last executing test programs: 11.978579368s ago: executing program 2 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800090300000000000000000a0000000000000b0000010008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c0016800800010004"], 0x38}}, 0x1000c840) 10.374507946s ago: executing program 2 (id=897): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x1b9e83, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$ax25(r1, 0x0, 0x0) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x400, 0x3d8, 0x3d8, 0x400, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xb3c738a26429eda, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0xc1, 0x3ff, 0x1000, 0x9, 0x9, 0x6, 0x7ff, 0x8, 0x945, 0x1, 0x6, 0x9, 0x632, 0x8, 0x3], 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100001040000000000000000", @ANYBLOB=']'], 0x50}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400001802907800000000e000000211009078e0001002000100276d32220000000000"], 0x0) socket(0x10, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r4, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80440, 0x0) 8.112025285s ago: executing program 2 (id=903): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x1b, 0x0, 0x0) r2 = getpid() sched_setaffinity(r2, 0x5f, &(0x7f0000000240)=0x1002) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x10000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = io_uring_setup(0xf0b, &(0x7f000000c480)={0x0, 0x4e3f, 0x1000, 0x1ffff, 0x373}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0b0f"], 0xe) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r3], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13131, 0x20100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x200ac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x404000, 0x309) 6.366915845s ago: executing program 4 (id=910): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.186034299s ago: executing program 1 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x5297, &(0x7f0000000000)={0x0, 0xcced, 0x2000, 0x1, 0x312}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = socket(0x1f, 0xa, 0x2) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x5, 0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000040)={0x0, 0x8001, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, 0x0, 0x40800) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vim2m(&(0x7f0000000340), 0xff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000700)={0x0, 0x5, 0x1, {0x1, @win={{0x5, 0x5, 0x7b, 0x80000001}, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x2000000000000109, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRES16=r8], 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r4, 0x0, 0xfffffffffffffcfc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0xffb4}], 0x1}, 0x20000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 5.950029602s ago: executing program 1 (id=913): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8, 0x400) dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x7f) 5.879872085s ago: executing program 3 (id=914): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x1b9e83, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$ax25(r1, 0x0, 0x0) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x400, 0x3d8, 0x3d8, 0x400, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xb3c738a26429eda, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0xc1, 0x3ff, 0x1000, 0x9, 0x9, 0x6, 0x7ff, 0x8, 0x945, 0x1, 0x6, 0x9, 0x632, 0x8, 0x3], 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100001040000000000000000", @ANYBLOB=']'], 0x50}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400001802907800000000e000000211009078e0001002000100276d32220000000000"], 0x0) socket(0x10, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r4, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80440, 0x0) 5.819420286s ago: executing program 2 (id=916): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x1, 0x5, 0x4, 0x1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = semget$private(0x0, 0x0, 0x587) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2b, &(0x7f0000002640), 0x42) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000000000000a001000"/192], 0x108}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000500)="83c08756543e88c795692d6a315903778634f00c64b3bfccd038d47d920c357973beeb555a5c520739c77e", &(0x7f0000000540)=""/31}, 0x20) semop(r4, &(0x7f0000000240)=[{0x4, 0x4, 0x460f613af7347e4b}, {0x4, 0x0, 0x38c652153765b23a}], 0x2) semctl$SETVAL(r4, 0x2, 0x8, 0x0) close(0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x2}) 5.682357217s ago: executing program 0 (id=917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xf6, 0x1ff}) fcntl$lock(r0, 0x25, &(0x7f0000000280)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="a425e2f1a54d24f15241313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003a40)={0x18, 0x2, 0x2, 0x188a53d81526cda5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000090) 4.251268023s ago: executing program 0 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) open$dir(&(0x7f0000000040)='./file0\x00', 0x141041, 0x10) creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x5b, 0x7, 0x7, 0x8, 0xd, 0x2}, 0xc) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r5, 0x0, 0x0) setreuid(0xee01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000740)=""/205, 0xcd}], 0x1, &(0x7f0000000280)=""/25, 0x19}, 0x10040) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.250507875s ago: executing program 2 (id=919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.208002682s ago: executing program 3 (id=920): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4008af00, &(0x7f0000001980)=0x1) 3.594612324s ago: executing program 3 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x79, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x18, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x2000000, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008001600c053000018000180140002006e657464657673696d3000000000000008001700365e0000080015"], 0x44}}, 0x0) 3.537243377s ago: executing program 3 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x72f8, 0x13580, 0xfffffffc}, &(0x7f0000000040), &(0x7f00000001c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x26, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x26}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 3.495231845s ago: executing program 4 (id=923): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r0, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) 3.442441348s ago: executing program 3 (id=924): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) open$dir(&(0x7f0000000040)='./file0\x00', 0x141041, 0x10) creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x5b, 0x7, 0x7, 0x8, 0xd, 0x2}, 0xc) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r5, 0x0, 0x0) setreuid(0xee01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000740)=""/205, 0xcd}], 0x1, &(0x7f0000000280)=""/25, 0x19}, 0x10040) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) 3.352840948s ago: executing program 1 (id=925): syz_init_net_socket$rose(0xb, 0x5, 0x0) geteuid() bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setfsuid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffdea, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040804}], 0x1, 0x40800) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008048) sendmsg$NFT_BATCH(r4, 0x0, 0x4008045) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1820, &(0x7f00000000c0)={[], [{@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}]}) 3.3405604s ago: executing program 4 (id=926): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x1b, 0x0, 0x0) r2 = getpid() sched_setaffinity(r2, 0x5f, &(0x7f0000000240)=0x1002) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x10000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = io_uring_setup(0xf0b, &(0x7f000000c480)={0x0, 0x4e3f, 0x1000, 0x1ffff, 0x373}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0b0f"], 0xe) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r3], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13131, 0x20100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x200ac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x404000, 0x309) 2.545967724s ago: executing program 0 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r2, @ANYBLOB="08009f0003000000080026006c090000"], 0x2c}}, 0x4018850) 2.3099699s ago: executing program 4 (id=928): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x1b, 0x0, 0x0) r2 = getpid() sched_setaffinity(r2, 0x5f, &(0x7f0000000240)=0x1002) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x10000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = io_uring_setup(0xf0b, &(0x7f000000c480)={0x0, 0x4e3f, 0x1000, 0x1ffff, 0x373}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0b0f"], 0xe) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r3], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13131, 0x20100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x200ac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x404000, 0x309) 2.309333992s ago: executing program 1 (id=929): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgid(0xffffffffffffffff) sched_setattr(r0, &(0x7f00000005c0)={0x38, 0x0, 0x10000030, 0x2f, 0x8, 0x5, 0x8, 0xfffffffffffffff7, 0xf3, 0x3}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='jbd2_checkpoint\x00', r5}, 0xfffffffffffffe26) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x19, 0x100, &(0x7f00000000c0)="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"}) 2.174580936s ago: executing program 0 (id=930): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x1, 0x5, 0x4, 0x1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = semget$private(0x0, 0x0, 0x587) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2b, &(0x7f0000002640), 0x42) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000000000000a001000"/192], 0x108}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000500)="83c08756543e88c795692d6a315903778634f00c64b3bfccd038d47d920c357973beeb555a5c520739c77e", &(0x7f0000000540)=""/31}, 0x20) semop(r4, &(0x7f0000000240)=[{0x4, 0x4, 0x460f613af7347e4b}, {0x4, 0x0, 0x38c652153765b23a}], 0x2) semctl$SETVAL(r4, 0x2, 0x8, 0x0) close(0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x2}) 2.007072848s ago: executing program 4 (id=931): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4008af00, &(0x7f0000001980)=0x1) 1.047776224s ago: executing program 1 (id=932): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x2688c3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r4 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000980)={0xb, @win={{}, 0x8, 0x0, 0x0, 0x0, 0x0}}) creat(0x0, 0xe5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(r5, &(0x7f0000000000)='U', 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$kcm(0x10, 0x2, 0x0) 1.02882678s ago: executing program 0 (id=933): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 974.660556ms ago: executing program 4 (id=934): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 973.853818ms ago: executing program 2 (id=935): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0003000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff000000083ee3097600000000000000", @ANYBLOB='*', @ANYRES16, @ANYRES64=0x0]) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x61ca, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000001000)=""/193, 0xc1}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000f00)=""/73, 0x49}, 0x1}], 0x2, 0x40012020, 0x0) iopl(0x3) mmap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x2000008, 0x80010, r1, 0x3000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r1, 0x0, 0xa9, 0x1000, &(0x7f0000000380)="f71e7baf30ff8f018a1ed8b75db4867093df7bb048b4e8f1da2aa2861d57c616159375ce9871897bda5789cc472db371d950b84cdd25a7cbae9e90ef1d188dbbd193af9aae65cc484412e32ae334bfd1cce7485da449c269360587df6180ed4d73588ecc9184784324d0885193eb230cc57c9095718d987ec7260afa8ea827eb612f0d72b13b23f43120d1cf8fc17b84d1bc068a91c5e1fa6008dbf7b938e132cd04b51fd7c85cf9f4", &(0x7f0000001680)=""/4096, 0x9, 0x0, 0x0, 0xf3, &(0x7f00000001c0), &(0x7f0000000780)="562d56dca27b5a072b6c945b850587a0d43fe356bb33dc7f6ea1536ee641728f2576481f9aa77ca9732da60151576afe1509fca51f770e9f58cc7b1944ef0bed81b52fbe1f5d56de5fd136ae5e43179fc86f1f33cb687f2b485e085049185e6ac18065ca94516f0e1cf4e2119c4da2536048d62e479bc4c36bd98c932bf5c50d5f3498c0cf44f40b697ed88d01740c214b1de0abb7ac45bc521f3520acfa5caf35986dc89930d0c6fca133ffdb1db95b19b49deb0bff1734fe07455192685a24f5698c2cf6d4987bf5ca2c47a337eff3aeaf86f3b8f731df6c493b260a0a708991ab751c980a1ffecb4d59693daef710cf97f0", 0x4, 0x0, 0x4}, 0x50) 847.900339ms ago: executing program 0 (id=936): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, &(0x7f0000000000)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000700), 0x10000, 0xb5c21415486bcbc2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 712.691372ms ago: executing program 3 (id=937): socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 0s ago: executing program 1 (id=938): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, &(0x7f0000000000)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000700), 0x10000, 0xb5c21415486bcbc2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x1f87, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): _raw_write_lock+0x14a/0x4f0 [ 215.701927][ T7411] kvm_vcpu_ioctl+0xa24/0x1030 [ 215.701958][ T7411] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 215.701985][ T7411] ? __lock_acquire+0xad5/0xd80 [ 215.702018][ T7411] ? __asan_memset+0x23/0x50 [ 215.702039][ T7411] ? smack_file_ioctl+0x361/0x3b0 [ 215.702055][ T7411] ? __pfx_smack_file_ioctl+0x10/0x10 [ 215.702073][ T7411] ? __fget_files+0x2a/0x420 [ 215.702093][ T7411] ? __fget_files+0x2a/0x420 [ 215.702113][ T7411] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 215.702132][ T7411] __se_sys_ioctl+0xf1/0x160 [ 215.702156][ T7411] do_syscall_64+0xf3/0x230 [ 215.702177][ T7411] ? clear_bhb_loop+0x45/0xa0 [ 215.702194][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.702208][ T7411] RIP: 0033:0x7f8b64b8d169 [ 215.702221][ T7411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.702234][ T7411] RSP: 002b:00007f8b65a99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.702251][ T7411] RAX: ffffffffffffffda RBX: 00007f8b64da5fa0 RCX: 00007f8b64b8d169 [ 215.702262][ T7411] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 215.702270][ T7411] RBP: 00007f8b65a99090 R08: 0000000000000000 R09: 0000000000000000 [ 215.702280][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.702289][ T7411] R13: 0000000000000000 R14: 00007f8b64da5fa0 R15: 00007ffd353bb878 [ 215.702307][ T7411] [ 215.703244][ T7411] syz.4.434: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 216.146376][ T5829] Bluetooth: hci2: command 0x206a tx timeout [ 216.154977][ T7411] CPU: 0 UID: 0 PID: 7411 Comm: syz.4.434 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 216.155010][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.155024][ T7411] Call Trace: [ 216.155033][ T7411] [ 216.155041][ T7411] dump_stack_lvl+0x241/0x360 [ 216.155077][ T7411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.155107][ T7411] ? __pfx__printk+0x10/0x10 [ 216.155133][ T7411] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 216.155163][ T7411] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 216.155192][ T7411] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 216.155222][ T7411] warn_alloc+0x27c/0x410 [ 216.155258][ T7411] ? __pfx_warn_alloc+0x10/0x10 [ 216.155298][ T7411] ? __get_vm_area_node+0x280/0x2d0 [ 216.155333][ T7411] __vmalloc_node_range_noprof+0x36e/0x1390 [ 216.155364][ T7411] ? mod_objcg_state+0x127/0x930 [ 216.155402][ T7411] ? percpu_ref_get_many+0x19/0x140 [ 216.155429][ T7411] ? percpu_ref_get_many+0x19/0x140 [ 216.155454][ T7411] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 216.155494][ T7411] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.155526][ T7411] ? rcu_is_watching+0x15/0xb0 [ 216.155549][ T7411] ? arch_dup_task_struct+0x5a/0xe0 [ 216.155572][ T7411] ? __asan_memcpy+0x40/0x70 [ 216.155606][ T7411] dup_task_struct+0x444/0x8c0 [ 216.155626][ T7411] ? copy_process+0x5dc/0x3d10 [ 216.155645][ T7411] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.155680][ T7411] copy_process+0x5dc/0x3d10 [ 216.155730][ T7411] ? __pfx_copy_process+0x10/0x10 [ 216.155756][ T7411] ? __raw_spin_lock_init+0x45/0x100 [ 216.155790][ T7411] vhost_task_create+0x244/0x320 [ 216.155818][ T7411] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 216.155841][ T7411] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 216.155865][ T7411] ? __pfx_vhost_task_create+0x10/0x10 [ 216.155892][ T7411] ? stack_trace_save+0x11a/0x1d0 [ 216.155927][ T7411] ? __pfx_vhost_task_fn+0x10/0x10 [ 216.155961][ T7411] ? kasan_save_track+0x51/0x80 [ 216.155980][ T7411] ? kasan_save_free_info+0x40/0x50 [ 216.156006][ T7411] ? __kasan_slab_free+0x59/0x70 [ 216.156026][ T7411] ? kfree+0x198/0x430 [ 216.156048][ T7411] ? tomoyo_path_number_perm+0x5fd/0x790 [ 216.156071][ T7411] ? security_file_ioctl+0xc6/0x2a0 [ 216.156100][ T7411] kvm_mmu_post_init_vm+0x14e/0x2c0 [ 216.156126][ T7411] kvm_arch_vcpu_ioctl_run+0xed/0x1910 [ 216.156160][ T7411] ? __lock_acquire+0xad5/0xd80 [ 216.156195][ T7411] ? __mutex_trylock_common+0x184/0x2e0 [ 216.156223][ T7411] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 216.156255][ T7411] ? __pfx___mutex_trylock_common+0x10/0x10 [ 216.156284][ T7411] ? rcu_is_watching+0x15/0xb0 [ 216.156308][ T7411] ? look_up_lock_class+0x7b/0x170 [ 216.156339][ T7411] ? register_lock_class+0x54/0x330 [ 216.156376][ T7411] ? __lock_acquire+0xad5/0xd80 [ 216.156412][ T7411] ? do_raw_write_lock+0x14a/0x4f0 [ 216.156455][ T7411] kvm_vcpu_ioctl+0xa24/0x1030 [ 216.156488][ T7411] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 216.156514][ T7411] ? __lock_acquire+0xad5/0xd80 [ 216.156549][ T7411] ? __asan_memset+0x23/0x50 [ 216.156579][ T7411] ? smack_file_ioctl+0x361/0x3b0 [ 216.156603][ T7411] ? __pfx_smack_file_ioctl+0x10/0x10 [ 216.156631][ T7411] ? __fget_files+0x2a/0x420 [ 216.156662][ T7411] ? __fget_files+0x2a/0x420 [ 216.156699][ T7411] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 216.156730][ T7411] __se_sys_ioctl+0xf1/0x160 [ 216.156764][ T7411] do_syscall_64+0xf3/0x230 [ 216.156794][ T7411] ? clear_bhb_loop+0x45/0xa0 [ 216.156819][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.156841][ T7411] RIP: 0033:0x7f8b64b8d169 [ 216.156859][ T7411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.156878][ T7411] RSP: 002b:00007f8b65a99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.156902][ T7411] RAX: ffffffffffffffda RBX: 00007f8b64da5fa0 RCX: 00007f8b64b8d169 [ 216.156918][ T7411] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 216.156932][ T7411] RBP: 00007f8b65a99090 R08: 0000000000000000 R09: 0000000000000000 [ 216.156945][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.156958][ T7411] R13: 0000000000000000 R14: 00007f8b64da5fa0 R15: 00007ffd353bb878 [ 216.156985][ T7411] [ 216.157033][ T7411] Mem-Info: [ 216.227012][ T56] Bluetooth: hci1: command 0x206a tx timeout [ 216.239177][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 216.244106][ T5829] Bluetooth: hci4: command 0x206a tx timeout [ 216.466960][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801293d400: rx timeout, send abort [ 216.484626][ T7411] active_anon:3179 inactive_anon:4765 isolated_anon:0 [ 216.484626][ T7411] active_file:13618 inactive_file:36260 isolated_file:0 [ 216.484626][ T7411] unevictable:768 dirty:233 writeback:0 [ 216.484626][ T7411] slab_reclaimable:9741 slab_unreclaimable:99136 [ 216.484626][ T7411] mapped:31313 shmem:4306 pagetables:943 [ 216.484626][ T7411] sec_pagetables:0 bounce:0 [ 216.484626][ T7411] kernel_misc_reclaimable:0 [ 216.484626][ T7411] free:1323499 free_pcp:792 free_cma:0 [ 216.490955][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801293d400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.678542][ T7411] Node 0 active_anon:10716kB inactive_anon:19060kB active_file:54400kB inactive_file:145040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125952kB dirty:932kB writeback:0kB shmem:13688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11364kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no [ 216.774761][ T7423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.207174][ T7411] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 217.261707][ T7411] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.312464][ T7411] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 217.320309][ T7411] Node 0 DMA32 free:1380940kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:6544kB inactive_anon:19076kB active_file:54124kB inactive_file:144988kB unevictable:1536kB writepending:932kB present:3129332kB managed:2550048kB mlocked:0kB bounce:0kB free_pcp:2648kB local_pcp:1468kB free_cma:0kB [ 217.441864][ T7411] lowmem_reserve[]: 0 0 0 0 0 [ 217.454047][ T7411] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:276kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.492156][ T7411] lowmem_reserve[]: 0 0 0 0 0 [ 217.492214][ T7411] Node 1 Normal free:3905004kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.492272][ T7411] lowmem_reserve[]: 0 0 0 0 0 [ 217.492319][ T7411] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.492515][ T7411] Node 0 DMA32: 281*4kB (ME) 299*8kB (ME) 530*16kB (UME) 633*32kB (UME) 468*64kB (UME) 38*128kB (UME) 10*256kB (UME) 5*512kB (ME) 5*1024kB (UME) 4*2048kB (M) 318*4096kB (UM) = 1388028kB [ 217.492731][ T7411] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 217.492856][ T7411] Node 1 Normal: 223*4kB (UME) 56*8kB (UME) 43*16kB (UME) 200*32kB (UME) 82*64kB (UME) 31*128kB (UME) 7*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 4*2048kB (UE) 944*4096kB (ME) = 3905004kB [ 217.493071][ T7411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.493091][ T7411] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.493109][ T7411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.493128][ T7411] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.493146][ T7411] 51724 total pagecache pages [ 217.493156][ T7411] 0 pages in swap cache [ 217.493166][ T7411] Free swap = 124668kB [ 217.493175][ T7411] Total swap = 124996kB [ 217.493186][ T7411] 2097051 pages RAM [ 217.493195][ T7411] 0 pages HighMem/MovableOnly [ 217.493204][ T7411] 427815 pages reserved [ 217.493213][ T7411] 0 pages cma reserved [ 217.601317][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.653007][ T56] Bluetooth: hci2: command 0x206a tx timeout [ 218.653057][ T56] Bluetooth: hci1: command 0x206a tx timeout [ 218.653089][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 218.653119][ T56] Bluetooth: hci4: command 0x206a tx timeout [ 218.667007][ T7432] random: crng reseeded on system resumption [ 218.926333][ T7443] FAULT_INJECTION: forcing a failure. [ 218.926333][ T7443] name failslab, interval 1, probability 0, space 0, times 0 [ 218.926370][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.0.441 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 218.926395][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.926406][ T7443] Call Trace: [ 218.926414][ T7443] [ 218.926421][ T7443] dump_stack_lvl+0x241/0x360 [ 218.926455][ T7443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.926500][ T7443] ? __pfx__printk+0x10/0x10 [ 218.926528][ T7443] ? __pfx___might_resched+0x10/0x10 [ 218.926554][ T7443] should_fail_ex+0x424/0x570 [ 218.926584][ T7443] should_failslab+0xac/0x100 [ 218.926609][ T7443] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 218.926634][ T7443] ? __alloc_skb+0x1c2/0x480 [ 218.926667][ T7443] __alloc_skb+0x1c2/0x480 [ 218.926693][ T7443] ? __pfx___alloc_skb+0x10/0x10 [ 218.926715][ T7443] ? __pfx_inet6_rtm_getroute+0x10/0x10 [ 218.926747][ T7443] ? netlink_ack_tlv_len+0x6e/0x200 [ 218.926768][ T7443] netlink_ack+0x147/0xa70 [ 218.926784][ T7443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.926809][ T7443] ? ref_tracker_free+0x63e/0x7e0 [ 218.926843][ T7443] netlink_rcv_skb+0x296/0x480 [ 218.926862][ T7443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.926883][ T7443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.926916][ T7443] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.926937][ T7443] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.926957][ T7443] netlink_unicast+0x7f8/0x9a0 [ 218.926992][ T7443] ? __pfx_netlink_unicast+0x10/0x10 [ 218.927022][ T7443] ? skb_put+0x114/0x1f0 [ 218.927048][ T7443] netlink_sendmsg+0x8c3/0xcd0 [ 218.927077][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.927106][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.927125][ T7443] __sock_sendmsg+0x221/0x270 [ 218.927158][ T7443] ____sys_sendmsg+0x523/0x860 [ 218.927190][ T7443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.927213][ T7443] ? __fget_files+0x2a/0x420 [ 218.927240][ T7443] ? __fget_files+0x2a/0x420 [ 218.927270][ T7443] __sys_sendmsg+0x271/0x360 [ 218.927299][ T7443] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.927361][ T7443] ? do_syscall_64+0xb6/0x230 [ 218.927412][ T7443] do_syscall_64+0xf3/0x230 [ 218.927439][ T7443] ? clear_bhb_loop+0x45/0xa0 [ 218.927463][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.927482][ T7443] RIP: 0033:0x7f0cde78d169 [ 218.927499][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.927517][ T7443] RSP: 002b:00007f0cdf66d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.927539][ T7443] RAX: ffffffffffffffda RBX: 00007f0cde9a5fa0 RCX: 00007f0cde78d169 [ 218.927554][ T7443] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 218.927566][ T7443] RBP: 00007f0cdf66d090 R08: 0000000000000000 R09: 0000000000000000 [ 218.927580][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.927592][ T7443] R13: 0000000000000000 R14: 00007f0cde9a5fa0 R15: 00007fff08e723f8 [ 218.927617][ T7443] [ 220.067517][ T7456] devtmpfs: Too few inodes for current use [ 220.181320][ T7430] tty tty24: ldisc open failed (-12), clearing slot 23 [ 220.230151][ T7450] tty tty2: ldisc open failed (-12), clearing slot 1 [ 220.257199][ T5951] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 220.490236][ T5951] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 220.508562][ T5951] usb 2-1: config 0 has no interface number 0 [ 220.685082][ T5951] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 220.708073][ T5951] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 220.723092][ T5951] usb 2-1: config 0 interface 255 has no altsetting 0 [ 220.731302][ T5951] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 220.740953][ T5829] Bluetooth: hci4: command 0x206a tx timeout [ 220.747217][ T5829] Bluetooth: hci1: command 0x206a tx timeout [ 220.918552][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.089328][ T5951] usb 2-1: config 0 descriptor?? [ 221.128743][ T5951] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 221.298809][ T7471] netlink: 'syz.4.449': attribute type 3 has an invalid length. [ 221.306666][ T7471] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.449'. [ 221.687748][ T7454] delete_channel: no stack [ 221.763122][ T7476] ucma_write: process 283 (syz.0.451) changed security contexts after opening file descriptor, this is not allowed. [ 221.859234][ T7474] Falling back ldisc for ttyS3. [ 222.169673][ T5951] usb 2-1: USB disconnect, device number 20 [ 222.747463][ T6019] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 222.815851][ T5831] Bluetooth: hci4: command 0x206a tx timeout [ 222.921782][ T6019] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 222.962485][ T6019] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.104434][ T6019] usb 1-1: config 0 has no interface number 0 [ 223.185283][ T6019] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 223.243330][ T6019] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 223.314357][ T6019] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 223.372791][ T6019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.414809][ T6019] usb 1-1: config 0 descriptor?? [ 223.452746][ T5879] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.474972][ T6019] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 223.567808][ T7505] FAULT_INJECTION: forcing a failure. [ 223.567808][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 223.580551][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.1.458 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 223.580580][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.580594][ T7505] Call Trace: [ 223.580601][ T7505] [ 223.580610][ T7505] dump_stack_lvl+0x241/0x360 [ 223.580644][ T7505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.580672][ T7505] ? __pfx__printk+0x10/0x10 [ 223.580702][ T7505] ? __pfx___might_resched+0x10/0x10 [ 223.580729][ T7505] should_fail_ex+0x424/0x570 [ 223.580761][ T7505] should_failslab+0xac/0x100 [ 223.580786][ T7505] kmem_cache_alloc_noprof+0x78/0x390 [ 223.580811][ T7505] ? prepare_creds+0x31/0x640 [ 223.580841][ T7505] prepare_creds+0x31/0x640 [ 223.580871][ T7505] lookup_user_key+0x37d/0x15b0 [ 223.580906][ T7505] ? __pfx_lookup_user_key+0x10/0x10 [ 223.580935][ T7505] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 223.580980][ T7505] __se_sys_add_key+0x300/0x4b0 [ 223.581016][ T7505] ? __pfx___se_sys_add_key+0x10/0x10 [ 223.581045][ T7505] ? __x64_sys_add_key+0x20/0xc0 [ 223.581075][ T7505] do_syscall_64+0xf3/0x230 [ 223.581104][ T7505] ? clear_bhb_loop+0x45/0xa0 [ 223.581128][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.581155][ T7505] RIP: 0033:0x7fb11218d169 [ 223.581173][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.581191][ T7505] RSP: 002b:00007fb10fff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 223.581213][ T7505] RAX: ffffffffffffffda RBX: 00007fb1123a6160 RCX: 00007fb11218d169 [ 223.581228][ T7505] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 223.581255][ T7505] RBP: 00007fb10fff6090 R08: fffffffffffffffe R09: 0000000000000000 [ 223.581270][ T7505] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 223.581283][ T7505] R13: 0000000000000000 R14: 00007fb1123a6160 R15: 00007ffc95cd0538 [ 223.581309][ T7505] [ 223.890897][ T5879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 223.902704][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 223.924279][ T5879] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 223.934393][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.942760][ T5879] usb 5-1: Product: syz [ 223.947567][ T5879] usb 5-1: Manufacturer: syz [ 223.952339][ T5879] usb 5-1: SerialNumber: syz [ 224.002550][ T5879] usb 5-1: config 0 descriptor?? [ 224.124073][ T7507] ip6erspan0: entered promiscuous mode [ 224.147037][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.180829][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.313109][ T5879] hso 5-1:0.0: Not our interface [ 224.318610][ T5879] usb-storage 5-1:0.0: USB Mass Storage device detected [ 224.319406][ T6019] usb 1-1: USB disconnect, device number 32 [ 224.332806][ T2966] usb 1-1: Failed to submit usb control message: -71 [ 224.372427][ T2966] usb 1-1: unable to send the bmi data to the device: -71 [ 224.385310][ T2966] usb 1-1: unable to get target info from device [ 224.392853][ T2966] usb 1-1: could not get target info (-71) [ 224.408323][ T2966] usb 1-1: could not probe fw (-71) [ 225.765296][ T7489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.883414][ T6019] usb 5-1: USB disconnect, device number 19 [ 226.495299][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 226.966113][ T5879] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 227.150339][ T5879] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 227.172588][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 227.244507][ T5879] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 227.292987][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.347758][ T5879] usb 2-1: Product: syz [ 227.393008][ T5879] usb 2-1: Manufacturer: syz [ 227.425299][ T5879] usb 2-1: SerialNumber: syz [ 227.566165][ T5879] usb 2-1: config 0 descriptor?? [ 227.592301][ T5879] hso 2-1:0.0: Not our interface [ 227.611539][ T5879] usb-storage 2-1:0.0: USB Mass Storage device detected [ 227.946109][ T5914] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 228.435723][ T5914] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 228.545797][ T5914] usb 1-1: config 0 has no interface number 0 [ 228.555752][ T5914] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 228.575920][ T5914] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 228.621420][ T5914] usb 1-1: config 0 interface 255 has no altsetting 0 [ 228.641114][ T5879] usb 2-1: USB disconnect, device number 21 [ 228.650143][ T5914] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 228.680420][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.711428][ T5914] usb 1-1: config 0 descriptor?? [ 228.730748][ T5914] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 228.874059][ T7559] ip6erspan0: entered promiscuous mode [ 228.941449][ T5914] usb 1-1: USB disconnect, device number 33 [ 229.080717][ T7531] delete_channel: no stack [ 229.318221][ T7565] capability: warning: `syz.3.478' uses deprecated v2 capabilities in a way