.112433][ T5830] usb usb6-port1: unable to enumerate USB device [ 509.417800][T10000] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 509.431399][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.441565][ T973] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.454769][ T973] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.464599][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.243667][T10336] cgroup: name respecified [ 510.266526][ T973] usb 1-1: usb_control_msg returned -71 [ 510.272311][ T973] usbtmc 1-1:16.0: can't read capabilities [ 510.282318][ T973] usb 1-1: USB disconnect, device number 44 [ 510.336321][T10340] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 510.344471][T10000] usb 4-1: Using ep0 maxpacket: 8 [ 510.359794][T10000] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 510.379575][T10000] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.406674][T10000] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.645167][T10000] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.655531][T10000] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.668938][T10000] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 510.678823][T10000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.009247][T10354] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 511.018491][T10354] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 511.912107][T10000] usb 4-1: can't set config #16, error -71 [ 511.919419][T10000] usb 4-1: USB disconnect, device number 50 [ 512.317799][T10371] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1234'. [ 513.262072][T10390] Process accounting resumed [ 514.444656][T10417] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 514.454306][T10417] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 514.573787][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 516.679693][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1250'. [ 517.056245][T10439] FAULT_INJECTION: forcing a failure. [ 517.056245][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 517.495549][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.5.1251 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 517.506405][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 517.516519][T10439] Call Trace: [ 517.519827][T10439] [ 517.522805][T10439] dump_stack_lvl+0x241/0x360 [ 517.527533][T10439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.532774][T10439] ? __pfx__printk+0x10/0x10 [ 517.537411][T10439] ? fs_reclaim_acquire+0x93/0x130 [ 517.542562][T10439] ? __pfx___might_resched+0x10/0x10 [ 517.547895][T10439] should_fail_ex+0x3b0/0x4e0 [ 517.552608][T10439] should_failslab+0xac/0x100 [ 517.557337][T10439] __kmalloc_noprof+0xdd/0x4c0 [ 517.562138][T10439] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 517.567902][T10439] tomoyo_realpath_from_path+0xcf/0x5e0 [ 517.573499][T10439] tomoyo_mount_permission+0x3bf/0xb80 [ 517.579000][T10439] ? stack_depot_save_flags+0x37/0x940 [ 517.584500][T10439] ? tomoyo_mount_permission+0x298/0xb80 [ 517.590178][T10439] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 517.596249][T10439] ? hook_sb_mount+0x10b/0x420 [ 517.601053][T10439] ? security_sb_mount+0x22/0x2f0 [ 517.606120][T10439] security_sb_mount+0xe0/0x2f0 [ 517.611020][T10439] path_mount+0xb9/0xfa0 [ 517.615305][T10439] ? kmem_cache_free+0x195/0x410 [ 517.620277][T10439] ? user_path_at+0x44/0x60 [ 517.624825][T10439] __se_sys_mount+0x2d6/0x3c0 [ 517.629544][T10439] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 517.635561][T10439] ? __pfx___se_sys_mount+0x10/0x10 [ 517.640794][T10439] ? do_syscall_64+0x100/0x230 [ 517.645592][T10439] ? __x64_sys_mount+0x20/0xc0 [ 517.650388][T10439] do_syscall_64+0xf3/0x230 [ 517.654921][T10439] ? clear_bhb_loop+0x35/0x90 [ 517.659628][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.665566][T10439] RIP: 0033:0x7fef1c385d29 [ 517.670012][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.689660][T10439] RSP: 002b:00007fef1d136038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 517.698117][T10439] RAX: ffffffffffffffda RBX: 00007fef1c576080 RCX: 00007fef1c385d29 [ 517.706116][T10439] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 517.714116][T10439] RBP: 00007fef1d136090 R08: 0000000000000000 R09: 0000000000000000 [ 517.722115][T10439] R10: 0000000000800808 R11: 0000000000000246 R12: 0000000000000001 [ 517.730202][T10439] R13: 0000000000000000 R14: 00007fef1c576080 R15: 00007ffec4ecacb8 [ 517.738222][T10439] [ 518.038667][T10439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 518.416114][T10374] Process accounting resumed [ 519.530827][T10503] syz.4.1261: attempt to access beyond end of device [ 519.530827][T10503] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 519.544840][T10503] MINIX-fs: unable to read superblock [ 519.722590][T10512] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 519.731810][T10512] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 522.395537][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1267'. [ 523.067023][T10588] overlayfs: failed to clone upperpath [ 523.718720][T10602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.801641][T10000] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 524.085940][T10000] usb 1-1: Using ep0 maxpacket: 8 [ 524.434871][T10610] netlink: 'syz.1.1278': attribute type 10 has an invalid length. [ 524.459758][T10000] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.487388][T10000] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.538127][T10000] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.552026][T10000] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.584098][T10000] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 524.613103][T10000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.653364][T10000] usbtmc 1-1:16.0: bulk endpoints not found [ 525.880641][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1282'. [ 526.038555][T10640] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1286'. [ 526.055634][T10639] overlayfs: failed to clone upperpath [ 526.061522][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.061615][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.061647][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.085932][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.095302][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.127931][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.137925][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.156086][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.170674][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.185757][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.207235][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.228565][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.249616][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.265163][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.293287][T10000] hid-generic 4C67:0000:0000.0010: unknown main item tag 0x0 [ 526.349199][T10000] hid-generic 4C67:0000:0000.0010: hidraw0: HID v1.ff Device [syz0] on syz0 [ 526.953026][T10658] block device autoloading is deprecated and will be removed. [ 527.594248][ T5830] usb 1-1: USB disconnect, device number 45 [ 527.789263][T10676] FAULT_INJECTION: forcing a failure. [ 527.789263][T10676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.854102][T10676] CPU: 0 UID: 0 PID: 10676 Comm: syz.0.1295 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 527.864952][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 527.875139][T10676] Call Trace: [ 527.878459][T10676] [ 527.881470][T10676] dump_stack_lvl+0x241/0x360 [ 527.886203][T10676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.891467][T10676] ? __pfx__printk+0x10/0x10 [ 527.896113][T10676] ? __pfx_lock_release+0x10/0x10 [ 527.901196][T10676] should_fail_ex+0x3b0/0x4e0 [ 527.905920][T10676] _copy_from_user+0x2f/0xc0 [ 527.910562][T10676] memdup_user+0x64/0xc0 [ 527.914850][T10676] strndup_user+0x68/0xc0 [ 527.919229][T10676] __se_sys_mount+0x9f/0x3c0 [ 527.923860][T10676] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 527.929887][T10676] ? __pfx___se_sys_mount+0x10/0x10 [ 527.935131][T10676] ? do_syscall_64+0x100/0x230 [ 527.939938][T10676] ? __x64_sys_mount+0x20/0xc0 [ 527.944745][T10676] do_syscall_64+0xf3/0x230 [ 527.949293][T10676] ? clear_bhb_loop+0x35/0x90 [ 527.954016][T10676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.959966][T10676] RIP: 0033:0x7f71a9785d29 [ 527.964432][T10676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.984086][T10676] RSP: 002b:00007f71aa559038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 527.992544][T10676] RAX: ffffffffffffffda RBX: 00007f71a9975fa0 RCX: 00007f71a9785d29 [ 528.000563][T10676] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000020000000 [ 528.008579][T10676] RBP: 00007f71aa559090 R08: 0000000000000000 R09: 0000000000000000 [ 528.016595][T10676] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 528.024615][T10676] R13: 0000000000000000 R14: 00007f71a9975fa0 R15: 00007fff166f7148 [ 528.032653][T10676] [ 528.035901][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.998471][T10691] wireguard0: entered promiscuous mode [ 529.036289][T10696] cgroup: name respecified [ 529.041068][T10691] wireguard0: entered allmulticast mode [ 535.746822][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 535.801337][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 536.472105][T10809] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 536.481190][T10809] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 537.369907][T10803] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 537.381258][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 537.381278][ T29] audit: type=1804 audit(1737106528.183:367): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1326" name="/newroot/37/bus/bus" dev="overlay" ino=249 res=1 errno=0 [ 537.400220][T10811] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1325'. [ 537.427443][T10813] Invalid ELF header magic: != ELF [ 537.583106][T10725] Bluetooth: hci0: unexpected event for opcode 0x041b [ 538.167894][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1335'. [ 538.208973][T10845] veth0_to_bridge: entered promiscuous mode [ 538.218198][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'. [ 538.951011][T10845] veth0_to_bridge: left promiscuous mode [ 539.329039][T10872] FAULT_INJECTION: forcing a failure. [ 539.329039][T10872] name failslab, interval 1, probability 0, space 0, times 0 [ 539.352038][T10872] CPU: 1 UID: 0 PID: 10872 Comm: syz.5.1346 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 539.363499][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 539.374125][T10872] Call Trace: [ 539.377440][T10872] [ 539.380407][T10872] dump_stack_lvl+0x241/0x360 [ 539.385143][T10872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.390398][T10872] ? __pfx__printk+0x10/0x10 [ 539.395044][T10872] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 539.401075][T10872] ? __pfx___might_resched+0x10/0x10 [ 539.406430][T10872] should_fail_ex+0x3b0/0x4e0 [ 539.411161][T10872] should_failslab+0xac/0x100 [ 539.415898][T10872] ? __d_alloc+0x31/0x700 [ 539.420271][T10872] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 539.426040][T10872] __d_alloc+0x31/0x700 [ 539.430250][T10872] d_alloc_parallel+0xdf/0x1600 [ 539.435160][T10872] ? __asan_memset+0x23/0x50 [ 539.439801][T10872] ? __asan_memset+0x23/0x50 [ 539.444438][T10872] ? lockdep_init_map_type+0xa1/0x910 [ 539.449858][T10872] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 539.455719][T10872] ? __pfx_d_alloc_parallel+0x10/0x10 [ 539.461159][T10872] ? __init_waitqueue_head+0xae/0x150 [ 539.466600][T10872] __lookup_slow+0x117/0x3f0 [ 539.471239][T10872] ? __pfx___lookup_slow+0x10/0x10 [ 539.476394][T10872] ? __d_lookup+0x64/0x7b0 [ 539.480881][T10872] lookup_one_unlocked+0x1a4/0x290 [ 539.486047][T10872] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 539.491731][T10872] ? ovl_lookup+0x8b2/0x2a60 [ 539.496381][T10872] ? do_sys_openat2+0x13e/0x1d0 [ 539.501275][T10872] ? __x64_sys_openat+0x247/0x2a0 [ 539.506337][T10872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.512468][T10872] ovl_lookup_single+0x200/0xbd0 [ 539.517475][T10872] ? __pfx_ovl_lookup_single+0x10/0x10 [ 539.523009][T10872] ovl_lookup_layer+0x417/0x510 [ 539.528021][T10872] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 539.533544][T10872] ? rcu_is_watching+0x15/0xb0 [ 539.538369][T10872] ? trace_kmalloc+0x1f/0xd0 [ 539.543005][T10872] ? ovl_lookup+0x8b2/0x2a60 [ 539.547658][T10872] ovl_lookup+0xcf7/0x2a60 [ 539.552153][T10872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 539.558217][T10872] ? __pfx_ovl_lookup+0x10/0x10 [ 539.563108][T10872] ? smk_tskacc+0x300/0x370 [ 539.567746][T10872] ? smack_inode_permission+0x2dc/0x380 [ 539.573348][T10872] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 539.578844][T10872] ? from_kgid+0x1a7/0x730 [ 539.583286][T10872] ? make_vfsgid+0x51/0xa0 [ 539.587747][T10872] ? HAS_UNMAPPED_ID+0xf9/0x150 [ 539.592632][T10872] ? bpf_lsm_inode_create+0x9/0x10 [ 539.597780][T10872] ? security_inode_create+0xbe/0x340 [ 539.603198][T10872] ? __pfx_ovl_lookup+0x10/0x10 [ 539.608093][T10872] path_openat+0x11a7/0x3590 [ 539.612752][T10872] ? __pfx_path_openat+0x10/0x10 [ 539.617743][T10872] do_filp_open+0x27f/0x4e0 [ 539.622277][T10872] ? __pfx_do_filp_open+0x10/0x10 [ 539.627321][T10872] ? do_raw_spin_lock+0x14f/0x370 [ 539.632403][T10872] do_sys_openat2+0x13e/0x1d0 [ 539.637098][T10872] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.642309][T10872] ? __fget_files+0x2a/0x410 [ 539.646927][T10872] ? __fget_files+0x2a/0x410 [ 539.651538][T10872] __x64_sys_openat+0x247/0x2a0 [ 539.656505][T10872] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.661898][T10872] ? do_syscall_64+0x100/0x230 [ 539.666765][T10872] ? do_syscall_64+0xb6/0x230 [ 539.671459][T10872] do_syscall_64+0xf3/0x230 [ 539.675979][T10872] ? clear_bhb_loop+0x35/0x90 [ 539.680684][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.686868][T10872] RIP: 0033:0x7fef1c385d29 [ 539.691299][T10872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.711028][T10872] RSP: 002b:00007fef1d157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.719475][T10872] RAX: ffffffffffffffda RBX: 00007fef1c575fa0 RCX: 00007fef1c385d29 [ 539.727466][T10872] RDX: 0000000000101042 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 539.735453][T10872] RBP: 00007fef1d157090 R08: 0000000000000000 R09: 0000000000000000 [ 539.743439][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.751427][T10872] R13: 0000000000000000 R14: 00007fef1c575fa0 R15: 00007ffec4ecacb8 [ 539.759433][T10872] [ 540.273613][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1353'. [ 540.319190][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 541.116316][T10896] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 541.868093][T10910] tmpfs: Bad value for 'mpol' [ 541.895092][T10912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.907259][T10912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 541.919768][T10912] bridge_slave_0: default FDB implementation only supports local addresses [ 544.302456][ T29] audit: type=1326 audit(1737106535.103:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.325936][ T29] audit: type=1326 audit(1737106535.113:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.427209][ T29] audit: type=1326 audit(1737106535.113:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.518053][ T29] audit: type=1326 audit(1737106535.113:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.578194][ T29] audit: type=1326 audit(1737106535.133:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.646917][ T29] audit: type=1326 audit(1737106535.133:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.684629][ T29] audit: type=1326 audit(1737106535.133:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.716783][ T29] audit: type=1326 audit(1737106535.153:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71a9784690 code=0x7ffc0000 [ 544.748159][ T5910] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 544.754417][ T29] audit: type=1326 audit(1737106535.153:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.777310][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.794474][ T29] audit: type=1326 audit(1737106535.153:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10940 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 544.848074][ T5867] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 544.893142][T10956] FAULT_INJECTION: forcing a failure. [ 544.893142][T10956] name failslab, interval 1, probability 0, space 0, times 0 [ 544.965703][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 544.984603][T10956] CPU: 1 UID: 0 PID: 10956 Comm: syz.5.1375 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 544.995570][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 545.005936][T10956] Call Trace: [ 545.009268][T10956] [ 545.012236][T10956] dump_stack_lvl+0x241/0x360 [ 545.016999][T10956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.022253][T10956] ? __pfx__printk+0x10/0x10 [ 545.026898][T10956] ? kmem_cache_alloc_noprof+0x48/0x380 [ 545.032500][T10956] ? __pfx___might_resched+0x10/0x10 [ 545.037845][T10956] should_fail_ex+0x3b0/0x4e0 [ 545.042573][T10956] should_failslab+0xac/0x100 [ 545.047308][T10956] ? alloc_empty_file+0x9e/0x1d0 [ 545.052385][T10956] kmem_cache_alloc_noprof+0x70/0x380 [ 545.057825][T10956] alloc_empty_file+0x9e/0x1d0 [ 545.062648][T10956] alloc_file_pseudo+0x1da/0x290 [ 545.067644][T10956] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 545.073155][T10956] ? shmem_get_inode+0xc37/0xf20 [ 545.078156][T10956] __shmem_file_setup+0x237/0x2c0 [ 545.083254][T10956] shmem_zero_setup+0x91/0x140 [ 545.088086][T10956] __mmap_region+0x2715/0x2d30 [ 545.092932][T10956] ? __pfx___mmap_region+0x10/0x10 [ 545.098167][T10956] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 545.104836][T10956] ? mm_get_unmapped_area+0xa8/0xd0 [ 545.110102][T10956] ? cap_mmap_addr+0x163/0x2c0 [ 545.114926][T10956] mmap_region+0x1d0/0x2c0 [ 545.119400][T10956] ? security_mmap_addr+0x6f/0x250 [ 545.124578][T10956] do_mmap+0x97a/0x10d0 [ 545.128806][T10956] ? __pfx_do_mmap+0x10/0x10 [ 545.133442][T10956] ? __pfx_down_write_killable+0x10/0x10 [ 545.139123][T10956] ? __fget_files+0x2a/0x410 [ 545.143775][T10956] vm_mmap_pgoff+0x1dd/0x3d0 [ 545.148430][T10956] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 545.153587][T10956] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.159987][T10956] ? do_syscall_64+0x100/0x230 [ 545.164794][T10956] ? ksys_mmap_pgoff+0xdf/0x720 [ 545.169694][T10956] ? __x64_sys_mmap+0x7f/0x140 [ 545.174512][T10956] do_syscall_64+0xf3/0x230 [ 545.179060][T10956] ? clear_bhb_loop+0x35/0x90 [ 545.183789][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.189742][T10956] RIP: 0033:0x7fef1c385d29 [ 545.194209][T10956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.213860][T10956] RSP: 002b:00007fef1d157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 545.222331][T10956] RAX: ffffffffffffffda RBX: 00007fef1c575fa0 RCX: 00007fef1c385d29 [ 545.230358][T10956] RDX: 0000000000000000 RSI: 0000000000b36000 RDI: 0000000020000000 [ 545.238378][T10956] RBP: 00007fef1d157090 R08: ffffffffffffffff R09: 0000000000000000 [ 545.246396][T10956] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 545.254411][T10956] R13: 0000000000000000 R14: 00007fef1c575fa0 R15: 00007ffec4ecacb8 [ 545.262452][T10956] [ 545.272460][ T5910] usb 4-1: not running at top speed; connect to a high speed hub [ 545.284495][ T5910] usb 4-1: config 6 has an invalid interface number: 255 but max is 0 [ 545.293463][ T5910] usb 4-1: config 6 has no interface number 0 [ 545.304057][ T5867] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 545.314170][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.322399][ T5910] usb 4-1: config 6 interface 255 has no altsetting 0 [ 545.329471][ T5867] usb 5-1: Product: syz [ 545.342488][ T5867] usb 5-1: Manufacturer: syz [ 545.350032][ T5867] usb 5-1: SerialNumber: syz [ 545.453297][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=b5.ef [ 545.482055][ T5867] r8152-cfgselector 5-1: Unknown version 0x0000 [ 545.489604][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.539460][ T5867] r8152-cfgselector 5-1: config 0 descriptor?? [ 545.576103][ T5910] usb 4-1: Product: syz [ 545.662954][ T5910] usb 4-1: Manufacturer: syz [ 545.765720][ T5910] usb 4-1: SerialNumber: syz [ 546.106805][T10969] infiniband syz2: set active [ 546.112165][T10969] infiniband syz2: added team_slave_1 [ 546.119270][T10969] syz2: rxe_create_cq: returned err = -12 [ 546.125585][T10969] infiniband syz2: Couldn't create ib_mad CQ [ 546.132178][T10969] infiniband syz2: Couldn't open port 1 [ 546.155677][T10969] RDS/IB: syz2: added [ 546.160930][T10969] smc: adding ib device syz2 with port count 1 [ 546.167461][T10969] smc: ib device syz2 port 1 has pnetid [ 548.919116][ T5910] gspca_main: spca500-2.14.0 probing 046d:0890 [ 548.934104][ T5910] usb 4-1: USB disconnect, device number 51 [ 551.496707][ T5867] r8152-cfgselector 5-1: Unknown version 0x0000 [ 551.519397][ T5867] r8152-cfgselector 5-1: bad CDC descriptors [ 551.690184][ T5867] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 551.945951][T11013] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 551.955195][T11013] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 552.567797][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 552.567822][ T29] audit: type=1326 audit(1737106543.343:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11005 comm="syz.4.1388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac8385d29 code=0x0 [ 553.497881][ T973] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 553.712309][ T973] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 553.712344][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.712361][ T973] usb 5-1: Product: syz [ 553.712374][ T973] usb 5-1: Manufacturer: syz [ 553.712386][ T973] usb 5-1: SerialNumber: syz [ 553.713995][ T973] usb 5-1: config 0 descriptor?? [ 553.715614][ T973] ch341 5-1:0.0: ch341-uart converter detected [ 553.958676][T11027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1392'. [ 553.980026][ T973] usb 5-1: failed to receive control message: -71 [ 554.062826][ T973] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 554.069495][ T973] usb 5-1: USB disconnect, device number 34 [ 554.070575][ T973] ch341 5-1:0.0: device disconnected [ 554.198515][ T5866] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 554.359329][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 554.362922][ T5866] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 554.362959][ T5866] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 554.362978][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 554.362998][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 554.363018][ T5866] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.363047][ T5866] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 554.363067][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.607178][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 554.607454][T11029] IPVS: Error joining to the multicast group [ 554.699035][ T5866] usb 1-1: usb_control_msg returned -32 [ 554.699090][ T5866] usbtmc 1-1:16.0: can't read capabilities [ 555.009961][ T5866] usb 1-1: USB disconnect, device number 46 [ 556.020291][T11049] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 556.020316][T11049] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 556.151750][T10928] Process accounting resumed [ 556.595730][T11058] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1403'. [ 556.646245][ T29] audit: type=1326 audit(1737106547.443:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.646302][ T29] audit: type=1326 audit(1737106547.443:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.646342][ T29] audit: type=1326 audit(1737106547.443:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.646380][ T29] audit: type=1326 audit(1737106547.443:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.646418][ T29] audit: type=1326 audit(1737106547.443:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.646455][ T29] audit: type=1326 audit(1737106547.443:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.646495][ T29] audit: type=1326 audit(1737106547.443:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.646533][ T29] audit: type=1326 audit(1737106547.443:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48c5f84690 code=0x7ffc0000 [ 556.646572][ T29] audit: type=1326 audit(1737106547.443:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c5f85d29 code=0x7ffc0000 [ 556.938443][ T5910] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 557.220956][ T5910] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 557.220985][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.222658][ T5910] usb 5-1: config 0 descriptor?? [ 557.225207][ T5910] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 557.738474][ T5910] gspca_sunplus: reg_w_riv err -110 [ 557.738547][ T5910] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 558.718378][T11065] program syz.5.1397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.794625][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 558.913785][ T5866] usb 5-1: USB disconnect, device number 35 [ 559.102830][T11092] fuse: Unknown parameter '0xffffffffffffffff' [ 559.216536][T11094] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1414'. [ 559.342914][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 559.342935][ T29] audit: type=1326 audit(1737106550.143:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 559.448356][ T29] audit: type=1326 audit(1737106550.153:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 559.528045][ T29] audit: type=1326 audit(1737106550.153:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 559.572404][ T29] audit: type=1326 audit(1737106550.153:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 559.686698][ T5910] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 560.029935][ T29] audit: type=1326 audit(1737106550.153:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 560.177083][ T29] audit: type=1326 audit(1737106550.153:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 560.217946][ T29] audit: type=1326 audit(1737106550.153:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71a9784690 code=0x7ffc0000 [ 560.240085][ T29] audit: type=1326 audit(1737106550.153:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 560.261903][ T29] audit: type=1326 audit(1737106550.153:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 560.284828][ T29] audit: type=1326 audit(1737106550.163:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f71a9785d29 code=0x7ffc0000 [ 560.547837][T11111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.408480][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 561.417403][ T5910] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 561.427526][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 561.464185][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 561.528603][ T5910] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.585694][ T5910] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 561.615516][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.911612][ T5910] usb 5-1: usb_control_msg returned -32 [ 561.917958][ T5910] usbtmc 5-1:16.0: can't read capabilities [ 561.943828][ T2147] usb 5-1: USB disconnect, device number 36 [ 562.752077][T11037] Process accounting resumed [ 563.238187][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.244743][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.401364][T11168] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1430'. [ 563.717449][T11186] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 564.804985][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1435'. [ 566.011238][T11204] 9pnet_fd: Insufficient options for proto=fd [ 566.420554][ T5866] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 566.567989][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 566.569797][ T5866] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 566.569824][ T5866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 566.569845][ T5866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 566.569864][ T5866] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.569894][ T5866] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 566.569914][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.677938][ T5910] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 566.784407][ T5866] usb 6-1: usb_control_msg returned -32 [ 566.784452][ T5866] usbtmc 6-1:16.0: can't read capabilities [ 566.795231][T10000] usb 6-1: USB disconnect, device number 8 [ 566.919679][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 566.919724][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 566.919757][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 566.919800][ T5910] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 566.919829][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.923889][ T5910] usb 5-1: config 0 descriptor?? [ 566.925029][T11213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 567.135275][ T5910] aureal 0003:0755:2626.0011: report_id 0 is invalid [ 567.135390][ T5910] aureal 0003:0755:2626.0011: item 0 0 1 8 parsing failed [ 567.135968][ T5910] aureal 0003:0755:2626.0011: probe with driver aureal failed with error -22 [ 567.340671][ T5910] usb 5-1: USB disconnect, device number 37 [ 567.801648][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1448'. [ 567.812242][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1448'. [ 567.966887][T11242] 9pnet_fd: Insufficient options for proto=fd [ 568.279386][ T5866] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 568.439670][ T5866] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.482747][ T5866] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 568.507590][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 568.523617][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.539186][T11245] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 568.551132][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.082993][T11280] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 570.092225][T11280] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 570.986944][T11281] syz.3.1460: attempt to access beyond end of device [ 570.986944][T11281] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 571.001061][T11281] (syz.3.1460,11281,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 571.009450][T11281] (syz.3.1460,11281,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 571.016946][T11281] (syz.3.1460,11281,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 571.025959][T11281] (syz.3.1460,11281,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 571.994956][T11292] IPVS: length: 121 != 1376280 [ 572.082436][T11294] syz.3.1465 (11294) used greatest stack depth: 16240 bytes left [ 572.244258][T11298] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1467'. [ 572.585033][ T2147] usb 1-1: USB disconnect, device number 47 [ 572.824430][T11306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.327832][T10000] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 573.475918][T11336] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 573.498255][T10000] usb 1-1: Using ep0 maxpacket: 32 [ 573.509985][T10000] usb 1-1: config 150 has an invalid interface number: 123 but max is 0 [ 573.527788][T10000] usb 1-1: config 150 has no interface number 0 [ 573.536182][T10000] usb 1-1: config 150 interface 123 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.567567][T10000] usb 1-1: config 150 interface 123 has no altsetting 0 [ 573.577525][T10000] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=6e.7e [ 573.577573][T10000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.577601][T10000] usb 1-1: Product: syz [ 573.577621][T10000] usb 1-1: Manufacturer: syz [ 573.577641][T10000] usb 1-1: SerialNumber: syz [ 573.615482][T10000] gspca_main: spca501-2.14.0 probing 1776:501c [ 573.638383][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'. [ 573.809321][T10000] gspca_spca501: reg write: error -71 [ 573.822397][T10000] spca501 1-1:150.123: Reg write failed for 0x02,0x07,0x05 [ 573.835971][T10000] spca501 1-1:150.123: probe with driver spca501 failed with error -22 [ 573.853998][T10000] usb 1-1: USB disconnect, device number 48 [ 574.233595][ T5830] IPVS: starting estimator thread 0... [ 574.377914][T11355] IPVS: using max 17 ests per chain, 40800 per kthread [ 575.535433][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 575.535450][ T29] audit: type=1326 audit(1737106566.333:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.598202][ T29] audit: type=1326 audit(1737106566.333:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.621890][ T29] audit: type=1326 audit(1737106566.363:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.644072][ T29] audit: type=1326 audit(1737106566.363:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.666475][ T29] audit: type=1326 audit(1737106566.363:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.688469][ T29] audit: type=1326 audit(1737106566.363:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.710165][ T29] audit: type=1326 audit(1737106566.363:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.732030][ T29] audit: type=1326 audit(1737106566.373:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.754084][ T29] audit: type=1326 audit(1737106566.373:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 575.778069][ T29] audit: type=1326 audit(1737106566.373:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11365 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c385d29 code=0x7ffc0000 [ 578.867871][ T5866] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 579.028152][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 579.037541][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.056413][ T5866] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 579.324263][ T5866] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 579.334351][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.347865][ T5866] usb 5-1: Product: syz [ 579.352120][ T5866] usb 5-1: Manufacturer: syz [ 579.356780][ T5866] usb 5-1: SerialNumber: syz [ 581.543623][ T5866] usb 5-1: 0:2 : does not exist [ 581.551178][ T5866] usb 5-1: cannot find UAC_HEADER [ 581.571353][ T5866] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 581.595028][ T5866] usb 5-1: USB disconnect, device number 38 [ 581.608777][ T5830] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 581.801806][ T5830] usb 6-1: device descriptor read/64, error -71 [ 581.828007][ T2147] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 582.098656][ T5830] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 582.270824][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.322448][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 582.343832][ T2147] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 582.358757][ T2147] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 582.368625][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.380009][ T2147] usb 1-1: config 0 descriptor?? [ 582.388145][ T5830] usb 6-1: device descriptor read/64, error -71 [ 582.403009][T11408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 582.519861][ T5830] usb usb6-port1: attempt power cycle [ 583.157931][ T5830] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 583.188510][ T5830] usb 6-1: device descriptor read/8, error -71 [ 583.196587][ T2147] aureal 0003:0755:2626.0012: report_id 0 is invalid [ 583.218726][ T2147] aureal 0003:0755:2626.0012: item 0 0 1 8 parsing failed [ 583.240851][ T2147] aureal 0003:0755:2626.0012: probe with driver aureal failed with error -22 [ 583.459309][ T5830] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 583.511476][T11433] FAULT_INJECTION: forcing a failure. [ 583.511476][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 583.525148][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.3.1508 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 583.536066][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 583.538558][ T5830] usb 6-1: device descriptor read/8, error -71 [ 583.546148][T11433] Call Trace: [ 583.546167][T11433] [ 583.546178][T11433] dump_stack_lvl+0x241/0x360 [ 583.546219][T11433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.546250][T11433] ? __pfx__printk+0x10/0x10 [ 583.546294][T11433] should_fail_ex+0x3b0/0x4e0 [ 583.577910][T11433] should_failslab+0xac/0x100 [ 583.582625][T11433] ? skb_clone+0x20c/0x390 [ 583.587067][T11433] kmem_cache_alloc_noprof+0x70/0x380 [ 583.592473][T11433] skb_clone+0x20c/0x390 [ 583.596743][T11433] __netlink_deliver_tap+0x3cc/0x7f0 [ 583.602058][T11433] ? netlink_deliver_tap+0x2e/0x1b0 [ 583.607272][T11433] netlink_deliver_tap+0x19d/0x1b0 [ 583.612401][T11433] netlink_unicast+0x7c4/0x990 [ 583.617185][T11433] ? __pfx_netlink_unicast+0x10/0x10 [ 583.622483][T11433] ? __virt_addr_valid+0x45f/0x530 [ 583.627611][T11433] ? __phys_addr_symbol+0x2f/0x70 [ 583.632695][T11433] ? __check_object_size+0x47a/0x730 [ 583.638024][T11433] netlink_sendmsg+0x8e4/0xcb0 [ 583.642833][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.648137][T11433] ? __import_iovec+0x52/0x870 [ 583.653012][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.658315][T11433] __sock_sendmsg+0x221/0x270 [ 583.663031][T11433] ____sys_sendmsg+0x52a/0x7e0 [ 583.667830][T11433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.673134][T11433] ? __fget_files+0x2a/0x410 [ 583.677752][T11433] ? __fget_files+0x2a/0x410 [ 583.682373][T11433] __sys_sendmmsg+0x36a/0x720 [ 583.687189][T11433] ? __pfx___sys_sendmmsg+0x10/0x10 [ 583.692443][T11433] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.698502][T11433] ? irqentry_exit+0x63/0x90 [ 583.703162][T11433] ? finish_task_switch+0x1ea/0x870 [ 583.708403][T11433] ? finish_task_switch+0x1e5/0x870 [ 583.713817][T11433] ? __schedule+0x1803/0x4be0 [ 583.718524][T11433] ? __mutex_unlock_slowpath+0x21e/0x790 [ 583.724222][T11433] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.730308][T11433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 583.736658][T11433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 583.743021][T11433] __x64_sys_sendmmsg+0xa0/0xb0 [ 583.747932][T11433] do_syscall_64+0xf3/0x230 [ 583.752540][T11433] ? clear_bhb_loop+0x35/0x90 [ 583.757235][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.763152][T11433] RIP: 0033:0x7f7ac1185d29 [ 583.767590][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.787214][T11433] RSP: 