last executing test programs: 1m13.201606267s ago: executing program 1 (id=1866): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x40, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fadvise64(r6, 0x5, 0x50c2, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) 1m12.228313395s ago: executing program 1 (id=1868): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007e, 0x220600) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) close(r5) sched_setscheduler(r3, 0x1, 0x0) listen(r2, 0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000340)) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x6) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$GIO_CMAP(r7, 0x4b70, 0x0) r8 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335, 0x0, r7}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r7, &(0x7f00000002c0)={0x1}, r6, 0x3, 0x0, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r12, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c5}, 0x0) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) r13 = dup3(r0, r1, 0x80000) mount_setattr(r13, &(0x7f0000000180)='./file0\x00', 0x1100, &(0x7f00000001c0)={0x100000, 0x87, 0x100000, {r13}}, 0x20) read$msr(r13, 0x0, 0x0) 1m11.230483002s ago: executing program 1 (id=1874): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x3}) accept$ax25(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) r7 = getpid() r8 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r5, &(0x7f00000000c0)={r6}) r9 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r9, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 1m7.885208536s ago: executing program 1 (id=1877): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80ffd, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000100000002000000fb32000062900100", @ANYRES32=0x1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000005000000040000000f00000000000000", @ANYRES32, @ANYBLOB="9249b64ac0ec64e97a341796ae54b402fc6faee8cd28a9715a58319ed125d3e66045f2b2c42e8a8727eba9bb0108189e68416449d2f1fcd6f876904f3232c662c4ad7c67ee6d4c91a3b4703a8c919b8f5fedb9b46daae916890f309da835d9ef36acf8", @ANYRES32, @ANYRESHEX=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)="83915c6f10d0535095537a4f1bdc0002fbfe47797f8e113d908745f1e8ce0d3607b04a55250c2b0af03c69dd3ed7a68ac8bfcd9294c5df6ed5dfccd6c34def7b71ea1c61fd9a991895ef1faf3ff2c47229e9a485579b8742182755bba38b2dd7d14fefc61fb30a9dbcf8fa835d23ddf308b26243aa49a21a13b4401b1b9cf632b33baba2fb9189a328", &(0x7f0000000580), 0xffe, r3}, 0x38) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) write(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0200"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r7 = semget$private(0x0, 0x3, 0x0) semop(r7, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x4, 0x200, 0x800}], 0x2) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8000) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) 1m6.483841096s ago: executing program 1 (id=1882): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x8e02, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000010c0)=0x1f40) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r2, 0x5851, 0x0, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r3, &(0x7f00000004c0)=ANY=[], 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x7fff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000580)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 1m6.067767654s ago: executing program 1 (id=1885): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 50.094475766s ago: executing program 32 (id=1885): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 15.599060738s ago: executing program 4 (id=2011): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) fcntl$setlease(r0, 0x400, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x6, @raw_data="8f196dfc4590ad62bab14f9e87492237b4df86588d7ee0a4b840e1d8fe940324f2ad165745d4199867c84481b4d788e49807bdc7146c7bc0661da2422a62f3d4b5513d67e485098436df0ddd640570f4fba918810e82a5e152b5b2f7f6b9a72910643234e9f79e045815c52a33f6ac46b9f64e1f226886e59049b2f76a1c39f56fc2a2317f14ff5bcef6bb31c9b0ff7cfbaf913ee59686fd673e6c4d5aef0d9df50271ff8afde2d186079c3994f5fe43a8e21473a95395df3dc1b56d1d0fb41800"}, 0x9}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x5, 0x5, 0x39, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x5, 0xfffeffff}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.115460135s ago: executing program 4 (id=2016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x860) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r2, 0x47fc, 0x91d0, 0x0, 0x0, 0x0) 12.172763421s ago: executing program 4 (id=2017): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000000)=""/118, &(0x7f0000000080)=0x76) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xffff34da, 0x3ff, {0xffffffffffffffff}, {0xee01}, 0xdd}) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0xffffffff) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="09fee6a7b64a97fba6c297bd5e80c4bab5ffadea61db3b4b3a61c04ab0f99760520126ac8933c8a5b059da678122cc73f10285d19af24c389baeb4a44408cad36b21b18ed782df28bb10b6acdfdb55d3adca86b7c7234d082220cba68dc3edd2f0f1ca201484787b876500a27baf5a7ebbabaf65877c42d38bc6ee57e7c5ffce72c2453edca2596335d44a4cbc306797185d559fa73291974220e325938ae0286a9ee312900b854db1731a049e34e46c66aff506dcf181", 0xb7}, {&(0x7f0000000280)="051622a090245e16c7cabf4b0c79de86b97f831ae6157d56d7d8a4a08790105ff91844d016a13bbfb6fe9fa43aff2bda9fcbeb3d62ddabcade96dc39a73f8ad316324755ccb5969f1e11133842bc6037ea256ddaf017abb87a82526eee8b5d73d842ca1a4bd873b67ffdcf1b8b0f27fd8bc723a1621fce2aa132cc7a937f5d4ded4dfe4860b3788df031f0a9607cf34274a317851e5fb2dba77867926fb0656f305ba4078fa27bdfdbcf129ab2a88c5c9f7c3c3ee207820de7d03d9dc05306906028ac1d10e740213f9218a34d0f5486874a7f1111267706ee0f00c06b90ce63e8ccc79091", 0xe5}, {&(0x7f0000000380)="89e0075f8d61a0f3471200d3e71d538bcf3e549c3c23f8b4133a4a3e564105cca6d87ee244d781bea9faa2cfec1581cd5a8ec28b5b4d28d8", 0x38}, {&(0x7f00000003c0)="de9af94a8eed51d9f3a7a8aff7430cad6093f171875df5dc081fb03638e89b0c517c5a2f9d2217f0cb82b1e9a129b5e05e4ddd627d75c1c22263e156f5a953725ad7dbc11a2bb9129ffa4a19e7717e98e276e62e317a23cbb36849232df7e69621ca487a64b2aa899f14550e03514b76fa18e6a066fb9e06fb3105e6130ccd04513d275e98825dc3fe8e1573fd2c8fdb69c145a129ca3cab4de5ec0a4da65076d49f3508a8ba7004054270ade0f8e24b799101eac6f3d98565dbe9be092acb534ae57c472995c692e0e927a0840fc7a81c643e9d25f050035468b0816b99d5d5eda6d70e1dace3c3cd18c489f8578f", 0xef}], 0x4, &(0x7f0000000500)=[{0xe8, 0x18, 0x400, "c70b36311cef91217324c7705775b2569f2d95836b8aeac8921cd6968d88fe8f5599ed016256d024513c86d0f1bee30a25a4fe097122df96eeb74c557182abf42a47350dcf9b42670f742c6e5870543199f3d0599a300aaa1200b54eaf83b1a5e5301ac705b39323c2f9e224f9ff761258fa8ee331df9f28253698a142b0af86bf780fd649b7923cd1387aa8f569e9e0d81bd5ccb18aec884b3ff7a9264134fb20269a58365d0dea9514c9f1d8f36d5faada87ea9885a0be9a2ef72aac2c098fdbf7e482e5e2cf2c32ad415171a99757eea1fc5801904e96"}, {0x28, 0x13d, 0x59, "b8f428e5f6eee98183211e55e92104adfa8cfc34"}, {0xe8, 0xff, 0x0, "c91465c6d70cf69cacbdf40a3fec57012a14ebdf7f35f510cc2bdd10a41caa7daadb895f93ee8a3e864f84388b87c42732c3afb0fd22e14e49a49e3fe85a1b428604784fb90ac1681dc41a724f630b0852bae21feacdc30142df01ed1fad16e2a0f53803da0c23e6b6eacb0b5e0634a0532e143470ea5a66e2c84052da17f7ee20132cfc813b323a2a0d87e625abd57fd12b030c912e75c6fca3d3facad7d9200c70667644f14ec07f813ae27babebbc206dd112546426ffed93a40fe6a4f14393cd708b79fedfb4eac9e23800b1938e99"}], 0x1f8}, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x5, 0x1}}, './file0\x00'}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000780)={@broadcast, @broadcast, 0xffffffffffffffff, "f00ee0864e103dfa8d6aecdfc44d4103d2e808bc40c83adc3083895dc04d9677", 0x5, 0x1, 0x0, 0x1}, 0x3c) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f00000007c0), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000880)=0x100000000) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000008c0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000900)={0x5, 0x47, 0x5, 0x9, 0xfffff4fc}, 0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000980)={0x9, 0x0, &(0x7f0000000940)=[r0, r4, r4, r0, r0]}, 0x5) r5 = dup2(r2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000a00)) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000a80)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x0, 0x0, 0xa, 0x0, "22aec4a0ed0c86d294d681c6fb27530ab530a3b4f3aeec20aea239f840f819466737b7fb9f77cedf6993f29f7608b41e150e23cd8b71a4cd0dc0c7872977287b86727a26df1329a69a1963942aedd02b"}, 0xd8) prlimit64(r1, 0x3, 0x0, 0x0) r6 = syz_clone(0x1800, &(0x7f0000000bc0)="bbd8904a2e16eda4beabe68d359888484f74136f4b97eae2a4a4f267cad73e2c1aa057ff59c8d61cfcefd917f8f1598cbb65db579ddda60c122eaa8828", 0x3d, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="d131ebc5556dff9ab11378e5f084d708c37b19101ef292479d2e9b0802c1c82053cbccfd7aec72625d43ccb0bae07a4a32e9f1fca025c281d217d223fb724c34b8") sendmsg$nl_route(r3, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)=@bridge_getlink={0x198, 0x12, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x10080, 0x2680}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "8343b5f4fddd29f8c9d60c01b30e7c5c4c20b0f21c60344e01aed182"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_BROADCAST={0xa}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_VF_PORTS={0x60, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a36c19524893719b31655b779e22ce06"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_PROFILE={0x10, 0x2, '/dev/video#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f302686784ed8014eeebbbee07faf982"}, @IFLA_PORT_PROFILE={0x10, 0x2, '/dev/video#\x00'}]}]}, @IFLA_VF_PORTS={0xc0, 0x18, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x200}, @IFLA_PORT_PROFILE={0x9, 0x2, ',-*\'\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4c5a9a05e2fac315421995ef27676a77"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7c9e222708f8e69befb798275ba0f964"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "358c972383ea103a95562ea0072e283f"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x46}, @IFLA_PORT_PROFILE={0x8, 0x2, '*$\'\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cff956d6094dc28d4adb13c37ea77227"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x48005) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000f40)={0x0, @tick=0x80, 0x7, {0xff, 0x2d}, 0x82, 0x2}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000fc0)=0x1b) openat$dir(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x200040, 0x4) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000001040)='sched_kthread_work_execute_start\x00'}, 0x18) 12.058684377s ago: executing program 4 (id=2019): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4, @fd_index=0x3, 0x5, 0x0, 0x0, 0x16}) io_uring_enter(r1, 0x171f, 0xa66b, 0x7, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xef, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x89, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x74, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x7b, 0x4}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x5, 0x0, 0xd3, 0xff, 0x3}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x447}}, {0x101, &(0x7f0000000640)=@string={0x101, 0x3, "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"}}, {0xe2, &(0x7f0000000780)=ANY=[@ANYBLOB="e203ddac3ac5e060dbf72f78800c4ae18e4f8a51dee07ae8581558c52558f47ba66ea237a9cae1f7e0021bfe3571fac64fa536bb87a2d3c1190a9f1d67ae6b4dbd1655c05b3845974ec3eed4ddfb3cd42578cbe1310599589f9f6b257cc007fb6196000e073e35ff71842d067e46d77afdfec2ccb3376ae3549e62e9304cf92d2b571f28934a0d02abc66d3716d0ee2eb63d89ef1d6fbae6bcbbf8422277b560dece6fe553b46f97415dad953242798d8d3fb6e18eac986efd65342231985c7dedf1b1f11e882672c7b571bd156f9f2b0216f6b8712e60"]}, {0x4, &(0x7f0000000880)=@lang_id={0x4}}, {0xec, &(0x7f00000008c0)=@string={0xec, 0x3, "f86223cc317fa67d0ca258a3b8bf38978e0cae8ba6ae4ee0abc7e9d395d1e66d90046ac99bb78b38b1a19c3231a6934545105277785ec12ca6da035435448e332c478137cfbff4ff058e3d5e0f12f66fd3c93e7c8e5b74a9ee2eb893cfd5cc1870146f8e3bd68f630423b219bb50a310bce7207a66a3701372bbdb0884e2b368a72616343f5f147a59467e9cc775b72d41b5a85d2a12522b167e9a9f4f06c45a3140fcaec2ce01e3052ae135edfdfa6535a022165212f7f15b8adfe9bc5a4a5eb59845ad7c26f917e55693cdd1ef35e18bf67b321938c0e86b2f44ab0f045a90f5078ebf6f528d6fdf9d"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1401}}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000001500007f0400"]) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x40, 0xa, 0xa3, {0xa3, 0x22, "87ccf48ed35fd9bf30feecf9389e334e3034fba6c65b5c486194b8ad58ff435461190687075cfddd07859bf42658eaac1cb27f4d4de42102ab5e5adf9e3a900e5d10e36af5f3327fe618801f1bdd550684a2efcc28e41c5a0419816401fa2d1bcec910ce571357102c47969f8bda1a5afe38fb7d616528551a75d80bbe7f0c772f46a6e9054cc60961e6ae9c589716286eeb508a4926622cadd6cac694c5b86d24"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003e4000000e40312121e94dab4c1ac122279eac86bffcf498756dce63bca9d2ec5895a2548f39728aaa8ba296b802350265e6b78b0b5d0bc2e3e22dadb85b6af5aa22a8fd320e6c0e517721da719cbb529763c986fcd7717db510514407144f1ab4f5e1de5e29c234315e9d7ef01981414b6fb1af152f8dc9c4c26e1f4091b93df7e11de5d15272369b049b851bd206b8e3c970c2b071e1b74dd0dd5cd63f67537469b4268ad3a06b0cf35b96cd7b0ebaf5d4b99c1ab2ec2ae4d8a0158b8dc3178bb47e513df7e66f02168b5e7ae91b2b929b6c90e71a7760900c22944aef794833b3cd62870d3a887"], &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x4, "5a38adba"}, @main=@item_012={0x2, 0x0, 0x9, "8369"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x79bf, 0x81, 0x1, {0x22, 0x242}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0xd, 0x3e, "2c9285a5241c4c2e7f2f8d5c92ec4acd4937357caf9677c79bc2cedbc0f60342a1b64d94ea4dfe50136ed60fb39693aace5917a1e0be9873293bad3c8b79"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x1, 0x3f, "2b8f157278c85200139b4b2d65d72b076e86ba2248fc1d41bb2d6306d1f225d891268b69bb25dca6326e8f4196e62e1039ed97c458c0842a3c8210ee49a336"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) 11.913462637s ago: executing program 0 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 11.793667148s ago: executing program 3 (id=2021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24014000}, 0x0) 11.623537267s ago: executing program 0 (id=2022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24014000}, 0x0) 10.80912106s ago: executing program 3 (id=2024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x88, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @private1, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x8054) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r3, 0x4b6a, &(0x7f0000000340)={0x200f, 0x0, 0x0, 0xfeff, 0x3, "72710080ab003f00"}) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000a40)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 10.559671057s ago: executing program 0 (id=2025): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) iopl(0x3) accept$ax25(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) r7 = getpid() r8 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r5, &(0x7f00000000c0)={r6}) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r9, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 8.859774526s ago: executing program 0 (id=2028): syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x80000000000000a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) 8.730892699s ago: executing program 5 (id=2029): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x400, 0x801, 0x401, 0x5, 0x8000004, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008000) 7.504657403s ago: executing program 4 (id=2031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r3, 0x0, r3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x1000000000000002) 7.504110996s ago: executing program 3 (id=2032): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) write$eventfd(r3, 0x0, 0x0) 7.140231155s ago: executing program 5 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398ee, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) sched_setscheduler(r1, 0x3b47ce4e3bd30403, &(0x7f0000000280)=0x86f9) r2 = getpid() syz_emit_ethernet(0x86, &(0x7f00000008c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004503007800000000002f907800000000ffffffff0000883e0064907802000000030000000400000044c108fc5c47c72626fe2f7cfa25b602ed48a4e23aa1fa1930cef821fa9ef26d78b501b40400b3f74ca615813e0a1261b6b63b29d2396379bcc0226ed355261e4842183ff3929a0d1927f2044ca14ce4"], 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x400005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000002640)={0x1350, 0x12, 0x300, 0x70bd29, 0x25dfdbfd, {0x1d, 0x7, 0x35, 0x4, {0x4e20, 0x4e24, [0x80000000, 0x2b5, 0x401, 0x8], [0x80000001, 0xf], r6, [0x80000000, 0x7]}, 0x8, 0x78}, [@INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "42f854684ec0b328e2219b4644af0a715a34f7027503e8157f5e05216b56aabef1e9df323ece4d3a83018ff879aacee975545564e9989c6b4470974864d1e5c4df2ab70aa8af319fb17f3da748e2860d02edf09e4dfce4e11f32590185895da5d4bf351ad518a3ca389f0f66fb9bd417ae146baf2715dda5e86aa607e18ec5a3362b60bda9aa11182f"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "6d6d663ad08232c2a1a1030cb23af50f32b4eb04de88f67c3f05f559960aaae182d8a60db1cd8e66856b7f08babaed388ca252328308942cfcc5998f107453202bb7e320a335a6f18b0d654a7eaab3ecc62ddb461f992d6bcd29ae92237862198db7e2086636"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "01d4b3a2b0b16c1e75c52ae6dfdcf00f5e118d20ec5c68823ec4b3aa081ce5960bb4564411c1f8c696b13e685c85cf141f24d4ba23c3633cb4371077eabc2da5e96558b4b68c02ae2a35720da1ed9abb9abf99922ab26763"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "8d638d029515471bbe3e375811286ccc5cb2ea7f760984f37b0b21819d556280dc6f2ced10930d7f6022e737337e976093656d521a7d9a3960bd526f483d52c0ec39d4e0db62cc4c8df23d53166007011f61b90151faabd31e679e6b81793030f988830f7aeb96d49c316d65cf51f59c5fd0ef75a41c5b7feeae494076e8f6f84a10994e49c0c48c9235ea2464935eeb12a5d554a54f6027e6"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "ec4de6cdd702870557eaa4b619c446dda7c56f885be9bafac34fae6dfbbcd7862c1a437379572403c467c09f4722160608ea73688e29c6fc6250ed25481155aa1b918610d157063ca4b5abf24413ce3bfd1f2a3ba842"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "a40a9a1e8d554c0d4b9e22d52206cfb292aaaebade35d4a83c0c066f7b12c1b33a4126a8cad27d1d402a35fa6dd2ad4aefcfd7d9640fd4e8d6bcfa0962d4c50c80d39fc207f7dcc93f38de5dc5f06b6601a0e7eed2fe9382b667e864ba3c2c3f3a38f77f3a5b20e6435ff6cf6b09383cb70f4bb1cf4060831fe3919aab3f4c598243743a5f4367b17d3b485386dfab58f3518f"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "1e19a6c25de54e50f8fded9643"}]}, 