that may be insecure [ 229.656891][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 229.661096][ T7568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.479'. [ 229.663067][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 230.367913][ T7577] bridge0: entered promiscuous mode [ 230.373305][ T7577] macvlan2: entered promiscuous mode [ 230.379718][ T7577] bridge0: port 3(macvlan2) entered blocking state [ 230.386409][ T7577] bridge0: port 3(macvlan2) entered disabled state [ 230.393031][ T7577] macvlan2: entered allmulticast mode [ 230.398463][ T7577] bridge0: entered allmulticast mode [ 230.417115][ T7577] macvlan2: left allmulticast mode [ 230.422279][ T7577] bridge0: left allmulticast mode [ 230.428111][ T7577] bridge0: left promiscuous mode [ 230.588957][ T7586] netlink: 116 bytes leftover after parsing attributes in process `syz.3.484'. [ 230.598542][ T7586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.484'. [ 230.685795][ T7586] netlink: 'syz.3.484': attribute type 7 has an invalid length. [ 230.693598][ T7586] netlink: 'syz.3.484': attribute type 5 has an invalid length. [ 230.693620][ T7586] netlink: 17 bytes leftover after parsing attributes in process `syz.3.484'. [ 231.146230][ T5904] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 231.420221][ T5904] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 231.510418][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 231.612722][ T7600] random: crng reseeded on system resumption [ 231.617277][ T5904] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 231.645866][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.663340][ T5904] usb 5-1: Product: syz [ 231.685747][ T5904] usb 5-1: Manufacturer: syz [ 231.694074][ T5904] usb 5-1: SerialNumber: syz [ 231.705960][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 231.732505][ T5904] usb 5-1: config 0 descriptor?? [ 231.767580][ T5904] hso 5-1:0.0: Not our interface [ 231.796143][ T5904] usb-storage 5-1:0.0: USB Mass Storage device detected [ 232.969706][ T5873] usb 5-1: USB disconnect, device number 20 [ 232.988975][ T7600] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 233.365932][ T5874] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 233.558603][ T5874] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 233.590270][ T5874] usb 4-1: config 0 has no interface number 0 [ 233.619763][ T5874] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 233.653726][ T5874] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 233.669627][ T5874] usb 4-1: config 0 interface 255 has no altsetting 0 [ 233.682380][ T5874] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 233.701837][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.722540][ T5874] usb 4-1: config 0 descriptor?? [ 233.740603][ T5874] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 233.955166][ T5874] usb 4-1: USB disconnect, device number 15 [ 234.037502][ T7626] delete_channel: no stack [ 234.100657][ T7663] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 234.182764][ T7663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.293989][ T7668] bond1: (slave ip6gretap1): making interface the new active one [ 234.321209][ T7668] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 234.364117][ T7663] vlan2: entered promiscuous mode [ 234.395816][ T7663] bond1: entered promiscuous mode [ 234.401185][ T7663] ip6gretap1: entered promiscuous mode [ 234.407631][ T7663] vlan2: entered allmulticast mode [ 234.413001][ T7663] bond1: entered allmulticast mode [ 234.428707][ T7663] ip6gretap1: entered allmulticast mode [ 235.855439][ T7698] bridge0: entered promiscuous mode [ 235.862974][ T7698] macvlan2: entered promiscuous mode [ 235.890406][ T7698] bridge0: port 3(macvlan2) entered blocking state [ 235.898103][ T7698] bridge0: port 3(macvlan2) entered disabled state [ 235.907875][ T7698] macvlan2: entered allmulticast mode [ 235.913564][ T7698] bridge0: entered allmulticast mode [ 235.921597][ T5873] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 235.973095][ T7698] macvlan2: left allmulticast mode [ 235.979098][ T7698] bridge0: left allmulticast mode [ 236.000238][ T7698] bridge0: left promiscuous mode [ 236.327340][ T5873] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 236.511490][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 237.334822][ T5873] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 237.455059][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.581022][ T5873] usb 1-1: Product: syz [ 237.601643][ T5873] usb 1-1: Manufacturer: syz [ 237.628808][ T5873] usb 1-1: SerialNumber: syz [ 237.865775][ T5873] usb 1-1: config 0 descriptor?? [ 237.981078][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 238.024691][ T5873] hso 1-1:0.0: Not our interface [ 238.033917][ T5873] usb-storage 1-1:0.0: USB Mass Storage device detected [ 238.385071][ T30] audit: type=1326 audit(1743343085.837:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 238.456965][ T5879] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 238.505941][ T7722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.512253][ T7721] overlayfs: missing 'lowerdir' [ 238.554725][ T30] audit: type=1326 audit(1743343085.867:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 238.675900][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 238.695550][ T30] audit: type=1326 audit(1743343085.867:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 238.716989][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.717240][ T5829] Bluetooth: hci4: command 0x206a tx timeout [ 238.888541][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.902454][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 238.919591][ T30] audit: type=1326 audit(1743343085.877:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 238.946485][ T30] audit: type=1326 audit(1743343085.877:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 238.967875][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.987834][ T30] audit: type=1326 audit(1743343085.887:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb11218f087 code=0x7ffc0000 [ 239.009499][ T5879] usb 3-1: New USB device found, idVendor=16d0, idProduct=32a9, bcdDevice=30.52 [ 239.021484][ T5874] usb 1-1: USB disconnect, device number 34 [ 239.028590][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.040707][ T5879] usb 3-1: Product: syz [ 239.044925][ T5879] usb 3-1: Manufacturer: syz [ 239.049871][ T5879] usb 3-1: SerialNumber: syz [ 239.056513][ T5879] usb 3-1: config 0 descriptor?? [ 239.061815][ T30] audit: type=1326 audit(1743343085.887:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb11218effc code=0x7ffc0000 [ 239.082942][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.114282][ T30] audit: type=1326 audit(1743343085.907:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb11218ef34 code=0x7ffc0000 [ 239.137530][ T30] audit: type=1326 audit(1743343085.907:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb11218ef34 code=0x7ffc0000 [ 239.205202][ T30] audit: type=1326 audit(1743343085.907:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7720 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb11218bdca code=0x7ffc0000 [ 240.383439][ T7744] FAULT_INJECTION: forcing a failure. [ 240.383439][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 240.409090][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.4.519 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 240.409123][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.409137][ T7744] Call Trace: [ 240.409144][ T7744] [ 240.409152][ T7744] dump_stack_lvl+0x241/0x360 [ 240.409187][ T7744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.409215][ T7744] ? __pfx__printk+0x10/0x10 [ 240.409244][ T7744] ? __pfx___might_resched+0x10/0x10 [ 240.409272][ T7744] should_fail_ex+0x424/0x570 [ 240.409304][ T7744] should_failslab+0xac/0x100 [ 240.409329][ T7744] __kmalloc_noprof+0xdf/0x4d0 [ 240.409353][ T7744] ? safesetid_security_capable+0xb2/0x1d0 [ 240.409377][ T7744] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 240.409410][ T7744] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 240.409443][ T7744] genl_rcv_msg+0x819/0xf00 [ 240.409475][ T7744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.409498][ T7744] ? __dev_queue_xmit+0x1780/0x3f60 [ 240.409532][ T7744] ? kasan_save_track+0x3f/0x80 [ 240.409549][ T7744] ? __kasan_slab_alloc+0x66/0x80 [ 240.409574][ T7744] ? do_syscall_64+0xf3/0x230 [ 240.409614][ T7744] ? __lock_acquire+0xad5/0xd80 [ 240.409647][ T7744] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 240.409685][ T7744] netlink_rcv_skb+0x208/0x480 [ 240.409705][ T7744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.409731][ T7744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.409764][ T7744] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.409788][ T7744] genl_rcv+0x28/0x40 [ 240.409811][ T7744] netlink_unicast+0x7f8/0x9a0 [ 240.409845][ T7744] ? __pfx_netlink_unicast+0x10/0x10 [ 240.409876][ T7744] ? skb_put+0x114/0x1f0 [ 240.409902][ T7744] netlink_sendmsg+0x8c3/0xcd0 [ 240.409932][ T7744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.409961][ T7744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.409979][ T7744] __sock_sendmsg+0x221/0x270 [ 240.410013][ T7744] ____sys_sendmsg+0x523/0x860 [ 240.410045][ T7744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.410074][ T7744] ? __fget_files+0x2a/0x420 [ 240.410101][ T7744] ? __fget_files+0x2a/0x420 [ 240.410132][ T7744] __sys_sendmsg+0x271/0x360 [ 240.410161][ T7744] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.410221][ T7744] ? do_syscall_64+0xb6/0x230 [ 240.410251][ T7744] do_syscall_64+0xf3/0x230 [ 240.410278][ T7744] ? clear_bhb_loop+0x45/0xa0 [ 240.410301][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.410320][ T7744] RIP: 0033:0x7f8b64b8d169 [ 240.410338][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.410355][ T7744] RSP: 002b:00007f8b65a99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.410377][ T7744] RAX: ffffffffffffffda RBX: 00007f8b64da5fa0 RCX: 00007f8b64b8d169 [ 240.410392][ T7744] RDX: 0000000004004004 RSI: 00002000000005c0 RDI: 0000000000000007 [ 240.410405][ T7744] RBP: 00007f8b65a99090 R08: 0000000000000000 R09: 0000000000000000 [ 240.410418][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.410430][ T7744] R13: 0000000000000000 R14: 00007f8b64da5fa0 R15: 00007ffd353bb878 [ 240.410456][ T7744] [ 240.960416][ T7755] input: syz1 as /devices/virtual/input/input13 [ 242.048936][ T5904] usb 3-1: USB disconnect, device number 15 [ 242.505913][ T5914] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 242.603472][ T7766] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 242.685914][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 242.750207][ T5914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.765723][ T5914] usb 2-1: config 0 has no interface number 0 [ 242.773750][ T5914] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.791662][ T5914] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.801080][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.818494][ T5914] usb 2-1: config 0 descriptor?? [ 242.838290][ T5914] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 242.876684][ T5830] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 242.884911][ T6019] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 242.995918][ T5873] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 243.027549][ T5830] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 243.036388][ T5830] usb 3-1: config 0 has no interface number 0 [ 243.043369][ T5830] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 243.044053][ T6019] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 243.065029][ T5830] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 243.079417][ T5830] usb 3-1: config 0 interface 255 has no altsetting 0 [ 243.087064][ T6019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.096298][ T5830] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 243.107162][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.116406][ T6019] usb 4-1: config 0 descriptor?? [ 243.127650][ T6019] cp210x 4-1:0.0: cp210x converter detected [ 243.135286][ T5830] usb 3-1: config 0 descriptor?? [ 243.143844][ T5830] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 243.165859][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 243.179112][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.191063][ T5874] usb 2-1: USB disconnect, device number 22 [ 243.204867][ T5873] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 243.236853][ T5873] usb 1-1: can't read configurations, error -71 [ 243.356424][ T5830] usb 3-1: USB disconnect, device number 16 [ 243.430076][ T7763] delete_channel: no stack [ 243.536796][ T6019] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 243.569872][ T6019] usb 4-1: cp210x converter now attached to ttyUSB0 [ 244.356574][ T5873] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 244.569080][ T5873] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 244.816679][ T7795] FAULT_INJECTION: forcing a failure. [ 244.816679][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.829927][ T7795] CPU: 1 UID: 0 PID: 7795 Comm: syz.4.532 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 244.829956][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.829982][ T7795] Call Trace: [ 244.829991][ T7795] [ 244.829999][ T7795] dump_stack_lvl+0x241/0x360 [ 244.830051][ T7795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.830079][ T7795] ? __pfx__printk+0x10/0x10 [ 244.830114][ T7795] should_fail_ex+0x424/0x570 [ 244.830147][ T7795] _copy_from_user+0x2d/0xb0 [ 244.830172][ T7795] copy_msghdr_from_user+0xb3/0x580 [ 244.830209][ T7795] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 244.830240][ T7795] ? __fget_files+0x2a/0x420 [ 244.830268][ T7795] ? __fget_files+0x2a/0x420 [ 244.830300][ T7795] __sys_sendmsg+0x20a/0x360 [ 244.830330][ T7795] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.830354][ T7795] ? trace_sched_exit_tp+0x3c/0x120 [ 244.830412][ T7795] ? __pfx___schedule+0x10/0x10 [ 244.830451][ T7795] ? do_syscall_64+0xb6/0x230 [ 244.830481][ T7795] do_syscall_64+0xf3/0x230 [ 244.830510][ T7795] ? clear_bhb_loop+0x45/0xa0 [ 244.830533][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.830559][ T7795] RIP: 0033:0x7f8b64b8d169 [ 244.830579][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.830596][ T7795] RSP: 002b:00007f8b65a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.830619][ T7795] RAX: ffffffffffffffda RBX: 00007f8b64da6160 RCX: 00007f8b64b8d169 [ 244.830635][ T7795] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000006 [ 244.830648][ T7795] RBP: 00007f8b65a57090 R08: 0000000000000000 R09: 0000000000000000 [ 244.830661][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.830674][ T7795] R13: 0000000000000000 R14: 00007f8b64da6160 R15: 00007ffd353bb878 [ 244.830700][ T7795] [ 245.341491][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 245.502615][ T5873] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 245.529889][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.540260][ T5873] usb 1-1: Product: syz [ 245.544646][ T5873] usb 1-1: Manufacturer: syz [ 245.550286][ T5873] usb 1-1: SerialNumber: syz [ 245.566648][ T5873] usb 1-1: config 0 descriptor?? [ 245.574754][ T5873] hso 1-1:0.0: Not our interface [ 245.583980][ T5873] usb-storage 1-1:0.0: USB Mass Storage device detected [ 246.191430][ T7805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.168862][ T5873] usb 1-1: USB disconnect, device number 36 [ 248.675510][ T7820] bridge0: entered promiscuous mode [ 248.682437][ T7820] macvlan2: entered promiscuous mode [ 248.704004][ T7820] bridge0: port 3(macvlan2) entered blocking state [ 248.713903][ T7820] bridge0: port 3(macvlan2) entered disabled state [ 248.724794][ T7820] macvlan2: entered allmulticast mode [ 248.730557][ T7820] bridge0: entered allmulticast mode [ 248.954679][ T7820] macvlan2: left allmulticast mode [ 248.960230][ T7820] bridge0: left allmulticast mode [ 248.976891][ T7820] bridge0: left promiscuous mode [ 249.824936][ T5874] usb 4-1: USB disconnect, device number 16 [ 249.865601][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.909376][ T5874] cp210x 4-1:0.0: device disconnected [ 249.949881][ T6019] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 250.198290][ T6019] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 250.229406][ T6019] usb 1-1: config 0 has no interface number 0 [ 250.256223][ T6019] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 250.317655][ T6019] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 