002b:00007f7abeff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 583.795658][T11433] RAX: ffffffffffffffda RBX: 00007f7ac1376080 RCX: 00007f7ac1185d29 [ 583.803657][T11433] RDX: 0492492492492627 RSI: 00000000200000c0 RDI: 000000000000000a [ 583.811657][T11433] RBP: 00007f7abeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 583.819646][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.827635][T11433] R13: 0000000000000000 R14: 00007f7ac1376080 R15: 00007ffc63547e98 [ 583.835693][T11433] [ 583.935232][ T5830] usb usb6-port1: unable to enumerate USB device [ 583.936742][T11433] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.952241][T11433] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.961225][T11433] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.970020][T11433] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.543126][T11439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1511'. [ 584.649792][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 585.452108][T11446] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.461034][T11446] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.469815][T11446] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.478991][T11446] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.782248][ T5904] usb 1-1: USB disconnect, device number 49 [ 586.774935][T11460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1515'. [ 586.980247][T11467] IPVS: length: 121 != 1376280 [ 587.258539][T11475] 9pnet_fd: Insufficient options for proto=fd [ 587.268868][T11471] bond0: (slave vlan1): Error: Device can not be enslaved while up [ 587.306484][T11475] bond0: (slave vlan1): Error: Device can not be enslaved while up [ 587.657883][ T5867] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 587.897831][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 588.076656][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.273461][ T5867] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 588.313652][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.356433][ T5867] usb 1-1: config 0 descriptor?? [ 589.632814][T11494] tipc: Failed to remove unknown binding: 66,1,1/0:828525176/828525178 [ 589.674307][T11494] tipc: Failed to remove unknown binding: 66,1,1/0:828525176/828525178 [ 589.679584][ T5867] usbhid 1-1:0.0: can't add hid device: -71 [ 589.688807][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 589.698905][ T5867] usb 1-1: USB disconnect, device number 50 [ 590.924046][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 591.395668][T11502] program syz.3.1526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.408458][T11502] Process accounting resumed [ 591.563334][T11507] Process accounting resumed [ 592.589523][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'. [ 592.653033][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 595.958310][T10000] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 596.037199][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 596.137167][T10000] usb 5-1: Using ep0 maxpacket: 8 [ 596.162852][T10000] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.162945][T10000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.163031][T10000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.163115][T10000] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.163241][T10000] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 596.163326][T10000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.205490][T10725] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 596.643684][T10000] usb 5-1: GET_CAPABILITIES returned 0 [ 596.643728][T10000] usbtmc 5-1:16.0: can't read capabilities [ 597.380654][T11587] fuse: Bad value for 'user_id' [ 597.380732][T11587] fuse: Bad value for 'user_id' [ 597.921493][T11582] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 597.921555][T11582] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 598.178268][ T5904] usb 5-1: USB disconnect, device number 39 [ 598.524372][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 598.786884][T11600] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.787011][T11600] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1559'. [ 598.852184][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1559'. [ 599.180592][T11609] netlink: 'syz.4.1560': attribute type 11 has an invalid length. [ 602.727837][T11635] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 602.727904][T11635] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 603.747415][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 603.930471][T11649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1576'. [ 603.940422][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 604.266983][T11657] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 604.276224][T11657] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 605.404704][T11664] netlink: 'syz.1.1579': attribute type 2 has an invalid length. [ 605.433770][T11664] netlink: 'syz.1.1579': attribute type 8 has an invalid length. [ 605.442612][T11662] nvme_fabrics: missing parameter 'transport=%s' [ 605.450531][T11662] nvme_fabrics: missing parameter 'nqn=%s' [ 605.461644][T11664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1579'. [ 606.042869][ T5867] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 606.394734][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 606.402718][ T2147] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 606.412772][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 606.444864][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 606.457817][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 606.468221][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 606.479950][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 606.754167][ T5867] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 607.327874][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.335951][ T5867] usb 1-1: Product: syz [ 607.389565][ T5867] usb 1-1: Manufacturer: syz [ 607.415449][ T5867] usb 1-1: SerialNumber: syz [ 607.479559][ T2147] usb 6-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 607.489692][ T2147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.500975][ T2147] usb 6-1: config 0 descriptor?? [ 607.508620][ T5867] usb 1-1: config 0 descriptor?? [ 607.509697][ T2147] lan78xx 6-1:0.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 607.558340][ T2147] lan78xx 6-1:0.0: probe with driver lan78xx failed with error -5 [ 607.631062][T11692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1586'. [ 607.738000][T10000] usb 6-1: USB disconnect, device number 13 [ 608.008977][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.015174][ T5867] input input19: Device does not respond to id packet M [ 608.029532][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.045968][ T5867] input input19: Device does not respond to id packet P [ 608.057987][T11698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1585'. [ 608.074397][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.084959][ T5867] input input19: Device does not respond to id packet B [ 608.109138][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.129399][ T5867] input input19: Device does not respond to id packet N [ 608.154274][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.181548][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.212342][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.232794][ T5867] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 608.253085][ T5867] iforce 1-1:0.0: usb_submit_urb failed -90 [ 608.262420][ T5867] iforce 1-1:0.0: usb_submit_urb failed -90 [ 608.278665][ T5867] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 608.341255][ T5867] usb 1-1: USB disconnect, device number 51 [ 608.729524][T11704] netlink: 'syz.5.1589': attribute type 10 has an invalid length. [ 608.754985][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1589'. [ 609.943015][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021fb4000: rx timeout, send abort [ 609.954241][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021fb5800: rx timeout, send abort [ 609.962798][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021fb4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 609.979502][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021fb5800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 610.670040][T11704] bridge0: port 3(hsr0) entered blocking state [ 610.676392][T11704] bridge0: port 3(hsr0) entered disabled state [ 610.683252][T11704] hsr0: entered allmulticast mode [ 610.688470][T11704] hsr_slave_0: entered allmulticast mode [ 610.694145][T11704] hsr_slave_1: entered allmulticast mode [ 610.701300][T11704] hsr0: entered promiscuous mode [ 610.706936][T11704] bridge0: port 3(hsr0) entered blocking state [ 610.713287][T11704] bridge0: port 3(hsr0) entered forwarding state [ 610.896005][T11724] nvme_fabrics: missing parameter 'transport=%s' [ 610.902582][T11724] nvme_fabrics: missing parameter 'nqn=%s' [ 611.017999][ T5904] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 611.956366][T11734] fuse: Bad value for 'group_id' [ 611.977861][T11734] fuse: Bad value for 'group_id' [ 612.037814][ T5904] usb 5-1: device descriptor read/64, error -71 [ 612.328153][ T5904] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 612.450569][T11753] team_slave_1: entered promiscuous mode [ 612.458183][ T5904] usb 5-1: device descriptor read/64, error -71 [ 612.498707][T11753] infiniband syz2: set down [ 612.568424][ T5904] usb usb5-port1: attempt power cycle [ 612.848145][T10000] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 612.928169][ T5904] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 612.968688][ T5904] usb 5-1: device descriptor read/8, error -71 [ 612.993906][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1601'. [ 613.008008][T10000] usb 6-1: Using ep0 maxpacket: 8 [ 613.023631][T10000] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 613.037728][T10000] usb 6-1: config 0 has no interface number 0 [ 613.049627][T10000] usb 6-1: config 0 interface 128 has no altsetting 0 [ 613.070001][T10000] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=4a.2f [ 613.087241][T10000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.096908][T10000] usb 6-1: Product: syz [ 613.107742][T10000] usb 6-1: Manufacturer: syz [ 613.116637][T10000] usb 6-1: SerialNumber: syz [ 613.134844][T10000] usb 6-1: config 0 descriptor?? [ 613.149641][T10000] peak_usb 6-1:0.128: probe with driver peak_usb failed with error 128 [ 613.207966][ T5904] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 613.238512][ T5904] usb 5-1: device descriptor read/8, error -71 [ 613.348437][ T5904] usb usb5-port1: unable to enumerate USB device [ 613.351168][T10000] usb 6-1: USB disconnect, device number 14 [ 613.871347][T11783] nvme_fabrics: missing parameter 'transport=%s' [ 613.878017][T11783] nvme_fabrics: missing parameter 'nqn=%s' [ 614.057858][ T5904] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 614.511354][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 614.532811][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.709565][ T5904] usb 5-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 614.718921][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.732622][ T5904] usb 5-1: config 0 descriptor?? [ 615.623327][ T5904] aquacomputer_d5next 0003:0C70:F012.0013: unknown main item tag 0x0 [ 615.688401][ T5904] aquacomputer_d5next 0003:0C70:F012.0013: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.4-1/input0 [ 615.740943][T11801] overlayfs: failed to clone lowerpath [ 616.229454][ T5904] usb 5-1: USB disconnect, device number 44 [ 617.076085][T11813] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1624'. [ 617.076109][T11813] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 617.491101][T11829] sp0: Synchronizing with TNC [ 617.776458][ T973] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 617.790831][T11837] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1631'. [ 617.966139][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.966228][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.966758][ T973] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 617.966828][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.977297][ T973] usb 5-1: config 0 descriptor?? [ 618.197876][ T5904] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 618.350248][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 618.359817][ T5904] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 618.359866][ T5904] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 618.359907][ T5904] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 618.359942][ T5904] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 618.359976][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 618.363850][ T5904] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 618.363890][ T5904] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 618.363918][ T5904] usb 1-1: Product: syz [ 618.364010][ T5904] usb 1-1: Manufacturer: syz [ 618.364032][ T5904] usb 1-1: SerialNumber: syz [ 620.509108][ T5904] usb 1-1: config 0 descriptor?? [ 620.554488][ T5904] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 620.569059][ T5904] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 620.837458][T11830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1629'. [ 621.983042][ T973] asus 0003:0B05:17E0.0014: unknown main item tag 0x0 [ 621.983087][ T973] asus 0003:0B05:17E0.0014: unknown main item tag 0x0 [ 621.983120][ T973] asus 0003:0B05:17E0.0014: unknown main item tag 0x0 [ 621.983152][ T973] asus 0003:0B05:17E0.0014: unknown main item tag 0x0 [ 621.983184][ T973] asus 0003:0B05:17E0.0014: unknown main item tag 0x0 [ 621.983215][ T973] asus 0003:0B05:17E0.0014: unknown main item tag 0x0 [ 621.983246][ T973] asus 0003:0B05:17E0.0014: unknown main item tag 0x0 [ 621.985126][ T973] asus 0003:0B05:17E0.0014: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.4-1/input0 [ 621.985153][ T973] asus 0003:0B05:17E0.0014: Asus input not registered [ 621.986126][ T973] asus 0003:0B05:17E0.0014: probe with driver asus failed with error -12 [ 622.150818][T11856] i2c i2c-0: Invalid block write size 254 [ 622.400098][ T973] usb 5-1: USB disconnect, device number 45 [ 623.066295][T11840] delete_channel: no stack [ 623.072982][ T973] usb 1-1: USB disconnect, device number 52 [ 623.075765][ T973] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 623.230113][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 623.230128][ T29] audit: type=1326 audit(1737106614.033:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 623.232954][ T29] audit: type=1326 audit(1737106614.033:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 623.234125][ T29] audit: type=1326 audit(1737106614.033:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 623.234248][ T29] audit: type=1326 audit(1737106614.033:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 623.234384][ T29] audit: type=1326 audit(1737106614.033:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 623.234533][ T29] audit: type=1326 audit(1737106614.033:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 623.237234][ T29] audit: type=1326 audit(1737106614.033:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.4.