last executing test programs: 4m13.368454874s ago: executing program 1 (id=449): socket$inet(0x2b, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}}, 0x0) 4m6.366020241s ago: executing program 1 (id=466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa080, 0x162) getdents64(r6, &(0x7f0000000040)=""/52, 0x34) r7 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@none}}}, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x80000000}]}, &(0x7f0000000240)=0x10) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000180)={0xa, 0x4e23, 0x7ec, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0, 0x0, 0x0, 0x68}, 0x80) socket$netlink(0x10, 0x3, 0x0) 4m5.241145217s ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc9564eab44f5cc}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xeedc}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) 4m4.42997068s ago: executing program 1 (id=471): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000bee000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r1, r1}, &(0x7f0000000040)=""/213, 0xd5, 0x0) 4m1.133624126s ago: executing program 1 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') (async) chdir(&(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x38, 0xe2, 0xaa, 0x8, 0x2b73, 0x17, 0xa20e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xdb, 0x4, 0x80, 0xe6, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0x9e, 0x4d, 0x5}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xe2, 0xa5, 0xc6, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x10, 0xf8, 0x7}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x38, 0xe2, 0xaa, 0x8, 0x2b73, 0x17, 0xa20e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xdb, 0x4, 0x80, 0xe6, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0x9e, 0x4d, 0x5}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xe2, 0xa5, 0xc6, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x10, 0xf8, 0x7}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 3m57.267647154s ago: executing program 1 (id=492): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x3dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf2, 0x3, 0x1}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0xd, 0x7, 0xff, 0x9}, 0x5b, &(0x7f00000000c0)={0x5, 0xf, 0x5b, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x4, 0xf000, 0x716, [0x3f00, 0xcf, 0x60, 0xffc0c0, 0x18]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0xe9a, 0x1e00, 0xf3, [0xc030, 0xff3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x4, 0xff00, 0x7, [0x3f00, 0xff3f00, 0x0]}]}, 0x1, [{0xa2, &(0x7f0000000140)=@string={0xa2, 0x3, "94edca82c6ecd9135d4237af645536c5ad143af895a9209329a57d8e1474661c4127c93038d3eaa134482fa98b30956304204b8ffb5ce36636a3d8cf27a419ed9887a478be2056bb0dfb6f682394afd133fb07e7bd28aa33afcd44051f54a1048f5518eece99e3b9c49542508797a6ab272b22e447c1e1afaa766111901bbe9edff55b06add4981284911b37bab84b0732e749982b9ee1c36919cde58219ed41"}}]}) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x8001, 0x80, 0x1, {0x22, 0x5b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xdc, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2a, 0x1, 0xf}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0xe7445919aecd860f, 0x8, 0x8, 0x2, 0x50, 0x3}, 0x71, &(0x7f00000002c0)={0x5, 0xf, 0x71, 0x2, [@generic={0x17, 0x10, 0xb, "ba61cb3ed167525e8d2256f2aa31cbeaddec1332"}, @generic={0x55, 0x10, 0x1, "db13ac6e21acb593ff9ad3b8fe2f30b50584aefc9b418636b7f82bf7dcda61fb6f44c4e291e55a1b83d7f7855c5369c9a632839c28caea2808d53f29d38d4b6cb5598c556f2123bd881f1d971fe15424db8c"}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42b}}, {0x19, &(0x7f00000003c0)=@string={0x19, 0x3, "2b475c028becdcc8d3a02dea4674de31268e3b3c67cca1"}}, {0x9c, &(0x7f0000000400)=@string={0x9c, 0x3, "f6860548cce507efd983b045e94ccf1cc7a4897c9a0559e80a1adef02685a170867342ae21df56226ccca68a80e88c2c361c59a0dbaa67e0caf465e0dfc04680dda3966f998063b2db0e0ba1be08e2a1dc5735080a8a69fa1a3e480364a79c36be4afe22291fdbb1d5d89462d156c9ec2df7cbd710a6f0acb9a239de54b1b2f7755e6490f7dc1b37cb59c673f3b30d25e61c02ef151786a0f9bb"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="40120200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m41.522824629s ago: executing program 32 (id=492): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x3dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf2, 0x3, 0x1}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0xd, 0x7, 0xff, 0x9}, 0x5b, &(0x7f00000000c0)={0x5, 0xf, 0x5b, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x4, 0xf000, 0x716, [0x3f00, 0xcf, 0x60, 0xffc0c0, 0x18]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0xe9a, 0x1e00, 0xf3, [0xc030, 0xff3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x4, 0xff00, 0x7, [0x3f00, 0xff3f00, 0x0]}]}, 0x1, [{0xa2, &(0x7f0000000140)=@string={0xa2, 0x3, "94edca82c6ecd9135d4237af645536c5ad143af895a9209329a57d8e1474661c4127c93038d3eaa134482fa98b30956304204b8ffb5ce36636a3d8cf27a419ed9887a478be2056bb0dfb6f682394afd133fb07e7bd28aa33afcd44051f54a1048f5518eece99e3b9c49542508797a6ab272b22e447c1e1afaa766111901bbe9edff55b06add4981284911b37bab84b0732e749982b9ee1c36919cde58219ed41"}}]}) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x8001, 0x80, 0x1, {0x22, 0x5b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xdc, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2a, 0x1, 0xf}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0xe7445919aecd860f, 0x8, 0x8, 0x2, 0x50, 0x3}, 0x71, &(0x7f00000002c0)={0x5, 0xf, 0x71, 0x2, [@generic={0x17, 0x10, 0xb, "ba61cb3ed167525e8d2256f2aa31cbeaddec1332"}, @generic={0x55, 0x10, 0x1, "db13ac6e21acb593ff9ad3b8fe2f30b50584aefc9b418636b7f82bf7dcda61fb6f44c4e291e55a1b83d7f7855c5369c9a632839c28caea2808d53f29d38d4b6cb5598c556f2123bd881f1d971fe15424db8c"}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42b}}, {0x19, &(0x7f00000003c0)=@string={0x19, 0x3, "2b475c028becdcc8d3a02dea4674de31268e3b3c67cca1"}}, {0x9c, &(0x7f0000000400)=@string={0x9c, 0x3, "f6860548cce507efd983b045e94ccf1cc7a4897c9a0559e80a1adef02685a170867342ae21df56226ccca68a80e88c2c361c59a0dbaa67e0caf465e0dfc04680dda3966f998063b2db0e0ba1be08e2a1dc5735080a8a69fa1a3e480364a79c36be4afe22291fdbb1d5d89462d156c9ec2df7cbd710a6f0acb9a239de54b1b2f7755e6490f7dc1b37cb59c673f3b30d25e61c02ef151786a0f9bb"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="40120200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.279312091s ago: executing program 0 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84b008, &(0x7f0000000300)={[{@noswap}]}) socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r3 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f00000004c0)) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x100, 0x250a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x24004090) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x10ff}) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x8, 0xcc, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc, 0x41}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x48804}, 0x20000000) 12.421052482s ago: executing program 5 (id=1025): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 11.018842917s ago: executing program 2 (id=1028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 10.602412836s ago: executing program 0 (id=1030): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x11, 0x16, &(0x7f0000002640)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x2, 0x2, 0x1, 0xc, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa0c7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xc0}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61127800000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4"], 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$smackfs_change_rule(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='( } rxhtb w'], 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x2, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) timer_create(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x10) 9.798721834s ago: executing program 5 (id=1032): r0 = socket(0x10, 0x3, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1e) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0xfffffffffffff6cf, 0x177201) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200375f42bd7000f9ffffff0700"], 0x20}, 0x1, 0x0, 0x0, 0x20040814}, 0x880) (async) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb81003d0086dd60000000000889009e0100"/41], 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket(0x29, 0x80000, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.730545564s ago: executing program 4 (id=1033): prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x70000, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x1f, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000009000000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018560000020000000000000000000000b7080000000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007080000f0ffffffb70200000800000018230000000000000000000000c52391a60ec5e875612b2dafe862ae831e0bfcf248f862712353dd0337b888c4d6571cb23d5016b7b0914bd5d3d363783e68666d66417db0c4793823c715b0fa169f9c65027120c0c37d26cadde26a5df33248d11fa81f3fca4cbc41", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000d510000110000000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r7], 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019580)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e", @ANYRESDEC], 0x20}}, 0x44850) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 9.09074818s ago: executing program 0 (id=1035): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x24008c00) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000040)={0x80}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002700)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002780)=""/29, 0x1d}, {&(0x7f00000027c0)=""/139, 0x8b}, {&(0x7f0000002880)=""/182, 0xb6}, {&(0x7f0000002940)=""/35, 0x23}, {&(0x7f0000002980)=""/47, 0x2f}], 0x5, &(0x7f0000002a40)=""/76, 0x4c}, 0x7f}], 0x2, 0x2040, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000002b40)=0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402090401", @ANYRES64], 0x0) 7.870840611s ago: executing program 4 (id=1036): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100000800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c00078008000200000001"], 0x80}}, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000340)={0x18, 0x1, 0x0, 0x0, r4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x68002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x484000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) socket$inet_dccp(0x2, 0x6, 0x0) 6.566335656s ago: executing program 3 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x24060400) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x3, 0x7, &(0x7f0000000080)={0x83, "90f541f144d76e03c7b2986e7fe528299000"}}) 6.320094386s ago: executing program 4 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f600000000000000000000000000d802000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r4, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x5e53, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 6.261725348s ago: executing program 3 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}]}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 5.71957114s ago: executing program 5 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000005940)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73797a30002030303030303030d2c84f25bcc1e7303030303030303030303031322030303030303030303030303030303030303030312030303030303030303030303030303030303030302000"], 0x46) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000340)) 5.552828923s ago: executing program 3 (id=1042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 5.219483945s ago: executing program 4 (id=1043): syz_emit_ethernet(0x129, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(&(0x7f00000040c0), 0x7, 0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003800)={'veth1\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003bc0), r3) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003c00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250b0000000c00018008005900", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x260008c0) 5.019437601s ago: executing program 5 (id=1044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0) 4.931547541s ago: executing program 2 (id=1045): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x11, 0x16, &(0x7f0000002640)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x2, 0x2, 0x1, 0xc, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa0c7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xc0}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$smackfs_change_rule(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='( } rxhtb w'], 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x2, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) timer_create(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x10) 4.50023776s ago: executing program 3 (id=1046): r0 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x3, &(0x7f0000000000)={0x4, 0x9}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x96, &(0x7f0000000a40)=""/150, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x4000) read$hiddev(r4, &(0x7f0000000180)=""/43, 0x2b) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.905474924s ago: executing program 2 (id=1047): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000180)={0xff, 0x8, 0x3}) 3.819591019s ago: executing program 4 (id=1048): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) getpid() syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) 3.711228553s ago: executing program 0 (id=1049): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000001140), 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='?ASS\nDIG-TAL2\nLINE1 \'Mic Capture Switch\' 00000000000000000000\nALTPCM\nLINE\nDIGITAL3 \'Master Capture\' 00000000000000000000\nDIGITAL2 \'CD Capture\' 00000000000000000000\nTREBLE\nPCM \'Master Playback Volume\' 00000000000000000000\nVOLUME\n'], 0xe4) syz_io_uring_setup(0x5bf, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e2a, 0x1, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r6, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000057c0)=""/3, 0x3}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)=""/45, 0x2d}, 0x8}], 