0x1350}, 0x1, 0x0, 0x0, 0x10}, 0x48800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9c9", 0x56}], 0x1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') pread64(r8, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) write(r7, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 6.549355778s ago: executing program 2 (id=2035): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a00", 0x42) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 6.388280946s ago: executing program 2 (id=2036): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@mcast2, 0x6, 0x885c6170eceb7e20, 0x0, 0x2, 0x4}, &(0x7f0000000800)=0x20) (fail_nth: 4) 6.288693004s ago: executing program 3 (id=2037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000880)=""/241, 0xf1}], 0x5}, 0x2}], 0x2, 0x1, &(0x7f0000001480)={0x77359400}) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x4, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) close(r3) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000640)) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="35100000", @ANYRES16, @ANYBLOB="01000000000000000000100000004000018007000600666f000008000800000000000600010002"], 0x54}}, 0x0) 5.86565924s ago: executing program 2 (id=2038): read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000380)='nfsd\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) ioctl$TUNGETSNDBUF(r7, 0x800454d3, 0x0) read(r2, &(0x7f0000000380)=""/1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.69816644s ago: executing program 5 (id=2039): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) rename(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00'], 0x70}}, 0x4004040) getrlimit(0x974b33aea5c8d644, 0x0) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="000000af0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) 5.627585662s ago: executing program 0 (id=2040): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3000, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r4 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xe000200f}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000ec0)={0x24, &(0x7f0000000100)={0x40, 0xe, 0x7a, {0x7a, 0xd, "bcee842aa8f151d940bbb3c3a2acdeecb98e207de12c4a7be9be9c19e2bb9bccb8f3cdf82def9d0bd41deacdddea37420c387826363da109a3cd711c047f95a0ce91fc3556f84ba80642cfd4535e33df36ff1f3f92db08c48ee2ba8b06e50bee90a19c7040c93e7636ab0373b66ab939b3beb7520f513381"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "c91f0538e72dd843080a24630676ea2c2bf4ce80a499ad5edbd136ee47e3348ca328f42a41df4b1f3908a497be5b5fc7d0d74247a8f2d6c1e296e146242a8cc7fe02967a1a7caa49"}}, &(0x7f0000000180)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xa, "f5e1b758"}, @main=@item_012={0x2, 0x0, 0xc, "eb1c"}, @local=@item_012={0x2, 0x2, 0x4, "5115"}, @global=@item_012={0x2, 0x1, 0x3, "9716"}, @main=@item_4={0x3, 0x0, 0xc, "30042843"}, @main=@item_4={0x3, 0x0, 0xb, "9deb2cbf"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe, 0x16, 0x1, {0x22, 0xe54}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f00)={0x20, 0x15, 0xa4, "054c5fe5d1fe68ad93e22a84e1d7ee933a08b109e023364d7a71e9ff52d6466e71314075a3c522411b003a0e6a098c7a2fc7c4fde7a5ed114924da0bb9dc99f413139d74b9346ae1686cae580b626c1bda65afe847e4586c72194bad6e8fec839ed4bdc14fc3ddd526c5467edd9b2777d011b11372136a5438ebebddadd45bca8d397538dd10ce012763ea0c26a0e38ea75795b5b06e0b4b961886319eeaa1db94909c9b"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x8e}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001040)={0x20, 0x1, 0x9f, "0b950c9944e5dc46696f23e1480a93352f7de67973d8d4f75f6e651ca4182f015089886414b5876a65112f967fb4175b39ef90919ba01afbeb1e266b29bb8d6e434c870c7a1f003814a3eab9d590451e1fc3b16be814d546f264c077f7f6279263b04ce294531877aa07f34a1a2bc86d912ebd6cfcfd2dd8837d7f38bf4b72fc296768cf2007bac82fe8eab8c5aab0839a0087a9ac16dcced8b10a88911fe8"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x59}}) 5.210131707s ago: executing program 3 (id=2041): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 5.209158682s ago: executing program 5 (id=2042): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) rmdir(&(0x7f0000000040)='./control\x00') 4.62123152s ago: executing program 2 (id=2043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 4.454868761s ago: executing program 5 (id=2044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 4.450804745s ago: executing program 4 (id=2045): getresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000000c0)) close_range(r2, r2, 0x2) 2.01507952s ago: executing program 0 (id=2046): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3000, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r4 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xe000200f}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000ec0)={0x24, &(0x7f0000000100)={0x40, 0xe, 0x7a, {0x7a, 0xd, "bcee842aa8f151d940bbb3c3a2acdeecb98e207de12c4a7be9be9c19e2bb9bccb8f3cdf82def9d0bd41deacdddea37420c387826363da109a3cd711c047f95a0ce91fc3556f84ba80642cfd4535e33df36ff1f3f92db08c48ee2ba8b06e50bee90a19c7040c93e7636ab0373b66ab939b3beb7520f513381"}}, &(0x7f0000000e40)={0x0, 0x3, 0x49, @string={0x49, 0x3, "c91f0538e72dd843080a24630676ea2c2bf4ce80a499ad5edbd136ee47e3348ca328f42a41df4b1f3908a497be5b5fc7d0d74247a8f2d6c1e296e146242a8cc7fe02967a1a7caa"}}, &(0x7f0000000180)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xa, "f5e1b758"}, @main=@item_012={0x2, 0x0, 0xc, "eb1c"}, @local=@item_012={0x2, 0x2, 0x4, "5115"}, @global=@item_012={0x2, 0x1, 0x3, "9716"}, @main=@item_4={0x3, 0x0, 0xc, "30042843"}, @main=@item_4={0x3, 0x0, 0xb, "9deb2cbf"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe, 0x16, 0x1, {0x22, 0xe54}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f00)={0x20, 0x15, 0xa4, "054c5fe5d1fe68ad93e22a84e1d7ee933a08b109e023364d7a71e9ff52d6466e71314075a3c522411b003a0e6a098c7a2fc7c4fde7a5ed114924da0bb9dc99f413139d74b9346ae1686cae580b626c1bda65afe847e4586c72194bad6e8fec839ed4bdc14fc3ddd526c5467edd9b2777d011b11372136a5438ebebddadd45bca8d397538dd10ce012763ea0c26a0e38ea75795b5b06e0b4b961886319eeaa1db94909c9b"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x8e}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001040)={0x20, 0x1, 0x9f, "0b950c9944e5dc46696f23e1480a93352f7de67973d8d4f75f6e651ca4182f015089886414b5876a65112f967fb4175b39ef90919ba01afbeb1e266b29bb8d6e434c870c7a1f003814a3eab9d590451e1fc3b16be814d546f264c077f7f6279263b04ce294531877aa07f34a1a2bc86d912ebd6cfcfd2dd8837d7f38bf4b72fc296768cf2007bac82fe8eab8c5aab0839a0087a9ac16dcced8b10a88911fe8"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x59}}) 2.014535991s ago: executing program 2 (id=2047): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) write$eventfd(r3, 0x0, 0x0) 1.969867712s ago: executing program 5 (id=2048): getresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000000c0)) close_range(r2, r2, 0x2) 221.360086ms ago: executing program 3 (id=2049): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0x7040, 0x0) statx(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) 0s ago: executing program 2 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x860) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r3, 0x47fc, 0x91d0, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): arch=c000003e syscall=202 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 493.438927][ T30] audit: type=1326 audit(1746241297.222:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 493.462245][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.724265][ T30] audit: type=1326 audit(1746241297.222:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 493.756186][ T30] audit: type=1326 audit(1746241297.222:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 493.789895][ T30] audit: type=1326 audit(1746241297.222:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 493.813321][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.026126][ T30] audit: type=1326 audit(1746241297.222:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 494.225910][ T30] audit: type=1326 audit(1746241297.222:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 494.249642][ T30] audit: type=1326 audit(1746241297.222:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 494.763195][ T30] audit: type=1326 audit(1746241297.222:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfad8e969 code=0x7ffc0000 [ 495.584489][T10757] FAULT_INJECTION: forcing a failure. [ 495.584489][T10757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.598862][T10757] CPU: 1 UID: 0 PID: 10757 Comm: syz.4.1254 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 495.598886][T10757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 495.598895][T10757] Call Trace: [ 495.598900][T10757] [ 495.598907][T10757] dump_stack_lvl+0x16c/0x1f0 [ 495.598932][T10757] should_fail_ex+0x512/0x640 [ 495.598957][T10757] _copy_from_user+0x2e/0xd0 [ 495.598980][T10757] memdup_user+0x6b/0xe0 [ 495.598998][T10757] strndup_user+0x78/0xe0 [ 495.599016][T10757] __x64_sys_fsopen+0x9c/0x240 [ 495.599036][T10757] do_syscall_64+0xcd/0x260 [ 495.599059][T10757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.599076][T10757] RIP: 0033:0x7f9dfad8e969 [ 495.599089][T10757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.599105][T10757] RSP: 002b:00007f9dfbb8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 495.599122][T10757] RAX: ffffffffffffffda RBX: 00007f9dfafb5fa0 RCX: 00007f9dfad8e969 [ 495.599133][T10757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 495.599150][T10757] RBP: 00007f9dfbb8b090 R08: 0000000000000000 R09: 0000000000000000 [ 495.599160][T10757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.599169][T10757] R13: 0000000000000001 R14: 00007f9dfafb5fa0 R15: 00007fff177d99b8 [ 495.599190][T10757] [ 495.745221][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.011940][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1256'. [ 496.067549][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 496.119243][T10769] FAULT_INJECTION: forcing a failure. [ 496.119243][T10769] name failslab, interval 1, probability 0, space 0, times 0 [ 496.133584][T10769] CPU: 1 UID: 0 PID: 10769 Comm: syz.4.1260 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 496.133607][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 496.133616][T10769] Call Trace: [ 496.133622][T10769] [ 496.133628][T10769] dump_stack_lvl+0x16c/0x1f0 [ 496.133654][T10769] should_fail_ex+0x512/0x640 [ 496.133674][T10769] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 496.133703][T10769] should_failslab+0xc2/0x120 [ 496.133720][T10769] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 496.133746][T10769] ? __alloc_skb+0x2b2/0x380 [ 496.133776][T10769] __alloc_skb+0x2b2/0x380 [ 496.133800][T10769] ? __pfx___alloc_skb+0x10/0x10 [ 496.133828][T10769] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 496.133852][T10769] netlink_alloc_large_skb+0x69/0x130 [ 496.133872][T10769] netlink_sendmsg+0x6a1/0xdd0 [ 496.133893][T10769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.133920][T10769] ____sys_sendmsg+0xa95/0xc70 [ 496.133942][T10769] ? copy_msghdr_from_user+0x10a/0x160 [ 496.133957][T10769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.133989][T10769] ___sys_sendmsg+0x134/0x1d0 [ 496.134006][T10769] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.134055][T10769] __sys_sendmsg+0x16d/0x220 [ 496.134072][T10769] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.134094][T10769] ? rcu_is_watching+0x12/0xc0 [ 496.134120][T10769] do_syscall_64+0xcd/0x260 [ 496.134148][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.134164][T10769] RIP: 0033:0x7f9dfad8e969 [ 496.134178][T10769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.134193][T10769] RSP: 002b:00007f9dfbb8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.134208][T10769] RAX: ffffffffffffffda RBX: 00007f9dfafb5fa0 RCX: 00007f9dfad8e969 [ 496.134219][T10769] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000005 [ 496.134229][T10769] RBP: 00007f9dfbb8b090 R08: 0000000000000000 R09: 0000000000000000 [ 496.134239][T10769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.134248][T10769] R13: 0000000000000000 R14: 00007f9dfafb5fa0 R15: 00007fff177d99b8 [ 496.134271][T10769] [ 496.348460][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.132017][T10781] syz_tun: entered allmulticast mode [ 497.157337][T10781] syz_tun: left allmulticast mode [ 498.234658][T10794] FAULT_INJECTION: forcing a failure. [ 498.234658][T10794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.248223][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.0.1268 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 498.248246][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 498.248256][T10794] Call Trace: [ 498.248261][T10794] [ 498.248268][T10794] dump_stack_lvl+0x16c/0x1f0 [ 498.248293][T10794] should_fail_ex+0x512/0x640 [ 498.248317][T10794] _copy_to_user+0x32/0xd0 [ 498.248341][T10794] bpf_prog_test_run_syscall+0x4c1/0x780 [ 498.248363][T10794] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 498.248380][T10794] ? fput+0x70/0xf0 [ 498.248398][T10794] ? __bpf_prog_get+0xa0/0x290 [ 498.248424][T10794] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 498.248441][T10794] __sys_bpf+0x1485/0x4d80 [ 498.248459][T10794] ? __pfx___schedule+0x10/0x10 [ 498.248480][T10794] ? __pfx___sys_bpf+0x10/0x10 [ 498.248500][T10794] ? ksys_write+0x190/0x240 [ 498.248526][T10794] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 498.248548][T10794] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.248578][T10794] ? fput+0x70/0xf0 [ 498.248594][T10794] ? ksys_write+0x1b9/0x240 [ 498.248616][T10794] ? __pfx_ksys_write+0x10/0x10 [ 498.248637][T10794] ? xfd_validate_state+0x5d/0x180 [ 498.248657][T10794] __x64_sys_bpf+0x78/0xc0 [ 498.248677][T10794] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.248695][T10794] do_syscall_64+0xcd/0x260 [ 498.248717][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.248734][T10794] RIP: 0033:0x7f47ad58e969 [ 498.248748][T10794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.248764][T10794] RSP: 002b:00007f47ae408038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.248780][T10794] RAX: ffffffffffffffda RBX: 00007f47ad7b5fa0 RCX: 00007f47ad58e969 [ 498.248791][T10794] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 498.248805][T10794] RBP: 00007f47ae408090 R08: 0000000000000000 R09: 0000000000000000 [ 498.248815][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.248825][T10794] R13: 0000000000000000 R14: 00007f47ad7b5fa0 R15: 00007ffe0dc48448 [ 498.248847][T10794] [ 498.633113][ T5865] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 498.804494][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 498.834207][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.891571][ T5865] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 498.918441][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.063987][ T5865] usb 3-1: config 0 descriptor?? [ 499.111243][ T5865] hub 3-1:0.0: USB hub found [ 499.260279][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 499.260295][ T30] audit: type=1400 audit(1746241303.212:558): avc: denied { create } for pid=10811 comm="syz.1.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 499.361548][ T5865] hub 3-1:0.0: 1 port detected [ 499.406379][ T30] audit: type=1400 audit(1746241303.352:559): avc: denied { allowed } for pid=10813 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 499.536944][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 499.734023][T10823] 9pnet: p9_errstr2errno: server reported unknown error seq [ 500.484821][T10835] FAULT_INJECTION: forcing a failure. [ 500.484821][T10835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.499066][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 500.528874][T10831] syzkaller0: entered promiscuous mode [ 500.529219][T10835] CPU: 1 UID: 0 PID: 10835 Comm: syz.1.1279 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 500.529240][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 500.529248][T10835] Call Trace: [ 500.529253][T10835] [ 500.529258][T10835] dump_stack_lvl+0x16c/0x1f0 [ 500.529280][T10835] should_fail_ex+0x512/0x640 [ 500.529302][T10835] _copy_from_user+0x2e/0xd0 [ 500.529322][T10835] copy_from_sockptr_offset+0x15c/0x1b0 [ 500.529342][T10835] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 500.529366][T10835] do_ipt_set_ctl+0x544/0xae0 [ 500.529383][T10835] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 500.529399][T10835] ? find_held_lock+0x2b/0x80 [ 500.529418][T10835] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 500.529436][T10835] ? lockdep_hardirqs_on+0x7c/0x110 [ 500.529453][T10835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.529482][T10835] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 500.529500][T10835] nf_setsockopt+0x8a/0xf0 [ 500.529517][T10835] ip_setsockopt+0xcb/0xf0 [ 500.529538][T10835] udp_setsockopt+0x7d/0xd0 [ 500.529555][T10835] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 500.529573][T10835] do_sock_setsockopt+0x221/0x470 [ 500.529590][T10835] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 500.529619][T10835] __sys_setsockopt+0x1a0/0x230 [ 500.529644][T10835] __x64_sys_setsockopt+0xbd/0x160 [ 500.529664][T10835] ? do_syscall_64+0x91/0x260 [ 500.529682][T10835] ? lockdep_hardirqs_on+0x7c/0x110 [ 500.529698][T10835] do_syscall_64+0xcd/0x260 [ 500.529717][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.529732][T10835] RIP: 0033:0x7f9b0898e969 [ 500.529744][T10835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.529758][T10835] RSP: 002b:00007f9b067f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.529773][T10835] RAX: ffffffffffffffda RBX: 00007f9b08bb5fa0 RCX: 00007f9b0898e969 [ 500.529782][T10835] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 500.529791][T10835] RBP: 00007f9b067f6090 R08: 0000000000000488 R09: 0000000000000000 [ 500.529800][T10835] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.529808][T10835] R13: 0000000000000000 R14: 00007f9b08bb5fa0 R15: 00007ffcbd951d68 [ 500.529828][T10835] [ 500.794632][T10831] syzkaller0: entered allmulticast mode [ 501.045214][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.052200][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.523922][ T5865] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 501.569045][ T5865] usb 3-1-port1: connect-debounce failed [ 501.698815][ T30] audit: type=1326 audit(1746241305.642:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10801 comm="syz.0.