250.506809][ T5874] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 250.758270][ T5874] usb 4-1: Invalid ep0 maxpacket: 64 [ 251.045849][ T5874] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 251.118766][ T6019] usb 1-1: config 0 interface 255 has no altsetting 0 [ 251.125640][ T6019] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 251.136251][ T6019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.156982][ T6019] usb 1-1: config 0 descriptor?? [ 251.164389][ T6019] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 251.189507][ T7857] FAULT_INJECTION: forcing a failure. [ 251.189507][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 251.203048][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.4.545 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 251.203077][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.203091][ T7857] Call Trace: [ 251.203099][ T7857] [ 251.203107][ T7857] dump_stack_lvl+0x241/0x360 [ 251.203142][ T7857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.203170][ T7857] ? __pfx__printk+0x10/0x10 [ 251.203200][ T7857] ? __pfx___might_resched+0x10/0x10 [ 251.203225][ T7857] should_fail_ex+0x424/0x570 [ 251.203256][ T7857] should_failslab+0xac/0x100 [ 251.203280][ T7857] __kmalloc_noprof+0xdf/0x4d0 [ 251.203304][ T7857] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 251.203332][ T7857] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 251.203363][ T7857] tomoyo_realpath_from_path+0xcf/0x5e0 [ 251.203400][ T7857] tomoyo_path_number_perm+0x245/0x790 [ 251.203426][ T7857] ? tomoyo_path_number_perm+0x215/0x790 [ 251.203451][ T7857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 251.203479][ T7857] ? ksys_write+0x24e/0x2d0 [ 251.203514][ T7857] ? __lock_acquire+0xad5/0xd80 [ 251.203560][ T7857] ? __fget_files+0x2a/0x420 [ 251.203585][ T7857] ? __fget_files+0x2a/0x420 [ 251.203613][ T7857] ? __fget_files+0x2a/0x420 [ 251.203641][ T7857] security_file_ioctl+0xc6/0x2a0 [ 251.203667][ T7857] __se_sys_ioctl+0x46/0x160 [ 251.203699][ T7857] do_syscall_64+0xf3/0x230 [ 251.203728][ T7857] ? clear_bhb_loop+0x45/0xa0 [ 251.203752][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.203772][ T7857] RIP: 0033:0x7f8b64b8d169 [ 251.203796][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.203814][ T7857] RSP: 002b:00007f8b65a99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.203836][ T7857] RAX: ffffffffffffffda RBX: 00007f8b64da5fa0 RCX: 00007f8b64b8d169 [ 251.203851][ T7857] RDX: 0000200000000080 RSI: 00000000000089e3 RDI: 0000000000000004 [ 251.203864][ T7857] RBP: 00007f8b65a99090 R08: 0000000000000000 R09: 0000000000000000 [ 251.203876][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.203888][ T7857] R13: 0000000000000000 R14: 00007f8b64da5fa0 R15: 00007ffd353bb878 [ 251.203913][ T7857] [ 251.203923][ T7857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.226050][ T5874] usb 4-1: Invalid ep0 maxpacket: 64 [ 251.245792][ T5830] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 251.329472][ T5874] usb usb4-port1: attempt power cycle [ 251.371741][ T6019] usb 1-1: USB disconnect, device number 37 [ 251.535976][ T5830] usb 3-1: device descriptor read/64, error -71 [ 251.540598][ T7829] delete_channel: no stack [ 251.735898][ T5874] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 251.780473][ T5874] usb 4-1: Invalid ep0 maxpacket: 64 [ 251.785883][ T5830] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 251.844723][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 251.844744][ T30] audit: type=1326 audit(1743343099.297:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 251.874502][ T30] audit: type=1326 audit(1743343099.307:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 251.896151][ T30] audit: type=1326 audit(1743343099.307:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11218bad0 code=0x7ffc0000 [ 251.918014][ T30] audit: type=1326 audit(1743343099.307:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 251.942310][ T30] audit: type=1326 audit(1743343099.307:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 251.942535][ T5874] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 251.971987][ T5830] usb 3-1: device descriptor read/64, error -71 [ 251.976391][ T5874] usb 4-1: Invalid ep0 maxpacket: 64 [ 251.978511][ T30] audit: type=1326 audit(1743343099.307:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 251.983840][ T5874] usb usb4-port1: unable to enumerate USB device [ 252.007182][ T30] audit: type=1326 audit(1743343099.307:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 252.041517][ T30] audit: type=1326 audit(1743343099.307:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 252.086116][ T5830] usb usb3-port1: attempt power cycle [ 252.105764][ T6019] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 252.290725][ T6019] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 252.302933][ T6019] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 252.331331][ T6019] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 252.344273][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.352332][ T6019] usb 5-1: Product: syz [ 252.357358][ T6019] usb 5-1: Manufacturer: syz [ 252.361976][ T6019] usb 5-1: SerialNumber: syz [ 252.369538][ T6019] usb 5-1: config 0 descriptor?? [ 252.375850][ T5874] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 252.376171][ T6019] hso 5-1:0.0: Not our interface [ 252.538591][ T5831] Bluetooth: hci2: command 0x206a tx timeout [ 252.648702][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.039535][ T5830] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 253.112035][ T5874] usb 2-1: config 0 has no interface number 0 [ 253.121035][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 253.132426][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 253.145789][ T5874] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.153891][ T6019] usb-storage 5-1:0.0: USB Mass Storage device detected [ 253.154919][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.193654][ T5874] usb 2-1: config 0 descriptor?? [ 253.197113][ T7878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.199526][ T7872] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 253.467311][ T5874] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 253.723557][ T5830] usb 3-1: device descriptor read/8, error -71 [ 253.772496][ T5874] usb 2-1: USB disconnect, device number 23 [ 253.802817][ T48] usb 5-1: USB disconnect, device number 21 [ 253.876942][ T7882] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.959768][ T7872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.552'. [ 254.565886][ T6019] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 254.848532][ T6019] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.872122][ T6019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.917135][ T6019] usb 1-1: config 0 descriptor?? [ 254.939796][ T6019] cp210x 1-1:0.0: cp210x converter detected [ 255.307401][ T7902] trusted_key: encrypted_key: insufficient parameters specified [ 255.748150][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.754667][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.044399][ T6019] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 256.052583][ T5914] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 256.100865][ T6019] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 256.117276][ T6019] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 256.159184][ T6019] usb 1-1: cp210x converter now attached to ttyUSB0 [ 256.226169][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 256.298927][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 256.325446][ T7910] netlink: 116 bytes leftover after parsing attributes in process `syz.1.560'. [ 256.339240][ T7910] netlink: 48 bytes leftover after parsing attributes in process `syz.1.560'. [ 256.403595][ T7910] netlink: 'syz.1.560': attribute type 7 has an invalid length. [ 256.411553][ T7910] netlink: 'syz.1.560': attribute type 5 has an invalid length. [ 256.419841][ T7910] netlink: 17 bytes leftover after parsing attributes in process `syz.1.560'. [ 256.867581][ T7911] netlink: 52 bytes leftover after parsing attributes in process `syz.4.561'. [ 256.880756][ T5914] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 256.903890][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 256.985100][ T5914] usb 4-1: Product: syz [ 257.005135][ T5914] usb 4-1: Manufacturer: syz [ 257.071890][ T5914] usb 4-1: SerialNumber: syz [ 257.136890][ T5914] usb 4-1: config 0 descriptor?? [ 258.079464][ T7894] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 258.109437][ T5914] usb 4-1: USB disconnect, device number 21 [ 258.884958][ T5914] usb 1-1: USB disconnect, device number 38 [ 258.911728][ T5914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.968419][ T5914] cp210x 1-1:0.0: device disconnected [ 259.648662][ T7929] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 259.915960][ T48] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 259.917292][ T5914] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 260.066861][ T7941] netlink: 'syz.1.570': attribute type 7 has an invalid length. [ 260.068472][ T48] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 260.086354][ T7941] netlink: 'syz.1.570': attribute type 5 has an invalid length. [ 260.094735][ T7941] netlink: 17 bytes leftover after parsing attributes in process `syz.1.570'. [ 260.144521][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 260.368315][ T48] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 260.380344][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.446927][ T48] usb 5-1: Product: syz [ 260.451155][ T48] usb 5-1: Manufacturer: syz [ 260.485803][ T48] usb 5-1: SerialNumber: syz [ 260.498492][ T48] usb 5-1: config 0 descriptor?? [ 260.507942][ T5914] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 260.514035][ T48] hso 5-1:0.0: Not our interface [ 260.528465][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.531793][ T48] usb-storage 5-1:0.0: USB Mass Storage device detected [ 260.564784][ T5914] usb 3-1: config 0 descriptor?? [ 260.576392][ T7945] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 260.582628][ T5914] cp210x 3-1:0.0: cp210x converter detected [ 260.584088][ T7945] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 260.624328][ T7945] nullb0: p2 start 1840217545 is beyond EOD, truncated [ 260.626780][ T7948] netlink: 52 bytes leftover after parsing attributes in process `syz.3.573'. [ 260.642539][ T7945] nullb0: p3 start 2781609279 is beyond EOD, truncated [ 260.663514][ T7945] nullb0: p4 start 2763479866 is beyond EOD, truncated [ 260.673206][ T7945] nullb0: p5 size 1576935424 extends beyond EOD, truncated [ 260.705620][ T7945] nullb0: p6 start 4255409061 is beyond EOD, truncated [ 260.742908][ T7945] nullb0: p7 start 1354594978 is beyond EOD, truncated [ 260.870212][ T7945] nullb0: p8 start 2203294751 is beyond EOD, truncated [ 260.924723][ T7951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.934365][ T7945] nullb0: p9 size 3667873493 extends beyond EOD, truncated [ 261.177545][ T5914] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 261.409554][ T5914] usb 3-1: cp210x converter now attached to ttyUSB0 [ 261.439712][ T7945] nullb0: p10 start 2534445966 is beyond EOD, truncated [ 261.484746][ T5879] usb 5-1: USB disconnect, device number 22 [ 261.498657][ T7945] nullb0: p11 start 1318227915 is beyond EOD, truncated [ 261.569660][ T7945] nullb0: p12 size 3013114410 extends beyond EOD, truncated [ 261.799533][ T7962] netlink: 116 bytes leftover after parsing attributes in process `syz.0.574'. [ 261.809727][ T7962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.574'. [ 262.282489][ T7962] netlink: 'syz.0.574': attribute type 7 has an invalid length. [ 262.290751][ T7962] netlink: 'syz.0.574': attribute type 5 has an invalid length. [ 262.299086][ T7962] netlink: 17 bytes leftover after parsing attributes in process `syz.0.574'. [ 262.627246][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.572'. [ 264.719878][ T7982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.519853][ T6019] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 265.596484][ T7992] netlink: 116 bytes leftover after parsing attributes in process `syz.1.584'. [ 265.605741][ T7992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.584'. [ 265.804249][ T7992] netlink: 'syz.1.584': attribute type 7 has an invalid length. [ 265.812462][ T7992] netlink: 'syz.1.584': attribute type 5 has an invalid length. [ 265.820557][ T7992] netlink: 17 bytes leftover after parsing attributes in process `syz.1.584'. [ 266.004487][ T7991] netlink: 52 bytes leftover after parsing attributes in process `syz.3.585'. [ 266.045753][ T6019] usb 1-1: Using ep0 maxpacket: 32 [ 266.052674][ T6019] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 266.078521][ T6019] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 266.104699][ T6019] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 266.114880][ T6019] usb 1-1: Product: syz [ 266.146856][ T6019] usb 1-1: Manufacturer: syz [ 266.189267][ T6019] usb 1-1: SerialNumber: syz [ 266.320724][ T6019] usb 1-1: config 0 descriptor?? [ 266.339669][ T7984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 267.598116][ T5914] usb 1-1: USB disconnect, device number 39 [ 267.844811][ T5879] usb 3-1: USB disconnect, device number 21 [ 267.907392][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 267.924365][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 267.968737][ T5879] cp210x 3-1:0.0: device disconnected [ 268.350953][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 268.534479][ T8017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.799920][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 268.890971][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 269.891769][ T8036] netlink: 52 bytes leftover after parsing attributes in process `syz.2.598'. [ 269.935834][ T5951] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 270.215793][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 270.223210][ T5951] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 270.236705][ T5951] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 270.246573][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 270.255809][ T5951] usb 5-1: Product: syz [ 270.260568][ T5951] usb 5-1: Manufacturer: syz [ 270.265332][ T5951] usb 5-1: SerialNumber: syz [ 270.339352][ T8044] netlink: 'syz.1.600': attribute type 6 has an invalid length. [ 270.920999][ T5951] usb 5-1: config 0 descriptor?? [ 270.926861][ T8033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 271.153925][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 271.205395][ T5951] usb 5-1: USB disconnect, device number 23 [ 272.066240][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 272.917523][ T8068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.066356][ T30] audit: type=1326 audit(1743343120.497:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.114949][ T30] audit: type=1326 audit(1743343120.497:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.177008][ T30] audit: type=1326 audit(1743343120.497:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.431291][ T30] audit: type=1326 audit(1743343120.497:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.456039][ T30] audit: type=1326 audit(1743343120.497:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.470173][ T8086] JFS: discard option not supported on device [ 273.478554][ T30] audit: type=1326 audit(1743343120.497:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.505494][ T30] audit: type=1326 audit(1743343120.497:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.527109][ T30] audit: type=1326 audit(1743343120.497:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.558463][ T30] audit: type=1326 audit(1743343120.497:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.562812][ T8086] Mount JFS Failure: -22 [ 273.580749][ T30] audit: type=1326 audit(1743343120.497:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 273.621920][ T8086] jfs_mount failed w/return code = -22 [ 273.765149][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 274.036189][ T5951] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 274.256784][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 274.316865][ T5951] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 274.419796][ T5951] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.448942][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.484688][ T5951] usb 2-1: Product: syz [ 274.496338][ T5951] usb 2-1: Manufacturer: syz [ 274.501079][ T5951] usb 2-1: SerialNumber: syz [ 274.554279][ T8105] netlink: 116 bytes leftover after parsing attributes in process `syz.3.620'. [ 274.565778][ T8105] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'. [ 274.569816][ T5951] usb 2-1: config 0 descriptor?? [ 274.647060][ T8093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.996115][ T6019] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 275.164053][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 275.366104][ T6019] usb 5-1: Using ep0 maxpacket: 32 [ 275.373883][ T6019] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 275.395322][ T6019] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 275.640392][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 275.992881][ T5951] usb 2-1: USB disconnect, device number 24 [ 276.011677][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 276.128725][ T6019] usb 5-1: Product: syz [ 276.132970][ T6019] usb 5-1: Manufacturer: syz [ 276.154017][ T6019] usb 5-1: SerialNumber: syz [ 276.164979][ T6019] usb 5-1: config 0 descriptor?? [ 276.175074][ T8103] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 276.488687][ T5951] usb 5-1: USB disconnect, device number 24 [ 277.326948][ T6019] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 277.551626][ T6019] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.691750][ T6019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.989880][ T6019] usb 4-1: config 0 descriptor?? [ 278.022684][ T6019] cp210x 4-1:0.0: cp210x converter detected [ 278.831579][ T6019] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 278.851282][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 278.885977][ T6019] usb 4-1: cp210x converter now attached to ttyUSB0 [ 279.053873][ T8142] FAULT_INJECTION: forcing a failure. [ 279.053873][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.070517][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.0.628 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 279.070547][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.070560][ T8142] Call Trace: [ 279.070568][ T8142] [ 279.070577][ T8142] dump_stack_lvl+0x241/0x360 [ 279.070610][ T8142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.070638][ T8142] ? __pfx__printk+0x10/0x10 [ 279.070671][ T8142] should_fail_ex+0x424/0x570 [ 279.070702][ T8142] strncpy_from_user+0x36/0x280 [ 279.070732][ T8142] getname_flags+0xf0/0x530 [ 279.070760][ T8142] user_path_at+0x24/0x60 [ 279.070789][ T8142] __se_sys_mount+0x348/0x400 [ 279.070818][ T8142] ? __pfx___se_sys_mount+0x10/0x10 [ 279.070847][ T8142] ? __x64_sys_mount+0x20/0xc0 [ 279.070873][ T8142] do_syscall_64+0xf3/0x230 [ 279.070901][ T8142] ? clear_bhb_loop+0x45/0xa0 [ 279.070924][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.070944][ T8142] RIP: 0033:0x7f0cde78d169 [ 279.070962][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.070980][ T8142] RSP: 002b:00007f0cdf66d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.071002][ T8142] RAX: ffffffffffffffda RBX: 00007f0cde9a5fa0 RCX: 00007f0cde78d169 [ 279.071017][ T8142] RDX: 0000200000002100 RSI: 0000200000000180 RDI: 0000000000000000 [ 279.071032][ T8142] RBP: 00007f0cdf66d090 R08: 0000200000002140 R09: 0000000000000000 [ 279.071046][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.071058][ T8142] R13: 0000000000000000 R14: 00007f0cde9a5fa0 R15: 00007fff08e723f8 [ 279.071083][ T8142] [ 279.319113][ T8151] netlink: 116 bytes leftover after parsing attributes in process `syz.4.633'. [ 279.328333][ T8151] netlink: 48 bytes leftover after parsing attributes in process `syz.4.633'. [ 279.343746][ T8151] netlink: 'syz.4.633': attribute type 7 has an invalid length. [ 279.351682][ T8151] netlink: 'syz.4.633': attribute type 5 has an invalid length. [ 279.359487][ T8151] netlink: 17 bytes leftover after parsing attributes in process `syz.4.633'. [ 280.118388][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 280.127550][ T8157] net_ratelimit: 50 callbacks suppressed [ 280.127567][ T8157] openvswitch: netlink: Flow actions attr not present in new flow. [ 280.234460][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880120c5400: rx timeout, send abort [ 280.243007][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880120c5400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 280.475906][ T5873] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 280.635868][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 280.652791][ T5873] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 280.666380][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.674784][ T5873] usb 3-1: Product: syz [ 280.681764][ T5873] usb 3-1: Manufacturer: syz [ 280.687454][ T5873] usb 3-1: SerialNumber: syz [ 280.698651][ T5873] usb 3-1: config 0 descriptor?? [ 280.717382][ T5873] usb 3-1: selecting invalid altsetting 3 [ 280.723624][ T5873] comedi comedi0: could not set alternate setting 3 in high speed [ 280.732051][ T5873] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 280.745077][ T5873] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 280.917970][ T5873] usb 3-1: USB disconnect, device number 22 [ 282.592196][ T5951] usb 4-1: USB disconnect, device number 22 [ 282.607257][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.630083][ T5951] cp210x 4-1:0.0: device disconnected [ 282.699068][ T8182] tipc: Started in network mode [ 282.704222][ T8182] tipc: Node identity ac14140f, cluster identity 4711 [ 282.714015][ T8182] tipc: Enabled bearer , priority 10 [ 283.833012][ T8189] netlink: 'syz.0.645': attribute type 7 has an invalid length. [ 283.835987][ T5951] tipc: Node number set to 2886997007 [ 283.848353][ T8189] netlink: 'syz.0.645': attribute type 5 has an invalid length. [ 283.856754][ T8189] netlink: 17 bytes leftover after parsing attributes in process `syz.0.645'. [ 284.137239][ T8195] netlink: 'syz.3.646': attribute type 3 has an invalid length. [ 284.145150][ T8195] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.646'. [ 284.706824][ T8195] Falling back ldisc for ttyS3. [ 285.001170][ T8202] openvswitch: netlink: IPv4 tun info is not correct [ 285.305134][ T8211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.618107][ T8215] FAULT_INJECTION: forcing a failure. [ 285.618107][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 285.631376][ T8215] CPU: 1 UID: 0 PID: 8215 Comm: syz.3.650 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 285.631406][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 285.631419][ T8215] Call Trace: [ 285.631427][ T8215] [ 285.631435][ T8215] dump_stack_lvl+0x241/0x360 [ 285.631470][ T8215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.631498][ T8215] ? __pfx__printk+0x10/0x10 [ 285.631542][ T8215] ? __pfx___might_resched+0x10/0x10 [ 285.631568][ T8215] should_fail_ex+0x424/0x570 [ 285.631598][ T8215] should_failslab+0xac/0x100 [ 285.631623][ T8215] __kmalloc_cache_noprof+0x73/0x370 [ 285.631646][ T8215] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 285.631680][ T8215] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 285.631717][ T8215] sctp_association_new+0x15ad/0x2540 [ 285.631751][ T8215] sctp_connect_new_asoc+0x31c/0x700 [ 285.631784][ T8215] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 285.631805][ T8215] ? sctp_sendmsg+0xf30/0x3620 [ 285.631829][ T8215] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 285.631849][ T8215] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 285.631880][ T8215] sctp_sendmsg+0x2009/0x3620 [ 285.631916][ T8215] ? __pfx_sctp_sendmsg+0x10/0x10 [ 285.631937][ T8215] ? tomoyo_socket_sendmsg_permission+0x285/0x420 [ 285.631981][ T8215] ? inet_sendmsg+0x330/0x390 [ 285.632010][ T8215] __sock_sendmsg+0x1a6/0x270 [ 285.632044][ T8215] __sys_sendto+0x365/0x4c0 [ 285.632070][ T8215] ? __pfx___sys_sendto+0x10/0x10 [ 285.632103][ T8215] ? __fget_files+0x2a/0x420 [ 285.632134][ T8215] ? ksys_write+0x275/0x2d0 [ 285.632171][ T8215] __x64_sys_sendto+0xde/0x100 [ 285.632196][ T8215] do_syscall_64+0xf3/0x230 [ 285.632224][ T8215] ? clear_bhb_loop+0x45/0xa0 [ 285.632247][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.632265][ T8215] RIP: 0033:0x7fed6978d169 [ 285.632283][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.632300][ T8215] RSP: 002b:00007fed675d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 285.632322][ T8215] RAX: ffffffffffffffda RBX: 00007fed699a6160 RCX: 00007fed6978d169 [ 285.632337][ T8215] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000006 [ 285.632350][ T8215] RBP: 00007fed675d5090 R08: 000020000005ffe4 R09: 000000000000001c [ 285.632363][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.632375][ T8215] R13: 0000000000000000 R14: 00007fed699a6160 R15: 00007ffd39b1bb98 [ 285.632400][ T8215] [ 286.302059][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 286.344706][ T8222] netlink: 100 bytes leftover after parsing attributes in process `syz.3.656'. [ 286.386195][ T5879] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 286.562367][ T5879] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 286.695303][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.184041][ T5879] usb 1-1: config 0 descriptor?? [ 287.200815][ T5879] cp210x 1-1:0.0: cp210x converter detected [ 287.219295][ T8226] netlink: 'syz.1.657': attribute type 4 has an invalid length. [ 287.233705][ T8226] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.657'. [ 287.253877][ T5873] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.318384][ T5873] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.726745][ T5879] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 287.750971][ T5879] usb 1-1: cp210x converter now attached to ttyUSB0 [ 287.845787][ T5904] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 287.866081][ T48] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 288.006053][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 288.055788][ T8240] netlink: 'syz.1.662': attribute type 7 has an invalid length. [ 288.063619][ T8240] netlink: 'syz.1.662': attribute type 5 has an invalid length. [ 288.071635][ T8240] netlink: 17 bytes leftover after parsing attributes in process `syz.1.662'. [ 288.158485][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 288.170749][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 288.183104][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.195474][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.472428][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.515300][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.961280][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.984513][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.018210][ T48] usb 5-1: Product: syz [ 289.026013][ T5904] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 289.036036][ T48] usb 5-1: Manufacturer: syz [ 289.044987][ T48] usb 5-1: SerialNumber: syz [ 289.049824][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.062321][ T48] usb 5-1: config 0 descriptor?? [ 289.071526][ T48] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 289.081954][ T5904] usb 4-1: config 0 descriptor?? [ 289.087923][ T48] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 289.110259][ T5914] usb 1-1: USB disconnect, device number 40 [ 289.158702][ T5914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 289.221221][ T5914] cp210x 1-1:0.0: device disconnected [ 289.502260][ T5904] hid-generic 0003:18D1:503C.000B: unbalanced collection at end of report description [ 289.514406][ T5904] hid-generic 0003:18D1:503C.000B: probe with driver hid-generic failed with error -22 [ 289.565808][ T5874] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 289.681230][ T48] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 289.687907][ T48] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 289.716348][ T5914] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 289.725557][ T5874] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 289.733991][ T5874] usb 3-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 289.744633][ T5874] usb 3-1: config 0 has no interface number 0 [ 289.752140][ T5874] usb 3-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 289.784411][ T5874] usb 3-1: config 0 interface 231 has no altsetting 0 [ 289.793783][ T5874] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 289.807571][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.817382][ T5874] usb 3-1: Product: syz [ 289.821835][ T5874] usb 3-1: Manufacturer: syz [ 289.829310][ T5874] usb 3-1: SerialNumber: syz [ 289.837521][ T8262] overlayfs: failed to resolve '/ $': -2 [ 289.844583][ T5874] usb 3-1: config 0 descriptor?? [ 289.877485][ T5914] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 289.886953][ T5914] usb 2-1: config 0 has no interface number 0 [ 289.893081][ T5914] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 289.905710][ T5914] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 289.924671][ T5914] usb 2-1: config 0 interface 255 has no altsetting 0 [ 289.931924][ T5914] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 289.941743][ T48] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 289.946946][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.955317][ T48] em28xx 5-1:0.0: No AC97 audio processor [ 289.967603][ T5914] usb 2-1: config 0 descriptor?? [ 289.978391][ T48] usb 5-1: USB disconnect, device number 25 [ 289.984760][ T5914] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 289.985153][ T48] em28xx 5-1:0.0: Disconnecting em28xx [ 290.003499][ T48] em28xx 5-1:0.0: Freeing device [ 290.105810][ T5873] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 290.190911][ T48] usb 2-1: USB disconnect, device number 25 [ 290.247488][ T8257] delete_channel: no stack [ 290.256050][ T5874] asix 3-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 290.261200][ T5873] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 290.269205][ T5874] asix 3-1:0.231: probe with driver asix failed with error -71 [ 290.287831][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.296694][ T5874] usb 3-1: USB disconnect, device number 23 [ 290.297151][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.313714][ T5873] usb 1-1: Product: syz [ 290.318207][ T5873] usb 1-1: Manufacturer: syz [ 290.325362][ T5873] usb 1-1: SerialNumber: syz [ 290.334831][ T8261] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 290.761376][ T5873] cdc_ncm 1-1:1.0: bind() failure [ 290.769778][ T5873] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 290.777279][ T5873] cdc_ncm 1-1:1.1: bind() failure [ 290.786185][ T5873] usb 1-1: USB disconnect, device number 41 [ 291.085750][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 291.095924][ T5830] usb 4-1: USB disconnect, device number 23 [ 291.216402][ T5874] usb 3-1: device descriptor read/64, error -71 [ 291.488341][ T5874] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 291.815911][ T5874] usb 3-1: device descriptor read/64, error -71 [ 292.138713][ T5874] usb usb3-port1: attempt power cycle [ 292.339406][ T8285] bridge0: entered promiscuous mode [ 292.345676][ T8285] macvlan2: entered promiscuous mode [ 292.488040][ T8285] bridge0: port 3(macvlan2) entered blocking state [ 292.494681][ T8285] bridge0: port 3(macvlan2) entered disabled state [ 292.568649][ T8285] macvlan2: entered allmulticast mode [ 292.574380][ T8285] bridge0: entered allmulticast mode [ 292.636514][ T5874] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 292.689778][ T5874] usb 3-1: device descriptor read/8, error -71 [ 292.701270][ T8292] netlink: 116 bytes leftover after parsing attributes in process `syz.1.677'. [ 292.710832][ T8292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.677'. [ 292.777870][ T8292] netlink: 'syz.1.677': attribute type 7 has an invalid length. [ 292.788745][ T8292] netlink: 'syz.1.677': attribute type 5 has an invalid length. [ 292.796721][ T8292] netlink: 17 bytes leftover after parsing attributes in process `syz.1.677'. [ 292.893187][ T8285] macvlan2: left allmulticast mode [ 292.901168][ T8285] bridge0: left allmulticast mode [ 293.040683][ T8285] bridge0: left promiscuous mode [ 293.085803][ T5874] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 293.740958][ T5874] usb 3-1: device descriptor read/8, error -71 [ 294.145535][ T5874] usb usb3-port1: unable to enumerate USB device [ 294.256837][ T8302] FAULT_INJECTION: forcing a failure. [ 294.256837][ T8302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.270146][ T8302] CPU: 1 UID: 0 PID: 8302 Comm: syz.2.680 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 294.270175][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.270189][ T8302] Call Trace: [ 294.270196][ T8302] [ 294.270204][ T8302] dump_stack_lvl+0x241/0x360 [ 294.270238][ T8302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.270266][ T8302] ? __pfx__printk+0x10/0x10 [ 294.270314][ T8302] should_fail_ex+0x424/0x570 [ 294.270346][ T8302] _copy_from_user+0x2d/0xb0 [ 294.270370][ T8302] generic_map_update_batch+0x53b/0x8e0 [ 294.270405][ T8302] ? __pfx_generic_map_update_batch+0x10/0x10 [ 294.270428][ T8302] ? __fget_files+0x39d/0x420 [ 294.270454][ T8302] ? __fget_files+0x2a/0x420 [ 294.270485][ T8302] ? __pfx_generic_map_update_batch+0x10/0x10 [ 294.270509][ T8302] bpf_map_do_batch+0x39a/0x660 [ 294.270532][ T8302] __sys_bpf+0x388/0x850 [ 294.270563][ T8302] ? __pfx___sys_bpf+0x10/0x10 [ 294.270601][ T8302] ? ksys_write+0x275/0x2d0 [ 294.270641][ T8302] __x64_sys_bpf+0x7c/0x90 [ 294.270668][ T8302] do_syscall_64+0xf3/0x230 [ 294.270697][ T8302] ? clear_bhb_loop+0x45/0xa0 [ 294.270721][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.270741][ T8302] RIP: 0033:0x7fb8e7d8d169 [ 294.270760][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.270778][ T8302] RSP: 002b:00007fb8e8c41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.270800][ T8302] RAX: ffffffffffffffda RBX: 00007fb8e7fa6160 RCX: 00007fb8e7d8d169 [ 294.270815][ T8302] RDX: 0000000000000038 RSI: 0000200000000580 RDI: 000000000000001a [ 294.270828][ T8302] RBP: 00007fb8e8c41090 R08: 0000000000000000 R09: 0000000000000000 [ 294.270841][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.270854][ T8302] R13: 0000000000000000 R14: 00007fb8e7fa6160 R15: 00007ffd7c6e0798 [ 294.270892][ T8302] [ 294.467354][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.705869][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 294.705889][ T30] audit: type=1804 audit(1743343142.157:55): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.679" name="/newroot/123/bus/file0" dev="overlay" ino=672 res=1 errno=0 [ 294.758665][ T8309] FAULT_INJECTION: forcing a failure. [ 294.758665][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.773510][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.1.682 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 294.773539][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.773552][ T8309] Call Trace: [ 294.773559][ T8309] [ 294.773567][ T8309] dump_stack_lvl+0x241/0x360 [ 294.773600][ T8309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.773628][ T8309] ? __pfx__printk+0x10/0x10 [ 294.773669][ T8309] should_fail_ex+0x424/0x570 [ 294.773699][ T8309] _copy_to_user+0x31/0xb0 [ 294.773724][ T8309] bpf_test_finish+0x626/0x930 [ 294.773762][ T8309] ? __pfx_bpf_test_finish+0x10/0x10 [ 294.773798][ T8309] ? bpf_test_init+0x130/0x170 [ 294.773829][ T8309] bpf_prog_test_run_xdp+0x8f8/0x1200 [ 294.773857][ T8309] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.773874][ T8309] ? __fget_files+0x2a/0x420 [ 294.773898][ T8309] ? __fget_files+0x2a/0x420 [ 294.773920][ T8309] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.773936][ T8309] bpf_prog_test_run+0x2e4/0x360 [ 294.773964][ T8309] __sys_bpf+0x492/0x850 [ 294.773988][ T8309] ? __pfx___sys_bpf+0x10/0x10 [ 294.774017][ T8309] ? ksys_write+0x275/0x2d0 [ 294.774047][ T8309] __x64_sys_bpf+0x7c/0x90 [ 294.774068][ T8309] do_syscall_64+0xf3/0x230 [ 294.774091][ T8309] ? clear_bhb_loop+0x45/0xa0 [ 294.774109][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.774125][ T8309] RIP: 0033:0x7fb11218d169 [ 294.774139][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.774153][ T8309] RSP: 002b:00007fb112f3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.774171][ T8309] RAX: ffffffffffffffda RBX: 00007fb1123a5fa0 RCX: 00007fb11218d169 [ 294.774184][ T8309] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 294.774194][ T8309] RBP: 00007fb112f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 294.774204][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.774214][ T8309] R13: 0000000000000000 R14: 00007fb1123a5fa0 R15: 00007ffc95cd0538 [ 294.774246][ T8309] [ 295.137312][ T5874] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 295.181622][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 295.622477][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 295.661688][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 295.719971][ T5874] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 295.897743][ T5874] usb 1-1: config 0 has no interface number 0 [ 296.111200][ T5874] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 296.205917][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.216232][ T5874] usb 1-1: Product: syz [ 296.221225][ T5874] usb 1-1: Manufacturer: syz [ 296.348992][ T5874] usb 1-1: SerialNumber: syz [ 296.386675][ T5874] usb 1-1: config 0 descriptor?? [ 296.399409][ T5874] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 297.123780][ T5874] gspca_topro: reg_w err -110 [ 297.129666][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.147103][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.165740][ T5874] gspca_topro: Sensor soi763a [ 297.178590][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.196039][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 297.378665][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.402186][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.418333][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.429582][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.443908][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.481502][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.492830][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.543086][ T8334] ipt_rpfilter: unknown options [ 297.550120][ T5874] usb 1-1: USB disconnect, device number 42 [ 297.586354][ T8336] .: renamed from vlan1 (while UP) [ 297.948449][ T8345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.597998][ T8353] FAULT_INJECTION: forcing a failure. [ 298.597998][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 298.610915][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.4.694 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 298.610943][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.610957][ T8353] Call Trace: [ 298.610964][ T8353] [ 298.610972][ T8353] dump_stack_lvl+0x241/0x360 [ 298.611007][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.611035][ T8353] ? __pfx__printk+0x10/0x10 [ 298.611064][ T8353] ? __pfx___might_resched+0x10/0x10 [ 298.611090][ T8353] should_fail_ex+0x424/0x570 [ 298.611122][ T8353] should_failslab+0xac/0x100 [ 298.611147][ T8353] __kmalloc_noprof+0xdf/0x4d0 [ 298.611171][ T8353] ? tomoyo_encode+0x26f/0x540 [ 298.611202][ T8353] tomoyo_encode+0x26f/0x540 [ 298.611234][ T8353] tomoyo_realpath_from_path+0x59e/0x5e0 [ 298.611271][ T8353] tomoyo_check_open_permission+0x25a/0x4f0 [ 298.611298][ T8353] ? tomoyo_check_open_permission+0x209/0x4f0 [ 298.611323][ T8353] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 298.611382][ T8353] ? do_raw_spin_unlock+0x13c/0x8b0 [ 298.611408][ T8353] ? tomoyo_file_open+0x168/0x220 [ 298.611441][ T8353] security_file_open+0xac/0x250 [ 298.611467][ T8353] do_dentry_open+0x320/0x1960 [ 298.611493][ T8353] ? vfs_open+0x31/0x370 [ 298.611516][ T8353] ? vfs_open+0x31/0x370 [ 298.611541][ T8353] vfs_open+0x3b/0x370 [ 298.611566][ T8353] path_openat+0x2caf/0x35d0 [ 298.611614][ T8353] ? kasan_save_track+0x51/0x80 [ 298.611635][ T8353] ? __pfx_path_openat+0x10/0x10 [ 298.611663][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.611698][ T8353] do_filp_open+0x284/0x4e0 [ 298.611730][ T8353] ? __pfx_do_filp_open+0x10/0x10 [ 298.611757][ T8353] ? do_raw_spin_lock+0x151/0x370 [ 298.611811][ T8353] do_sys_openat2+0x12b/0x1d0 [ 298.611834][ T8353] ? schedule+0x163/0x360 [ 298.611860][ T8353] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.611887][ T8353] ? __fget_files+0x2a/0x420 [ 298.611917][ T8353] __x64_sys_openat+0x249/0x2a0 [ 298.611943][ T8353] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.611975][ T8353] ? do_syscall_64+0xb6/0x230 [ 298.612006][ T8353] do_syscall_64+0xf3/0x230 [ 298.612033][ T8353] ? clear_bhb_loop+0x45/0xa0 [ 298.612056][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.612076][ T8353] RIP: 0033:0x7f8b64b8d169 [ 298.612093][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.612111][ T8353] RSP: 002b:00007f8b65a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.612146][ T8353] RAX: ffffffffffffffda RBX: 00007f8b64da6160 RCX: 00007f8b64b8d169 [ 298.612160][ T8353] RDX: 0000000000020000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 298.612175][ T8353] RBP: 00007f8b65a57090 R08: 0000000000000000 R09: 0000000000000000 [ 298.612187][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.612199][ T8353] R13: 0000000000000000 R14: 00007f8b64da6160 R15: 00007ffd353bb878 [ 298.612225][ T8353] [ 298.612300][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.912374][ T8348] kernel read not supported for file /!selinۡluxseq > (pid: 8348 comm: syz.4.694) [ 298.936111][ T30] audit: type=1800 audit(1743343146.377:56): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.694" name=2173656C696EDBA102BFD96CD7CDC075787365EE0ECDCE71A2A509988A8F3EBA dev="mqueue" ino=20865 res=0 errno=0 [ 299.199940][ T8360] FAULT_INJECTION: forcing a failure. [ 299.199940][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 299.212874][ T8360] CPU: 1 UID: 0 PID: 8360 Comm: syz.1.695 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 299.212902][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.212916][ T8360] Call Trace: [ 299.212923][ T8360] [ 299.212932][ T8360] dump_stack_lvl+0x241/0x360 [ 299.212965][ T8360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.212993][ T8360] ? __pfx__printk+0x10/0x10 [ 299.213022][ T8360] ? __pfx___might_resched+0x10/0x10 [ 299.213048][ T8360] should_fail_ex+0x424/0x570 [ 299.213080][ T8360] should_failslab+0xac/0x100 [ 299.213105][ T8360] kmem_cache_alloc_noprof+0x78/0x390 [ 299.213129][ T8360] ? mm_alloc+0x23/0xc0 [ 299.213161][ T8360] mm_alloc+0x23/0xc0 [ 299.213190][ T8360] alloc_bprm+0x397/0xbe0 [ 299.213222][ T8360] ? do_execveat_common+0x90/0x710 [ 299.213248][ T8360] do_execveat_common+0x1ae/0x710 [ 299.213275][ T8360] __x64_sys_execveat+0xc4/0xe0 [ 299.213297][ T8360] do_syscall_64+0xf3/0x230 [ 299.213326][ T8360] ? clear_bhb_loop+0x45/0xa0 [ 299.213350][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.213370][ T8360] RIP: 0033:0x7fb11218d169 [ 299.213387][ T8360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.213405][ T8360] RSP: 002b:00007fb10fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 299.213428][ T8360] RAX: ffffffffffffffda RBX: 00007fb1123a6160 RCX: 00007fb11218d169 [ 299.213443][ T8360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 299.213458][ T8360] RBP: 00007fb10fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.213471][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.213484][ T8360] R13: 0000000000000000 R14: 00007fb1123a6160 R15: 00007ffc95cd0538 [ 299.213510][ T8360] [ 300.535930][ T8364] netlink: 'syz.1.699': attribute type 2 has an invalid length. [ 301.406879][ T5914] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 301.743176][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 301.996540][ T5914] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 302.015738][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.049758][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.068065][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.242558][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.257976][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.295930][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.446114][ T8393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.375515][ T5914] usb 5-1: can't set config #16, error -71 [ 304.385972][ T56] Bluetooth: hci1: command 0x206a tx timeout [ 304.394975][ T5914] usb 5-1: USB disconnect, device number 26 [ 304.540925][ T8389] netlink: 80 bytes leftover after parsing attributes in process `syz.0.707'. [ 305.885205][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 305.897762][ T5951] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 305.925908][ T8422] openvswitch: netlink: Flow actions attr not present in new flow. [ 306.055832][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 306.120818][ T5951] usb 3-1: config 88 has an invalid interface number: 41 but max is 1 [ 306.129446][ T30] audit: type=1326 audit(1743343153.577:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 306.228530][ T8432] netlink: 'syz.1.720': attribute type 4 has an invalid length. [ 306.955856][ T5951] usb 3-1: config 88 has an invalid interface number: 168 but max is 1 [ 306.964610][ T5951] usb 3-1: config 88 has no interface number 0 [ 306.974754][ T5951] usb 3-1: config 88 has no interface number 1 [ 306.981236][ T30] audit: type=1326 audit(1743343153.577:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.003407][ T5951] usb 3-1: config 88 interface 41 altsetting 4 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 307.025792][ T5951] usb 3-1: config 88 interface 41 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 307.040495][ T30] audit: type=1326 audit(1743343153.577:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.082426][ T5951] usb 3-1: config 88 interface 168 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 307.139592][ T5951] usb 3-1: config 88 interface 168 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 307.163536][ T30] audit: type=1326 audit(1743343153.577:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.185306][ T5951] usb 3-1: config 88 interface 168 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 307.201941][ T30] audit: type=1326 audit(1743343153.577:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.207195][ T5951] usb 3-1: config 88 interface 41 has no altsetting 0 [ 307.231730][ T30] audit: type=1326 audit(1743343153.607:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.253772][ T30] audit: type=1326 audit(1743343154.407:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.275615][ T30] audit: type=1326 audit(1743343154.417:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.279836][ T5951] usb 3-1: config 88 interface 168 has no altsetting 0 [ 307.298269][ T30] audit: type=1326 audit(1743343154.607:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.328488][ T8439] sctp: [Deprecated]: syz.3.721 (pid 8439) Use of int in max_burst socket option deprecated. [ 307.328488][ T8439] Use struct sctp_assoc_value instead [ 307.336173][ T5951] usb 3-1: New USB device found, idVendor=16c1, idProduct=1cde, bcdDevice=ca.f5 [ 307.357914][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.363360][ T30] audit: type=1326 audit(1743343154.607:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6978d169 code=0x7ffc0000 [ 307.378657][ T5951] usb 3-1: Product: syz [ 307.405356][ T5951] usb 3-1: Manufacturer: Ⰹ [ 307.415012][ T5951] usb 3-1: SerialNumber: syz [ 307.445834][ T48] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 307.585913][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 307.601125][ T48] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 307.635776][ T48] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 307.655876][ T48] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 307.664954][ T48] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 307.700307][ T48] usb 2-1: Product: syz [ 307.720318][ T8438] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 307.727859][ T8438] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 307.758540][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.767398][ T48] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.807646][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.044323][ T5951] plfxlc 3-1:88.41: Firmware Version: 0 [ 309.071412][ T5951] plfxlc 3-1:88.41: Unit type is station [ 309.093046][ T8450] overlayfs: missing 'lowerdir' [ 309.167234][ T5951] plfxlc 3-1:88.41: Direct firmware load for plfxlc/lifi-x.bin failed with error -2 [ 309.194009][ T5951] plfxlc 3-1:88.41: Falling back to sysfs fallback for: plfxlc/lifi-x.bin [ 310.238085][ T8462] bridge0: entered promiscuous mode [ 310.243481][ T8462] macvlan2: entered promiscuous mode [ 310.317581][ T24] usb 2-1: USB disconnect, device number 26 [ 310.405812][ T8462] bridge0: port 3(macvlan2) entered blocking state [ 310.420601][ T8462] bridge0: port 3(macvlan2) entered disabled state [ 310.435492][ T8462] macvlan2: entered allmulticast mode [ 310.443922][ T8462] bridge0: entered allmulticast mode [ 310.656447][ T8462] macvlan2: left allmulticast mode [ 310.720232][ T8462] bridge0: left allmulticast mode [ 310.873298][ T8462] bridge0: left promiscuous mode [ 310.991096][ T8470] tmpfs: Bad value for 'mpol' [ 311.605419][ T8477] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 311.804453][ T56] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 312.803440][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 313.428790][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 313.462483][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.495175][ T8495] netlink: 'syz.0.741': attribute type 3 has an invalid length. [ 313.509743][ T8500] netlink: 'syz.4.742': attribute type 2 has an invalid length. [ 313.524494][ T8500] f: entered promiscuous mode [ 313.532076][ T8495] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.741'. [ 313.589899][ T24] usb 4-1: config 0 descriptor?? [ 313.604879][ T24] cp210x 4-1:0.0: cp210x converter detected [ 313.816270][ T5873] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 314.055861][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 314.075369][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 314.103046][ T5873] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 314.113541][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 314.126576][ T5873] usb 2-1: Product: syz [ 314.131065][ T5873] usb 2-1: Manufacturer: syz [ 314.139739][ T5873] usb 2-1: SerialNumber: syz [ 314.188465][ T5873] usb 2-1: config 0 descriptor?? [ 314.205184][ T8501] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 314.368376][ T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 314.398011][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 315.033642][ T8511] bridge0: entered promiscuous mode [ 315.040495][ T8511] macvlan2: entered promiscuous mode [ 315.063111][ T8511] bridge0: port 3(macvlan2) entered blocking state [ 315.070694][ T8511] bridge0: port 3(macvlan2) entered disabled state [ 315.079435][ T8511] macvlan2: entered allmulticast mode [ 315.085231][ T8511] bridge0: entered allmulticast mode [ 315.384478][ T8511] macvlan2: left allmulticast mode [ 315.390359][ T8511] bridge0: left allmulticast mode [ 315.470778][ T24] usb 2-1: USB disconnect, device number 27 [ 315.480875][ T8511] bridge0: left promiscuous mode [ 315.496233][ T8507] delete_channel: no stack [ 315.523089][ T5830] usb 4-1: USB disconnect, device number 24 [ 315.537182][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.553677][ T5830] cp210x 4-1:0.0: device disconnected [ 316.293536][ T8520] input: syz1 as /devices/virtual/input/input14 [ 316.909426][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 317.155732][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 317.202309][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.209136][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.956046][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.022091][ T24] usb 2-1: config 0 has no interface number 0 [ 318.076569][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.412194][ T8539] netlink: 'syz.3.757': attribute type 7 has an invalid length. [ 318.420237][ T8539] netlink: 'syz.3.757': attribute type 5 has an invalid length. [ 318.431665][ T8539] netlink: 17 bytes leftover after parsing attributes in process `syz.3.757'. [ 318.548063][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.559333][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.651585][ T8541] netlink: 'syz.2.756': attribute type 3 has an invalid length. [ 318.659580][ T8541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.756'. [ 318.745938][ T24] usb 2-1: config 0 descriptor?? [ 319.097271][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 319.316060][ T5873] usb 2-1: USB disconnect, device number 28 [ 319.500483][ T8552] xt_recent: Unsupported userspace flags (000000da) [ 319.897260][ T8535] Falling back ldisc for ttyS3. [ 321.046451][ T8566] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.055749][ T8566] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.064617][ T8566] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.073600][ T8566] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.082987][ T8566] vxlan0: entered promiscuous mode [ 321.088288][ T8566] vxlan0: entered allmulticast mode [ 321.650840][ T8566] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.660580][ T8566] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.669693][ T8566] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.678697][ T8566] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.707636][ T8564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.742747][ T5874] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 324.105732][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 324.237832][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 324.268313][ T5874] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 324.292843][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 324.349631][ T5874] usb 2-1: Product: syz [ 324.387900][ T8596] netlink: 'syz.4.767': attribute type 10 has an invalid length. [ 324.399240][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.409425][ T8596] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 324.436470][ T5874] usb 2-1: Manufacturer: syz [ 324.451373][ T5874] usb 2-1: SerialNumber: syz [ 324.540512][ T5874] usb 2-1: config 0 descriptor?? [ 324.580711][ T8573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.863028][ T5874] usb 2-1: USB disconnect, device number 29 [ 325.319085][ T8606] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 326.598062][ T8626] netlink: 116 bytes leftover after parsing attributes in process `syz.1.776'. [ 326.608624][ T8626] netlink: 48 bytes leftover after parsing attributes in process `syz.1.776'. [ 327.316910][ T8626] netlink: 'syz.1.776': attribute type 7 has an invalid length. [ 327.325540][ T8626] netlink: 'syz.1.776': attribute type 5 has an invalid length. [ 327.334206][ T8626] netlink: 17 bytes leftover after parsing attributes in process `syz.1.776'. [ 328.300226][ T8645] bridge0: entered promiscuous mode [ 328.305988][ T8645] macvlan2: entered promiscuous mode [ 328.313410][ T8645] bridge0: port 3(macvlan2) entered blocking state [ 328.322445][ T8645] bridge0: port 3(macvlan2) entered disabled state [ 328.329391][ T8645] macvlan2: entered allmulticast mode [ 328.334996][ T8645] bridge0: entered allmulticast mode [ 328.644435][ T8645] macvlan2: left allmulticast mode [ 328.649992][ T8645] bridge0: left allmulticast mode [ 328.656923][ T8645] bridge0: left promiscuous mode [ 329.430649][ T8649] xt_recent: Unsupported userspace flags (000000da) [ 329.824385][ T8654] bridge0: entered promiscuous mode [ 329.830641][ T8654] macvlan3: entered promiscuous mode [ 329.843499][ T8654] bridge0: port 3(macvlan3) entered blocking state [ 329.850720][ T8654] bridge0: port 3(macvlan3) entered disabled state [ 329.858681][ T8654] macvlan3: entered allmulticast mode [ 329.864258][ T8654] bridge0: entered allmulticast mode [ 329.879315][ T8654] macvlan3: left allmulticast mode [ 329.935855][ T8654] bridge0: left allmulticast mode [ 329.941179][ T8654] bridge0: left promiscuous mode [ 330.551235][ T56] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 332.030691][ T5829] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 334.488099][ T8694] xt_recent: Unsupported userspace flags (000000da) [ 336.280066][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 336.329708][ T8710] openvswitch: netlink: Flow actions attr not present in new flow. [ 336.339607][ T5914] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 336.556765][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 336.590989][ T5914] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 336.645743][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.654389][ T5914] usb 2-1: Product: syz [ 336.670191][ T5914] usb 2-1: Manufacturer: syz [ 336.680630][ T5914] usb 2-1: SerialNumber: syz [ 336.706618][ T5914] usb 2-1: config 0 descriptor?? [ 336.713927][ T5914] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 338.208758][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 338.237482][ T8732] netlink: 292 bytes leftover after parsing attributes in process `syz.2.807'. [ 338.498583][ T8741] FAULT_INJECTION: forcing a failure. [ 338.498583][ T8741] name failslab, interval 1, probability 0, space 0, times 0 [ 338.512096][ T8741] CPU: 1 UID: 0 PID: 8741 Comm: syz.4.811 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 338.512125][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.512137][ T8741] Call Trace: [ 338.512145][ T8741] [ 338.512153][ T8741] dump_stack_lvl+0x241/0x360 [ 338.512187][ T8741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.512214][ T8741] ? __pfx__printk+0x10/0x10 [ 338.512242][ T8741] ? __pfx___might_resched+0x10/0x10 [ 338.512267][ T8741] should_fail_ex+0x424/0x570 [ 338.512298][ T8741] should_failslab+0xac/0x100 [ 338.512322][ T8741] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 338.512347][ T8741] ? __alloc_skb+0x1c2/0x480 [ 338.512369][ T8741] ? stack_trace_save+0x11a/0x1d0 [ 338.512397][ T8741] __alloc_skb+0x1c2/0x480 [ 338.512424][ T8741] ? __pfx___alloc_skb+0x10/0x10 [ 338.512451][ T8741] ? netlink_ack_tlv_len+0x6e/0x200 [ 338.512472][ T8741] netlink_ack+0x147/0xa70 [ 338.512490][ T8741] ? __pfx_smc_pnet_add+0x10/0x10 [ 338.512520][ T8741] netlink_rcv_skb+0x296/0x480 [ 338.512539][ T8741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.512565][ T8741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.512599][ T8741] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.512622][ T8741] genl_rcv+0x28/0x40 [ 338.512645][ T8741] netlink_unicast+0x7f8/0x9a0 [ 338.512679][ T8741] ? __pfx_netlink_unicast+0x10/0x10 [ 338.512709][ T8741] ? skb_put+0x114/0x1f0 [ 338.512744][ T8741] netlink_sendmsg+0x8c3/0xcd0 [ 338.512773][ T8741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.512803][ T8741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.512838][ T8741] __sock_sendmsg+0x221/0x270 [ 338.512872][ T8741] ____sys_sendmsg+0x523/0x860 [ 338.512905][ T8741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.512929][ T8741] ? __fget_files+0x2a/0x420 [ 338.512957][ T8741] ? __fget_files+0x2a/0x420 [ 338.512989][ T8741] __sys_sendmsg+0x271/0x360 [ 338.513024][ T8741] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.513085][ T8741] ? do_syscall_64+0xb6/0x230 [ 338.513116][ T8741] do_syscall_64+0xf3/0x230 [ 338.513142][ T8741] ? clear_bhb_loop+0x45/0xa0 [ 338.513166][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.513185][ T8741] RIP: 0033:0x7f8b64b8d169 [ 338.513202][ T8741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.513220][ T8741] RSP: 002b:00007f8b65a99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.513242][ T8741] RAX: ffffffffffffffda RBX: 00007f8b64da5fa0 RCX: 00007f8b64b8d169 [ 338.513257][ T8741] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 338.513270][ T8741] RBP: 00007f8b65a99090 R08: 0000000000000000 R09: 0000000000000000 [ 338.513282][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.513294][ T8741] R13: 0000000000000000 R14: 00007f8b64da5fa0 R15: 00007ffd353bb878 [ 338.513321][ T8741] [ 339.072895][ T8745] xt_recent: Unsupported userspace flags (000000da) [ 339.130734][ T5904] usb 2-1: USB disconnect, device number 30 [ 339.269116][ T8747] bridge0: entered promiscuous mode [ 339.274391][ T8747] macvlan2: entered promiscuous mode [ 339.280761][ T8747] bridge0: port 3(macvlan2) entered blocking state [ 339.287348][ T8747] bridge0: port 3(macvlan2) entered disabled state [ 339.293964][ T8747] macvlan2: entered allmulticast mode [ 339.299424][ T8747] bridge0: entered allmulticast mode [ 339.360452][ T8747] macvlan2: left allmulticast mode [ 339.365755][ T8747] bridge0: left allmulticast mode [ 339.371658][ T8747] bridge0: left promiscuous mode [ 341.061068][ T8766] netlink: 'syz.3.820': attribute type 3 has an invalid length. [ 341.068941][ T8766] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.820'. [ 341.142048][ T8772] netlink: 84 bytes leftover after parsing attributes in process `syz.0.823'. [ 341.151235][ T8772] netlink: 120 bytes leftover after parsing attributes in process `syz.0.823'. [ 341.325486][ T8772] netlink: 64 bytes leftover after parsing attributes in process `syz.0.823'. [ 341.334602][ T8772] netlink: 64 bytes leftover after parsing attributes in process `syz.0.823'. [ 342.986081][ T8790] FAULT_INJECTION: forcing a failure. [ 342.986081][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.059567][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.1.828 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 343.059600][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.059613][ T8790] Call Trace: [ 343.059621][ T8790] [ 343.059629][ T8790] dump_stack_lvl+0x241/0x360 [ 343.059673][ T8790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.059701][ T8790] ? __pfx__printk+0x10/0x10 [ 343.059737][ T8790] should_fail_ex+0x424/0x570 [ 343.059780][ T8790] _copy_from_user+0x2d/0xb0 [ 343.059804][ T8790] ucma_write+0x17f/0x430 [ 343.059825][ T8790] ? rcu_read_lock_any_held+0xbb/0x160 [ 343.059853][ T8790] ? __pfx_ucma_write+0x10/0x10 [ 343.059873][ T8790] ? bpf_lsm_file_permission+0x9/0x10 [ 343.059902][ T8790] ? rw_verify_area+0x246/0x630 [ 343.059931][ T8790] ? __pfx_ucma_write+0x10/0x10 [ 343.059952][ T8790] vfs_write+0x2bc/0xd10 [ 343.059989][ T8790] ? __pfx_vfs_write+0x10/0x10 [ 343.060018][ T8790] ? __fget_files+0x2a/0x420 [ 343.060042][ T8790] ? __fget_files+0x2a/0x420 [ 343.060067][ T8790] ? __fget_files+0x39d/0x420 [ 343.060090][ T8790] ? __fget_files+0x2a/0x420 [ 343.060121][ T8790] ksys_write+0x19d/0x2d0 [ 343.060151][ T8790] ? __pfx_ksys_write+0x10/0x10 [ 343.060202][ T8790] ? do_syscall_64+0xb6/0x230 [ 343.060237][ T8790] do_syscall_64+0xf3/0x230 [ 343.060265][ T8790] ? clear_bhb_loop+0x45/0xa0 [ 343.060289][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.060309][ T8790] RIP: 0033:0x7fb11218d169 [ 343.060327][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.060345][ T8790] RSP: 002b:00007fb112f3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.060367][ T8790] RAX: ffffffffffffffda RBX: 00007fb1123a5fa0 RCX: 00007fb11218d169 [ 343.060383][ T8790] RDX: 0000000000000018 RSI: 0000200000000140 RDI: 0000000000000003 [ 343.060397][ T8790] RBP: 00007fb112f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.060410][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.060423][ T8790] R13: 0000000000000000 R14: 00007fb1123a5fa0 R15: 00007ffc95cd0538 [ 343.060449][ T8790] [ 343.349745][ T5829] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 345.580617][ T8813] tipc: Started in network mode [ 345.585699][ T8813] tipc: Node identity ac14140f, cluster identity 4711 [ 345.594200][ T8813] tipc: Enabled bearer , priority 10 [ 346.194908][ T8817] ======================================================= [ 346.194908][ T8817] WARNING: The mand mount option has been deprecated and [ 346.194908][ T8817] and is ignored by this kernel. Remove the mand [ 346.194908][ T8817] option from the mount to silence this warning. [ 346.194908][ T8817] ======================================================= [ 346.229842][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.446634][ T8822] netlink: 'syz.0.839': attribute type 7 has an invalid length. [ 346.454328][ T8822] netlink: 'syz.0.839': attribute type 5 has an invalid length. [ 346.462252][ T8822] netlink: 17 bytes leftover after parsing attributes in process `syz.0.839'. [ 346.508631][ T8829] netlink: 80 bytes leftover after parsing attributes in process `syz.3.841'. [ 346.547161][ T5904] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 346.706047][ T5874] tipc: Node number set to 2886997007 [ 346.711680][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 347.369487][ T5904] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 347.378161][ T5904] usb 5-1: config 0 has no interface number 0 [ 347.396880][ T5904] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 347.422777][ T5904] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 347.552819][ T5904] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 347.564871][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.578378][ T5904] usb 5-1: Product: syz [ 347.582727][ T5904] usb 5-1: Manufacturer: syz [ 348.156002][ T5904] usb 5-1: SerialNumber: syz [ 348.543675][ T5904] usb 5-1: config 0 descriptor?? [ 348.551082][ T8818] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 348.568292][ T8818] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 349.020846][ T8850] bridge0: entered promiscuous mode [ 349.026979][ T8850] macvlan3: entered promiscuous mode [ 349.037325][ T8850] bridge0: port 3(macvlan3) entered blocking state [ 349.044207][ T8850] bridge0: port 3(macvlan3) entered disabled state [ 349.051474][ T8850] macvlan3: entered allmulticast mode [ 349.057153][ T8850] bridge0: entered allmulticast mode [ 349.081246][ T8850] macvlan3: left allmulticast mode [ 349.086832][ T8850] bridge0: left allmulticast mode [ 349.097776][ T8850] bridge0: left promiscuous mode [ 349.542101][ T5904] asix 5-1:0.251: probe with driver asix failed with error -71 [ 350.406427][ T5904] usb 5-1: USB disconnect, device number 27 [ 350.807841][ T8869] bridge0: entered promiscuous mode [ 350.813478][ T8869] macvlan2: entered promiscuous mode [ 350.823294][ T8869] bridge0: port 3(macvlan2) entered blocking state [ 350.829925][ T8869] bridge0: port 3(macvlan2) entered disabled state [ 350.836606][ T8869] macvlan2: entered allmulticast mode [ 350.841986][ T8869] bridge0: entered allmulticast mode [ 350.849354][ T8869] macvlan2: left allmulticast mode [ 350.854487][ T8869] bridge0: left allmulticast mode [ 350.860985][ T8869] bridge0: left promiscuous mode [ 353.771989][ T8907] bridge0: entered promiscuous mode [ 353.794402][ T8907] macvlan2: entered promiscuous mode [ 353.869954][ T8907] bridge0: port 3(macvlan2) entered blocking state [ 353.875732][ T8908] netlink: 80 bytes leftover after parsing attributes in process `syz.1.867'. [ 353.876812][ T8907] bridge0: port 3(macvlan2) entered disabled state [ 353.893850][ T8907] macvlan2: entered allmulticast mode [ 353.899641][ T8907] bridge0: entered allmulticast mode [ 356.324475][ T8907] macvlan2: left allmulticast mode [ 357.471752][ T8907] bridge0: left allmulticast mode [ 357.571637][ T8907] bridge0: left promiscuous mode [ 359.122022][ T8948] netlink: 'syz.1.878': attribute type 3 has an invalid length. [ 359.129821][ T8948] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.878'. [ 359.759691][ T8962] tipc: Started in network mode [ 359.764794][ T8962] tipc: Node identity ac14140f, cluster identity 4711 [ 359.773529][ T8962] tipc: Enabled bearer , priority 10 [ 360.853226][ T8961] tipc: Enabling of bearer rejected, already enabled [ 360.885730][ T5879] tipc: Node number set to 2886997007 [ 361.366403][ T8978] netlink: 'syz.1.890': attribute type 3 has an invalid length. [ 361.374166][ T8978] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.890'. [ 364.418185][ T8998] xt_recent: Unsupported userspace flags (000000da) [ 364.452933][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 364.452954][ T30] audit: type=1326 audit(1743343211.907:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 364.620344][ T30] audit: type=1326 audit(1743343211.907:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 364.659072][ T30] audit: type=1326 audit(1743343211.937:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 364.683226][ T30] audit: type=1326 audit(1743343211.937:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 364.704558][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.711857][ T30] audit: type=1326 audit(1743343211.947:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 364.736947][ T30] audit: type=1326 audit(1743343211.947:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 365.060372][ T30] audit: type=1326 audit(1743343211.947:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 365.085087][ T30] audit: type=1326 audit(1743343211.947:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 365.109855][ T30] audit: type=1326 audit(1743343211.947:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 365.301987][ T30] audit: type=1326 audit(1743343211.947:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9002 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11218d169 code=0x7ffc0000 [ 365.355298][ T9006] netlink: 80 bytes leftover after parsing attributes in process `syz.4.900'. [ 365.466681][ T9011] netlink: 'syz.0.902': attribute type 3 has an invalid length. [ 365.474403][ T9011] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.902'. [ 367.436957][ T9044] netlink: 'syz.1.912': attribute type 7 has an invalid length. [ 367.444658][ T9044] netlink: 'syz.1.912': attribute type 5 has an invalid length. [ 367.452476][ T9044] netlink: 17 bytes leftover after parsing attributes in process `syz.1.912'. [ 367.658651][ T9047] xt_recent: Unsupported userspace flags (000000da) [ 367.678872][ T9049] netlink: 'syz.0.915': attribute type 3 has an invalid length. [ 367.686667][ T9049] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.915'. [ 368.054244][ T9057] netlink: 80 bytes leftover after parsing attributes in process `syz.2.916'. [ 371.528317][ T5829] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 372.355972][ T9101] netlink: 80 bytes leftover after parsing attributes in process `syz.0.930'. [ 372.386388][ T5199] udevd[5199]: worker [5828] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 372.760532][ T9117] bridge0: entered promiscuous mode [ 372.765894][ T9117] macvlan2: entered promiscuous mode [ 372.772138][ T9117] bridge0: port 3(macvlan2) entered blocking state [ 372.778828][ T9117] bridge0: port 3(macvlan2) entered disabled state [ 373.357981][ T9117] macvlan2: entered allmulticast mode [ 373.363417][ T9117] bridge0: entered allmulticast mode [ 373.455223][ T9117] macvlan2: left allmulticast mode [ 373.460451][ T9117] bridge0: left allmulticast mode [ 373.466418][ T9117] bridge0: left promiscuous mode [ 373.509325][ T5951] plfxlc 3-1:88.41: request_firmware failed (-110) [ 373.526222][ T5951] plfxlc 3-1:88.41: FPGA download failed (-110) [ 373.536631][ T5951] ------------[ cut here ]------------ [ 373.542165][ T5951] WARNING: CPU: 1 PID: 5951 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x86/0xb0 [ 373.554116][ T5951] Modules linked in: [ 373.558162][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:7 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 373.570058][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.580350][ T5951] Workqueue: usb_hub_wq hub_event [ 373.585475][ T5951] RIP: 0010:plfxlc_mac_release+0x86/0xb0 [ 373.591291][ T5951] Code: d3 04 89 c3 31 ff 89 c6 e8 97 4d 72 fa 85 db 74 13 e8 4e 49 72 fa eb 05 e8 47 49 72 fa 5b 5d c3 cc cc cc cc e8 3b 49 72 fa 90 <0f> 0b 90 eb ee 48 c7 c1 20 2d 5e 90 80 e1 07 80 c1 03 38 c1 7c 9b [ 373.611047][ T5951] RSP: 0018:ffffc900044eeb28 EFLAGS: 00010287 [ 373.617233][ T5951] RAX: ffffffff87511115 RBX: 0000000000000000 RCX: 0000000000100000 [ 373.625236][ T5951] RDX: ffffc90019bef000 RSI: 00000000000f2680 RDI: 00000000000f2681 [ 373.633308][ T5951] RBP: 0000000000000001 R08: ffffffff875110f9 R09: 1ffff1100b7f9c5e [ 373.641362][ T5951] R10: dffffc0000000000 R11: ffffed100b7f9c5f R12: 00000000ffffff92 [ 373.649478][ T5951] R13: ffff88805bfc8e40 R14: ffff888032d67000 R15: dffffc0000000000 [ 373.657574][ T5951] FS: 0000000000000000(0000) GS:ffff8881250ed000(0000) knlGS:0000000000000000 [ 373.666858][ T5951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.673491][ T5951] CR2: 000055556fcad808 CR3: 000000005fe8c000 CR4: 00000000003526f0 [ 373.681686][ T5951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.689860][ T5951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.697985][ T5951] Call Trace: [ 373.701302][ T5951] [ 373.704270][ T5951] ? __warn+0x165/0x4d0 [ 373.708546][ T5951] ? plfxlc_mac_release+0x86/0xb0 [ 373.713638][ T5951] ? report_bug+0x2b3/0x500 [ 373.718290][ T5951] ? plfxlc_mac_release+0x86/0xb0 [ 373.723361][ T5951] ? plfxlc_mac_release+0x86/0xb0 [ 373.728532][ T5951] ? plfxlc_mac_release+0x88/0xb0 [ 373.733621][ T5951] ? handle_bug+0x89/0x170 [ 373.738167][ T5951] ? exc_invalid_op+0x1a/0x50 [ 373.742922][ T5951] ? asm_exc_invalid_op+0x1a/0x20 [ 373.748175][ T5951] ? plfxlc_mac_release+0x69/0xb0 [ 373.753244][ T5951] ? plfxlc_mac_release+0x85/0xb0 [ 373.758409][ T5951] ? plfxlc_mac_release+0x86/0xb0 [ 373.763477][ T5951] ? plfxlc_mac_release+0x85/0xb0 [ 373.768647][ T5951] probe+0x2bd/0x930 [ 373.772592][ T5951] ? __pfx_probe+0x10/0x10 [ 373.777111][ T5951] ? __update_runtime_status+0x1af/0x3a0 [ 373.782783][ T5951] ? __pm_runtime_set_status+0x6c1/0xa10 [ 373.788560][ T5951] ? usb_disable_lpm+0x77/0x380 [ 373.793444][ T5951] usb_probe_interface+0x650/0xbc0 [ 373.798609][ T5951] ? __pfx_usb_probe_interface+0x10/0x10 [ 373.804290][ T5951] really_probe+0x2b9/0xad0 [ 373.808853][ T5951] __driver_probe_device+0x1a2/0x390 [ 373.814152][ T5951] driver_probe_device+0x50/0x430 [ 373.819317][ T5951] __device_attach_driver+0x2d6/0x530 [ 373.824702][ T5951] bus_for_each_drv+0x258/0x2e0 [ 373.829608][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 373.835635][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 373.841044][ T5951] __device_attach+0x341/0x530 [ 373.845930][ T5951] ? __pfx___device_attach+0x10/0x10 [ 373.851253][ T5951] ? do_raw_spin_unlock+0x13c/0x8b0 [ 373.856549][ T5951] bus_probe_device+0x189/0x260 [ 373.861427][ T5951] device_add+0x856/0xbf0 [ 373.865883][ T5951] usb_set_configuration+0x1999/0x1fe0 [ 373.871372][ T5951] usb_generic_driver_probe+0x88/0x140 [ 373.876954][ T5951] usb_probe_device+0x1b8/0x380 [ 373.881827][ T5951] ? __pfx_usb_probe_device+0x10/0x10 [ 373.887362][ T5951] really_probe+0x2b9/0xad0 [ 373.891886][ T5951] __driver_probe_device+0x1a2/0x390 [ 373.897225][ T5951] driver_probe_device+0x50/0x430 [ 373.902261][ T5951] __device_attach_driver+0x2d6/0x530 [ 373.907762][ T5951] bus_for_each_drv+0x258/0x2e0 [ 373.912652][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 373.918613][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 373.924001][ T5951] __device_attach+0x341/0x530 [ 373.928939][ T5951] ? __pfx___device_attach+0x10/0x10 [ 373.934237][ T5951] bus_probe_device+0x189/0x260 [ 373.939148][ T5951] device_add+0x856/0xbf0 [ 373.943508][ T5951] usb_new_device+0x1052/0x19a0 [ 373.948451][ T5951] ? __pfx_usb_new_device+0x10/0x10 [ 373.953656][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.958995][ T5951] ? lockdep_hardirqs_on+0x9d/0x150 [ 373.964217][ T5951] hub_event+0x2bfd/0x50f0 [ 373.968720][ T5951] ? enqueue_timer+0x221/0x570 [ 373.973514][ T5951] ? __pfx_hub_event+0x10/0x10 [ 373.978367][ T5951] ? __lock_acquire+0xad5/0xd80 [ 373.983266][ T5951] ? process_scheduled_works+0x9cb/0x18e0 [ 373.989158][ T5951] process_scheduled_works+0xac3/0x18e0 [ 373.994736][ T5951] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.000773][ T5951] ? assign_work+0x367/0x3d0 [ 374.005371][ T5951] worker_thread+0x870/0xd50 [ 374.010022][ T5951] ? __kthread_parkme+0x1a8/0x200 [ 374.015081][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 374.020225][ T5951] kthread+0x7b7/0x940 [ 374.024315][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 374.029524][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.034123][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.038785][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.043386][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.048028][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.053255][ T5951] ? lockdep_hardirqs_on+0x9d/0x150 [ 374.058487][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.063102][ T5951] ret_from_fork+0x4b/0x80 [ 374.067658][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.072260][ T5951] ret_from_fork_asm+0x1a/0x30 [ 374.077078][ T5951] [ 374.080114][ T5951] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 374.087401][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:7 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 374.099120][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 374.109179][ T5951] Workqueue: usb_hub_wq hub_event [ 374.114223][ T5951] Call Trace: [ 374.117506][ T5951] [ 374.120450][ T5951] dump_stack_lvl+0x241/0x360 [ 374.125155][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.130367][ T5951] ? __pfx__printk+0x10/0x10 [ 374.134992][ T5951] ? vscnprintf+0x5d/0x90 [ 374.139351][ T5951] panic+0x349/0x880 [ 374.143280][ T5951] ? __warn+0x174/0x4d0 [ 374.147449][ T5951] ? __pfx_panic+0x10/0x10 [ 374.151883][ T5951] ? ret_from_fork_asm+0x1a/0x30 [ 374.156850][ T5951] __warn+0x344/0x4d0 [ 374.160848][ T5951] ? plfxlc_mac_release+0x86/0xb0 [ 374.165904][ T5951] report_bug+0x2b3/0x500 [ 374.170271][ T5951] ? plfxlc_mac_release+0x86/0xb0 [ 374.175374][ T5951] ? plfxlc_mac_release+0x86/0xb0 [ 374.180496][ T5951] ? plfxlc_mac_release+0x88/0xb0 [ 374.185637][ T5951] handle_bug+0x89/0x170 [ 374.189934][ T5951] exc_invalid_op+0x1a/0x50 [ 374.194533][ T5951] asm_exc_invalid_op+0x1a/0x20 [ 374.199482][ T5951] RIP: 0010:plfxlc_mac_release+0x86/0xb0 [ 374.205134][ T5951] Code: d3 04 89 c3 31 ff 89 c6 e8 97 4d 72 fa 85 db 74 13 e8 4e 49 72 fa eb 05 e8 47 49 72 fa 5b 5d c3 cc cc cc cc e8 3b 49 72 fa 90 <0f> 0b 90 eb ee 48 c7 c1 20 2d 5e 90 80 e1 07 80 c1 03 38 c1 7c 9b [ 374.224750][ T5951] RSP: 0018:ffffc900044eeb28 EFLAGS: 00010287 [ 374.230849][ T5951] RAX: ffffffff87511115 RBX: 0000000000000000 RCX: 0000000000100000 [ 374.238835][ T5951] RDX: ffffc90019bef000 RSI: 00000000000f2680 RDI: 00000000000f2681 [ 374.246812][ T5951] RBP: 0000000000000001 R08: ffffffff875110f9 R09: 1ffff1100b7f9c5e [ 374.254784][ T5951] R10: dffffc0000000000 R11: ffffed100b7f9c5f R12: 00000000ffffff92 [ 374.262759][ T5951] R13: ffff88805bfc8e40 R14: ffff888032d67000 R15: dffffc0000000000 [ 374.270742][ T5951] ? plfxlc_mac_release+0x69/0xb0 [ 374.275773][ T5951] ? plfxlc_mac_release+0x85/0xb0 [ 374.280819][ T5951] ? plfxlc_mac_release+0x85/0xb0 [ 374.285891][ T5951] probe+0x2bd/0x930 [ 374.289837][ T5951] ? __pfx_probe+0x10/0x10 [ 374.294301][ T5951] ? __update_runtime_status+0x1af/0x3a0 [ 374.299992][ T5951] ? __pm_runtime_set_status+0x6c1/0xa10 [ 374.305648][ T5951] ? usb_disable_lpm+0x77/0x380 [ 374.310510][ T5951] usb_probe_interface+0x650/0xbc0 [ 374.315681][ T5951] ? __pfx_usb_probe_interface+0x10/0x10 [ 374.321330][ T5951] really_probe+0x2b9/0xad0 [ 374.325841][ T5951] __driver_probe_device+0x1a2/0x390 [ 374.331132][ T5951] driver_probe_device+0x50/0x430 [ 374.336167][ T5951] __device_attach_driver+0x2d6/0x530 [ 374.341557][ T5951] bus_for_each_drv+0x258/0x2e0 [ 374.346419][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 374.352338][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 374.357724][ T5951] __device_attach+0x341/0x530 [ 374.362509][ T5951] ? __pfx___device_attach+0x10/0x10 [ 374.367825][ T5951] ? do_raw_spin_unlock+0x13c/0x8b0 [ 374.373034][ T5951] bus_probe_device+0x189/0x260 [ 374.377904][ T5951] device_add+0x856/0xbf0 [ 374.382241][ T5951] usb_set_configuration+0x1999/0x1fe0 [ 374.387723][ T5951] usb_generic_driver_probe+0x88/0x140 [ 374.393186][ T5951] usb_probe_device+0x1b8/0x380 [ 374.398054][ T5951] ? __pfx_usb_probe_device+0x10/0x10 [ 374.403453][ T5951] really_probe+0x2b9/0xad0 [ 374.407964][ T5951] __driver_probe_device+0x1a2/0x390 [ 374.413248][ T5951] driver_probe_device+0x50/0x430 [ 374.418272][ T5951] __device_attach_driver+0x2d6/0x530 [ 374.423647][ T5951] bus_for_each_drv+0x258/0x2e0 [ 374.428502][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 374.434399][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 374.439778][ T5951] __device_attach+0x341/0x530 [ 374.444544][ T5951] ? __pfx___device_attach+0x10/0x10 [ 374.449831][ T5951] bus_probe_device+0x189/0x260 [ 374.454685][ T5951] device_add+0x856/0xbf0 [ 374.459020][ T5951] usb_new_device+0x1052/0x19a0 [ 374.463880][ T5951] ? __pfx_usb_new_device+0x10/0x10 [ 374.469091][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.474299][ T5951] ? lockdep_hardirqs_on+0x9d/0x150 [ 374.479501][ T5951] hub_event+0x2bfd/0x50f0 [ 374.483923][ T5951] ? enqueue_timer+0x221/0x570 [ 374.488709][ T5951] ? __pfx_hub_event+0x10/0x10 [ 374.493475][ T5951] ? __lock_acquire+0xad5/0xd80 [ 374.498357][ T5951] ? process_scheduled_works+0x9cb/0x18e0 [ 374.504080][ T5951] process_scheduled_works+0xac3/0x18e0 [ 374.509643][ T5951] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.515653][ T5951] ? assign_work+0x367/0x3d0 [ 374.520252][ T5951] worker_thread+0x870/0xd50 [ 374.524864][ T5951] ? __kthread_parkme+0x1a8/0x200 [ 374.529890][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 374.534998][ T5951] kthread+0x7b7/0x940 [ 374.539067][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 374.544266][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.548871][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.553461][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.558138][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.562729][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.567927][ T5951] ? lockdep_hardirqs_on+0x9d/0x150 [ 374.573132][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.577723][ T5951] ret_from_fork+0x4b/0x80 [ 374.582131][ T5951] ? __pfx_kthread+0x10/0x10 [ 374.586725][ T5951] ret_from_fork_asm+0x1a/0x30 [ 374.591504][ T5951] [ 374.594873][ T5951] Kernel Offset: disabled [ 374.599243][ T5951] Rebooting in 86400 seconds..