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac8385d29 code=0x7ffc0000 [ 623.736976][T11885] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 728.747629][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 728.754647][ C0] rcu: 1-...!: (0 ticks this GP) idle=afcc/1/0x4000000000000000 softirq=42017/42017 fqs=0 [ 728.766619][ C0] rcu: (detected by 0, t=10502 jiffies, g=49613, q=87 ncpus=2) [ 728.774310][ C0] Sending NMI from CPU 0 to CPUs 1: [ 728.774352][ C1] NMI backtrace for cpu 1 [ 728.774367][ C1] CPU: 1 UID: 0 PID: 11882 Comm: syz.5.1645 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 728.774388][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 728.774400][ C1] RIP: 0010:lock_acquire+0x1b0/0x550 [ 728.774427][ C1] Code: 00 42 80 3c 2b 00 74 08 4c 89 ff e8 ea 9f 88 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 00 fa 48 c7 c7 20 a6 0a 8c e8 80 88 46 0a <65> ff 05 b9 d9 87 7e 45 31 c9 41 f7 c7 00 02 00 00 41 0f 94 c1 48 [ 728.774443][ C1] RSP: 0018:ffffc90000a189e0 EFLAGS: 00000086 [ 728.774460][ C1] RAX: 0000000000000001 RBX: ffffc90000a18a40 RCX: ffffffff817aafe4 [ 728.774474][ C1] RDX: 0000000000000000 RSI: ffffffff8c0aa620 RDI: ffffffff8c5edea0 [ 728.774489][ C1] RBP: ffffc90000a18b28 R08: ffffffff90185937 R09: 1ffffffff2030b26 [ 728.774503][ C1] R10: dffffc0000000000 R11: fffffbfff2030b27 R12: 1ffff92000143144 [ 728.774517][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000046 [ 728.774530][ C1] FS: 00007fef1d1576c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 728.774546][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.774559][ C1] CR2: 0000000020003c80 CR3: 00000000126e8000 CR4: 00000000003526f0 [ 728.774574][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 728.774585][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 728.774597][ C1] Call Trace: [ 728.774606][ C1] [ 728.774615][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 728.774641][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 728.774662][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 728.774684][ C1] ? nmi_handle+0x2a/0x5a0 [ 728.774716][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 728.774742][ C1] ? nmi_handle+0x14f/0x5a0 [ 728.774761][ C1] ? nmi_handle+0x2a/0x5a0 [ 728.774782][ C1] ? lock_acquire+0x1b0/0x550 [ 728.774799][ C1] ? default_do_nmi+0x63/0x160 [ 728.774821][ C1] ? exc_nmi+0x123/0x1f0 [ 728.774841][ C1] ? end_repeat_nmi+0xf/0x53 [ 728.774862][ C1] ? lock_acquire+0xd4/0x550 [ 728.774880][ C1] ? lock_acquire+0x1b0/0x550 [ 728.774899][ C1] ? lock_acquire+0x1b0/0x550 [ 728.774919][ C1] ? lock_acquire+0x1b0/0x550 [ 728.774937][ C1] [ 728.774943][ C1] [ 728.774952][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 728.774971][ C1] ? __lock_acquire+0x1397/0x2100 [ 728.774999][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 728.775023][ C1] ? debug_object_activate+0x17f/0x580 [ 728.775051][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 728.775080][ C1] debug_object_activate+0x17f/0x580 [ 728.775108][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 728.775135][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 728.775161][ C1] ? advance_sched+0xa02/0xca0 [ 728.775186][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 728.775209][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 728.775241][ C1] enqueue_hrtimer+0x30/0x3c0 [ 728.775269][ C1] __hrtimer_run_queues+0x6cb/0xd30 [ 728.775302][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 728.775325][ C1] ? sched_clock+0x4a/0x70 [ 728.775351][ C1] ? read_tsc+0x9/0x20 [ 728.775375][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 728.775398][ C1] hrtimer_interrupt+0x403/0xa40 [ 728.775433][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 728.775456][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 728.775483][ C1] [ 728.775489][ C1] [ 728.775496][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 728.775514][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 728.775539][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4a f9 b6 f5 48 89 df e8 82 40 b8 f5 e8 bd 4e e3 f5 fb bf 01 00 00 00 a2 a5 a9 f5 65 8b 05 e3 f6 3f 74 85 c0 74 06 5b c3 cc cc cc cc [ 728.775554][ C1] RSP: 0018:ffffc9000bbe7d00 EFLAGS: 00000286 [ 728.775570][ C1] RAX: 8312faed37b9c400 RBX: ffff88807bea1488 RCX: ffffffff9a378903 [ 728.775583][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001 [ 728.775596][ C1] RBP: 00000000ffffff83 R08: ffffffff90185937 R09: 1ffffffff2030b26 [ 728.775609][ C1] R10: dffffc0000000000 R11: fffffbfff2030b27 R12: ffff88807bea1400 [ 728.775623][ C1] R13: 7fffffffffffffff R14: 0000000000000003 R15: ffff88807bea1480 [ 728.775645][ C1] do_timerfd_settime+0xccf/0xfb0 [ 728.775672][ C1] __x64_sys_timerfd_settime+0x16f/0x220 [ 728.775702][ C1] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 728.775736][ C1] ? do_syscall_64+0x100/0x230 [ 728.775753][ C1] ? do_syscall_64+0xb6/0x230 [ 728.775771][ C1] do_syscall_64+0xf3/0x230 [ 728.775787][ C1] ? clear_bhb_loop+0x35/0x90 [ 728.775806][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.775833][ C1] RIP: 0033:0x7fef1c385d29 [ 728.775851][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.775866][ C1] RSP: 002b:00007fef1d157038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 728.775884][ C1] RAX: ffffffffffffffda RBX: 00007fef1c575fa0 RCX: 00007fef1c385d29 [ 728.775897][ C1] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 728.775909][ C1] RBP: 00007fef1c401b08 R08: 0000000000000000 R09: 0000000000000000 [ 728.775920][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.775931][ C1] R13: 0000000000000000 R14: 00007fef1c575fa0 R15: 00007ffec4ecacb8 [ 728.775952][ C1] [ 728.776343][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g49613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 729.319972][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=39787 [ 729.327890][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g49613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 729.339322][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 729.349321][ C0] rcu: RCU grace-period kthread stack dump: [ 729.355321][ C0] task:rcu_preempt state:I stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 729.365545][ C0] Call Trace: [ 729.368884][ C0] [ 729.371848][ C0] __schedule+0x17fb/0x4be0 [ 729.376422][ C0] ? __pfx___schedule+0x10/0x10 [ 729.381316][ C0] ? __pfx_lock_release+0x10/0x10 [ 729.386381][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 729.392817][ C0] ? schedule+0x90/0x320 [ 729.397098][ C0] schedule+0x14b/0x320 [ 729.401315][ C0] schedule_timeout+0x15a/0x290 [ 729.406197][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 729.411603][ C0] ? __pfx_process_timeout+0x10/0x10 [ 729.416930][ C0] ? prepare_to_swait_event+0x330/0x350 [ 729.422520][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 729.427410][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 729.432656][ C0] ? rcu_gp_init+0x1256/0x1630 [ 729.437544][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 729.442604][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 729.448533][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 729.453848][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 729.459784][ C0] ? finish_swait+0xd4/0x1e0 [ 729.464417][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 729.469043][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 729.474269][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 729.480200][ C0] ? __kthread_parkme+0x169/0x1d0 [ 729.485258][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 729.490526][ C0] kthread+0x2f0/0x390 [ 729.494642][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 729.499912][ C0] ? __pfx_kthread+0x10/0x10 [ 729.504538][ C0] ret_from_fork+0x4b/0x80 [ 729.508985][ C0] ? __pfx_kthread+0x10/0x10 [ 729.513604][ C0] ret_from_fork_asm+0x1a/0x30 [ 729.518418][ C0] [ 729.521940][ C0] vkms_vblank_simulate: vblank timer overrun