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad58e969 code=0x7fc00000 [ 501.864767][T10854] fuse: Bad value for 'group_id' [ 501.869766][T10854] fuse: Bad value for 'group_id' [ 501.929788][ T5932] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 502.090363][ T5866] usb 3-1: USB disconnect, device number 41 [ 502.274507][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 502.293590][ T5932] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 502.326243][ T5932] usb 5-1: config 0 has no interface number 0 [ 502.362610][ T5932] usb 5-1: config 0 interface 12 has no altsetting 0 [ 502.375272][ T5932] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 502.384692][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.392737][ T5932] usb 5-1: Product: syz [ 502.397051][ T5932] usb 5-1: Manufacturer: syz [ 502.401703][ T5932] usb 5-1: SerialNumber: syz [ 502.430873][ T5932] usb 5-1: config 0 descriptor?? [ 502.970998][ T5932] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 502.985067][ T5932] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 502.992388][ T5932] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 503.604400][ T5932] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 504.203725][ T5932] usb 5-1: USB disconnect, device number 33 [ 504.481258][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 505.361260][ T30] audit: type=1400 audit(1746241309.312:561): avc: denied { create } for pid=10899 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 505.419118][ T30] audit: type=1400 audit(1746241309.312:562): avc: denied { write } for pid=10899 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 505.490899][ T30] audit: type=1400 audit(1746241309.312:563): avc: denied { nlmsg_read } for pid=10899 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 505.522878][ T30] audit: type=1400 audit(1746241309.312:564): avc: denied { read } for pid=10899 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 505.623557][T10912] fuse: Bad value for 'group_id' [ 505.630239][T10912] fuse: Bad value for 'group_id' [ 507.259746][ T30] audit: type=1400 audit(1746241311.212:565): avc: denied { create } for pid=10931 comm="syz.3.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 508.807986][T10963] fuse: Bad value for 'group_id' [ 508.821844][T10963] fuse: Bad value for 'group_id' [ 508.999473][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 509.027045][ T30] audit: type=1400 audit(1746241312.982:566): avc: denied { listen } for pid=10964 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.055727][T10971] FAULT_INJECTION: forcing a failure. [ 509.055727][T10971] name failslab, interval 1, probability 0, space 0, times 0 [ 509.058089][T10970] syzkaller0: entered promiscuous mode [ 509.122221][T10970] syzkaller0: entered allmulticast mode [ 509.135124][ T30] audit: type=1400 audit(1746241313.062:567): avc: denied { write } for pid=10964 comm="syz.1.1314" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 509.192753][T10971] CPU: 0 UID: 0 PID: 10971 Comm: syz.1.1314 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 509.192776][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 509.192786][T10971] Call Trace: [ 509.192791][T10971] [ 509.192797][T10971] dump_stack_lvl+0x16c/0x1f0 [ 509.192821][T10971] should_fail_ex+0x512/0x640 [ 509.192839][T10971] ? fs_reclaim_acquire+0xae/0x150 [ 509.192862][T10971] should_failslab+0xc2/0x120 [ 509.192881][T10971] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 509.192908][T10971] ? security_inode_alloc+0x3b/0x2b0 [ 509.192931][T10971] security_inode_alloc+0x3b/0x2b0 [ 509.192951][T10971] inode_init_always_gfp+0xce4/0x1030 [ 509.192980][T10971] alloc_inode+0x86/0x240 [ 509.193000][T10971] sock_alloc+0x40/0x280 [ 509.193019][T10971] do_accept+0xf7/0x530 [ 509.193041][T10971] ? do_raw_spin_lock+0x12c/0x2b0 [ 509.193067][T10971] ? __pfx_do_accept+0x10/0x10 [ 509.193105][T10971] __sys_accept4+0x100/0x1b0 [ 509.193128][T10971] ? __pfx___sys_accept4+0x10/0x10 [ 509.193151][T10971] ? __pfx_ksys_write+0x10/0x10 [ 509.193172][T10971] ? rcu_is_watching+0x12/0xc0 [ 509.193192][T10971] __x64_sys_accept4+0x96/0x100 [ 509.193212][T10971] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.193230][T10971] do_syscall_64+0xcd/0x260 [ 509.193252][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.193266][T10971] RIP: 0033:0x7f9b0898e969 [ 509.193279][T10971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.193295][T10971] RSP: 002b:00007f9b067f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 509.193310][T10971] RAX: ffffffffffffffda RBX: 00007f9b08bb5fa0 RCX: 00007f9b0898e969 [ 509.193321][T10971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 509.193330][T10971] RBP: 00007f9b067f6090 R08: 0000000000000000 R09: 0000000000000000 [ 509.193339][T10971] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 509.193349][T10971] R13: 0000000000000000 R14: 00007f9b08bb5fa0 R15: 00007ffcbd951d68 [ 509.193370][T10971] [ 509.398759][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.180903][T10985] Bluetooth: (null): Invalid header checksum [ 510.320356][ T6013] Bluetooth: (null): Invalid header checksum [ 510.344253][ T6013] Bluetooth: (null): Invalid header checksum [ 510.367237][ T9141] Bluetooth: (null): Invalid header checksum [ 510.635316][ T30] audit: type=1400 audit(1746241314.562:568): avc: denied { read write } for pid=10974 comm="syz.2.1315" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 510.854514][ T30] audit: type=1400 audit(1746241314.562:569): avc: denied { open } for pid=10974 comm="syz.2.1315" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 511.705782][ T5863] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 511.865913][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.877260][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 511.907058][ T5863] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.956994][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.985334][ T5863] usb 5-1: config 0 descriptor?? [ 512.003356][ T5863] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 512.557472][T11014] fuse: Bad value for 'group_id' [ 512.563619][T11014] fuse: Bad value for 'group_id' [ 513.753707][T11037] overlay: ./file0 is not a directory [ 514.672200][ T5863] usb 5-1: USB disconnect, device number 34 [ 514.812401][T11048] FAULT_INJECTION: forcing a failure. [ 514.812401][T11048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.925637][T11048] CPU: 0 UID: 0 PID: 11048 Comm: syz.3.1335 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 514.925654][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 514.925660][T11048] Call Trace: [ 514.925664][T11048] [ 514.925667][T11048] dump_stack_lvl+0x16c/0x1f0 [ 514.925684][T11048] should_fail_ex+0x512/0x640 [ 514.925700][T11048] _copy_from_user+0x2e/0xd0 [ 514.925715][T11048] memdup_user+0x6b/0xe0 [ 514.925727][T11048] strndup_user+0x78/0xe0 [ 514.925738][T11048] __x64_sys_mount+0x137/0x310 [ 514.925750][T11048] ? __pfx___x64_sys_mount+0x10/0x10 [ 514.925760][T11048] ? rcu_is_watching+0x12/0xc0 [ 514.925775][T11048] do_syscall_64+0xcd/0x260 [ 514.925790][T11048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.925800][T11048] RIP: 0033:0x7f010598e969 [ 514.925808][T11048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.925818][T11048] RSP: 002b:00007f01067b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 514.925828][T11048] RAX: ffffffffffffffda RBX: 00007f0105bb5fa0 RCX: 00007f010598e969 [ 514.925834][T11048] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 514.925840][T11048] RBP: 00007f01067b8090 R08: 0000200000000400 R09: 0000000000000000 [ 514.925846][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.925852][T11048] R13: 0000000000000000 R14: 00007f0105bb5fa0 R15: 00007fff89ad3138 [ 514.925864][T11048] [ 515.085028][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.092945][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 515.105849][T11052] syzkaller0: entered promiscuous mode [ 515.111311][T11052] syzkaller0: entered allmulticast mode [ 515.729507][T11073] FAULT_INJECTION: forcing a failure. [ 515.729507][T11073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.742699][T11073] CPU: 1 UID: 0 PID: 11073 Comm: syz.2.1336 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 515.742722][T11073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 515.742731][T11073] Call Trace: [ 515.742737][T11073] [ 515.742744][T11073] dump_stack_lvl+0x16c/0x1f0 [ 515.742768][T11073] should_fail_ex+0x512/0x640 [ 515.742792][T11073] _copy_to_user+0x32/0xd0 [ 515.742816][T11073] do_pagemap_scan+0xb93/0xd00 [ 515.742846][T11073] ? __pfx_do_pagemap_scan+0x10/0x10 [ 515.742876][T11073] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 515.742916][T11073] ? selinux_file_ioctl+0x180/0x270 [ 515.742938][T11073] ? selinux_file_ioctl+0xb4/0x270 [ 515.742963][T11073] do_pagemap_cmd+0x58/0x80 [ 515.742985][T11073] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 515.743014][T11073] __x64_sys_ioctl+0x190/0x200 [ 515.743037][T11073] do_syscall_64+0xcd/0x260 [ 515.743060][T11073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.743076][T11073] RIP: 0033:0x7f88cbd8e969 [ 515.743090][T11073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.743106][T11073] RSP: 002b:00007f88ccb18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.743122][T11073] RAX: ffffffffffffffda RBX: 00007f88cbfb6160 RCX: 00007f88cbd8e969 [ 515.743133][T11073] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 000000000000000a [ 515.743143][T11073] RBP: 00007f88ccb18090 R08: 0000000000000000 R09: 0000000000000000 [ 515.743152][T11073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.743162][T11073] R13: 0000000000000000 R14: 00007f88cbfb6160 R15: 00007ffde85886c8 [ 515.743184][T11073] [ 516.290948][T11063] fuse: Bad value for 'group_id' [ 516.390252][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1342'. [ 516.399817][T11063] fuse: Bad value for 'group_id' [ 516.410419][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 516.506433][T11081] netlink: 'syz.2.1342': attribute type 6 has an invalid length. [ 517.624415][ T5863] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 518.345922][ T5863] usb 5-1: config 0 has no interfaces? [ 518.351553][ T5863] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 518.361072][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.684593][ T5866] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 518.783950][T11110] FAULT_INJECTION: forcing a failure. [ 518.783950][T11110] name failslab, interval 1, probability 0, space 0, times 0 [ 518.807341][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.3.1351 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 518.807367][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 518.807377][T11110] Call Trace: [ 518.807383][T11110] [ 518.807390][T11110] dump_stack_lvl+0x16c/0x1f0 [ 518.807415][T11110] should_fail_ex+0x512/0x640 [ 518.807435][T11110] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 518.807464][T11110] should_failslab+0xc2/0x120 [ 518.807482][T11110] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 518.807509][T11110] ? getname_kernel+0x52/0x370 [ 518.807530][T11110] getname_kernel+0x52/0x370 [ 518.807549][T11110] kern_path+0x1d/0x50 [ 518.807573][T11110] bpf_uprobe_multi_link_attach+0x395/0x1070 [ 518.807593][T11110] ? find_held_lock+0x2b/0x80 [ 518.807614][T11110] ? __fget_files+0x204/0x3c0 [ 518.807641][T11110] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 518.807658][T11110] ? __fget_files+0x20e/0x3c0 [ 518.807687][T11110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 518.807719][T11110] __sys_bpf+0x3fb6/0x4d80 [ 518.807743][T11110] ? __pfx___sys_bpf+0x10/0x10 [ 518.807763][T11110] ? ksys_write+0x190/0x240 [ 518.807796][T11110] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 518.807833][T11110] ? fput+0x70/0xf0 [ 518.807850][T11110] ? ksys_write+0x1b9/0x240 [ 518.807873][T11110] ? __pfx_ksys_write+0x10/0x10 [ 518.807901][T11110] __x64_sys_bpf+0x78/0xc0 [ 518.807921][T11110] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.807941][T11110] do_syscall_64+0xcd/0x260 [ 518.807964][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.807981][T11110] RIP: 0033:0x7f010598e969 [ 518.807996][T11110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.808012][T11110] RSP: 002b:00007f01067b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.808028][T11110] RAX: ffffffffffffffda RBX: 00007f0105bb5fa0 RCX: 00007f010598e969 [ 518.808039][T11110] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 518.808049][T11110] RBP: 00007f01067b8090 R08: 0000000000000000 R09: 0000000000000000 [ 518.808058][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.808068][T11110] R13: 0000000000000000 R14: 00007f0105bb5fa0 R15: 00007fff89ad3138 [ 518.808091][T11110] [ 519.040341][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.317763][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.331298][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.342891][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 519.417666][ T5866] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.481515][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.866882][ T5863] usb 5-1: config 0 descriptor?? [ 519.879401][ T5866] usb 3-1: config 0 descriptor?? [ 520.110762][T11087] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1344'. [ 520.144621][ T5864] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 520.179957][T11087] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1344'. [ 520.327357][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 520.386205][ T5864] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 520.427800][ T5864] usb 4-1: config 0 has no interface number 0 [ 520.441272][ T5866] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 520.486608][ T5864] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 520.518424][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.558756][ T5866] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 520.611820][ T5864] usb 4-1: Product: syz [ 520.641596][ T5863] usb 5-1: USB disconnect, device number 35 [ 520.659713][ T5864] usb 4-1: Manufacturer: syz [ 520.693709][ T5864] usb 4-1: SerialNumber: syz [ 520.716404][ T5864] usb 4-1: config 0 descriptor?? [ 521.426637][ T30] audit: type=1400 audit(1746241325.382:570): avc: denied { setopt } for pid=11117 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 521.446118][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.520011][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.582743][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.597933][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.442773][ T5865] usb 3-1: USB disconnect, device number 42 [ 522.631091][T11116] random: crng reseeded on system resumption [ 523.168104][T11140] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 523.392696][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.425961][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.645480][ T30] audit: type=1400 audit(1746241327.592:571): avc: denied { read } for pid=11135 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 523.764029][ T30] audit: type=1400 audit(1746241327.652:572): avc: denied { getopt } for pid=11135 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 524.134388][ T5865] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 524.246329][ T5863] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 524.286002][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 524.298013][ T5865] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 524.310265][ T5865] usb 3-1: config 0 has no interface number 0 [ 524.446249][ T5865] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.457557][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 524.464024][ T5865] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 524.477433][ T5863] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 524.487810][ T5863] usb 5-1: config 0 has no interface number 0 [ 524.494823][ T5863] usb 5-1: config 0 interface 12 has no altsetting 0 [ 524.504017][ T5863] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 524.514039][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.514199][ T5865] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 524.531343][ T5863] usb 5-1: Product: syz [ 524.535775][ T5863] usb 5-1: Manufacturer: syz [ 524.540366][ T5863] usb 5-1: SerialNumber: syz [ 524.547780][ T30] audit: type=1326 audit(1746241328.492:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010598e969 code=0x7fc00000 [ 524.578503][ T5863] usb 5-1: config 0 descriptor?? [ 524.580111][T11162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1365'. [ 524.583531][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 524.601269][ T5864] usb 4-1: USB disconnect, device number 39 [ 524.602420][ T5865] usb 3-1: Product: syz [ 524.611651][ T5865] usb 3-1: SerialNumber: syz [ 524.621244][ T5865] usb 3-1: config 0 descriptor?? [ 524.655970][ T5865] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 524.674261][ T5865] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input26 [ 525.320458][ T5863] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 525.320639][ T5863] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 525.320684][ T5863] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 525.321004][ T5863] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 525.807291][ T5863] usb 5-1: USB disconnect, device number 36 [ 526.036222][T11175] xt_CT: No such helper "pptp" [ 528.434756][ C0] cm109_urb_ctl_callback: 21 callbacks suppressed [ 528.434777][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 528.436672][ T5866] usb 3-1: USB disconnect, device number 43 [ 528.441220][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 528.837970][T11206] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 529.607984][ T5866] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 535.968765][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 540.282117][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 540.491241][T11286] syz_tun: entered allmulticast mode [ 540.496912][T11285] syz_tun: left allmulticast mode [ 541.565805][ T36] Bluetooth: (null): Too short H5 packet [ 541.571486][ T36] Bluetooth: (null): Invalid header checksum [ 541.580928][ T36] Bluetooth: (null): Invalid header checksum [ 544.077486][T11335] fuse: Bad value for 'fd' [ 545.163795][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1406'. [ 545.398995][T11357] Bluetooth: (null): Invalid header checksum [ 548.912482][ T6013] Bluetooth: (null): Invalid header checksum [ 548.918658][ T6013] Bluetooth: (null): Invalid header checksum [ 549.054387][ T6013] Bluetooth: (null): Invalid header checksum [ 549.382665][T11416] Bluetooth: (null): Invalid header checksum [ 549.530477][ T36] Bluetooth: (null): Invalid header checksum [ 550.391814][ T36] Bluetooth: (null): Invalid header checksum [ 550.399803][ T36] Bluetooth: (null): Invalid header checksum [ 550.414597][ T36] Bluetooth: (null): Invalid header checksum [ 550.435323][ T36] Bluetooth: (null): Invalid header checksum [ 550.444735][ T36] Bluetooth: (null): Invalid header checksum [ 550.454875][ T36] Bluetooth: (null): Invalid header checksum [ 550.461798][ T36] Bluetooth: (null): Invalid header checksum [ 550.490642][ T36] Bluetooth: (null): Invalid header checksum [ 550.576019][T11426] syz_tun: entered allmulticast mode [ 550.620184][T11425] syz_tun: left allmulticast mode [ 553.406803][ T9134] Bluetooth: (null): Invalid header checksum [ 553.412892][ T9134] Bluetooth: (null): Invalid header checksum [ 553.471581][ T9134] Bluetooth: (null): Invalid header checksum [ 553.522567][ T9134] Bluetooth: (null): Invalid header checksum [ 553.531770][ T9134] Bluetooth: (null): Invalid header checksum [ 553.538101][ T9134] Bluetooth: (null): Invalid header checksum [ 553.647274][ T9134] Bluetooth: (null): Invalid header checksum [ 553.653359][ T9134] Bluetooth: (null): Invalid header checksum [ 555.428834][T11485] syz_tun: entered allmulticast mode [ 555.709332][T11476] syz_tun: left allmulticast mode [ 556.308662][ T5809] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 556.495750][ T5809] usb 4-1: config 0 has no interfaces? [ 556.512592][ T5809] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 556.574634][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.648114][ T5809] usb 4-1: config 0 descriptor?? [ 557.083112][ T5809] usb 4-1: USB disconnect, device number 40 [ 558.002731][T11515] futex_wake_op: syz.1.1449 tries to shift op by -1; fix this program [ 561.579753][ T9134] Bluetooth: (null): Too short H5 packet [ 561.649487][ T9134] Bluetooth: (null): Invalid header checksum [ 561.678159][ T9134] Bluetooth: (null): Invalid header checksum [ 561.684172][ T9134] Bluetooth: (null): Invalid header checksum [ 562.476052][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.679273][ T9134] Bluetooth: (null): Invalid header checksum [ 562.694619][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.408583][ T5865] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 564.260423][ T5865] usb 3-1: device descriptor read/64, error -71 [ 565.044690][ T5865] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 565.949660][T11575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1467'. [ 569.621362][T11587] Bluetooth: (null): Invalid header checksum [ 569.726651][ T1146] Bluetooth: (null): Invalid header checksum [ 569.763565][ T1146] Bluetooth: (null): Invalid header checksum [ 569.818747][ T9134] Bluetooth: (null): Invalid header checksum [ 570.106336][ T9134] Bluetooth: (null): Invalid header checksum [ 570.112391][ T9134] Bluetooth: (null): Invalid header checksum [ 570.115099][ T54] Bluetooth: (null): Too short H5 packet [ 570.154503][ T54] Bluetooth: (null): Invalid header checksum [ 570.180900][ T54] Bluetooth: (null): Invalid header checksum [ 570.203242][ T9134] Bluetooth: (null): Invalid header checksum [ 571.379097][T11602] Bluetooth: (null): Invalid header checksum [ 571.509544][ T54] Bluetooth: (null): Invalid header checksum [ 571.534649][ T54] Bluetooth: (null): Invalid header checksum [ 571.594600][ T9134] Bluetooth: (null): Invalid header checksum [ 571.650049][T11605] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1476'. [ 572.725037][ T6013] Bluetooth: (null): Invalid header checksum [ 572.731116][ T6013] Bluetooth: (null): Invalid header checksum [ 572.765320][ T6013] Bluetooth: (null): Invalid header checksum [ 572.776593][ T54] Bluetooth: (null): Invalid header checksum [ 573.585878][ T5917] Bluetooth: (null): Invalid header checksum [ 573.592024][ T5917] Bluetooth: (null): Invalid header checksum [ 573.612437][ T5917] Bluetooth: (null): Invalid header checksum [ 573.620161][ T5917] Bluetooth: (null): Invalid header checksum [ 573.624335][ T30] audit: type=1326 audit(1746241377.102:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11591 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0898e969 code=0x7fc00000 [ 573.627327][ T5917] Bluetooth: (null): Invalid header checksum [ 573.657203][ T5917] Bluetooth: (null): Invalid header checksum [ 573.663266][ T5917] Bluetooth: (null): Invalid header checksum [ 574.401450][ T5866] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 574.619495][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.233255][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.243742][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.257089][ T5866] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.271946][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.292497][ T5866] usb 4-1: config 0 descriptor?? [ 575.318837][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 575.388298][T11631] syzkaller0: entered promiscuous mode [ 575.393977][T11631] syzkaller0: entered allmulticast mode [ 576.111993][ T5866] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 576.140320][ T5866] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 576.218291][T11649] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1488'. [ 577.799184][ T5809] usb 4-1: USB disconnect, device number 41 [ 577.837261][T11665] fuse: Bad value for 'group_id' [ 577.843709][T11665] fuse: Bad value for 'group_id' [ 579.254443][ T5866] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 579.468467][T11684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1497'. [ 579.624384][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 579.637277][ T5866] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 579.645965][ T5866] usb 4-1: config 0 has no interface number 0 [ 579.655838][ T5866] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 580.159595][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.174336][ T5866] usb 4-1: Product: syz [ 580.180190][ T5866] usb 4-1: Manufacturer: syz [ 580.202872][ T5866] usb 4-1: SerialNumber: syz [ 580.310671][ T5866] usb 4-1: config 0 descriptor?? [ 583.214667][ T30] audit: type=1326 audit(1746241387.172:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.3.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010598e969 code=0x7fc00000 [ 583.238078][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.428780][ T5866] usb 4-1: USB disconnect, device number 42 [ 583.536446][ T5932] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 584.117521][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 584.136157][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.211590][T11726] fuse: Bad value for 'user_id' [ 584.325677][T11726] fuse: Bad value for 'user_id' [ 584.976408][T11729] ubi: mtd0 is already attached to ubi31 [ 585.055124][T11729] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 585.247520][T11737] futex_wake_op: syz.0.1516 tries to shift op by -1; fix this program [ 587.753601][T11740] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 587.760928][T11740] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 587.766589][T11740] pim6reg0: persist enabled [ 589.374616][ T5932] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 589.684497][ T5932] usb 3-1: device descriptor read/64, error -71 [ 590.206235][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1523'. [ 590.450613][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 590.464440][ T5932] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 590.557672][T11779] syzkaller0: entered promiscuous mode [ 590.604849][T11779] syzkaller0: entered allmulticast mode [ 590.674817][ T5932] usb 3-1: device descriptor read/64, error -71 [ 590.840030][ T5932] usb usb3-port1: attempt power cycle [ 591.915339][ T5932] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 592.048307][T11795] Bluetooth: (null): Invalid header checksum [ 592.226549][ T13] Bluetooth: (null): Invalid header checksum [ 592.232624][ T13] Bluetooth: (null): Invalid header checksum [ 592.239611][ T5932] usb 3-1: device descriptor read/8, error -71 [ 592.386381][ T13] Bluetooth: (null): Invalid header checksum [ 592.392456][ T13] Bluetooth: (null): Invalid header checksum [ 593.203914][T11802] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 593.209750][T11802] pim6reg0: persist enabled [ 593.426398][T11809] syzkaller0: entered promiscuous mode [ 593.432052][T11809] syzkaller0: entered allmulticast mode [ 595.444745][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'. [ 595.496409][T11842] syzkaller0: entered promiscuous mode [ 595.517793][T11842] syzkaller0: entered allmulticast mode [ 597.354770][ T9141] Bluetooth: (null): Invalid header checksum [ 597.360858][ T9141] Bluetooth: (null): Invalid header checksum [ 597.383417][ T9141] Bluetooth: (null): Invalid header checksum [ 597.440190][ T9141] Bluetooth: (null): Invalid header checksum [ 597.465238][T11873] fuse: Bad value for 'group_id' [ 597.470246][T11873] fuse: Bad value for 'group_id' [ 597.753473][ T1102] Bluetooth: (null): Invalid header checksum [ 597.850327][ T1102] Bluetooth: (null): Invalid header checksum [ 597.862992][ T1102] Bluetooth: (null): Invalid header checksum [ 597.877059][ T1102] Bluetooth: (null): Invalid header checksum [ 598.542484][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 598.647668][T11891] syzkaller0: entered promiscuous mode [ 598.653199][T11891] syzkaller0: entered allmulticast mode [ 600.895926][ T36] Bluetooth: (null): Invalid header checksum [ 600.939058][ T36] Bluetooth: (null): Invalid header checksum [ 600.994620][ T36] Bluetooth: (null): Invalid header checksum [ 601.896207][T11937] fuse: Bad value for 'group_id' [ 601.901228][T11937] fuse: Bad value for 'group_id' [ 602.314409][ T5809] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 602.497177][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 602.509388][ T5809] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 602.519054][ T5809] usb 4-1: config 0 has no interface number 0 [ 602.527876][ T5809] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 602.537901][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.558062][ T5809] usb 4-1: Product: syz [ 602.562274][ T5809] usb 4-1: Manufacturer: syz [ 602.600131][ T5809] usb 4-1: SerialNumber: syz [ 602.605560][ T5865] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 602.625524][ T5809] usb 4-1: config 0 descriptor?? [ 602.812146][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 602.826510][ T5865] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 602.836260][ T5865] usb 3-1: config 0 has no interface number 0 [ 602.842378][ T5865] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 602.856180][ T5865] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 603.569126][ T5865] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 603.580225][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 603.588929][ T5865] usb 3-1: Product: syz [ 603.593152][ T5865] usb 3-1: SerialNumber: syz [ 603.610437][ T5865] usb 3-1: config 0 descriptor?? [ 603.642131][ T5865] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 603.653878][ T5865] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input28 [ 603.712586][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.602143][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.616205][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.719285][T11932] random: crng reseeded on system resumption [ 604.800059][T11962] xt_CT: No such helper "pptp" [ 604.808091][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 604.808362][ T5866] usb 3-1: USB disconnect, device number 51 [ 604.815037][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 604.982925][T11967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.008508][T11967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.029402][ T5866] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 605.882840][T11985] fuse: Bad value for 'group_id' [ 605.894518][T11985] fuse: Bad value for 'group_id' [ 606.017932][ T5865] usb 4-1: USB disconnect, device number 43 [ 606.055435][ T30] audit: type=1326 audit(1746241409.962:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010598e969 code=0x7fc00000 [ 606.078795][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.703876][T12005] Bluetooth: (null): Invalid header checksum [ 606.939770][ T13] Bluetooth: (null): Invalid header checksum [ 606.984709][ T13] Bluetooth: (null): Invalid header checksum [ 606.990849][ T13] Bluetooth: (null): Invalid header checksum [ 609.309497][T12038] fuse: Bad value for 'group_id' [ 609.330394][T12038] fuse: Bad value for 'group_id' [ 609.509143][T12043] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 611.140465][T12058] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 612.544008][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 613.946922][T12121] Bluetooth: (null): Invalid header checksum [ 614.050725][ T6013] Bluetooth: (null): Invalid header checksum [ 614.157153][ T6013] Bluetooth: (null): Invalid header checksum [ 614.168193][ T6013] Bluetooth: (null): Invalid header checksum [ 614.305480][ T9141] Bluetooth: (null): Invalid header checksum [ 617.056529][ T1146] Bluetooth: (null): Too short H5 packet [ 617.225178][ T1146] Bluetooth: (null): Invalid header checksum [ 617.240181][ T1146] Bluetooth: (null): Invalid header checksum [ 617.364259][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 617.385411][T12150] syzkaller0: entered promiscuous mode [ 617.390922][T12150] syzkaller0: entered allmulticast mode [ 621.534930][ T5932] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 621.673448][ T30] audit: type=1400 audit(1746241425.622:577): avc: denied { ioctl } for pid=12181 comm="syz.4.1630" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 621.698419][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.874485][ T5932] usb 3-1: device descriptor read/64, error -71 [ 622.134544][ T5932] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 622.454603][ T5932] usb 3-1: device descriptor read/64, error -71 [ 622.762544][T12201] Bluetooth: (null): Invalid header checksum [ 622.855447][ T5932] usb usb3-port1: attempt power cycle [ 622.949520][ T36] Bluetooth: (null): Invalid header checksum [ 622.987461][ T36] Bluetooth: (null): Invalid header checksum [ 622.993536][ T36] Bluetooth: (null): Invalid header checksum [ 623.193164][ T2208] Bluetooth: (null): Invalid header checksum [ 623.506311][ T9141] Bluetooth: (null): Too short H5 packet [ 623.519576][ T2208] Bluetooth: (null): Invalid header checksum [ 623.529132][ T9141] Bluetooth: (null): Invalid header checksum [ 623.539487][ T2208] Bluetooth: (null): Invalid header checksum [ 623.551020][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 623.560333][ T9141] Bluetooth: (null): Invalid header checksum [ 623.664723][ T2208] Bluetooth: (null): Invalid header checksum [ 623.684352][ T9141] Bluetooth: (null): Invalid header checksum [ 623.924967][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.931356][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.119737][T12212] fuse: Bad value for 'fd' [ 624.302380][T12222] futex_wake_op: syz.2.1639 tries to shift op by -1; fix this program [ 624.988565][T12225] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 625.004672][T12223] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 625.010352][T12223] pim6reg0: persist enabled [ 625.472451][T12228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1641'. [ 625.512185][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1643'. [ 625.878199][T12238] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 625.885193][T12238] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 625.943124][T12238] vhci_hcd vhci_hcd.0: Device attached [ 627.057351][T12257] fuse: Bad value for 'group_id' [ 627.062337][T12257] fuse: Bad value for 'group_id' [ 627.104878][ T5865] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 627.399486][ T5865] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 627.435199][ T5865] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 627.448270][ T5865] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.959593][ T5865] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 627.972205][T12239] vhci_hcd: connection closed [ 627.985628][ T9141] vhci_hcd: stop threads [ 628.237862][ T54] Bluetooth: (null): Too short H5 packet [ 628.311354][ T9141] vhci_hcd: release socket [ 628.318294][ T54] Bluetooth: (null): Invalid header checksum [ 628.337490][ T9141] vhci_hcd: disconnect device [ 628.342302][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.350818][ T54] Bluetooth: (null): Invalid header checksum [ 628.352394][ T5865] usb 3-1: Product: syz [ 628.374120][ T5865] usb 3-1: Manufacturer: syz [ 628.384266][ T54] Bluetooth: (null): Invalid header checksum [ 628.399779][ T5865] usb 3-1: SerialNumber: syz [ 628.412730][T12276] futex_wake_op: syz.4.1654 tries to shift op by -1; fix this program [ 629.094414][T12284] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 629.107286][T12284] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 629.112943][T12284] pim6reg0: persist enabled [ 629.229464][T12251] FAULT_INJECTION: forcing a failure. [ 629.229464][T12251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 629.242930][T12251] CPU: 1 UID: 0 PID: 12251 Comm: syz.2.1644 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 629.242952][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 629.242963][T12251] Call Trace: [ 629.242968][T12251] [ 629.242974][T12251] dump_stack_lvl+0x16c/0x1f0 [ 629.243000][T12251] should_fail_ex+0x512/0x640 [ 629.243025][T12251] should_fail_alloc_page+0xe7/0x130 [ 629.243045][T12251] prepare_alloc_pages+0x3c2/0x610 [ 629.243071][T12251] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 629.243108][T12251] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 629.243127][T12251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 629.243152][T12251] ? rcu_is_watching+0x12/0xc0 [ 629.243171][T12251] ? irqentry_exit+0x3b/0x90 [ 629.243191][T12251] ? lockdep_hardirqs_on+0x7c/0x110 [ 629.243223][T12251] ? __mutex_unlock_slowpath+0xaf/0x6a0 [ 629.243247][T12251] ? kasan_check_range+0xfb/0x1a0 [ 629.243267][T12251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.243295][T12251] ? policy_nodemask+0xea/0x4e0 [ 629.243315][T12251] alloc_pages_mpol+0x1fb/0x550 [ 629.243333][T12251] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 629.243358][T12251] alloc_pages_noprof+0x131/0x390 [ 629.243376][T12251] get_free_pages_noprof+0xc/0x40 [ 629.243394][T12251] __do_sys_mincore+0x110/0x620 [ 629.243419][T12251] ? rcu_is_watching+0x12/0xc0 [ 629.243440][T12251] do_syscall_64+0xcd/0x260 [ 629.243463][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.243480][T12251] RIP: 0033:0x7f88cbd8e969 [ 629.243494][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.243510][T12251] RSP: 002b:00007f88ccb39038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 629.243527][T12251] RAX: ffffffffffffffda RBX: 00007f88cbfb6080 RCX: 00007f88cbd8e969 [ 629.243538][T12251] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 629.243549][T12251] RBP: 00007f88ccb39090 R08: 0000000000000000 R09: 0000000000000000 [ 629.243559][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.243568][T12251] R13: 0000000000000000 R14: 00007f88cbfb6080 R15: 00007ffde85886c8 [ 629.243591][T12251] [ 629.878038][ T5865] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 631.708507][ T5809] usb 3-1: USB disconnect, device number 55 [ 631.809112][ T5809] usblp0: removed [ 632.370528][T12299] FAULT_INJECTION: forcing a failure. [ 632.370528][T12299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.393829][T12299] CPU: 1 UID: 0 PID: 12299 Comm: syz.4.1660 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 632.393848][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 632.393854][T12299] Call Trace: [ 632.393858][T12299] [ 632.393863][T12299] dump_stack_lvl+0x16c/0x1f0 [ 632.393880][T12299] should_fail_ex+0x512/0x640 [ 632.393896][T12299] _copy_from_user+0x2e/0xd0 [ 632.393910][T12299] move_addr_to_kernel+0x65/0x170 [ 632.393926][T12299] __sys_bind+0x11b/0x260 [ 632.393940][T12299] ? __pfx___sys_bind+0x10/0x10 [ 632.393957][T12299] ? __fget_files+0x20e/0x3c0 [ 632.393989][T12299] ? __pfx_ksys_write+0x10/0x10 [ 632.394010][T12299] ? rcu_is_watching+0x12/0xc0 [ 632.394033][T12299] __x64_sys_bind+0x72/0xb0 [ 632.394047][T12299] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.394059][T12299] do_syscall_64+0xcd/0x260 [ 632.394073][T12299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.394087][T12299] RIP: 0033:0x7f9dfad8e969 [ 632.394096][T12299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.394106][T12299] RSP: 002b:00007f9dfbb8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 632.394116][T12299] RAX: ffffffffffffffda RBX: 00007f9dfafb5fa0 RCX: 00007f9dfad8e969 [ 632.394122][T12299] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 632.394128][T12299] RBP: 00007f9dfbb8b090 R08: 0000000000000000 R09: 0000000000000000 [ 632.394134][T12299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.394140][T12299] R13: 0000000000000000 R14: 00007f9dfafb5fa0 R15: 00007fff177d99b8 [ 632.394152][T12299] [ 632.564085][T12291] xt_CT: No such helper "pptp" [ 632.897265][T12314] FAULT_INJECTION: forcing a failure. [ 632.897265][T12314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.956995][T12315] fuse: Bad value for 'group_id' [ 632.970126][T12315] fuse: Bad value for 'group_id' [ 632.976748][T12314] CPU: 0 UID: 0 PID: 12314 Comm: syz.2.1664 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 632.976764][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 632.976770][T12314] Call Trace: [ 632.976774][T12314] [ 632.976778][T12314] dump_stack_lvl+0x16c/0x1f0 [ 632.976795][T12314] should_fail_ex+0x512/0x640 [ 632.976811][T12314] _copy_from_user+0x2e/0xd0 [ 632.976825][T12314] do_sock_getsockopt+0x5f4/0x800 [ 632.976839][T12314] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 632.976851][T12314] ? __fget_files+0x204/0x3c0 [ 632.976873][T12314] __sys_getsockopt+0x12f/0x260 [ 632.976892][T12314] __x64_sys_getsockopt+0xbd/0x160 [ 632.976907][T12314] ? do_syscall_64+0x91/0x260 [ 632.976920][T12314] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.976932][T12314] do_syscall_64+0xcd/0x260 [ 632.976946][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.976957][T12314] RIP: 0033:0x7f88cbd8e969 [ 632.976965][T12314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.976975][T12314] RSP: 002b:00007f88ccb5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 632.976987][T12314] RAX: ffffffffffffffda RBX: 00007f88cbfb5fa0 RCX: 00007f88cbd8e969 [ 632.976993][T12314] RDX: 0000000000000004 RSI: 0000000000000084 RDI: 0000000000000003 [ 632.976999][T12314] RBP: 00007f88ccb5a090 R08: 0000200000001080 R09: 0000000000000000 [ 632.977005][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.977010][T12314] R13: 0000000000000000 R14: 00007f88cbfb5fa0 R15: 00007ffde85886c8 [ 632.977023][T12314] [ 633.513537][T12327] syz_tun: entered allmulticast mode [ 633.890252][T12330] syz_tun: left allmulticast mode [ 634.097677][T12332] FAULT_INJECTION: forcing a failure. [ 634.097677][T12332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.111407][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.4.1669 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 634.111431][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 634.111440][T12332] Call Trace: [ 634.111445][T12332] [ 634.111452][T12332] dump_stack_lvl+0x16c/0x1f0 [ 634.111476][T12332] should_fail_ex+0x512/0x640 [ 634.111499][T12332] _copy_from_user+0x2e/0xd0 [ 634.111521][T12332] __sys_bpf+0x21d/0x4d80 [ 634.111543][T12332] ? __pfx___sys_bpf+0x10/0x10 [ 634.111561][T12332] ? ksys_write+0x190/0x240 [ 634.111587][T12332] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 634.111620][T12332] ? fput+0x70/0xf0 [ 634.111637][T12332] ? ksys_write+0x1b9/0x240 [ 634.111657][T12332] ? __pfx_ksys_write+0x10/0x10 [ 634.111676][T12332] ? rcu_is_watching+0x12/0xc0 [ 634.111697][T12332] __x64_sys_bpf+0x78/0xc0 [ 634.111715][T12332] ? lockdep_hardirqs_on+0x7c/0x110 [ 634.111733][T12332] do_syscall_64+0xcd/0x260 [ 634.111754][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.111769][T12332] RIP: 0033:0x7f9dfad8e969 [ 634.111781][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.111796][T12332] RSP: 002b:00007f9dfbb8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 634.111810][T12332] RAX: ffffffffffffffda RBX: 00007f9dfafb5fa0 RCX: 00007f9dfad8e969 [ 634.111821][T12332] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 634.111830][T12332] RBP: 00007f9dfbb8b090 R08: 0000000000000000 R09: 0000000000000000 [ 634.111839][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.111848][T12332] R13: 0000000000000000 R14: 00007f9dfafb5fa0 R15: 00007fff177d99b8 [ 634.111869][T12332] [ 634.580952][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 634.591259][T12344] syzkaller0: entered promiscuous mode [ 634.604415][T12344] syzkaller0: entered allmulticast mode [ 635.167876][T12349] warning: `syz.2.1674' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 635.642752][T12360] FAULT_INJECTION: forcing a failure. [ 635.642752][T12360] name failslab, interval 1, probability 0, space 0, times 0 [ 636.195114][T12360] CPU: 0 UID: 0 PID: 12360 Comm: syz.2.1677 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 636.195142][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 636.195152][T12360] Call Trace: [ 636.195157][T12360] [ 636.195163][T12360] dump_stack_lvl+0x16c/0x1f0 [ 636.195192][T12360] should_fail_ex+0x512/0x640 [ 636.195212][T12360] ? fs_reclaim_acquire+0xae/0x150 [ 636.195234][T12360] ? tomoyo_encode2+0x100/0x3e0 [ 636.195262][T12360] should_failslab+0xc2/0x120 [ 636.195277][T12360] __kmalloc_noprof+0xd2/0x510 [ 636.195303][T12360] tomoyo_encode2+0x100/0x3e0 [ 636.195324][T12360] tomoyo_encode+0x29/0x50 [ 636.195342][T12360] tomoyo_realpath_from_path+0x18f/0x6e0 [ 636.195363][T12360] ? tomoyo_profile+0x47/0x60 [ 636.195386][T12360] tomoyo_path_number_perm+0x245/0x580 [ 636.195402][T12360] ? tomoyo_path_number_perm+0x237/0x580 [ 636.195420][T12360] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 636.195437][T12360] ? find_held_lock+0x2b/0x80 [ 636.195475][T12360] ? find_held_lock+0x2b/0x80 [ 636.195492][T12360] ? hook_file_ioctl_common+0x145/0x410 [ 636.195521][T12360] ? __fget_files+0x20e/0x3c0 [ 636.195548][T12360] security_file_ioctl+0x9b/0x240 [ 636.195575][T12360] __x64_sys_ioctl+0xb7/0x200 [ 636.195596][T12360] do_syscall_64+0xcd/0x260 [ 636.195619][T12360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.195634][T12360] RIP: 0033:0x7f88cbd8e969 [ 636.195647][T12360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.195661][T12360] RSP: 002b:00007f88ccb5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.195676][T12360] RAX: ffffffffffffffda RBX: 00007f88cbfb5fa0 RCX: 00007f88cbd8e969 [ 636.195687][T12360] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000004 [ 636.195697][T12360] RBP: 00007f88ccb5a090 R08: 0000000000000000 R09: 0000000000000000 [ 636.195707][T12360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.195717][T12360] R13: 0000000000000000 R14: 00007f88cbfb5fa0 R15: 00007ffde85886c8 [ 636.195740][T12360] [ 636.196104][T12360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 636.500617][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 636.506018][T12361] fuse: Bad value for 'group_id' [ 636.517571][T12361] fuse: Bad value for 'group_id' [ 636.712427][T12378] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 636.730433][ T30] audit: type=1400 audit(1746241440.622:578): avc: denied { map } for pid=12372 comm="syz.0.1682" path="socket:[32213]" dev="sockfs" ino=32213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 636.888559][T12381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.354909][ T48] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 637.829213][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.884243][ T48] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.899286][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.910458][ T48] usb 4-1: config 0 descriptor?? [ 637.947258][T12403] binder: 12402:12403 ioctl 4b30 7c returned -22 [ 637.960517][ T30] audit: type=1400 audit(1746241441.902:579): avc: denied { map } for pid=12402 comm="syz.2.1692" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.039318][T12406] binder: 12404:12406 ioctl 4b30 7c returned -22 [ 638.051847][ T30] audit: type=1400 audit(1746241442.002:580): avc: denied { call } for pid=12404 comm="syz.2.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 638.124461][ T5866] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 638.287595][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.298179][ T5866] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 638.308623][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.326923][ T5866] usb 5-1: config 0 descriptor?? [ 638.342407][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 638.351346][ T48] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 638.378751][ T48] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0016/input/input29 [ 638.414355][ T5864] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 638.472853][ T48] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 638.569323][T12390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.574403][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 638.578999][T12390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.585719][ T5864] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 638.612355][ T5864] usb 3-1: config 0 has no interface number 0 [ 638.625643][ T5864] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 638.635157][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.643187][ T5864] usb 3-1: Product: syz [ 638.648729][ T5864] usb 3-1: Manufacturer: syz [ 638.653357][ T5864] usb 3-1: SerialNumber: syz [ 638.661906][ T5864] usb 3-1: config 0 descriptor?? [ 638.769275][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 638.778066][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 638.794418][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 638.807980][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.817352][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.845460][ T5865] usb 4-1: USB disconnect, device number 44 [ 639.210911][T12410] random: crng reseeded on system resumption [ 639.454890][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 639.462534][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 639.470758][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 639.477644][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 639.484598][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 639.491399][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 639.498317][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 639.505161][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 639.511942][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 639.518792][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 639.544944][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 639.554506][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 639.575215][ T5866] pwc: Registered as video103. [ 639.611880][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 639.622474][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.691401][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.700222][ T5866] usb 5-1: USB disconnect, device number 37 [ 639.935793][ T9141] Bluetooth: (null): Invalid header checksum [ 639.982504][ T9141] Bluetooth: (null): Invalid header checksum [ 640.047042][ T54] Bluetooth: (null): Invalid header checksum [ 641.429509][ T30] audit: type=1326 audit(1746241445.382:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cbd8e969 code=0x7fc00000 [ 641.808664][ T5864] usb 3-1: USB disconnect, device number 56 [ 641.883164][T12443] can0: slcan on ttyprintk. [ 641.887074][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.909987][ T30] audit: type=1400 audit(1746241445.842:582): avc: denied { getopt } for pid=12442 comm="syz.2.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 641.978793][T12448] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1706'. [ 642.118283][ T30] audit: type=1400 audit(1746241446.052:583): avc: denied { setopt } for pid=12442 comm="syz.2.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 642.152674][ T30] audit: type=1400 audit(1746241446.062:584): avc: denied { view } for pid=12446 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 642.844980][T12442] can0 (unregistered): slcan off ttyprintk. [ 645.285403][T12505] FAULT_INJECTION: forcing a failure. [ 645.285403][T12505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.378854][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.2.1716 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 645.378885][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 645.378895][T12505] Call Trace: [ 645.378901][T12505] [ 645.378908][T12505] dump_stack_lvl+0x16c/0x1f0 [ 645.378933][T12505] should_fail_ex+0x512/0x640 [ 645.378958][T12505] _copy_to_user+0x32/0xd0 [ 645.378983][T12505] simple_read_from_buffer+0xcb/0x170 [ 645.379011][T12505] proc_fail_nth_read+0x197/0x270 [ 645.379036][T12505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.379061][T12505] ? rw_verify_area+0xcf/0x680 [ 645.379081][T12505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.379105][T12505] vfs_read+0x1de/0xc70 [ 645.379130][T12505] ? __pfx___mutex_lock+0x10/0x10 [ 645.379152][T12505] ? __pfx_vfs_read+0x10/0x10 [ 645.379182][T12505] ? __fget_files+0x20e/0x3c0 [ 645.379214][T12505] ksys_read+0x12a/0x240 [ 645.379237][T12505] ? __pfx_ksys_read+0x10/0x10 [ 645.379267][T12505] do_syscall_64+0xcd/0x260 [ 645.379290][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.379307][T12505] RIP: 0033:0x7f88cbd8d37c [ 645.379320][T12505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 645.379336][T12505] RSP: 002b:00007f88ccb39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.379352][T12505] RAX: ffffffffffffffda RBX: 00007f88cbfb6080 RCX: 00007f88cbd8d37c [ 645.379363][T12505] RDX: 000000000000000f RSI: 00007f88ccb390a0 RDI: 000000000000000d [ 645.379372][T12505] RBP: 00007f88ccb39090 R08: 0000000000000000 R09: 0000000000000000 [ 645.379381][T12505] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 645.379390][T12505] R13: 0000000000000001 R14: 00007f88cbfb6080 R15: 00007ffde85886c8 [ 645.379414][T12505] [ 646.594473][ T5866] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 648.190939][ T30] audit: type=1326 audit(1746241452.142:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad58e969 code=0x7fc00000 [ 648.591932][ T5866] usb 5-1: device descriptor read/64, error -71 [ 648.697032][T12535] FAULT_INJECTION: forcing a failure. [ 648.697032][T12535] name failslab, interval 1, probability 0, space 0, times 0 [ 648.832442][T12535] CPU: 0 UID: 0 PID: 12535 Comm: syz.3.1724 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 648.832466][T12535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 648.832476][T12535] Call Trace: [ 648.832481][T12535] [ 648.832487][T12535] dump_stack_lvl+0x16c/0x1f0 [ 648.832518][T12535] should_fail_ex+0x512/0x640 [ 648.832538][T12535] ? __kmalloc_noprof+0xbf/0x510 [ 648.832565][T12535] ? lsm_blob_alloc+0x68/0x90 [ 648.832581][T12535] should_failslab+0xc2/0x120 [ 648.832599][T12535] __kmalloc_noprof+0xd2/0x510 [ 648.832629][T12535] lsm_blob_alloc+0x68/0x90 [ 648.832645][T12535] security_sk_alloc+0x30/0x270 [ 648.832667][T12535] sk_prot_alloc+0x1c7/0x2a0 [ 648.832689][T12535] sk_alloc+0x36/0xc20 [ 648.832715][T12535] __netlink_create+0x5e/0x2c0 [ 648.832738][T12535] ? __wake_up+0x3f/0x60 [ 648.832762][T12535] netlink_create+0x39e/0x620 [ 648.832776][T12535] ? __pfx_genl_bind+0x10/0x10 [ 648.832794][T12535] ? __pfx_genl_unbind+0x10/0x10 [ 648.832811][T12535] ? __pfx_genl_release+0x10/0x10 [ 648.832833][T12535] __sock_create+0x335/0x8d0 [ 648.832859][T12535] __sys_socket+0x14d/0x260 [ 648.832881][T12535] ? __pfx___sys_socket+0x10/0x10 [ 648.832909][T12535] __x64_sys_socket+0x72/0xb0 [ 648.832936][T12535] do_syscall_64+0xcd/0x260 [ 648.832959][T12535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.832975][T12535] RIP: 0033:0x7f0105990887 [ 648.832988][T12535] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.833004][T12535] RSP: 002b:00007f01067b6fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 648.833020][T12535] RAX: ffffffffffffffda RBX: 00007f0105bb5fa0 RCX: 00007f0105990887 [ 648.833031][T12535] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 648.833041][T12535] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 648.833051][T12535] R10: 0000200000000640 R11: 0000000000000286 R12: 0000000000000001 [ 648.833061][T12535] R13: 0000000000000000 R14: 00007f0105bb5fa0 R15: 00007fff89ad3138 [ 648.833083][T12535] [ 649.174333][ T5866] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 649.254397][ T30] audit: type=1400 audit(1746241453.102:586): avc: denied { connect } for pid=12540 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 649.433713][T12549] futex_wake_op: syz.3.1728 tries to shift op by -1; fix this program [ 649.941444][ T30] audit: type=1400 audit(1746241453.242:587): avc: denied { write } for pid=12540 comm="syz.2.1727" path="socket:[33044]" dev="sockfs" ino=33044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 649.964933][ T30] audit: type=1400 audit(1746241453.242:588): avc: denied { accept } for pid=12540 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 650.015877][T12552] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 650.022288][T12552] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 650.028001][T12552] pim6reg0: persist enabled [ 651.177941][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 652.664577][ T5864] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 652.866756][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.991266][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.107169][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.251859][ T5864] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.359999][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.491825][ T5864] usb 4-1: config 0 descriptor?? [ 654.058593][ T5864] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 654.257176][ T5864] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 654.659179][T12592] FAULT_INJECTION: forcing a failure. [ 654.659179][T12592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.672755][T12592] CPU: 1 UID: 0 PID: 12592 Comm: syz.2.1741 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 654.672771][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 654.672777][T12592] Call Trace: [ 654.672781][T12592] [ 654.672785][T12592] dump_stack_lvl+0x16c/0x1f0 [ 654.672806][T12592] should_fail_ex+0x512/0x640 [ 654.672822][T12592] should_fail_alloc_page+0xe7/0x130 [ 654.672834][T12592] prepare_alloc_pages+0x3c2/0x610 [ 654.672850][T12592] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 654.672868][T12592] ? __lock_acquire+0xaa4/0x1ba0 [ 654.672890][T12592] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 654.672909][T12592] ? __pfx___might_resched+0x10/0x10 [ 654.672924][T12592] ? trace_contention_end+0xdd/0x130 [ 654.672941][T12592] ? __mutex_lock+0x1ca/0xb90 [ 654.672956][T12592] ? misc_open+0x63/0x420 [ 654.672970][T12592] ? __lock_acquire+0xaa4/0x1ba0 [ 654.672985][T12592] ? __pfx___mutex_lock+0x10/0x10 [ 654.672998][T12592] ? avc_has_perm+0x11a/0x1c0 [ 654.673008][T12592] __alloc_pages_noprof+0xb/0x1b0 [ 654.673025][T12592] ___kmalloc_large_node+0x82/0x1e0 [ 654.673040][T12592] __kmalloc_large_noprof+0x1c/0x70 [ 654.673055][T12592] uhid_char_open+0x24/0x250 [ 654.673067][T12592] ? __pfx_uhid_char_open+0x10/0x10 [ 654.673079][T12592] misc_open+0x35a/0x420 [ 654.673093][T12592] ? __pfx_misc_open+0x10/0x10 [ 654.673107][T12592] chrdev_open+0x231/0x6a0 [ 654.673117][T12592] ? __pfx_chrdev_open+0x10/0x10 [ 654.673127][T12592] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 654.673146][T12592] do_dentry_open+0x741/0x1c10 [ 654.673162][T12592] ? __pfx_chrdev_open+0x10/0x10 [ 654.673173][T12592] vfs_open+0x82/0x3f0 [ 654.673191][T12592] path_openat+0x1e5e/0x2d40 [ 654.673214][T12592] ? __pfx_path_openat+0x10/0x10 [ 654.673236][T12592] do_filp_open+0x20b/0x470 [ 654.673253][T12592] ? __pfx_do_filp_open+0x10/0x10 [ 654.673281][T12592] ? alloc_fd+0x471/0x7d0 [ 654.673302][T12592] do_sys_openat2+0x11b/0x1d0 [ 654.673313][T12592] ? __pfx_do_sys_openat2+0x10/0x10 [ 654.673328][T12592] ? __fget_files+0x20e/0x3c0 [ 654.673347][T12592] __x64_sys_openat+0x174/0x210 [ 654.673360][T12592] ? __pfx___x64_sys_openat+0x10/0x10 [ 654.673372][T12592] ? ksys_write+0x1b9/0x240 [ 654.673387][T12592] ? rcu_is_watching+0x12/0xc0 [ 654.673404][T12592] do_syscall_64+0xcd/0x260 [ 654.673420][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.673431][T12592] RIP: 0033:0x7f88cbd8e969 [ 654.673442][T12592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.673453][T12592] RSP: 002b:00007f88ccb39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.673463][T12592] RAX: ffffffffffffffda RBX: 00007f88cbfb6080 RCX: 00007f88cbd8e969 [ 654.673471][T12592] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 654.673478][T12592] RBP: 00007f88ccb39090 R08: 0000000000000000 R09: 0000000000000000 [ 654.673483][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.673490][T12592] R13: 0000000000000000 R14: 00007f88cbfb6080 R15: 00007ffde85886c8 [ 654.673503][T12592] [ 655.049643][T12595] capability: warning: `syz.1.1743' uses 32-bit capabilities (legacy support in use) [ 655.496260][ T30] audit: type=1400 audit(1746241459.452:589): avc: denied { create } for pid=12599 comm="syz.4.1742" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 655.529853][ T30] audit: type=1400 audit(1746241459.452:590): avc: denied { read } for pid=12599 comm="syz.4.1742" path="socket:[33123]" dev="sockfs" ino=33123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 655.769251][ T5864] usb 4-1: USB disconnect, device number 45 [ 655.790782][ T30] audit: type=1400 audit(1746241459.612:591): avc: denied { mounton } for pid=12599 comm="syz.4.1742" path="/347/file0" dev="tmpfs" ino=1866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 657.755627][ T30] audit: type=1400 audit(1746241461.382:592): avc: denied { bind } for pid=12623 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 659.066287][T12652] Bluetooth: (null): Invalid header checksum [ 659.165206][ T36] Bluetooth: (null): Invalid header checksum [ 659.254582][ T36] Bluetooth: (null): Invalid header checksum [ 659.296432][ T1102] Bluetooth: (null): Invalid header checksum [ 659.520001][ T30] audit: type=1400 audit(1746241463.442:593): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=1866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 661.800322][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 661.837449][T12677] syzkaller0: entered promiscuous mode [ 661.870282][T12677] syzkaller0: entered allmulticast mode [ 662.185911][ T9134] Bluetooth: (null): Too short H5 packet [ 662.198763][ T9134] Bluetooth: (null): Invalid header checksum [ 662.207780][ T9134] Bluetooth: (null): Invalid header checksum [ 662.213913][ T9134] Bluetooth: (null): Invalid header checksum [ 665.175539][T12716] Bluetooth: (null): Invalid header checksum [ 665.277675][ T9134] Bluetooth: (null): Invalid header checksum [ 665.374435][ T9134] Bluetooth: (null): Invalid header checksum [ 665.412716][ T9134] Bluetooth: (null): Invalid header checksum [ 665.605157][T12728] block nbd2: NBD_DISCONNECT [ 665.610382][T12728] block nbd2: Send disconnect failed -107 [ 665.627028][ T30] audit: type=1400 audit(1746241469.582:594): avc: denied { setopt } for pid=12721 comm="syz.2.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 665.718154][T12728] block nbd2: Send disconnect failed -107 [ 665.844208][ T30] audit: type=1400 audit(1746241469.582:595): avc: denied { ioctl } for pid=12721 comm="syz.2.1778" path="socket:[32713]" dev="sockfs" ino=32713 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 665.869021][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.008711][T12720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.034877][T12721] block nbd2: Disconnected due to user request. [ 666.086701][T12721] block nbd2: shutting down sockets [ 666.187789][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 667.470592][T12787] Bluetooth: (null): Invalid header checksum [ 667.922196][ T36] Bluetooth: (null): Invalid header checksum [ 667.958531][ T36] Bluetooth: (null): Invalid header checksum [ 668.000630][ T36] Bluetooth: (null): Invalid header checksum [ 668.899924][ T36] Bluetooth: (null): Invalid header checksum [ 668.938798][ T36] Bluetooth: (null): Invalid header checksum [ 669.225082][ T1102] Bluetooth: (null): Invalid header checksum [ 669.236888][ T1102] Bluetooth: (null): Invalid header checksum [ 669.277402][ T1102] Bluetooth: (null): Invalid header checksum [ 669.430730][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1792'. [ 669.807199][ T30] audit: type=1400 audit(1746241473.762:596): avc: denied { create } for pid=12808 comm="syz.3.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 672.077649][T12842] Bluetooth: (null): Invalid header checksum [ 672.185409][ T6013] Bluetooth: (null): Invalid header checksum [ 672.214449][ T6013] Bluetooth: (null): Invalid header checksum [ 672.506437][ T9141] Bluetooth: (null): Invalid header checksum [ 672.512537][ T9141] Bluetooth: (null): Invalid header checksum [ 672.581229][ T8190] Bluetooth: (null): Invalid header checksum [ 675.635044][ T5809] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 675.714867][ T5921] kworker/1:7 (5921) used greatest stack depth: 20824 bytes left [ 676.237604][ T5809] usb 5-1: device descriptor read/64, error -71 [ 677.725573][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 677.734632][T12897] netlink: 'syz.4.1816': attribute type 5 has an invalid length. [ 677.742386][T12897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1816'. [ 678.054939][T12897] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 678.063752][T12897] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 678.072971][T12897] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 678.081570][T12897] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 678.090200][T12897] geneve3: entered promiscuous mode [ 678.095398][T12897] geneve3: entered allmulticast mode [ 678.603547][T12904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1819'. [ 679.530062][T12919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1823'. [ 679.570110][ T30] audit: type=1400 audit(1746241483.522:597): avc: denied { write } for pid=12916 comm="syz.4.1822" name="file0" dev="tmpfs" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 679.717416][ T30] audit: type=1400 audit(1746241483.542:598): avc: denied { open } for pid=12916 comm="syz.4.1822" path="/358/file0" dev="tmpfs" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 679.740649][ T30] audit: type=1400 audit(1746241483.542:599): avc: denied { ioctl } for pid=12916 comm="syz.4.1822" path="/358/file0" dev="tmpfs" ino=1925 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 679.764890][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.866519][T12941] futex_wake_op: syz.3.1832 tries to shift op by -1; fix this program [ 682.127754][T12947] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 682.135184][T12947] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 682.140883][T12947] pim6reg0: persist enabled [ 683.266419][T12959] xt_CT: No such helper "pptp" [ 683.545730][T12966] Bluetooth: (null): Invalid header checksum [ 683.688008][ T6013] Bluetooth: (null): Invalid header checksum [ 683.714649][ T6013] Bluetooth: (null): Invalid header checksum [ 685.388822][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.395253][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.916829][ T6013] Bluetooth: (null): Invalid header checksum [ 686.945002][ T6013] Bluetooth: (null): Invalid header checksum [ 686.967089][T12999] futex_wake_op: syz.2.1846 tries to shift op by -1; fix this program [ 686.979464][ T6013] Bluetooth: (null): Invalid header checksum [ 687.438105][ T6013] Bluetooth: (null): Invalid header checksum [ 687.673406][ T6013] Bluetooth: (null): Invalid header checksum [ 687.685129][ T9141] Bluetooth: (null): Too short H5 packet [ 687.690902][ T9141] Bluetooth: (null): Invalid header checksum [ 687.869810][ T6013] Bluetooth: (null): Invalid header checksum [ 689.110217][ T6013] Bluetooth: (null): Invalid header checksum [ 689.116845][ T9141] Bluetooth: (null): Invalid header checksum [ 689.122938][ T9141] Bluetooth: (null): Invalid header checksum [ 689.154340][ T6013] Bluetooth: (null): Invalid header checksum [ 689.160851][ T6013] Bluetooth: (null): Invalid header checksum [ 690.135274][T13013] fuse: Bad value for 'group_id' [ 690.140626][T13013] fuse: Bad value for 'group_id' [ 690.672501][T13030] futex_wake_op: syz.2.1852 tries to shift op by -1; fix this program [ 691.487436][T13033] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 691.493946][T13033] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 691.499709][T13033] pim6reg0: persist enabled [ 691.634341][ T5865] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 692.594295][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 692.784329][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 692.790800][ T5865] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.800855][ T5865] usb 4-1: config 0 has no interface number 0 [ 692.807141][ T5865] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.820391][ T5865] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 693.171149][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.195263][ T5865] usb 4-1: config 0 descriptor?? [ 693.236699][ T5865] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 693.339693][T13052] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 693.691577][T13061] futex_wake_op: syz.0.1860 tries to shift op by -1; fix this program [ 694.702336][ T5864] usb 4-1: USB disconnect, device number 46 [ 696.986129][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'. [ 697.102093][ T30] audit: type=1326 audit(1746241501.052:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13076 comm="syz.0.1863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47ad58e969 code=0x0 [ 697.129070][T13077] fuse: Bad value for 'group_id' [ 697.134035][T13077] fuse: Bad value for 'group_id' [ 698.289501][T13092] ubi: mtd0 is already attached to ubi31 [ 698.338392][T13092] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 702.851556][T13122] fuse: Bad value for 'group_id' [ 702.857827][T13122] fuse: Bad value for 'group_id' [ 702.874438][ T5864] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 703.479546][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 703.772234][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 703.841372][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 703.880846][ T5864] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 703.900480][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.950365][ T5864] usb 3-1: Product: syz [ 703.959546][ T5864] usb 3-1: Manufacturer: syz [ 703.964159][ T5864] usb 3-1: SerialNumber: syz [ 703.994816][ T30] audit: type=1400 audit(1746241507.932:601): avc: denied { mount } for pid=13134 comm="syz.1.1882" name="/" dev="autofs" ino=35302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 704.103259][ T30] audit: type=1400 audit(1746241507.982:602): avc: denied { mounton } for pid=13134 comm="syz.1.1882" path="/415/file1/file0" dev="autofs" ino=35303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 704.126745][ T5864] usb 3-1: config 0 descriptor?? [ 704.135724][ T5864] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 704.165205][ T5864] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 704.208658][ T30] audit: type=1400 audit(1746241507.982:603): avc: denied { mount } for pid=13134 comm="syz.1.1882" name="/" dev="hugetlbfs" ino=35304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 704.259514][T13142] ubi: mtd0 is already attached to ubi31 [ 704.271175][T13142] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 704.293894][ T30] audit: type=1400 audit(1746241508.242:604): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 704.316641][ T30] audit: type=1400 audit(1746241508.242:605): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 705.217889][ T5864] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 705.485774][ T5864] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 705.844575][ T30] audit: type=1400 audit(1746241509.732:606): avc: denied { name_connect } for pid=13118 comm="syz.2.1875" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 706.237505][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 706.401349][ T5864] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 706.492307][T13163] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1891'. [ 706.517270][T13163] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1891'. [ 706.715385][T13168] fuse: Bad value for 'group_id' [ 706.720362][T13168] fuse: Bad value for 'group_id' [ 706.957360][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 706.966564][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 706.977637][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 706.992075][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 707.000656][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 707.106969][ T5864] usb 3-1: USB disconnect, device number 57 [ 707.433057][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'. [ 709.243466][ T9129] Bluetooth: (null): Invalid header checksum [ 709.249794][ T5864] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 709.259652][ T9129] Bluetooth: (null): Invalid header checksum [ 709.268335][T13193] syz_tun: entered allmulticast mode [ 709.278125][T13193] syz_tun: left allmulticast mode [ 709.285316][ T9129] Bluetooth: (null): Invalid header checksum [ 709.346177][ T36] Bluetooth: (null): Invalid header checksum [ 709.446339][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 709.477292][ T5864] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 709.484471][ T2208] Bluetooth: (null): Invalid header checksum [ 709.487831][ T5864] usb 5-1: config 0 has no interface number 0 [ 709.505063][ T5864] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 709.531576][ T8190] Bluetooth: (null): Too short H5 packet [ 709.532569][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.538823][ T8190] Bluetooth: (null): Invalid header checksum [ 709.606060][ T6013] Bluetooth: (null): Invalid header checksum [ 709.649257][ T8190] Bluetooth: (null): Invalid header checksum [ 709.652687][ T5864] usb 5-1: Product: syz [ 709.659225][ T8190] Bluetooth: (null): Invalid header checksum [ 709.667539][ T5864] usb 5-1: Manufacturer: syz [ 709.677093][ T5864] usb 5-1: SerialNumber: syz [ 709.692747][ T5864] usb 5-1: config 0 descriptor?? [ 709.840755][T13204] fuse: Bad value for 'group_id' [ 709.845831][T13204] fuse: Bad value for 'group_id' [ 710.063387][ T9129] Bluetooth: (null): Invalid header checksum [ 710.102221][ T9129] Bluetooth: (null): Invalid header checksum [ 710.136785][ T9129] Bluetooth: (null): Invalid header checksum [ 710.175575][ T9129] Bluetooth: (null): Invalid header checksum [ 710.585128][T13213] futex_wake_op: syz.2.1908 tries to shift op by -1; fix this program [ 711.694169][ T5865] usb 5-1: USB disconnect, device number 42 [ 711.772836][T13209] Bluetooth: (null): Invalid header checksum [ 712.055143][ T30] audit: type=1400 audit(1746241516.002:607): avc: denied { mount } for pid=13221 comm="syz.3.1911" name="/" dev="ramfs" ino=34745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 712.476141][T13230] FAULT_INJECTION: forcing a failure. [ 712.476141][T13230] name failslab, interval 1, probability 0, space 0, times 0 [ 712.490220][T13230] CPU: 0 UID: 0 PID: 13230 Comm: syz.3.1915 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 712.490244][T13230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 712.490254][T13230] Call Trace: [ 712.490260][T13230] [ 712.490266][T13230] dump_stack_lvl+0x16c/0x1f0 [ 712.490293][T13230] should_fail_ex+0x512/0x640 [ 712.490313][T13230] ? __kmalloc_node_noprof+0xc5/0x500 [ 712.490333][T13230] should_failslab+0xc2/0x120 [ 712.490352][T13230] __kmalloc_node_noprof+0xd8/0x500 [ 712.490366][T13230] ? rcu_is_watching+0x12/0xc0 [ 712.490385][T13230] ? obj_cgroup_charge+0x365/0x640 [ 712.490401][T13230] ? alloc_slab_obj_exts+0x41/0xa0 [ 712.490433][T13230] alloc_slab_obj_exts+0x41/0xa0 [ 712.490456][T13230] __memcg_slab_post_alloc_hook+0x27b/0x940 [ 712.490478][T13230] ? kasan_save_track+0x14/0x30 [ 712.490505][T13230] kmem_cache_alloc_node_noprof+0x312/0x3b0 [ 712.490531][T13230] ? __alloc_skb+0x2b2/0x380 [ 712.490560][T13230] __alloc_skb+0x2b2/0x380 [ 712.490584][T13230] ? __pfx___alloc_skb+0x10/0x10 [ 712.490607][T13230] ? __lock_acquire+0x5ca/0x1ba0 [ 712.490636][T13230] ? avc_has_perm+0x11a/0x1c0 [ 712.490654][T13230] alloc_skb_with_frags+0xe0/0x860 [ 712.490675][T13230] ? find_held_lock+0x2b/0x80 [ 712.490696][T13230] sock_alloc_send_pskb+0x7fb/0x990 [ 712.490729][T13230] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 712.490752][T13230] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 712.490773][T13230] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 712.490795][T13230] ? sock_def_readable+0x1d9/0x600 [ 712.490826][T13230] unix_dgram_sendmsg+0x463/0x1910 [ 712.490854][T13230] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 712.490880][T13230] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 712.490914][T13230] ____sys_sendmsg+0xa95/0xc70 [ 712.490936][T13230] ? copy_msghdr_from_user+0x10a/0x160 [ 712.490951][T13230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.490975][T13230] ? kfree+0x252/0x4d0 [ 712.490995][T13230] ? __pfx__kstrtoull+0x10/0x10 [ 712.491016][T13230] ___sys_sendmsg+0x134/0x1d0 [ 712.491034][T13230] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.491072][T13230] ? __pfx___might_resched+0x10/0x10 [ 712.491100][T13230] __sys_sendmmsg+0x200/0x420 [ 712.491119][T13230] ? __pfx___sys_sendmmsg+0x10/0x10 [ 712.491143][T13230] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 712.491175][T13230] ? fput+0x70/0xf0 [ 712.491192][T13230] ? ksys_write+0x1b9/0x240 [ 712.491215][T13230] ? __pfx_ksys_write+0x10/0x10 [ 712.491237][T13230] ? rcu_is_watching+0x12/0xc0 [ 712.491259][T13230] __x64_sys_sendmmsg+0x9c/0x100 [ 712.491275][T13230] ? lockdep_hardirqs_on+0x7c/0x110 [ 712.491295][T13230] do_syscall_64+0xcd/0x260 [ 712.491318][T13230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.491335][T13230] RIP: 0033:0x7f010598e969 [ 712.491349][T13230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.491365][T13230] RSP: 002b:00007f01067b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 712.491381][T13230] RAX: ffffffffffffffda RBX: 00007f0105bb5fa0 RCX: 00007f010598e969 [ 712.491391][T13230] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 712.491401][T13230] RBP: 00007f01067b8090 R08: 0000000000000000 R09: 0000000000000000 [ 712.491416][T13230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.491426][T13230] R13: 0000000000000000 R14: 00007f0105bb5fa0 R15: 00007fff89ad3138 [ 712.491449][T13230] [ 713.194842][T13235] fuse: Bad value for 'group_id' [ 713.204863][T13235] fuse: Bad value for 'group_id' [ 714.232751][T13253] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1920'. [ 714.256182][T13253] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1920'. [ 714.765969][ T5865] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 714.807601][ T9134] Bluetooth: (null): Invalid header checksum [ 714.836277][ T9134] Bluetooth: (null): Invalid header checksum [ 714.969428][ T9134] Bluetooth: (null): Invalid header checksum [ 714.978286][ T5865] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 714.997065][ T5865] usb 4-1: config 0 has no interface number 0 [ 715.059524][ T5865] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 715.072200][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.082024][ T5865] usb 4-1: Product: syz [ 715.086861][ T5865] usb 4-1: Manufacturer: syz [ 715.091569][ T5865] usb 4-1: SerialNumber: syz [ 715.103149][ T5865] usb 4-1: config 0 descriptor?? [ 716.753350][ T5865] usb 4-1: Firmware version (0.0) predates our first public release. [ 717.471329][ T5865] usb 4-1: Please update to version 0.2 or newer [ 717.552620][ T5865] usb 4-1: USB disconnect, device number 47 [ 720.090754][T13302] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1932'. [ 720.163319][T13302] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1932'. [ 720.185613][ T8190] Bluetooth: (null): Invalid header checksum [ 720.260487][ T8190] Bluetooth: (null): Invalid header checksum [ 720.295454][ T8190] Bluetooth: (null): Invalid header checksum [ 720.301852][ T8190] Bluetooth: (null): Invalid header checksum [ 722.215745][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.326209][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.341930][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.361989][ T8190] Bluetooth: (null): Too short H5 packet [ 722.370043][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.398915][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.451007][ T8190] Bluetooth: (null): Invalid header checksum [ 722.455005][ T30] audit: type=1400 audit(1746241526.402:608): avc: denied { mounton } for pid=13329 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 722.457514][ T8190] Bluetooth: (null): Invalid header checksum [ 722.871392][ T6716] syz_tun (unregistering): left allmulticast mode [ 723.574955][ T5865] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 724.754575][ T5810] Bluetooth: hci5: command tx timeout [ 725.381611][ T2208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.384869][ T5865] usb 3-1: device descriptor read/64, error -71 [ 725.462996][ T2208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.582501][ T2208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.684902][ T5865] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 725.749888][ T2208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.971076][T13329] chnl_net:caif_netlink_parms(): no params data found [ 726.806420][ T5810] Bluetooth: hci5: command tx timeout [ 726.933011][ T5865] usb 3-1: device descriptor read/64, error -71 [ 727.311975][ T5865] usb usb3-port1: attempt power cycle [ 729.812556][ T5810] Bluetooth: hci5: command tx timeout [ 730.313697][T13368] [U] .ú [ 730.864559][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.883497][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.891423][T13329] bridge_slave_0: entered allmulticast mode [ 730.911108][T13329] bridge_slave_0: entered promiscuous mode [ 730.938506][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.979016][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.986818][T13329] bridge_slave_1: entered allmulticast mode [ 731.002276][T13329] bridge_slave_1: entered promiscuous mode [ 731.824318][ T5813] Bluetooth: hci5: command tx timeout [ 732.894628][ T48] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 733.021638][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.134485][ T48] usb 4-1: device descriptor read/64, error -71 [ 733.495450][ T48] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 733.505854][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.745470][ T48] usb 4-1: device descriptor read/64, error -71 [ 733.935639][ T48] usb usb4-port1: attempt power cycle [ 734.158139][ T2208] bridge_slave_1: left allmulticast mode [ 734.174362][ T2208] bridge_slave_1: left promiscuous mode [ 734.190873][ T2208] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.678202][ T2208] bridge_slave_0: left allmulticast mode [ 734.688050][ T2208] bridge_slave_0: left promiscuous mode [ 734.697432][ T2208] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.705148][ T48] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 734.734911][ T48] usb 4-1: device descriptor read/8, error -71 [ 735.054317][ T48] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 735.562631][ T48] usb 4-1: device descriptor read/8, error -71 [ 735.707319][ T48] usb usb4-port1: unable to enumerate USB device [ 735.880929][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1967'. [ 736.726220][ T2208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.742132][ T2208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.776009][ T2208] bond0 (unregistering): Released all slaves [ 736.898783][T13329] team0: Port device team_slave_0 added [ 736.956712][T13329] team0: Port device team_slave_1 added [ 737.019861][T13455] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1972'. [ 737.032254][T13455] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1972'. [ 737.838638][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.862991][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.908406][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.127272][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.226044][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.474707][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.714715][ T5865] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 740.194518][ T5865] usb 5-1: device descriptor read/64, error -71 [ 740.423605][T13329] hsr_slave_0: entered promiscuous mode [ 740.525569][ T5865] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 740.580595][T13329] hsr_slave_1: entered promiscuous mode [ 741.310043][T13329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.350917][T13490] futex_wake_op: syz.2.1980 tries to shift op by -1; fix this program [ 741.370346][T13329] Cannot create hsr debugfs directory [ 741.375112][ T5865] usb 5-1: device descriptor read/64, error -71 [ 742.534183][ T5865] usb usb5-port1: attempt power cycle [ 743.739632][ T2208] hsr_slave_0: left promiscuous mode [ 743.935480][ T2208] hsr_slave_1: left promiscuous mode [ 744.897087][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.921963][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.121237][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.222570][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.763612][ T5917] Bluetooth: (null): Invalid header checksum [ 745.873444][ T5917] Bluetooth: (null): Invalid header checksum [ 746.002213][ T5917] Bluetooth: (null): Invalid header checksum [ 746.165541][ T2208] veth1_macvtap: left promiscuous mode [ 746.172471][ T2208] veth0_macvtap: left promiscuous mode [ 746.179203][ T2208] veth1_vlan: left promiscuous mode [ 746.184784][ T2208] veth0_vlan: left promiscuous mode [ 746.792559][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.800308][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.573253][ T48] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 747.725815][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 747.754604][ T48] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 747.773499][ T48] usb 3-1: config 0 has no interface number 0 [ 747.892197][ T48] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 747.941305][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.886169][ T30] audit: type=1400 audit(1746241551.962:609): avc: denied { append } for pid=13558 comm="syz.0.1994" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 748.934208][ T48] usb 3-1: Product: syz [ 749.004357][ T48] usb 3-1: Manufacturer: syz [ 749.009011][ T48] usb 3-1: SerialNumber: syz [ 749.045720][ T48] usb 3-1: config 0 descriptor?? [ 749.130111][T13563] futex_wake_op: syz.0.1995 tries to shift op by -1; fix this program [ 749.288489][ T2208] team0 (unregistering): Port device team_slave_1 removed [ 749.314705][T13545] random: crng reseeded on system resumption [ 750.008348][ T2208] team0 (unregistering): Port device team_slave_0 removed [ 750.131941][T13567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.146543][T13567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.261300][ T48] usb 3-1: USB disconnect, device number 61 [ 750.295097][T13007] udevd[13007]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.382894][ T30] audit: type=1400 audit(1746241556.332:610): avc: denied { ioctl } for pid=13584 comm="syz.2.2001" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 752.395802][T13596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1999'. [ 752.594160][T13329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 752.662981][T13329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 753.282068][T13329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 753.307751][T13329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 753.324331][ T5865] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 753.494593][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 753.566723][ T5865] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 753.594409][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.614634][ T5865] usb 4-1: Product: syz [ 753.640673][ T5865] usb 4-1: Manufacturer: syz [ 753.661578][ T5865] usb 4-1: SerialNumber: syz [ 753.688257][ T5865] usb 4-1: config 0 descriptor?? [ 753.736042][ T5865] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 753.777225][ T5865] usb 4-1: Detected FT2232H [ 753.812191][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.883170][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.906398][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.913520][ T9134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.940857][ T5865] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 753.948180][ T5865] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 753.975390][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.977893][ T5865] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 753.982476][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.996822][ T5865] usb 4-1: USB disconnect, device number 52 [ 754.063174][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 754.108072][ T5865] ftdi_sio 4-1:0.0: device disconnected [ 754.555126][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.641947][T13648] futex_wake_op: syz.0.2009 tries to shift op by -1; fix this program [ 756.050452][T13667] syzkaller0: entered promiscuous mode [ 756.060543][T13667] syzkaller0: entered allmulticast mode [ 756.287265][T13329] veth0_vlan: entered promiscuous mode [ 757.072422][T13329] veth1_vlan: entered promiscuous mode [ 757.122628][T13329] veth0_macvtap: entered promiscuous mode [ 757.132526][T13329] veth1_macvtap: entered promiscuous mode [ 757.148797][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.159546][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.175418][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.186759][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.197285][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.208886][ T30] audit: type=1400 audit(1746241561.162:611): avc: denied { ioctl } for pid=13682 comm="syz.3.2013" path="socket:[36819]" dev="sockfs" ino=36819 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 757.235220][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.245570][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.267415][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.382421][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.400188][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.417669][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.430294][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.468376][ T30] audit: type=1400 audit(1746241561.422:612): avc: denied { execute } for pid=13682 comm="syz.3.2013" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 757.555045][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.782646][ T8190] Bluetooth: (null): Too short H5 packet [ 757.792871][ T8190] Bluetooth: (null): Invalid header checksum [ 757.827554][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.837760][ T8190] Bluetooth: (null): Invalid header checksum [ 757.853521][ T8190] Bluetooth: (null): Invalid header checksum [ 757.983741][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.016738][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.032996][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.044050][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.059704][T13329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.078280][T13329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.091247][T13329] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.102202][T13329] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.430427][ T9134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.467391][ T9134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.608361][ T2208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.642379][ T2208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.804382][ T30] audit: type=1400 audit(1746241562.752:613): avc: denied { mounton } for pid=13329 comm="syz-executor" path="/root/syzkaller.bzIMCY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 758.834651][ T5865] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 759.191257][ T30] audit: type=1400 audit(1746241562.812:614): avc: denied { mount } for pid=13329 comm="syz-executor" name="/" dev="gadgetfs" ino=5926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 759.403017][ T30] audit: type=1400 audit(1746241562.812:615): avc: denied { mounton } for pid=13329 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 759.424496][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 759.459937][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.477741][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.490446][ T5865] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 759.557153][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.606304][T13737] futex_wake_op: syz.3.2024 tries to shift op by -1; fix this program [ 759.613979][ T5865] usb 5-1: config 0 descriptor?? [ 760.134774][T13745] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 760.142347][T13745] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 760.148582][T13745] pim6reg0: persist enabled [ 760.276557][T13717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.392715][T13717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.562401][ T5865] konepure 0003:1E7D:2DB4.0018: item fetching failed at offset 0/4 [ 761.575496][ T5865] konepure 0003:1E7D:2DB4.0018: parse failed [ 761.586244][ T5865] konepure 0003:1E7D:2DB4.0018: probe with driver konepure failed with error -22 [ 761.857904][ T5864] usb 5-1: USB disconnect, device number 46 [ 763.815514][ T5917] Bluetooth: (null): Invalid header checksum [ 763.828650][T13791] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2035'. [ 763.838052][ T5917] Bluetooth: (null): Invalid header checksum [ 763.848083][T13791] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2035'. [ 763.926201][ T9129] Bluetooth: (null): Invalid header checksum [ 763.978499][ T30] audit: type=1400 audit(1746241567.932:616): avc: denied { sys_chroot } for pid=13792 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 764.045979][ T54] Bluetooth: (null): Invalid header checksum [ 764.093621][ T30] audit: type=1400 audit(1746241567.932:617): avc: denied { setgid } for pid=13792 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 764.114964][ T30] audit: type=1400 audit(1746241567.932:618): avc: denied { setrlimit } for pid=13792 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 764.199383][T13799] FAULT_INJECTION: forcing a failure. [ 764.199383][T13799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.212659][T13799] CPU: 1 UID: 0 PID: 13799 Comm: syz.2.2036 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 764.212681][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 764.212690][T13799] Call Trace: [ 764.212695][T13799] [ 764.212701][T13799] dump_stack_lvl+0x16c/0x1f0 [ 764.212722][T13799] should_fail_ex+0x512/0x640 [ 764.212738][T13799] _copy_to_user+0x32/0xd0 [ 764.212753][T13799] simple_read_from_buffer+0xcb/0x170 [ 764.212770][T13799] proc_fail_nth_read+0x197/0x270 [ 764.212786][T13799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.212801][T13799] ? rw_verify_area+0xcf/0x680 [ 764.212814][T13799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.212829][T13799] vfs_read+0x1de/0xc70 [ 764.212846][T13799] ? __pfx___mutex_lock+0x10/0x10 [ 764.212860][T13799] ? __pfx_vfs_read+0x10/0x10 [ 764.212878][T13799] ? __fget_files+0x20e/0x3c0 [ 764.212898][T13799] ksys_read+0x12a/0x240 [ 764.212912][T13799] ? __pfx_ksys_read+0x10/0x10 [ 764.212931][T13799] do_syscall_64+0xcd/0x260 [ 764.212945][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.212957][T13799] RIP: 0033:0x7f88cbd8d37c [ 764.212965][T13799] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 764.212975][T13799] RSP: 002b:00007f88ccb5a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.212985][T13799] RAX: ffffffffffffffda RBX: 00007f88cbfb5fa0 RCX: 00007f88cbd8d37c [ 764.212992][T13799] RDX: 000000000000000f RSI: 00007f88ccb5a0a0 RDI: 0000000000000004 [ 764.212998][T13799] RBP: 00007f88ccb5a090 R08: 0000000000000000 R09: 0000000000000000 [ 764.213003][T13799] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 764.213009][T13799] R13: 0000000000000000 R14: 00007f88cbfb5fa0 R15: 00007ffde85886c8 [ 764.213022][T13799] [ 764.395310][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.402578][T13796] netlink: 'syz.5.2033': attribute type 4 has an invalid length. [ 764.410372][T13796] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2033'. [ 764.599928][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 766.625094][ T5864] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 767.115175][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.344888][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 768.359746][ T5864] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 768.369138][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.405005][ T5864] usb 5-1: config 0 descriptor?? [ 768.418517][ T5864] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 770.214477][ T5865] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 770.380615][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.651875][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 770.665862][ T5865] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.681988][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.706220][ T5865] usb 6-1: config 0 descriptor?? [ 770.726549][ T5865] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 771.104730][ T31] INFO: task kworker/1:8:5932 blocked for more than 143 seconds. [ 771.122895][ T31] Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 [ 771.145784][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 771.167355][ T31] task:kworker/1:8 state:D stack:21624 pid:5932 tgid:5932 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 771.191494][ T48] usb 5-1: USB disconnect, device number 47 [ 771.236881][ T31] Workqueue: usb_hub_wq hub_event [ 771.249213][ T31] Call Trace: [ 771.256670][ T31] [ 771.262736][ T31] __schedule+0x116f/0x5de0 [ 771.272492][ T31] ? __lock_acquire+0x9e0/0x1ba0 [ 771.281570][ T31] ? __pfx___schedule+0x10/0x10 [ 771.286888][ T31] ? find_held_lock+0x2b/0x80 [ 771.291613][ T31] ? schedule+0x2d7/0x3a0 [ 771.301430][ T31] schedule+0xe7/0x3a0 [ 771.313211][ T31] schedule_preempt_disabled+0x13/0x30 [ 771.324854][ T31] __mutex_lock+0x6c7/0xb90 [ 771.329415][ T31] ? hub_event+0x292b/0x4fa0 [ 771.334050][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 771.339657][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 771.346189][ T31] ? hub_ext_port_status+0x1fa/0x670 [ 771.351870][ T31] ? hub_event+0x292b/0x4fa0 [ 771.356659][ T31] hub_event+0x292b/0x4fa0 [ 771.362036][ T31] ? __pfx_hub_event+0x10/0x10 [ 771.367116][ T31] ? insn_get_modrm+0x440/0x720 [ 771.372021][ T31] ? insn_get_modrm+0x440/0x720 [ 771.377176][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 771.382598][ T31] process_one_work+0x9cc/0x1b70 [ 771.388370][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 771.395245][ T31] ? __pfx_process_one_work+0x10/0x10 [ 771.400667][ T31] ? assign_work+0x1a0/0x250 [ 771.405639][ T31] worker_thread+0x6c8/0xf10 [ 771.410403][ T31] ? __kthread_parkme+0x19e/0x250 [ 771.423597][ T31] ? __pfx_worker_thread+0x10/0x10 [ 771.430560][ T31] kthread+0x3c2/0x780 [ 771.435057][ T31] ? __pfx_kthread+0x10/0x10 [ 771.447377][ T31] ? __pfx_kthread+0x10/0x10 [ 771.452816][ T31] ? __pfx_kthread+0x10/0x10 [ 771.464529][ T31] ? __pfx_kthread+0x10/0x10 [ 771.469242][ T31] ? rcu_is_watching+0x12/0xc0 [ 771.474098][ T31] ? __pfx_kthread+0x10/0x10 [ 771.481365][ T31] ret_from_fork+0x45/0x80 [ 771.486820][ T31] ? __pfx_kthread+0x10/0x10 [ 771.493763][ T31] ret_from_fork_asm+0x1a/0x30 [ 771.498635][ T31] [ 771.501721][ T31] [ 771.501721][ T31] Showing all locks held in the system: [ 771.517055][ T31] 1 lock held by khungtaskd/31: [ 771.521919][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 771.549289][ T31] 2 locks held by kworker/u8:6/1146: [ 771.561197][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 771.575434][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 771.588959][ T31] 2 locks held by getty/5569: [ 771.593709][ T31] #0: ffff88803713a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 771.606323][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 771.617256][ T31] 5 locks held by kworker/1:3/5817: [ 771.622505][ T31] #0: ffff88802229ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 771.633772][ T31] #1: ffffc90003647d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 771.645392][ T31] #2: ffff888145f69198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 771.654523][ T31] #3: ffff888145f6c510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 771.669050][ T31] #4: ffff88802a21c268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 771.679770][ T31] 5 locks held by kworker/1:8/5932: [ 771.686626][ T31] #0: ffff88802229ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 771.698665][ T31] #1: ffffc90002f37d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 771.712144][ T31] #2: ffff88802a673198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 771.722388][ T31] #3: ffff88802a676510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 771.735418][ T31] #4: ffff88802a21c268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 771.748149][ T31] 3 locks held by kworker/u8:11/8190: [ 771.753655][ T31] #0: ffff88801ff67948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 771.764859][ T31] #1: ffffc9000495fd18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 771.778259][ T31] #2: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 771.790486][ T31] no locks held by dhcpcd-run-hook/13894. [ 771.796558][ T31] [ 771.800016][ T31] ============================================= [ 771.800016][ T31] [ 771.811251][ T31] NMI backtrace for cpu 1 [ 771.811264][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 771.811285][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 771.811295][ T31] Call Trace: [ 771.811300][ T31] [ 771.811306][ T31] dump_stack_lvl+0x116/0x1f0 [ 771.811331][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 771.811346][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 771.811366][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 771.811383][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 771.811402][ T31] watchdog+0xf70/0x12c0 [ 771.811422][ T31] ? __pfx_watchdog+0x10/0x10 [ 771.811435][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.811456][ T31] ? __kthread_parkme+0x19e/0x250 [ 771.811479][ T31] ? __pfx_watchdog+0x10/0x10 [ 771.811493][ T31] kthread+0x3c2/0x780 [ 771.811509][ T31] ? __pfx_kthread+0x10/0x10 [ 771.811522][ T31] ? __pfx_kthread+0x10/0x10 [ 771.811536][ T31] ? __pfx_kthread+0x10/0x10 [ 771.811550][ T31] ? __pfx_kthread+0x10/0x10 [ 771.811563][ T31] ? rcu_is_watching+0x12/0xc0 [ 771.811583][ T31] ? __pfx_kthread+0x10/0x10 [ 771.811598][ T31] ret_from_fork+0x45/0x80 [ 771.811613][ T31] ? __pfx_kthread+0x10/0x10 [ 771.811627][ T31] ret_from_fork_asm+0x1a/0x30 [ 771.811661][ T31] [ 771.811667][ T31] Sending NMI from CPU 1 to CPUs 0: [ 771.950699][ C0] NMI backtrace for cpu 0 [ 771.950712][ C0] CPU: 0 UID: 0 PID: 5809 Comm: kworker/0:3 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 771.950729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 771.950737][ C0] Workqueue: events bpf_prog_free_deferred [ 771.950756][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 771.950770][ C0] Code: f6 5c 55 00 48 89 df 5b e9 2d b8 5a 00 be 03 00 00 00 5b e9 f2 8a 15 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 18 bd e8 11 65 8b 05 29 bd e8 [ 771.950782][ C0] RSP: 0018:ffffc9000449f8b0 EFLAGS: 00000002 [ 771.950792][ C0] RAX: 0000000000000000 RBX: ffffffff8e180000 RCX: ffffffff816b641a [ 771.950800][ C0] RDX: ffff8880287c4880 RSI: ffffffff8e180000 RDI: 0000000000000006 [ 771.950808][ C0] RBP: 000000000e180000 R08: 0000000000000006 R09: ffffffff8e180000 [ 771.950816][ C0] R10: 000000000e180000 R11: 0000000000000000 R12: 0000000000000001 [ 771.950823][ C0] R13: ffff8880287c4880 R14: 0000000000000000 R15: ffff88801b470000 [ 771.950831][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 771.950844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.950852][ C0] CR2: 00005592965207d8 CR3: 000000000e180000 CR4: 00000000003526f0 [ 771.950860][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 771.950867][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 771.950875][ C0] Call Trace: [ 771.950879][ C0] [ 771.950883][ C0] __phys_addr+0xdf/0x150 [ 771.950900][ C0] build_cr3.constprop.0+0x8/0x50 [ 771.950916][ C0] switch_mm_irqs_off+0xf1/0x890 [ 771.950934][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 771.950951][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 771.950967][ C0] __text_poke+0x3fa/0xd00 [ 771.950981][ C0] ? __pfx_text_poke_memset+0x10/0x10 [ 771.950997][ C0] ? __pfx___text_poke+0x10/0x10 [ 771.951014][ C0] text_poke_set+0xec/0x160 [ 771.951028][ C0] ? __pfx_text_poke_set+0x10/0x10 [ 771.951046][ C0] bpf_arch_text_invalidate+0x21/0x70 [ 771.951065][ C0] bpf_prog_pack_free+0x157/0x440 [ 771.951080][ C0] bpf_jit_binary_pack_free+0x3c/0x110 [ 771.951095][ C0] bpf_jit_free+0x147/0x600 [ 771.951106][ C0] ? __bpf_free_used_maps+0x98/0x1e0 [ 771.951121][ C0] bpf_prog_free_deferred+0x53f/0x6f0 [ 771.951137][ C0] process_one_work+0x9cc/0x1b70 [ 771.951153][ C0] ? __pfx_process_one_work+0x10/0x10 [ 771.951168][ C0] ? assign_work+0x1a0/0x250 [ 771.951180][ C0] worker_thread+0x6c8/0xf10 [ 771.951195][ C0] ? __kthread_parkme+0x19e/0x250 [ 771.951211][ C0] ? __pfx_worker_thread+0x10/0x10 [ 771.951223][ C0] kthread+0x3c2/0x780 [ 771.951241][ C0] ? __pfx_kthread+0x10/0x10 [ 771.951251][ C0] ? __pfx_kthread+0x10/0x10 [ 771.951261][ C0] ? __pfx_kthread+0x10/0x10 [ 771.951272][ C0] ? __pfx_kthread+0x10/0x10 [ 771.951282][ C0] ? rcu_is_watching+0x12/0xc0 [ 771.951295][ C0] ? __pfx_kthread+0x10/0x10 [ 771.951306][ C0] ret_from_fork+0x45/0x80 [ 771.951317][ C0] ? __pfx_kthread+0x10/0x10 [ 771.951328][ C0] ret_from_fork_asm+0x1a/0x30 [ 771.951349][ C0] [ 771.953414][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 772.267795][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 772.279579][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 772.289616][ T31] Call Trace: [ 772.292877][ T31] [ 772.295791][ T31] dump_stack_lvl+0x3d/0x1f0 [ 772.300372][ T31] panic+0x71c/0x800 [ 772.304258][ T31] ? __pfx_panic+0x10/0x10 [ 772.308659][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 772.314015][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 772.319975][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 772.325335][ T31] ? watchdog+0xdda/0x12c0 [ 772.329732][ T31] ? watchdog+0xdcd/0x12c0 [ 772.334129][ T31] watchdog+0xdeb/0x12c0 [ 772.338355][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.343014][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 772.348197][ T31] ? __kthread_parkme+0x19e/0x250 [ 772.353209][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.357865][ T31] kthread+0x3c2/0x780 [ 772.361915][ T31] ? __pfx_kthread+0x10/0x10 [ 772.366485][ T31] ? __pfx_kthread+0x10/0x10 [ 772.371056][ T31] ? __pfx_kthread+0x10/0x10 [ 772.375629][ T31] ? __pfx_kthread+0x10/0x10 [ 772.380199][ T31] ? rcu_is_watching+0x12/0xc0 [ 772.384953][ T31] ? __pfx_kthread+0x10/0x10 [ 772.389538][ T31] ret_from_fork+0x45/0x80 [ 772.393935][ T31] ? __pfx_kthread+0x10/0x10 [ 772.398505][ T31] ret_from_fork_asm+0x1a/0x30 [ 772.403266][ T31] [ 772.406452][ T31] Kernel Offset: disabled [ 772.410755][ T31] Rebooting in 86400 seconds..