0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket(0x2, 0x80805, 0x0) 3.561763682s ago: executing program 5 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x24060400) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x3, 0x7, &(0x7f0000000080)={0x83, "90f541f144d76e03c7b2986e7fe528299000"}}) 3.561198356s ago: executing program 2 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) setsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f00000005c0)=0x7fff, 0x4) sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) mount$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) 3.463579455s ago: executing program 3 (id=1052): openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000580)=0xa) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r1}, 0xc) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000380)='./file1/file0\x00', 0x14282, 0x88) 2.429983108s ago: executing program 0 (id=1053): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x4888) 1.104291352s ago: executing program 2 (id=1054): openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000080)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000580)=0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000380)='./file1/file0\x00', 0x14282, 0x88) 1.084770163s ago: executing program 5 (id=1055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 1.01033515s ago: executing program 0 (id=1056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.00586843s ago: executing program 3 (id=1057): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x11, 0x16, &(0x7f0000002640)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x2, 0x2, 0x1, 0xc, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa0c7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xc0}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$smackfs_change_rule(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='( } rxhtb w'], 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x2, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) timer_create(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x10) 1.598478ms ago: executing program 2 (id=1058): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xc7a5, 0x8881) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept$inet(r6, &(0x7f0000000000), &(0x7f0000000340)=0x10) r7 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x20000000) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f00000002c0)={0x18, 0x0, {0x4, @multicast, 'veth0_macvtap\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r11, 0x5453, 0x0) 0s ago: executing program 4 (id=1059): r0 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x114, 0x2718, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xc4}}, 0x20050800) syz_open_dev$loop(&(0x7f0000000040), 0x7f, 0x20000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) kernel console output (not intermixed with test programs): unexpected response 0 [ 301.199537][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.206633][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.213400][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.219350][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.226401][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.233180][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.239228][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.246211][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.252999][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.259011][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.266054][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.272834][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.279225][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.286210][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.292979][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.298958][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.305924][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.312774][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.318739][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.325720][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.332497][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.338509][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.345651][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.352455][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.358489][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.365496][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.372288][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.378252][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.385231][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.392007][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.397995][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.405009][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.411806][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.417745][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.424722][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.431574][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.437640][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.444635][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.451409][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.457503][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.464499][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.471274][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.477360][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.484452][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.491313][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.497333][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.504345][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.511116][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.517163][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.524247][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.531035][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.536975][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.543933][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.550715][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.556687][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.563670][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.570549][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.576513][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.583475][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.590250][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.596220][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.603204][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.609972][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.615897][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.622889][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.629661][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.635611][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.642536][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.649290][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.655200][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.665072][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.671871][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.685073][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.692037][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.698796][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.705031][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.715000][ C0] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 301.721803][ C0] yealink 1-1:36.0: unexpected response 0 [ 301.727686][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 301.734462][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 301.742218][ T5827] usb 1-1: USB disconnect, device number 14 [ 301.755913][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.205/input/input8 [ 302.452186][ T9] cdc_ncm 4-1:1.0: bind() failure [ 302.615178][ T9] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 302.720335][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 303.057281][ T9] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 303.075421][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 303.145060][ T8] usb 5-1: USB disconnect, device number 20 [ 303.181760][ T9] usb 4-1: USB disconnect, device number 13 [ 303.236543][ T29] kauditd_printk_skb: 35451 callbacks suppressed [ 303.236560][ T29] audit: type=1400 audit(1741094971.756:30940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5982 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 303.242965][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.261506][ T5971] audit: audit_backlog=66 > audit_backlog_limit=64 [ 303.271011][ T8313] audit: audit_backlog=66 > audit_backlog_limit=64 [ 303.275910][ T5196] audit: audit_backlog=67 > audit_backlog_limit=64 [ 303.288385][ T8314] audit: audit_backlog=68 > audit_backlog_limit=64 [ 303.294913][ T8314] audit: audit_lost=23639 audit_rate_limit=0 audit_backlog_limit=64 [ 303.295524][ T27] audit: audit_backlog=68 > audit_backlog_limit=64 [ 303.296864][ T46] usb 3-1: device descriptor read/64, error -71 [ 303.303528][ T27] audit: audit_lost=23640 audit_rate_limit=0 audit_backlog_limit=64 [ 303.312678][ T5971] audit: audit_lost=23641 audit_rate_limit=0 audit_backlog_limit=64 [ 303.725291][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 303.865028][ T46] usb 3-1: device descriptor read/64, error -71 [ 303.988976][ T46] usb usb3-port1: attempt power cycle [ 304.681811][ T8349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.246496][ T8366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.606'. [ 306.717234][ T8367] netlink: 'syz.5.609': attribute type 5 has an invalid length. [ 306.744380][ T8367] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 307.301068][ T8376] netlink: 'syz.5.612': attribute type 39 has an invalid length. [ 308.206131][ T8387] ufs: You didn't specify the type of your ufs filesystem [ 308.206131][ T8387] [ 308.206131][ T8387] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 308.206131][ T8387] [ 308.206131][ T8387] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 308.242680][ T8387] syz.2.613: attempt to access beyond end of device [ 308.242680][ T8387] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 308.245063][ T29] kauditd_printk_skb: 29734 callbacks suppressed [ 308.245079][ T29] audit: type=1400 audit(1741094976.766:40941): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8388 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 308.269862][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.283720][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.299421][ T5178] audit: audit_lost=30272 audit_rate_limit=0 audit_backlog_limit=64 [ 308.317699][ T5196] audit: audit_lost=30273 audit_rate_limit=0 audit_backlog_limit=64 [ 308.318534][ T8388] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.330096][ T5196] audit: backlog limit exceeded [ 308.339192][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.349074][ T5178] audit: backlog limit exceeded [ 308.349285][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.665618][ T8406] syz.2.617 (8406): drop_caches: 4 [ 311.889575][ T8425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.621'. [ 312.225906][ T8435] loop8: detected capacity change from 0 to 7 [ 312.298045][ T8435] Dev loop8: unable to read RDB block 7 [ 312.303710][ T8435] loop8: unable to read partition table [ 312.515929][ T8435] loop8: partition table beyond EOD, truncated [ 312.522191][ T8435] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 312.522191][ T8435] ) failed (rc=-5) [ 313.227469][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 313.236441][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.5.626'. [ 313.255039][ T29] kauditd_printk_skb: 30637 callbacks suppressed [ 313.255057][ T29] audit: type=1400 audit(1741094981.776:49331): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="129" dev="tmpfs" ino=737 [ 313.262199][ T8450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.287783][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.287864][ T8450] audit: audit_lost=37706 audit_rate_limit=0 audit_backlog_limit=64 [ 313.315202][ T5196] audit: audit_lost=37707 audit_rate_limit=0 audit_backlog_limit=64 [ 313.340137][ T8450] audit: backlog limit exceeded [ 313.345076][ T5196] audit: backlog limit exceeded [ 313.345109][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.345124][ T5196] audit: audit_lost=37708 audit_rate_limit=0 audit_backlog_limit=64 [ 313.345137][ T5196] audit: backlog limit exceeded [ 313.507197][ T8419] syz.4.620: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.582372][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.4.620 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 313.582403][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.582427][ T8419] Call Trace: [ 313.582434][ T8419] [ 313.582442][ T8419] dump_stack_lvl+0x241/0x360 [ 313.582469][ T8419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.582486][ T8419] ? __pfx__printk+0x10/0x10 [ 313.582515][ T8419] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 313.582534][ T8419] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 313.582556][ T8419] warn_alloc+0x278/0x410 [ 313.582581][ T8419] ? __pfx_warn_alloc+0x10/0x10 [ 313.582607][ T8419] ? bpf_uprobe_multi_link_attach+0x498/0xdd0 [ 313.582629][ T8419] ? __get_vm_area_node+0x1c8/0x2d0 [ 313.582647][ T8419] ? __get_vm_area_node+0x25c/0x2d0 [ 313.582671][ T8419] __vmalloc_node_range_noprof+0x62f/0x1380 [ 313.582722][ T8419] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.582742][ T8419] ? rcu_is_watching+0x15/0xb0 [ 313.582760][ T8419] ? trace_kmalloc+0x1f/0xd0 [ 313.582774][ T8419] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 313.582790][ T8419] ? __kvmalloc_node_noprof+0x72/0x190 [ 313.582812][ T8419] __kvmalloc_node_noprof+0x142/0x190 [ 313.582832][ T8419] ? bpf_uprobe_multi_link_attach+0x498/0xdd0 [ 313.582855][ T8419] bpf_uprobe_multi_link_attach+0x498/0xdd0 [ 313.582888][ T8419] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 313.582914][ T8419] ? __fget_files+0x395/0x410 [ 313.582936][ T8419] ? bpf_prog_attach_check_attach_type+0x42c/0x4f0 [ 313.582964][ T8419] link_create+0x6d7/0x870 [ 313.582992][ T8419] __sys_bpf+0x4b7/0x820 [ 313.583015][ T8419] ? __pfx___sys_bpf+0x10/0x10 [ 313.583047][ T8419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.583073][ T8419] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.583097][ T8419] ? do_syscall_64+0x100/0x230 [ 313.583133][ T8419] __x64_sys_bpf+0x7c/0x90 [ 313.583152][ T8419] do_syscall_64+0xf3/0x230 [ 313.583174][ T8419] ? clear_bhb_loop+0x35/0x90 [ 313.583200][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.583226][ T8419] RIP: 0033:0x7f3692b8d169 [ 313.583242][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.583257][ T8419] RSP: 002b:00007f36939b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.583277][ T8419] RAX: ffffffffffffffda RBX: 00007f3692da5fa0 RCX: 00007f3692b8d169 [ 313.583289][ T8419] RDX: 0000000000000040 RSI: 00004000000012c0 RDI: 000000000000001c [ 313.583300][ T8419] RBP: 00007f3692c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.583311][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.583321][ T8419] R13: 0000000000000000 R14: 00007f3692da5fa0 R15: 00007ffd2cce1eb8 [ 313.583348][ T8419] [ 313.584162][ T8419] Mem-Info: [ 313.950756][ T8419] active_anon:6057 inactive_anon:7490 isolated_anon:0 [ 313.950756][ T8419] active_file:20421 inactive_file:39806 isolated_file:0 [ 313.950756][ T8419] unevictable:767 dirty:188 writeback:0 [ 313.950756][ T8419] slab_reclaimable:10071 slab_unreclaimable:101296 [ 313.950756][ T8419] mapped:31651 shmem:9242 pagetables:1044 [ 313.950756][ T8419] sec_pagetables:0 bounce:0 [ 313.950756][ T8419] kernel_misc_reclaimable:0 [ 313.950756][ T8419] free:1299686 free_pcp:2417 free_cma:0 [ 314.075676][ T8419] Node 0 active_anon:21228kB inactive_anon:31560kB active_file:81508kB inactive_file:159224kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:128104kB dirty:748kB writeback:0kB shmem:33632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11412kB pagetables:4176kB sec_pagetables:0kB all_unreclaimable? no [ 314.145168][ T8419] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 314.226994][ T8419] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.320454][ T8419] lowmem_reserve[]: 0 2490 2490 0 0 [ 314.336759][ T8419] Node 0 DMA32 free:1304796kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:24176kB inactive_anon:21932kB active_file:81248kB inactive_file:159172kB unevictable:1532kB writepending:828kB present:3129332kB managed:2550364kB mlocked:0kB bounce:0kB free_pcp:1504kB local_pcp:444kB free_cma:0kB [ 314.399509][ T8419] lowmem_reserve[]: 0 0 0 0 0 [ 314.408066][ T8419] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:268kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 314.443532][ T8419] lowmem_reserve[]: 0 0 0 0 0 [ 314.448412][ T8419] Node 1 Normal free:3885088kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:8524kB local_pcp:6476kB free_cma:0kB [ 314.505607][ T8419] lowmem_reserve[]: 0 0 0 0 0 [ 314.520968][ T8419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.616844][ T8419] Node 0 DMA32: 59*4kB (UME) 286*8kB (UME) 273*16kB (UME) 255*32kB (UME) 176*64kB (ME) 49*128kB (UME) 50*256kB (UME) 49*512kB (UME) 36*1024kB (UME) 8*2048kB (UME) 289*4096kB (UM) = 1307468kB [ 314.652746][ T8419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 314.666811][ T8419] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 10*16kB (ME) 7*32kB (UE) 6*64kB (UME) 2*128kB (ME) 4*256kB (UM) 6*512kB (UM) 5*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3885088kB [ 314.753389][ T8419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.790312][ T8419] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 314.807494][ T8419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.870779][ T8419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 314.920198][ T8419] 65861 total pagecache pages [ 314.937234][ T8419] 0 pages in swap cache [ 314.953192][ T8419] Free swap = 124772kB [ 314.968092][ T8419] Total swap = 124996kB [ 314.972999][ T8479] FAULT_INJECTION: forcing a failure. [ 314.972999][ T8479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.995199][ T8419] 2097051 pages RAM [ 315.005076][ T8419] 0 pages HighMem/MovableOnly [ 315.015240][ T8419] 427736 pages reserved [ 315.019549][ T8419] 0 pages cma reserved [ 315.034030][ T8479] CPU: 1 UID: 0 PID: 8479 Comm: syz.5.633 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 315.034055][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.034065][ T8479] Call Trace: [ 315.034072][ T8479] [ 315.034079][ T8479] dump_stack_lvl+0x241/0x360 [ 315.034104][ T8479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.034120][ T8479] ? __pfx__printk+0x10/0x10 [ 315.034145][ T8479] ? __pfx_lock_release+0x10/0x10 [ 315.034175][ T8479] should_fail_ex+0x40a/0x550 [ 315.034203][ T8479] _copy_from_iter+0x1df/0x1c40 [ 315.034220][ T8479] ? __virt_addr_valid+0x183/0x530 [ 315.034242][ T8479] ? __pfx_lock_release+0x10/0x10 [ 315.034269][ T8479] ? __alloc_skb+0x28f/0x440 [ 315.034290][ T8479] ? __pfx__copy_from_iter+0x10/0x10 [ 315.034310][ T8479] ? __virt_addr_valid+0x183/0x530 [ 315.034330][ T8479] ? __virt_addr_valid+0x183/0x530 [ 315.034350][ T8479] ? __virt_addr_valid+0x45f/0x530 [ 315.034371][ T8479] ? __phys_addr_symbol+0x2f/0x70 [ 315.034392][ T8479] ? __check_object_size+0x47a/0x730 [ 315.034421][ T8479] netlink_sendmsg+0x742/0xcb0 [ 315.034449][ T8479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.034478][ T8479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.034494][ T8479] __sock_sendmsg+0x221/0x270 [ 315.034516][ T8479] ____sys_sendmsg+0x53a/0x860 [ 315.034547][ T8479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.034568][ T8479] ? __fget_files+0x2a/0x410 [ 315.034587][ T8479] ? __fget_files+0x2a/0x410 [ 315.034609][ T8479] __sys_sendmsg+0x269/0x350 [ 315.034637][ T8479] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.034671][ T8479] ? do_sys_openat2+0x17a/0x1d0 [ 315.034712][ T8479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.034735][ T8479] ? do_syscall_64+0x100/0x230 [ 315.034758][ T8479] ? do_syscall_64+0xb6/0x230 [ 315.034781][ T8479] do_syscall_64+0xf3/0x230 [ 315.034802][ T8479] ? clear_bhb_loop+0x35/0x90 [ 315.034826][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.034846][ T8479] RIP: 0033:0x7fdddd98d169 [ 315.034860][ T8479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.034874][ T8479] RSP: 002b:00007fddde771038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.034892][ T8479] RAX: ffffffffffffffda RBX: 00007fddddba5fa0 RCX: 00007fdddd98d169 [ 315.034904][ T8479] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004 [ 315.034915][ T8479] RBP: 00007fddde771090 R08: 0000000000000000 R09: 0000000000000000 [ 315.034929][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.034937][ T8479] R13: 0000000000000000 R14: 00007fddddba5fa0 R15: 00007ffe7ce02e98 [ 315.034959][ T8479] [ 316.431523][ T8492] netlink: 60 bytes leftover after parsing attributes in process `syz.4.634'. [ 316.884021][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 317.022827][ T8501] netlink: 'syz.5.635': attribute type 1 has an invalid length. [ 317.081857][ T8501] netlink: 'syz.5.635': attribute type 3 has an invalid length. [ 317.155206][ T8501] netlink: 224 bytes leftover after parsing attributes in process `syz.5.635'. [ 317.225565][ T8493] ALSA: mixer_oss: invalid OSS volume ')û' [ 317.415861][ T8510] i2c i2c-0: Invalid block write size 131 [ 317.536380][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.544031][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.267948][ T29] kauditd_printk_skb: 18940 callbacks suppressed [ 318.267966][ T29] audit: type=1400 audit(1741094986.796:57434): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=5489 comm="dhcpcd" [ 318.289370][ T5971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.290177][ T5489] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.301114][ T5971] audit: audit_lost=41350 audit_rate_limit=0 audit_backlog_limit=64 [ 318.303241][ T5489] audit: audit_lost=41351 audit_rate_limit=0 audit_backlog_limit=64 [ 318.319560][ T5489] audit: backlog limit exceeded [ 318.334872][ T5982] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.342053][ T5971] audit: backlog limit exceeded [ 318.342903][ T7934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.347404][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.525123][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 318.685031][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 318.735336][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.786477][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 318.796933][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.642'. [ 318.805030][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 318.828986][ T8527] netlink: 'syz.5.642': attribute type 7 has an invalid length. [ 318.836998][ T25] usb 4-1: SerialNumber: syz [ 318.854434][ T25] usb 4-1: config 0 descriptor?? [ 318.870395][ T25] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 318.884401][ T8527] netlink: 'syz.5.642': attribute type 8 has an invalid length. [ 318.892316][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.642'. [ 318.900164][ T25] usb 4-1: Failed to create links for entity 255 [ 318.933003][ T8527] gretap0: entered promiscuous mode [ 318.946895][ T8527] batadv_slave_1: entered promiscuous mode [ 318.994364][ T25] usb 4-1: Failed to register entities (-22). [ 319.410949][ T25] usb 4-1: USB disconnect, device number 14 [ 319.529900][ T8527] usb usb8: usbfs: process 8527 (syz.5.642) did not claim interface 0 before use [ 320.121480][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.644'. [ 322.309555][ T8557] netlink: 60 bytes leftover after parsing attributes in process `syz.5.648'. [ 323.581960][ T5832] audit_log_start: 13889 callbacks suppressed [ 323.581978][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.588473][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.594841][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.602000][ T5178] audit: audit_lost=43863 audit_rate_limit=0 audit_backlog_limit=64 [ 323.607816][ C0] audit: audit_lost=43864 audit_rate_limit=0 audit_backlog_limit=64 [ 323.607835][ C0] audit: backlog limit exceeded [ 323.608271][ T29] audit: type=1400 audit(1741094992.106:63819): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5832 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 323.616527][ T5178] audit: backlog limit exceeded [ 323.656348][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.662898][ T5831] audit: audit_lost=43865 audit_rate_limit=0 audit_backlog_limit=64 [ 324.004745][ T8561] i2c i2c-0: Invalid block write size 131 [ 324.379169][ T8582] ipip0: entered promiscuous mode [ 325.721749][ T8592] netlink: 164 bytes leftover after parsing attributes in process `syz.2.654'. [ 325.878728][ T8594] ufs: You didn't specify the type of your ufs filesystem [ 325.878728][ T8594] [ 325.878728][ T8594] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 325.878728][ T8594] [ 325.878728][ T8594] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 325.915973][ T8594] syz.2.654: attempt to access beyond end of device [ 325.915973][ T8594] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 326.756110][ T8599] input: syz0 as /devices/virtual/input/input9 [ 326.762705][ T8599] input: failed to attach handler leds to device input9, error: -6 [ 326.840334][ T8605] vlan2: entered allmulticast mode [ 328.137119][ T8627] sctp: failed to load transform for md5: -2 [ 328.604016][ T29] kauditd_printk_skb: 16813 callbacks suppressed [ 328.604067][ T29] audit: type=1400 audit(1741094997.126:70764): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=8632 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.11.0" dev="sda1" ino=1638 [ 328.614539][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.636007][ T8633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.638086][ T8634] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.662025][ T8638] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.668945][ T8633] audit: audit_lost=47201 audit_rate_limit=0 audit_backlog_limit=64 [ 328.682939][ T8632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.699896][ T8638] audit: audit_lost=47202 audit_rate_limit=0 audit_backlog_limit=64 [ 328.728703][ T8633] audit: backlog limit exceeded [ 328.733649][ T8633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.932206][ T8641] netlink: 40 bytes leftover after parsing attributes in process `syz.5.663'. [ 329.805705][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 330.327673][ T8658] i2c i2c-0: Invalid block write size 131 [ 332.585065][ T5835] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 332.807390][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.843332][ T8689] virtio-fs: tag <(null)> not found [ 333.250814][ T5835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.745091][ T29] kauditd_printk_skb: 14722 callbacks suppressed [ 333.745108][ T29] audit: type=1400 audit(1741095002.266:76072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8686 comm="sed" name="resolv.conf" dev="tmpfs" ino=1709 [ 333.778042][ T5835] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.795602][ T8673] sctp: failed to load transform for md5: -2 [ 333.811813][ T8692] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.825689][ T8682] audit: audit_backlog=66 > audit_backlog_limit=64 [ 333.828040][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.832262][ T8682] audit: audit_lost=50384 audit_rate_limit=0 audit_backlog_limit=64 [ 333.903886][ T8695] audit: audit_backlog=66 > audit_backlog_limit=64 [ 333.927140][ T8692] audit: audit_lost=50385 audit_rate_limit=0 audit_backlog_limit=64 [ 333.964620][ T5835] usb 5-1: Product: syz [ 333.972142][ T5832] audit: audit_backlog=66 > audit_backlog_limit=64 [ 333.978942][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 333.985490][ C0] audit: audit_lost=50386 audit_rate_limit=0 audit_backlog_limit=64 [ 333.993462][ C0] audit: backlog limit exceeded [ 334.014063][ T5835] usb 5-1: Manufacturer: syz [ 334.050426][ T5835] usb 5-1: SerialNumber: syz [ 334.332136][ T8701] netlink: 164 bytes leftover after parsing attributes in process `syz.5.675'. [ 334.435266][ T5835] usb 5-1: 0:2 : does not exist [ 334.497448][ T5835] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 334.715109][ T8704] ufs: You didn't specify the type of your ufs filesystem [ 334.715109][ T8704] [ 334.715109][ T8704] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 334.715109][ T8704] [ 334.715109][ T8704] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 334.749779][ T8704] syz.5.675: attempt to access beyond end of device [ 334.749779][ T8704] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 334.843244][ T5835] usb 5-1: USB disconnect, device number 21 [ 336.410870][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 336.946480][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.757697][ T29] kauditd_printk_skb: 21872 callbacks suppressed [ 338.757795][ T29] audit: type=1400 audit(1741095007.286:84024): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="block" dev="sysfs" ino=13027 [ 338.855955][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.863393][ T8764] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.870773][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.911771][ T8770] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.939164][ T5822] audit: audit_lost=55070 audit_rate_limit=0 audit_backlog_limit=64 [ 338.949645][ T8764] audit: audit_lost=55071 audit_rate_limit=0 audit_backlog_limit=64 [ 338.967611][ T5196] audit: audit_lost=55072 audit_rate_limit=0 audit_backlog_limit=64 [ 339.010293][ T8770] audit: audit_lost=55073 audit_rate_limit=0 audit_backlog_limit=64 [ 339.049716][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 339.205750][ T5867] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 339.405288][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 339.475844][ T5867] usb 3-1: config 0 has an invalid interface number: 244 but max is 14 [ 339.484291][ T5867] usb 3-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 339.622799][ T5867] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 339.717086][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 339.767825][ T5867] usb 3-1: config 0 has no interface number 0 [ 339.873764][ T5867] usb 3-1: too many endpoints for config 0 interface 244 altsetting 18: 176, using maximum allowed: 30 [ 339.940166][ T5897] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 339.950209][ T5867] usb 3-1: config 0 interface 244 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 176 [ 339.964186][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.985138][ T5897] usb 6-1: Product: syz [ 339.989373][ T5897] usb 6-1: Manufacturer: syz [ 339.993986][ T5897] usb 6-1: SerialNumber: syz [ 339.999607][ T5867] usb 3-1: config 0 interface 244 has no altsetting 0 [ 340.038459][ T5897] usb 6-1: config 0 descriptor?? [ 340.056944][ T5867] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 340.075173][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.115484][ T5867] usb 3-1: Product: syz [ 340.230289][ T5867] usb 3-1: Manufacturer: syz [ 340.260020][ T5867] usb 3-1: SerialNumber: syz [ 340.298115][ T5867] usb 3-1: config 0 descriptor?? [ 340.303703][ T5897] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.654663][ T5867] powermate 3-1:0.244: probe with driver powermate failed with error -22 [ 340.754855][ T5897] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 340.832730][ T5867] usb 3-1: USB disconnect, device number 20 [ 341.021188][ T5897] usb 6-1: USB disconnect, device number 2 [ 343.859718][ T5822] audit_log_start: 14222 callbacks suppressed [ 343.859917][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.098852][ T5822] audit: audit_lost=57125 audit_rate_limit=0 audit_backlog_limit=64 [ 344.335410][ T5822] audit: backlog limit exceeded [ 344.386303][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.393425][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.393710][ T29] audit: type=1400 audit(1741095012.126:92118): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5822 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 344.400766][ T5832] audit: audit_lost=57126 audit_rate_limit=0 audit_backlog_limit=64 [ 344.420657][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.428729][ T5826] audit: audit_lost=57127 audit_rate_limit=0 audit_backlog_limit=64 [ 344.434698][ C0] audit: audit_lost=57128 audit_rate_limit=0 audit_backlog_limit=64 [ 344.827737][ T8845] vivid-000: ================= START STATUS ================= [ 344.865305][ T8845] vivid-000: Generate PTS: true [ 344.875586][ T8845] vivid-000: Generate SCR: true [ 344.880539][ T8845] tpg source WxH: 1280x720 (Y'CbCr) [ 344.923823][ T8845] tpg field: 1 [ 344.927815][ T8845] tpg crop: 1280x720@0x0 [ 344.928626][ T8847] netlink: 68 bytes leftover after parsing attributes in process `syz.0.709'. [ 344.932086][ T8845] tpg compose: 1280x720@0x0 [ 344.950895][ T8845] tpg colorspace: 3 [ 344.954815][ T8845] tpg transfer function: 0/0 [ 344.959673][ T8845] tpg Y'CbCr encoding: 0/0 [ 344.964207][ T8845] tpg quantization: 0/0 [ 344.968759][ T8845] tpg RGB range: 0/1 [ 344.972990][ T8845] vivid-000: ================== END STATUS ================== [ 345.332723][ T8847] netlink: 27 bytes leftover after parsing attributes in process `syz.0.709'. [ 345.770272][ T5827] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 347.125976][ T8861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.292786][ T8859] syz.0.712: attempt to access beyond end of device [ 347.292786][ T8859] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 347.306617][ T8859] FAT-fs (loop0): unable to read boot sector [ 348.148992][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 348.870195][ T5818] audit_log_start: 9139 callbacks suppressed [ 348.870213][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.870228][ T5818] audit: audit_lost=59317 audit_rate_limit=0 audit_backlog_limit=64 [ 348.870242][ T5818] audit: backlog limit exceeded [ 348.870318][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.870331][ T5818] audit: audit_lost=59318 audit_rate_limit=0 audit_backlog_limit=64 [ 348.870346][ T5818] audit: backlog limit exceeded [ 348.870361][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.870430][ T5818] audit: audit_lost=59319 audit_rate_limit=0 audit_backlog_limit=64 [ 348.870446][ T5818] audit: backlog limit exceeded [ 348.870460][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.022916][ T8861] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 349.068086][ T8862] 8021q: adding VLAN 0 to HW filter on device team1 [ 350.147268][ T5827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 350.202433][ T5827] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 350.300671][ T5827] usb 3-1: can't read configurations, error -71 [ 353.875218][ T29] kauditd_printk_skb: 9643 callbacks suppressed [ 353.875265][ T29] audit: type=1400 audit(1741095021.186:99141): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8911 comm="syz.5.722" opid=8911 ocomm="syz.5.722" [ 354.361134][ T8909] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.367840][ T5971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.374355][ T5971] audit: audit_lost=61065 audit_rate_limit=0 audit_backlog_limit=64 [ 354.538874][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.545252][ T5971] audit: backlog limit exceeded [ 354.550503][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.559709][ T5971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.572161][ T8909] audit: audit_lost=61066 audit_rate_limit=0 audit_backlog_limit=64 [ 354.573475][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 356.736099][ T5897] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 357.619213][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.657935][ T5897] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 357.708598][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.734234][ T5897] usb 5-1: config 0 descriptor?? [ 358.889061][ T29] kauditd_printk_skb: 12291 callbacks suppressed [ 358.889079][ T29] audit: type=1400 audit(1741095027.416:105462): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8961 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 358.933731][ T8961] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.940550][ T25] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 358.948394][ T5897] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.955940][ T5897] audit: audit_lost=63080 audit_rate_limit=0 audit_backlog_limit=64 [ 358.964328][ T8957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.971495][ T8957] audit: audit_lost=63081 audit_rate_limit=0 audit_backlog_limit=64 [ 358.979602][ T8957] audit: backlog limit exceeded [ 358.984737][ T8957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.991299][ T8957] audit: audit_lost=63082 audit_rate_limit=0 audit_backlog_limit=64 [ 358.999375][ T8957] audit: backlog limit exceeded [ 359.006286][ T5897] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 359.019099][ T5897] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input10 [ 359.138095][ T5897] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 359.175588][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.222000][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.251771][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.272334][ T25] usb 6-1: Product: syz [ 359.285881][ T25] usb 6-1: Manufacturer: syz [ 359.296077][ T25] usb 6-1: SerialNumber: syz [ 359.606783][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.874205][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.081351][ T8] usb 5-1: USB disconnect, device number 22 [ 360.348493][ T25] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 360.379657][ T25] cdc_ncm 6-1:1.0: setting tx_max = 28 [ 361.007511][ T8975] lo speed is unknown, defaulting to 1000 [ 361.154489][ T8975] lo speed is unknown, defaulting to 1000 [ 361.325940][ T8975] lo speed is unknown, defaulting to 1000 [ 361.340323][ T8975] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 361.352850][ T8975] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 362.214296][ T25] cdc_ncm 6-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 362.285286][ T25] usb 6-1: USB disconnect, device number 3 [ 362.292060][ T25] cdc_ncm 6-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 362.321198][ T8983] »»»»»»: renamed from lo (while UP) [ 363.528331][ T9000] xt_socket: unknown flags 0x50 [ 363.900639][ T29] kauditd_printk_skb: 14326 callbacks suppressed [ 363.900660][ T29] audit: type=1400 audit(1741095032.346:112059): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2 [ 363.963563][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.989772][ T9002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.006794][ T5822] audit: audit_lost=65696 audit_rate_limit=0 audit_backlog_limit=64 [ 364.020552][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.020863][ T9003] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.027143][ C0] audit: audit_lost=65697 audit_rate_limit=0 audit_backlog_limit=64 [ 364.027162][ C0] audit: backlog limit exceeded [ 364.040424][ T29] audit: type=1400 audit(1741095032.346:112060): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="tmpfs" ino=1 [ 364.042375][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.048075][ T9004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.740'. [ 365.061365][ T8975] »»»»»» speed is unknown, defaulting to 1000 [ 365.089209][ T8975] »»»»»» speed is unknown, defaulting to 1000 [ 365.569748][ T8975] »»»»»» speed is unknown, defaulting to 1000 [ 365.724087][ T8975] »»»»»» speed is unknown, defaulting to 1000 [ 365.807388][ T8975] »»»»»» speed is unknown, defaulting to 1000 [ 368.139557][ T9051] misc userio: No port type given on /dev/userio [ 368.505140][ T9057] xt_socket: unknown flags 0x50 [ 368.905653][ T29] kauditd_printk_skb: 15591 callbacks suppressed [ 368.905670][ T29] audit: type=1400 audit(1741095037.426:118638): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5196 comm="udevd" path="/sys/devices/virtual/block/loop2/uevent" dev="sysfs" ino=14990 [ 368.992374][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.029669][ T9060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.049771][ T9062] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.089494][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.096118][ C1] audit: audit_lost=68731 audit_rate_limit=0 audit_backlog_limit=64 [ 369.102732][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.104091][ C1] audit: backlog limit exceeded [ 369.110639][ C0] audit: audit_lost=68732 audit_rate_limit=0 audit_backlog_limit=64 [ 369.123525][ C0] audit: backlog limit exceeded [ 370.369803][ T9076] IPVS: length: 121 != 24 [ 371.175454][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.761'. [ 371.955110][ T5899] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 372.145165][ T5899] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 372.234102][ T9101] ufs: You didn't specify the type of your ufs filesystem [ 372.234102][ T9101] [ 372.234102][ T9101] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 372.234102][ T9101] [ 372.234102][ T9101] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 372.266502][ T9101] syz.2.762: attempt to access beyond end of device [ 372.266502][ T9101] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 372.308074][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.337114][ T5899] usb 1-1: Product: syz [ 372.621717][ T5899] usb 1-1: Manufacturer: syz [ 372.764802][ T5899] usb 1-1: SerialNumber: syz [ 373.007719][ T5899] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 373.252319][ T9097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.412985][ T8] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 373.479234][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 373.570471][ T5899] usb 1-1: USB disconnect, device number 15 [ 373.916729][ T29] kauditd_printk_skb: 16327 callbacks suppressed [ 373.916748][ T29] audit: type=1400 audit(1741095042.436:125176): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="block" dev="sysfs" ino=13027 [ 373.936699][ T9116] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.950043][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.983178][ T9117] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.989924][ T9117] audit: audit_lost=72019 audit_rate_limit=0 audit_backlog_limit=64 [ 373.998087][ T9117] audit: backlog limit exceeded [ 374.003135][ T9117] audit: audit_backlog=65 > audit_backlog_limit=64 [ 374.009744][ T9117] audit: audit_lost=72020 audit_rate_limit=0 audit_backlog_limit=64 [ 374.017904][ T9117] audit: backlog limit exceeded [ 374.023089][ T9117] audit: audit_backlog=65 > audit_backlog_limit=64 [ 374.054484][ T9117] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 374.062273][ T9117] netlink: 216 bytes leftover after parsing attributes in process `syz.2.764'. [ 374.111712][ T9117] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 374.294388][ T9117] bond1: entered allmulticast mode [ 374.408471][ T9119] bond1: (slave ip6erspan0): making interface the new active one [ 374.416366][ T9119] ip6erspan0: entered allmulticast mode [ 374.426509][ T9119] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 375.136813][ T9130] misc userio: No port type given on /dev/userio [ 378.769798][ T9216] sctp: failed to load transform for md5: -2 [ 378.959927][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.967731][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.019808][ T29] kauditd_printk_skb: 28034 callbacks suppressed [ 379.019828][ T29] audit: type=1400 audit(1741095047.416:131889): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9234 comm="rm" name="usr" dev="sda1" ino=1409 [ 379.059818][ T9233] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.150323][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.156953][ C0] audit: audit_lost=79169 audit_rate_limit=0 audit_backlog_limit=64 [ 379.165011][ C0] audit: backlog limit exceeded [ 379.170269][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.177261][ C0] audit: audit_lost=79170 audit_rate_limit=0 audit_backlog_limit=64 [ 379.185306][ C0] audit: backlog limit exceeded [ 379.190892][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.197627][ C0] audit: audit_lost=79171 audit_rate_limit=0 audit_backlog_limit=64 [ 379.808553][ T9226] sctp: failed to load transform for md5: -2 [ 382.195988][ T5897] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 382.395157][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 382.423822][ T5897] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 382.478628][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.498932][ T5897] usb 5-1: Product: syz [ 383.468791][ T5897] usb 5-1: Manufacturer: syz [ 383.474790][ T5897] usb 5-1: SerialNumber: syz [ 383.482107][ T5897] usb 5-1: config 0 descriptor?? [ 383.771164][ T5897] usb 5-1: can't set config #0, error -71 [ 383.785944][ T5897] usb 5-1: USB disconnect, device number 23 [ 383.993671][ T9275] misc userio: No port type given on /dev/userio [ 384.025682][ T29] kauditd_printk_skb: 8882 callbacks suppressed [ 384.025700][ T29] audit: type=1400 audit(1741095052.546:134599): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5988 comm="udevd" name="devices" dev="sysfs" ino=7 [ 384.050326][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.050874][ T5830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.058824][ T9277] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.065582][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.095639][ T5831] audit: audit_lost=81237 audit_rate_limit=0 audit_backlog_limit=64 [ 384.103691][ T5831] audit: backlog limit exceeded [ 384.108853][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.115444][ C0] audit: audit_lost=81238 audit_rate_limit=0 audit_backlog_limit=64 [ 384.117642][ T5832] audit: audit_lost=81239 audit_rate_limit=0 audit_backlog_limit=64 [ 384.625199][ T5899] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 385.126821][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 385.174992][ T5899] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 385.221242][ T5899] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.313672][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 385.335085][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.355279][ T5899] usb 1-1: Product: syz [ 385.388065][ T5899] usb 1-1: Manufacturer: syz [ 385.392729][ T5899] usb 1-1: SerialNumber: syz [ 385.651587][ T5899] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 385.854612][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.905530][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.958139][ T5899] usb 1-1: USB disconnect, device number 16 [ 386.021171][ T5899] usblp0: removed [ 386.235147][ T5870] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 386.460950][ T5870] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 386.505801][ T5870] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 386.555945][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.586304][ T5870] usb 5-1: config 0 has no interface number 0 [ 386.601045][ T5870] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 386.676007][ T5870] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 386.699731][ T5870] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 386.723376][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.750551][ T5870] usb 5-1: config 0 descriptor?? [ 386.909486][ T5870] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 387.305094][ T8] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 388.072431][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.083092][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 388.098391][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 388.109785][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 388.120000][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.136486][ T9179] usb 5-1: Failed to submit usb control message: -110 [ 388.165249][ T9179] usb 5-1: unable to send the bmi data to the device: -110 [ 388.206731][ T8] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 388.225396][ T9179] usb 5-1: unable to get target info from device [ 388.243763][ T9321] misc userio: No port type given on /dev/userio [ 388.258154][ T9179] usb 5-1: could not get target info (-110) [ 388.264234][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.283645][ T9179] usb 5-1: could not probe fw (-110) [ 388.289658][ T8] usb 6-1: Product: syz [ 388.309366][ T8] usb 6-1: Manufacturer: syz [ 388.324615][ T8] usb 6-1: SerialNumber: syz [ 388.333214][ T8] usb 6-1: config 0 descriptor?? [ 388.415575][ T9] usb 5-1: USB disconnect, device number 24 [ 388.497791][ T8] xbox_remote_probe: endpoint_in message size==0? [ 388.853092][ T5897] usb 6-1: USB disconnect, device number 4 [ 389.038334][ T29] kauditd_printk_skb: 18024 callbacks suppressed [ 389.038373][ T29] audit: type=1400 audit(1741095057.556:143480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9326 comm="syz.2.797" name="newroot" dev="tmpfs" ino=2 [ 389.423340][ T29] audit: type=1400 audit(1741095057.556:143481): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9326 comm="syz.2.797" name="/" dev="devtmpfs" ino=1 [ 389.548432][ T5971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.555279][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.561821][ T5831] audit: audit_lost=84301 audit_rate_limit=0 audit_backlog_limit=64 [ 389.595352][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.601927][ T5178] audit: audit_lost=84302 audit_rate_limit=0 audit_backlog_limit=64 [ 389.611124][ T9330] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.629097][ T29] audit: type=1400 audit(1741095057.556:143482): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=9326 comm="syz.2.797" name="fuse" dev="devtmpfs" ino=99 [ 389.629320][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.902498][ T9335] FAULT_INJECTION: forcing a failure. [ 389.902498][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.950822][ T9335] CPU: 1 UID: 0 PID: 9335 Comm: syz.2.799 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 389.950850][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 389.950861][ T9335] Call Trace: [ 389.950867][ T9335] [ 389.950875][ T9335] dump_stack_lvl+0x241/0x360 [ 389.950902][ T9335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.950919][ T9335] ? __pfx__printk+0x10/0x10 [ 389.950943][ T9335] ? __pfx_lock_release+0x10/0x10 [ 389.950972][ T9335] should_fail_ex+0x40a/0x550 [ 389.951000][ T9335] _copy_from_user+0x2d/0xb0 [ 389.951021][ T9335] do_sock_getsockopt+0x1d1/0x740 [ 389.951050][ T9335] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 389.951071][ T9335] ? __fget_files+0x2a/0x410 [ 389.951090][ T9335] ? __fget_files+0x395/0x410 [ 389.951104][ T9335] ? __fget_files+0x2a/0x410 [ 389.951124][ T9335] __x64_sys_getsockopt+0x2a1/0x370 [ 389.951150][ T9335] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 389.951173][ T9335] ? do_syscall_64+0x100/0x230 [ 389.951194][ T9335] ? do_syscall_64+0xb6/0x230 [ 389.951213][ T9335] do_syscall_64+0xf3/0x230 [ 389.951231][ T9335] ? clear_bhb_loop+0x35/0x90 [ 389.951253][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.951272][ T9335] RIP: 0033:0x7f097ff8d169 [ 389.951285][ T9335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.951297][ T9335] RSP: 002b:00007f097ddd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 389.951313][ T9335] RAX: ffffffffffffffda RBX: 00007f09801a6080 RCX: 00007f097ff8d169 [ 389.951323][ T9335] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000004 [ 389.951332][ T9335] RBP: 00007f097ddd5090 R08: 0000400000000140 R09: 0000000000000000 [ 389.951342][ T9335] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 389.951374][ T9335] R13: 0000000000000001 R14: 00007f09801a6080 R15: 00007fff624cd348 [ 389.951397][ T9335] [ 391.181487][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 391.602892][ T9355] ufs: You didn't specify the type of your ufs filesystem [ 391.602892][ T9355] [ 391.602892][ T9355] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 391.602892][ T9355] [ 391.602892][ T9355] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 391.633919][ T9355] syz.3.805: attempt to access beyond end of device [ 391.633919][ T9355] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 392.402404][ T9363] netlink: 'syz.3.809': attribute type 1 has an invalid length. [ 393.411192][ T9373] netlink: 596 bytes leftover after parsing attributes in process `syz.2.811'. [ 393.702125][ T9384] IPVS: length: 121 != 24 [ 394.051626][ T29] kauditd_printk_skb: 17521 callbacks suppressed [ 394.051643][ T29] audit: type=1400 audit(1741095062.566:151787): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="devices" dev="sysfs" ino=7 [ 394.089477][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.102852][ T5196] audit: audit_lost=87391 audit_rate_limit=0 audit_backlog_limit=64 [ 394.112683][ T5196] audit: backlog limit exceeded [ 394.112998][ T9388] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.117767][ T29] audit: type=1400 audit(1741095062.576:151788): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="virtual" dev="sysfs" ino=1369 [ 394.143490][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 394.145257][ T9388] audit: audit_lost=87392 audit_rate_limit=0 audit_backlog_limit=64 [ 394.150122][ T5196] audit: audit_lost=87393 audit_rate_limit=0 audit_backlog_limit=64 [ 394.166908][ T5196] audit: backlog limit exceeded [ 394.613333][ T9397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.816'. [ 395.565291][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 395.692246][ T9407] bridge0: port 3(syz_tun) entered blocking state [ 395.700057][ T9407] bridge0: port 3(syz_tun) entered disabled state [ 395.708149][ T9407] syz_tun: entered allmulticast mode [ 395.722601][ T9407] syz_tun: entered promiscuous mode [ 395.730680][ T9407] bridge0: port 3(syz_tun) entered blocking state [ 395.739012][ T9407] bridge0: port 3(syz_tun) entered forwarding state [ 396.871501][ T9416] misc userio: No port type given on /dev/userio [ 397.470249][ T9419] »»»»»» speed is unknown, defaulting to 1000 [ 397.865409][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 398.601156][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.827'. [ 398.915333][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 399.055039][ T29] kauditd_printk_skb: 12385 callbacks suppressed [ 399.055057][ T29] audit: type=1400 audit(1741095067.576:157504): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2 [ 399.081248][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.108463][ T9436] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.110488][ T5196] audit: audit_lost=89619 audit_rate_limit=0 audit_backlog_limit=64 [ 399.123243][ T5196] audit: backlog limit exceeded [ 399.128194][ T29] audit: type=1400 audit(1741095067.576:157505): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sysfs" ino=1 [ 399.148006][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.154567][ T5196] audit: audit_lost=89620 audit_rate_limit=0 audit_backlog_limit=64 [ 399.163116][ T29] audit: type=1400 audit(1741095067.576:157506): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="devices" dev="sysfs" ino=7 [ 399.171740][ T9440] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.211677][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 399.255199][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 399.287647][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.315116][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.350348][ T9436] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 399.411698][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.505141][ T5870] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 399.740225][ T5870] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 399.760911][ T5870] usb 4-1: config 0 has no interface number 0 [ 399.767769][ T5870] usb 4-1: config 0 interface 54 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 399.796011][ T5870] usb 4-1: New USB device found, idVendor=0711, idProduct=0950, bcdDevice=bd.0a [ 399.894594][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.191753][ T5870] usb 4-1: config 0 descriptor?? [ 400.462597][ T5870] sisusb 4-1:0.54: Invalid USB2VGA device [ 400.533363][ T5870] sisusb 4-1:0.54: probe with driver sisusb failed with error -22 [ 400.876060][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.925828][ T5897] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 401.105310][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.324431][ T9456] netlink: 'syz.3.829': attribute type 61 has an invalid length. [ 401.332275][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 401.366647][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 401.538672][ T5897] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 401.612700][ T5897] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 401.673006][ T9458] misc userio: No port type given on /dev/userio [ 401.675409][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.735270][ T5870] usb 6-1: USB disconnect, device number 5 [ 401.822888][ T5897] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.850392][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.876777][ T5897] usb 5-1: Product: syz [ 401.881039][ T5897] usb 5-1: Manufacturer: syz [ 401.895495][ T5897] usb 5-1: SerialNumber: syz [ 402.015264][ T5899] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 402.170119][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.179836][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.188230][ T5899] usb 3-1: Product: syz [ 402.192589][ T5899] usb 3-1: Manufacturer: syz [ 402.197587][ T5899] usb 3-1: SerialNumber: syz [ 402.332539][ T5897] usb 5-1: 0:2 : does not exist [ 402.441811][ T5870] usb 4-1: USB disconnect, device number 15 [ 402.476507][ T5897] usb 5-1: USB disconnect, device number 25 [ 403.517837][ T9472] netlink: 164 bytes leftover after parsing attributes in process `syz.5.839'. [ 403.943045][ T5899] cdc_ncm 3-1:1.0: bind() failure [ 403.951376][ T9469] ufs: You didn't specify the type of your ufs filesystem [ 403.951376][ T9469] [ 403.951376][ T9469] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 403.951376][ T9469] [ 403.951376][ T9469] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 403.982158][ T5899] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 403.993803][ T9469] syz.5.839: attempt to access beyond end of device [ 403.993803][ T9469] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 404.013202][ T5899] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 404.050436][ T5899] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 404.164389][ T29] kauditd_printk_skb: 18302 callbacks suppressed [ 404.164406][ T29] audit: type=1400 audit(1741095072.686:165125): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9468 comm="syz.5.839" name="file1" dev="tmpfs" ino=351 [ 404.168902][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 404.181438][ T29] audit: type=1400 audit(1741095072.686:165126): lsm=SMACK fn=smack_inode_setxattr action=granted subject="_" object="_" requested=w pid=9468 comm="syz.5.839" name="file1" dev="tmpfs" ino=354 [ 404.228636][ T5899] usb 3-1: USB disconnect, device number 23 [ 404.239853][ T5196] audit: audit_lost=93216 audit_rate_limit=0 audit_backlog_limit=64 [ 404.249047][ T5196] audit: backlog limit exceeded [ 404.254506][ T27] audit: audit_backlog=66 > audit_backlog_limit=64 [ 404.254509][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64 [ 404.254525][ T5196] audit: audit_lost=93217 audit_rate_limit=0 audit_backlog_limit=64 [ 404.300153][ T5982] audit: audit_backlog=66 > audit_backlog_limit=64 [ 404.315143][ T9480] audit: audit_backlog=66 > audit_backlog_limit=64 [ 405.490267][ T9489] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 407.282184][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.630463][ T29] kauditd_printk_skb: 9530 callbacks suppressed [ 409.630487][ T29] audit: type=1400 audit(1741095077.246:167658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5982 comm="udevd" name="/" dev="sda1" ino=2 [ 409.658208][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.664763][ T5196] audit: audit_lost=95559 audit_rate_limit=0 audit_backlog_limit=64 [ 409.676491][ T5971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.815307][ T5830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.821869][ T5830] audit: audit_lost=95560 audit_rate_limit=0 audit_backlog_limit=64 [ 409.835778][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.842459][ T5832] audit: audit_lost=95561 audit_rate_limit=0 audit_backlog_limit=64 [ 409.853106][ T9516] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.859827][ T9516] audit: audit_lost=95562 audit_rate_limit=0 audit_backlog_limit=64 [ 410.775337][ T5867] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 410.830105][ T9529] FAULT_INJECTION: forcing a failure. [ 410.830105][ T9529] name failslab, interval 1, probability 0, space 0, times 0 [ 410.839429][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 410.843317][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.5.853 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 410.843341][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.843350][ T9529] Call Trace: [ 410.843355][ T9529] [ 410.843362][ T9529] dump_stack_lvl+0x241/0x360 [ 410.843385][ T9529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.843402][ T9529] ? __pfx__printk+0x10/0x10 [ 410.843432][ T9529] should_fail_ex+0x40a/0x550 [ 410.843458][ T9529] should_failslab+0xac/0x100 [ 410.843480][ T9529] ? inet_bind_bucket_create+0x2f/0x230 [ 410.843507][ T9529] kmem_cache_alloc_noprof+0x70/0x380 [ 410.843535][ T9529] inet_bind_bucket_create+0x2f/0x230 [ 410.843560][ T9529] inet_csk_get_port+0x3c2/0x1660 [ 410.843592][ T9529] ? do_raw_spin_unlock+0x13c/0x8b0 [ 410.843610][ T9529] ? __inet6_bind+0x8cd/0xfd0 [ 410.843633][ T9529] __inet6_bind+0xa54/0xfd0 [ 410.843662][ T9529] inet6_bind_sk+0x198/0x300 [ 410.843683][ T9529] ? __pfx_inet6_bind_sk+0x10/0x10 [ 410.843699][ T9529] ? __might_fault+0xc6/0x120 [ 410.843726][ T9529] __sys_bind+0x1e4/0x290 [ 410.843748][ T9529] ? __pfx___sys_bind+0x10/0x10 [ 410.843779][ T9529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.843801][ T9529] ? do_syscall_64+0x100/0x230 [ 410.843824][ T9529] __x64_sys_bind+0x7a/0x90 [ 410.843845][ T9529] do_syscall_64+0xf3/0x230 [ 410.843865][ T9529] ? clear_bhb_loop+0x35/0x90 [ 410.843888][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.843909][ T9529] RIP: 0033:0x7fdddd98d169 [ 410.843924][ T9529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.843938][ T9529] RSP: 002b:00007fddde771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 410.843956][ T9529] RAX: ffffffffffffffda RBX: 00007fddddba5fa0 RCX: 00007fdddd98d169 [ 410.843967][ T9529] RDX: 000000000000001c RSI: 0000400000000040 RDI: 0000000000000004 [ 410.843977][ T9529] RBP: 00007fddde771090 R08: 0000000000000000 R09: 0000000000000000 [ 410.843987][ T9529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.843997][ T9529] R13: 0000000000000000 R14: 00007fddddba5fa0 R15: 00007ffe7ce02e98 [ 410.844021][ T9529] [ 411.133061][ T9533] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.855'. [ 411.155113][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 411.173801][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 411.184379][ T5867] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 411.203946][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.225030][ T5867] usb 3-1: Product: syz [ 411.229374][ T5867] usb 3-1: Manufacturer: syz [ 411.233998][ T5867] usb 3-1: SerialNumber: syz [ 411.234857][ T9533] netlink: zone id is out of range [ 411.251229][ T5867] usb 3-1: config 0 descriptor?? [ 412.108985][ T5867] gs_usb 3-1:0.0: Configuring for 101 interfaces [ 412.150865][ T5867] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 412.986029][ T5867] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 413.026500][ T5827] usb 3-1: USB disconnect, device number 24 [ 413.275552][ T5828] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 413.823018][ T9561] i2c i2c-0: Invalid block write size 131 [ 414.721292][ T29] kauditd_printk_skb: 17416 callbacks suppressed [ 414.721309][ T29] audit: type=1400 audit(1741095083.246:175368): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=7934 comm="syz-executor" opid=9534 ocomm="syz.5.856" [ 414.730744][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 414.730758][ T5196] audit: audit_lost=98802 audit_rate_limit=0 audit_backlog_limit=64 [ 414.730766][ T5196] audit: backlog limit exceeded [ 414.730776][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 414.730783][ T5196] audit: audit_lost=98803 audit_rate_limit=0 audit_backlog_limit=64 [ 414.730790][ T5196] audit: backlog limit exceeded [ 414.730800][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 414.730807][ T5196] audit: audit_lost=98804 audit_rate_limit=0 audit_backlog_limit=64 [ 414.730814][ T5196] audit: backlog limit exceeded [ 418.105497][ T5899] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 418.454193][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.873'. [ 419.565654][ T5899] usb 6-1: device descriptor read/64, error -71 [ 419.668493][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 419.730082][ T29] kauditd_printk_skb: 7541 callbacks suppressed [ 419.730102][ T29] audit: type=1400 audit(1741095087.526:178764): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9607 comm="syz.0.874" name="newroot" dev="tmpfs" ino=2 [ 419.743133][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 419.756012][ T29] audit: type=1400 audit(1741095087.526:178765): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9607 comm="syz.0.874" name="/" dev="devtmpfs" ino=1 [ 419.762692][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 419.785130][ T5971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 419.788199][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 419.800526][ C0] audit: audit_lost=100196 audit_rate_limit=0 audit_backlog_limit=64 [ 419.808695][ C0] audit: backlog limit exceeded [ 419.813983][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 419.815068][ T5971] audit: audit_lost=100197 audit_rate_limit=0 audit_backlog_limit=64 [ 419.977367][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.994902][ T9615] i2c i2c-0: Invalid block write size 131 [ 420.002048][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.065067][ T5899] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 420.074213][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.109897][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.156614][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.193687][ T9] usb 3-1: config 0 descriptor?? [ 420.235285][ T5899] usb 6-1: device descriptor read/64, error -71 [ 420.346904][ T5899] usb usb6-port1: attempt power cycle [ 420.425137][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 420.591911][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.619702][ T9] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 420.638758][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.672291][ T8] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 420.715133][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.799987][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 421.532823][ T8] usb 4-1: config 0 descriptor?? [ 421.907550][ T9] usb 3-1: USB disconnect, device number 25 [ 421.998043][ T8] cypress 0003:04B4:07B1.0009: unknown main item tag 0x0 [ 422.009510][ T8] cypress 0003:04B4:07B1.0009: unknown main item tag 0x0 [ 422.017409][ T8] cypress 0003:04B4:07B1.0009: unknown main item tag 0x0 [ 422.024749][ T8] cypress 0003:04B4:07B1.0009: unknown main item tag 0x0 [ 422.039755][ T8] cypress 0003:04B4:07B1.0009: unknown main item tag 0x0 [ 422.061876][ T8] cypress 0003:04B4:07B1.0009: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 423.082216][ T5897] usb 4-1: USB disconnect, device number 16 [ 423.225696][ T9648] i2c i2c-0: Invalid block write size 131 [ 424.251680][ T9660] netlink: 31 bytes leftover after parsing attributes in process `syz.3.891'. [ 424.675161][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.704077][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.739935][ T29] kauditd_printk_skb: 21687 callbacks suppressed [ 424.739953][ T29] audit: type=1400 audit(1741095093.266:187685): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="devices" dev="sysfs" ino=7 [ 424.770733][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.783262][ T5196] audit: audit_lost=104537 audit_rate_limit=0 audit_backlog_limit=64 [ 424.792528][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.805182][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.812785][ T5196] audit: backlog limit exceeded [ 424.823918][ T29] audit: type=1400 audit(1741095093.296:187686): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="virtual" dev="sysfs" ino=1369 [ 424.843231][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.861544][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.891858][ T5196] audit: audit_lost=104538 audit_rate_limit=0 audit_backlog_limit=64 [ 424.901247][ T5196] audit: backlog limit exceeded [ 424.915610][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.922604][ T29] audit: type=1400 audit(1741095093.296:187687): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="block" dev="sysfs" ino=13027 [ 424.941414][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.198433][ T9672] FAULT_INJECTION: forcing a failure. [ 425.198433][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.279304][ T9672] CPU: 1 UID: 0 PID: 9672 Comm: syz.3.894 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 425.279331][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.279342][ T9672] Call Trace: [ 425.279348][ T9672] [ 425.279356][ T9672] dump_stack_lvl+0x241/0x360 [ 425.279381][ T9672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.279397][ T9672] ? __pfx__printk+0x10/0x10 [ 425.279422][ T9672] ? __pfx_lock_release+0x10/0x10 [ 425.279451][ T9672] should_fail_ex+0x40a/0x550 [ 425.279478][ T9672] _copy_from_user+0x2d/0xb0 [ 425.279499][ T9672] move_addr_to_kernel+0x82/0x150 [ 425.279519][ T9672] __sys_sendto+0x268/0x4c0 [ 425.279546][ T9672] ? __pfx___sys_sendto+0x10/0x10 [ 425.279590][ T9672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.279614][ T9672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 425.279636][ T9672] ? exc_page_fault+0x590/0x8b0 [ 425.279659][ T9672] __x64_sys_sendto+0xde/0x100 [ 425.279683][ T9672] do_syscall_64+0xf3/0x230 [ 425.279703][ T9672] ? clear_bhb_loop+0x35/0x90 [ 425.279728][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.279747][ T9672] RIP: 0033:0x7faf5dd8effc [ 425.279762][ T9672] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 425.279776][ T9672] RSP: 002b:00007faf5ec0fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 425.279793][ T9672] RAX: ffffffffffffffda RBX: 00007faf5ec0ffc0 RCX: 00007faf5dd8effc [ 425.279805][ T9672] RDX: 0000000000000020 RSI: 00007faf5ec10010 RDI: 0000000000000003 [ 425.279815][ T9672] RBP: 0000000000000000 R08: 00007faf5ec0ff14 R09: 000000000000000c [ 425.279825][ T9672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 425.279835][ T9672] R13: 00007faf5ec0ff68 R14: 00007faf5ec10010 R15: 0000000000000000 [ 425.279861][ T9672] [ 425.467228][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.929909][ T9689] xt_socket: unknown flags 0x50 [ 427.783197][ T9692] i2c i2c-0: Invalid block write size 131 [ 428.675454][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 429.629417][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.631323][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 429.688443][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.721653][ T8] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 429.734445][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.746669][ T29] kauditd_printk_skb: 16704 callbacks suppressed [ 429.746685][ T29] audit: type=1400 audit(1741095098.276:193772): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 429.749989][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 429.758975][ T9715] audit: audit_backlog=66 > audit_backlog_limit=64 [ 429.782994][ T29] audit: type=1400 audit(1741095098.276:193773): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 429.803271][ T9715] audit: audit_lost=108117 audit_rate_limit=0 audit_backlog_limit=64 [ 429.812338][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 429.815613][ T9718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 429.821370][ T8] usb 4-1: config 0 descriptor?? [ 429.827600][ T9715] audit: backlog limit exceeded [ 429.840582][ T5826] audit: audit_lost=108118 audit_rate_limit=0 audit_backlog_limit=64 [ 429.843148][ T9718] audit: audit_lost=108119 audit_rate_limit=0 audit_backlog_limit=64 [ 430.003462][ T9722] input: syz0 as /devices/virtual/input/input11 [ 431.116360][ T8] cypress 0003:04B4:07B1.000A: unknown main item tag 0x0 [ 431.141019][ T8] cypress 0003:04B4:07B1.000A: unknown main item tag 0x0 [ 431.148492][ T8] cypress 0003:04B4:07B1.000A: unknown main item tag 0x0 [ 431.175027][ T8] cypress 0003:04B4:07B1.000A: unknown main item tag 0x0 [ 431.182419][ T8] cypress 0003:04B4:07B1.000A: unknown main item tag 0x0 [ 431.193200][ T8] cypress 0003:04B4:07B1.000A: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 431.215132][ T8] usb 4-1: USB disconnect, device number 17 [ 432.794370][ T9739] i2c i2c-0: Invalid block write size 131 [ 434.152063][ T9762] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 434.254755][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 434.754988][ T29] kauditd_printk_skb: 16368 callbacks suppressed [ 434.755572][ T29] audit: type=1400 audit(1741095103.256:200236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 434.773490][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 434.799360][ T5971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 434.805391][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 434.806123][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 434.814666][ T5178] audit: audit_lost=111463 audit_rate_limit=0 audit_backlog_limit=64 [ 434.819233][ T5971] audit: audit_lost=111464 audit_rate_limit=0 audit_backlog_limit=64 [ 435.117681][ T9773] audit: audit_backlog=65 > audit_backlog_limit=64 [ 435.123070][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 435.131431][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 436.076914][ T9788] i2c i2c-0: Invalid block write size 131 [ 436.245057][ T5897] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 436.404635][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.221364][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.231518][ T5897] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 437.240737][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.331139][ T5897] usb 4-1: config 0 descriptor?? [ 437.553715][ T9794] tipc: Started in network mode [ 437.559287][ T9794] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 437.568837][ T9794] tipc: Enabled bearer , priority 0 [ 437.899184][ T5897] cypress 0003:04B4:07B1.000B: unknown main item tag 0x0 [ 437.906591][ T5897] cypress 0003:04B4:07B1.000B: unknown main item tag 0x0 [ 437.913883][ T5897] cypress 0003:04B4:07B1.000B: unknown main item tag 0x0 [ 437.921600][ T5897] cypress 0003:04B4:07B1.000B: unknown main item tag 0x0 [ 437.931024][ T5897] cypress 0003:04B4:07B1.000B: unknown main item tag 0x0 [ 437.947851][ T5897] cypress 0003:04B4:07B1.000B: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 438.225937][ T5897] usb 4-1: USB disconnect, device number 18 [ 438.691436][ T5899] tipc: Node number set to 11578026 [ 439.125682][ T9821] overlayfs: failed to resolve './file0': -2 [ 439.168584][ T9821] netlink: 56 bytes leftover after parsing attributes in process `syz.4.931'. [ 439.177866][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 440.000136][ T29] kauditd_printk_skb: 28269 callbacks suppressed [ 440.000158][ T29] audit: type=1400 audit(1741095108.166:207210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=9824 comm="syz.3.933" dev="nsfs" ino=4026533250 [ 440.198862][ T5826] audit: audit_backlog=66 > audit_backlog_limit=64 [ 440.198927][ T9828] audit: audit_backlog=66 > audit_backlog_limit=64 [ 440.212349][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 440.212379][ C0] audit: audit_lost=118627 audit_rate_limit=0 audit_backlog_limit=64 [ 440.212396][ C0] audit: backlog limit exceeded [ 440.212602][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 440.212624][ C0] audit: audit_lost=118628 audit_rate_limit=0 audit_backlog_limit=64 [ 440.212639][ C0] audit: backlog limit exceeded [ 440.212742][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 440.555566][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.561939][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.123342][ T5870] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 443.160881][ T9864] [U] „ [ 443.195108][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 443.237858][ T9862] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 443.304190][ T9862] /dev/nullb0: Can't open blockdev [ 443.337628][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.401736][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.416878][ T5870] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 443.429317][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.454612][ T5870] usb 4-1: config 0 descriptor?? [ 443.480665][ T5827] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 444.089676][ T5827] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 444.114853][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.162940][ T5827] usb 6-1: Product: syz [ 444.178894][ T5827] usb 6-1: Manufacturer: syz [ 444.183558][ T5827] usb 6-1: SerialNumber: syz [ 444.568200][ T5870] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 444.571675][ T5827] usb 6-1: config 0 descriptor?? [ 444.702176][ T5870] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 444.727600][ T5870] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 444.734721][ T5870] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 444.744527][ T5870] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 444.763053][ T5870] cypress 0003:04B4:07B1.000C: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 444.799959][ T5870] usb 4-1: USB disconnect, device number 19 [ 445.005180][ T29] kauditd_printk_skb: 13530 callbacks suppressed [ 445.005198][ T29] audit: type=1400 audit(1741095113.486:213386): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9876 comm="syz.4.949" opid=9876 ocomm="syz.4.949" [ 445.255219][ T5870] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 445.261039][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 445.426158][ T9864] audit: audit_backlog=65 > audit_backlog_limit=64 [ 445.431076][ T5196] audit: audit_lost=121096 audit_rate_limit=0 audit_backlog_limit=64 [ 445.448431][ T9864] audit: audit_lost=121097 audit_rate_limit=0 audit_backlog_limit=64 [ 445.525306][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 445.551779][ T9864] audit: backlog limit exceeded [ 445.562302][ T9879] audit: audit_backlog=65 > audit_backlog_limit=64 [ 445.565094][ T5178] audit: audit_lost=121098 audit_rate_limit=0 audit_backlog_limit=64 [ 445.580492][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 445.740823][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.771095][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.531056][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.675805][ T5870] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 446.696340][ T9892] ufs: You didn't specify the type of your ufs filesystem [ 446.696340][ T9892] [ 446.696340][ T9892] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 446.696340][ T9892] [ 446.696340][ T9892] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 446.736631][ T9892] syz.2.951: attempt to access beyond end of device [ 446.736631][ T9892] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 446.765408][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.813698][ T5870] usb 1-1: config 0 descriptor?? [ 447.251350][ T5870] betop 0003:11C0:5506.000D: ignoring exceeding usage max [ 447.289521][ T5870] betop 0003:11C0:5506.000D: unbalanced collection at end of report description [ 447.352021][ T5870] betop 0003:11C0:5506.000D: parse failed [ 447.358381][ T5867] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 447.381243][ T5870] betop 0003:11C0:5506.000D: probe with driver betop failed with error -22 [ 447.471017][ T5870] usb 1-1: USB disconnect, device number 17 [ 447.539486][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 447.561085][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.595450][ T5827] usb 6-1: f81604_write: reg: 105 data: c0 failed: -ETIMEDOUT [ 447.603315][ T5827] f81604 6-1:0.0: Setting termination of CH#1 failed: -ETIMEDOUT [ 447.614554][ T5867] usb 5-1: config 0 has no interfaces? [ 447.630722][ T5867] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 447.634576][ T5827] f81604 6-1:0.0: probe with driver f81604 failed with error -110 [ 447.668575][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.745716][ T5867] usb 5-1: config 0 descriptor?? [ 448.049437][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.075809][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.414338][ T9907] FAULT_INJECTION: forcing a failure. [ 448.414338][ T9907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.428040][ T9904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 448.493366][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz.0.958 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 448.493389][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 448.493396][ T9907] Call Trace: [ 448.493401][ T9907] [ 448.493406][ T9907] dump_stack_lvl+0x241/0x360 [ 448.493423][ T9907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.493432][ T9907] ? __pfx__printk+0x10/0x10 [ 448.493447][ T9907] ? __pfx_lock_release+0x10/0x10 [ 448.493465][ T9907] should_fail_ex+0x40a/0x550 [ 448.493481][ T9907] _copy_from_user+0x2d/0xb0 [ 448.493494][ T9907] copy_msghdr_from_user+0xae/0x680 [ 448.493510][ T9907] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 448.493520][ T9907] ? __fget_files+0x2a/0x410 [ 448.493531][ T9907] ? __fget_files+0x2a/0x410 [ 448.493544][ T9907] __sys_sendmsg+0x209/0x350 [ 448.493561][ T9907] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.493581][ T9907] ? do_sys_openat2+0x17a/0x1d0 [ 448.493602][ T9907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.493615][ T9907] ? do_syscall_64+0x100/0x230 [ 448.493630][ T9907] ? do_syscall_64+0xb6/0x230 [ 448.493644][ T9907] do_syscall_64+0xf3/0x230 [ 448.493658][ T9907] ? clear_bhb_loop+0x35/0x90 [ 448.493673][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.493685][ T9907] RIP: 0033:0x7f794b98d169 [ 448.493695][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.493703][ T9907] RSP: 002b:00007f794c875038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.493714][ T9907] RAX: ffffffffffffffda RBX: 00007f794bba5fa0 RCX: 00007f794b98d169 [ 448.493727][ T9907] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 448.493734][ T9907] RBP: 00007f794c875090 R08: 0000000000000000 R09: 0000000000000000 [ 448.493739][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.493745][ T9907] R13: 0000000000000000 R14: 00007f794bba5fa0 R15: 00007fff90795af8 [ 448.493758][ T9907] [ 448.701871][ T9] usb 6-1: USB disconnect, device number 9 [ 449.299404][ T25] usb 5-1: USB disconnect, device number 26 [ 450.642778][ T5832] audit_log_start: 16560 callbacks suppressed [ 450.642798][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.642881][ T5818] audit: audit_backlog=66 > audit_backlog_limit=64 [ 450.649338][ T5196] audit: audit_backlog=67 > audit_backlog_limit=64 [ 450.657077][ T5818] audit: audit_lost=123761 audit_rate_limit=0 audit_backlog_limit=64 [ 450.679675][ T5178] audit: audit_backlog=67 > audit_backlog_limit=64 [ 450.687929][ T5178] audit: audit_lost=123762 audit_rate_limit=0 audit_backlog_limit=64 [ 450.696779][ C0] audit: audit_backlog=67 > audit_backlog_limit=64 [ 450.703288][ C0] audit: audit_lost=123763 audit_rate_limit=0 audit_backlog_limit=64 [ 450.711512][ C0] audit: backlog limit exceeded [ 450.716591][ C0] audit: audit_backlog=67 > audit_backlog_limit=64 [ 453.463701][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 455.650304][ T29] kauditd_printk_skb: 15103 callbacks suppressed [ 455.650318][ T29] audit: type=1400 audit(1741095124.176:226835): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 455.681810][ T29] audit: type=1400 audit(1741095124.176:226836): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 455.700543][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.707353][ T29] audit: type=1400 audit(1741095124.176:226837): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="fs" dev="sysfs" ino=2 [ 455.727215][ T29] audit: type=1400 audit(1741095124.176:226838): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="fuse" dev="sysfs" ino=5400 [ 455.749106][ T29] audit: type=1400 audit(1741095124.176:226839): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5826 comm="syz-executor" name="/" dev="fusectl" ino=1 [ 455.768116][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.831541][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 455.839923][ T5831] audit: audit_backlog=66 > audit_backlog_limit=64 [ 455.859272][ T5196] audit: audit_lost=127236 audit_rate_limit=0 audit_backlog_limit=64 [ 455.867623][ T5831] audit: audit_lost=127237 audit_rate_limit=0 audit_backlog_limit=64 [ 455.877810][ T5818] audit: audit_backlog=66 > audit_backlog_limit=64 [ 455.974600][ T9977] mkiss: ax0: crc mode is auto. [ 456.175905][ T9981] FAULT_INJECTION: forcing a failure. [ 456.175905][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.259519][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.3.980 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 456.259546][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.259557][ T9981] Call Trace: [ 456.259564][ T9981] [ 456.259570][ T9981] dump_stack_lvl+0x241/0x360 [ 456.259592][ T9981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.259606][ T9981] ? __pfx__printk+0x10/0x10 [ 456.259627][ T9981] ? __pfx_lock_release+0x10/0x10 [ 456.259651][ T9981] should_fail_ex+0x40a/0x550 [ 456.259673][ T9981] _copy_from_iter+0x1df/0x1c40 [ 456.259688][ T9981] ? __virt_addr_valid+0x183/0x530 [ 456.259709][ T9981] ? __pfx_lock_release+0x10/0x10 [ 456.259731][ T9981] ? __alloc_skb+0x28f/0x440 [ 456.259750][ T9981] ? __pfx__copy_from_iter+0x10/0x10 [ 456.259765][ T9981] ? __virt_addr_valid+0x183/0x530 [ 456.259783][ T9981] ? __virt_addr_valid+0x183/0x530 [ 456.259800][ T9981] ? __virt_addr_valid+0x45f/0x530 [ 456.259818][ T9981] ? __phys_addr_symbol+0x2f/0x70 [ 456.259836][ T9981] ? __check_object_size+0x47a/0x730 [ 456.259859][ T9981] netlink_sendmsg+0x742/0xcb0 [ 456.259884][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.259907][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.259919][ T9981] __sock_sendmsg+0x221/0x270 [ 456.259938][ T9981] ____sys_sendmsg+0x53a/0x860 [ 456.259964][ T9981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.259981][ T9981] ? __fget_files+0x2a/0x410 [ 456.259998][ T9981] ? __fget_files+0x2a/0x410 [ 456.260017][ T9981] __sys_sendmsg+0x269/0x350 [ 456.260040][ T9981] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.260069][ T9981] ? do_sys_openat2+0x17a/0x1d0 [ 456.260101][ T9981] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 456.260127][ T9981] ? do_syscall_64+0x100/0x230 [ 456.260147][ T9981] ? do_syscall_64+0xb6/0x230 [ 456.260166][ T9981] do_syscall_64+0xf3/0x230 [ 456.260184][ T9981] ? clear_bhb_loop+0x35/0x90 [ 456.260205][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.260223][ T9981] RIP: 0033:0x7faf5dd8d169 [ 456.260236][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.260247][ T9981] RSP: 002b:00007faf5ec11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.260264][ T9981] RAX: ffffffffffffffda RBX: 00007faf5dfa5fa0 RCX: 00007faf5dd8d169 [ 456.260274][ T9981] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 456.260283][ T9981] RBP: 00007faf5ec11090 R08: 0000000000000000 R09: 0000000000000000 [ 456.260291][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.260299][ T9981] R13: 0000000000000000 R14: 00007faf5dfa5fa0 R15: 00007ffd018cae28 [ 456.260319][ T9981] [ 459.334598][ T9998] vivid-005: kernel_thread() failed [ 459.599278][ T5827] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 459.688552][T10005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.807592][ T5827] usb 6-1: unable to get BOS descriptor or descriptor too short [ 459.845404][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 459.867030][ T5827] usb 6-1: not running at top speed; connect to a high speed hub [ 459.895410][ T5827] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 459.904630][ T5827] usb 6-1: config 7 has no interface number 0 [ 459.911036][ T5827] usb 6-1: config 7 interface 187 has no altsetting 0 [ 459.923682][ T5827] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 459.937889][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.946699][ T5827] usb 6-1: Product: syz [ 459.951335][ T5827] usb 6-1: Manufacturer: syz [ 459.956072][ T5827] usb 6-1: SerialNumber: syz [ 459.995130][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 460.002974][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 460.018398][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.029371][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 460.042036][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.061756][ T25] usb 4-1: config 0 descriptor?? [ 460.074313][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 460.155167][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 460.160466][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 460.180805][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 460.208783][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.222677][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.232237][ T5827] usb 6-1: Limiting number of CPorts to U8_MAX [ 460.238910][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40 [ 460.251783][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.265773][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.276225][ T5827] usb 6-1: Not enough endpoints found in device, aborting! [ 460.283610][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.293816][ T9] usb 1-1: Product: syz [ 460.304491][ T9] usb 1-1: Manufacturer: 㨊 [ 460.314389][ T8] usb 3-1: Product: syz [ 460.336841][ T8] usb 3-1: Manufacturer: syz [ 460.341809][ T9] usb 1-1: SerialNumber: syz [ 460.350329][ T8] usb 3-1: SerialNumber: syz [ 460.604772][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 460.716481][ T29] kauditd_printk_skb: 15424 callbacks suppressed [ 460.716516][ T29] audit: type=1400 audit(1741095129.146:231329): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2 [ 460.736771][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.741506][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.748529][ T5830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.754553][ C0] audit: audit_lost=130891 audit_rate_limit=0 audit_backlog_limit=64 [ 460.761382][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.769176][ C0] audit: backlog limit exceeded [ 460.775772][ C1] audit: audit_lost=130892 audit_rate_limit=0 audit_backlog_limit=64 [ 460.788837][ C1] audit: backlog limit exceeded [ 460.794338][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 460.803671][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 461.598332][ T9] usb 1-1: USB disconnect, device number 18 [ 461.688855][ T8] usb 3-1: 0:2 : does not exist [ 461.886266][ T8] usb 3-1: USB disconnect, device number 26 [ 462.196417][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.204446][ T25] pwc: recv_control_msg error -71 req 02 val 2c00 [ 462.241417][T10019] i2c i2c-0: Invalid block write size 131 [ 462.268969][ T25] pwc: recv_control_msg error -71 req 04 val 1000 [ 462.315176][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 462.343457][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 462.352973][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 462.360261][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 462.403337][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 462.432522][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 462.461977][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 462.485118][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 462.497963][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 462.506570][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 462.516347][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 462.527958][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 462.552280][ T25] pwc: Registered as video103. [ 462.697612][ T8] usb 6-1: USB disconnect, device number 10 [ 462.713791][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 462.911593][ T25] usb 4-1: USB disconnect, device number 20 [ 464.884785][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 465.811904][ T29] kauditd_printk_skb: 19711 callbacks suppressed [ 465.812221][ T29] audit: type=1400 audit(1741095134.236:239039): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10050 comm="syz.4.1002" path="/sys/kernel/debug/binder/state" dev="debugfs" ino=1910 [ 466.098618][ T5832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.120073][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.127193][T10057] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.127386][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.133718][T10057] audit: audit_lost=134921 audit_rate_limit=0 audit_backlog_limit=64 [ 466.133734][T10057] audit: backlog limit exceeded [ 466.133756][T10057] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.133768][T10057] audit: audit_lost=134922 audit_rate_limit=0 audit_backlog_limit=64 [ 466.140346][ C0] audit: audit_lost=134923 audit_rate_limit=0 audit_backlog_limit=64 [ 467.151063][T10076] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 467.151063][T10076] The task syz.4.1006 (10076) triggered the difference, watch for misbehavior. [ 467.874984][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 468.138343][ T9] usb 5-1: device descriptor read/64, error -71 [ 468.255074][ T5870] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 468.372092][T10087] FAULT_INJECTION: forcing a failure. [ 468.372092][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 468.386301][T10087] CPU: 0 UID: 0 PID: 10087 Comm: syz.5.1011 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 468.386324][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.386334][T10087] Call Trace: [ 468.386340][T10087] [ 468.386346][T10087] dump_stack_lvl+0x241/0x360 [ 468.386372][T10087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.386388][T10087] ? __pfx__printk+0x10/0x10 [ 468.386411][T10087] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 468.386427][T10087] ? __pfx___might_resched+0x10/0x10 [ 468.386439][T10087] ? lockdep_hardirqs_on+0x99/0x150 [ 468.386455][T10087] should_fail_ex+0x40a/0x550 [ 468.386471][T10087] should_failslab+0xac/0x100 [ 468.386486][T10087] kmem_cache_alloc_node_noprof+0x77/0x380 [ 468.386495][T10087] ? __alloc_skb+0x1c3/0x440 [ 468.386510][T10087] __alloc_skb+0x1c3/0x440 [ 468.386522][T10087] ? mark_lock+0x9a/0x360 [ 468.386537][T10087] ? __pfx___alloc_skb+0x10/0x10 [ 468.386555][T10087] __ip6_append_data+0x2e37/0x44a0 [ 468.386578][T10087] ? __pfx_lock_acquire+0x10/0x10 [ 468.386590][T10087] ? __pfx_raw6_getfrag+0x10/0x10 [ 468.386612][T10087] ? __pfx___ip6_append_data+0x10/0x10 [ 468.386626][T10087] ? ip6_setup_cork+0xa6c/0x1140 [ 468.386642][T10087] ip6_append_data+0x264/0x3a0 [ 468.386659][T10087] ? __pfx_raw6_getfrag+0x10/0x10 [ 468.386670][T10087] rawv6_sendmsg+0x18bb/0x2460 [ 468.386691][T10087] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 468.386704][T10087] ? smack_socket_sendmsg+0x182/0x580 [ 468.386715][T10087] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 468.386726][T10087] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 468.386752][T10087] ? sock_rps_record_flow+0x1a/0x400 [ 468.386767][T10087] ? inet_sendmsg+0x330/0x390 [ 468.386781][T10087] __sock_sendmsg+0x1a6/0x270 [ 468.386795][T10087] ____sys_sendmsg+0x53a/0x860 [ 468.386813][T10087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.386826][T10087] ? __fget_files+0x2a/0x410 [ 468.386837][T10087] ? __fget_files+0x2a/0x410 [ 468.386851][T10087] __sys_sendmsg+0x269/0x350 [ 468.386867][T10087] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.386902][T10087] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.386915][T10087] ? do_syscall_64+0x100/0x230 [ 468.386929][T10087] ? do_syscall_64+0xb6/0x230 [ 468.386943][T10087] do_syscall_64+0xf3/0x230 [ 468.386955][T10087] ? clear_bhb_loop+0x35/0x90 [ 468.386970][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.386982][T10087] RIP: 0033:0x7fdddd98d169 [ 468.386992][T10087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.387001][T10087] RSP: 002b:00007fddde750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.387012][T10087] RAX: ffffffffffffffda RBX: 00007fddddba6080 RCX: 00007fdddd98d169 [ 468.387019][T10087] RDX: 0000000000000004 RSI: 00004000000000c0 RDI: 0000000000000006 [ 468.387025][T10087] RBP: 00007fddde750090 R08: 0000000000000000 R09: 0000000000000000 [ 468.387031][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.387036][T10087] R13: 0000000000000000 R14: 00007fddddba6080 R15: 00007ffe7ce02e98 [ 468.387050][T10087] [ 468.505094][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 468.508353][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 468.727080][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.750322][ T5870] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 468.773872][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.800753][ T5870] usb 4-1: config 0 descriptor?? [ 468.895124][ T9] usb 5-1: device descriptor read/64, error -71 [ 469.013000][ T9] usb usb5-port1: attempt power cycle [ 469.035134][ T5870] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 469.417656][ T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 470.300378][ T5870] usb 4-1: USB disconnect, device number 21 [ 470.445161][ T9] usb 5-1: device not accepting address 29, error -71 [ 470.881887][ T29] kauditd_printk_skb: 18244 callbacks suppressed [ 470.881904][ T29] audit: type=1400 audit(1741095139.406:245927): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10103 comm="syz.4.1016" name="newroot" dev="tmpfs" ino=2 [ 470.920014][ T29] audit: type=1400 audit(1741095139.406:245928): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10103 comm="syz.4.1016" name="/" dev="proc" ino=1 [ 470.940659][ T29] audit: type=1400 audit(1741095139.406:245929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10103 comm="syz.4.1016" name="/" dev="proc" ino=1 [ 470.962746][ T29] audit: type=1400 audit(1741095139.406:245930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10103 comm="syz.4.1016" name="697" dev="proc" ino=24638 [ 470.998251][T10105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.040269][ T29] audit: type=1400 audit(1741095139.406:245931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10103 comm="syz.4.1016" name="ns" dev="proc" ino=24641 [ 471.081492][ T29] audit: type=1400 audit(1741095139.406:245932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=10103 comm="syz.4.1016" dev="nsfs" ino=4026533085 [ 471.149292][ T29] audit: type=1400 audit(1741095139.406:245933): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10103 comm="syz.4.1016" path="net:[4026533085]" dev="nsfs" ino=4026533085 [ 471.199522][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.205422][ T29] audit: type=1400 audit(1741095139.516:245934): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="*" requested=r pid=10103 comm="syz.4.1016" path="socket:[24450]" dev="sockfs" ino=24450 [ 471.215231][ T5831] audit: audit_lost=138724 audit_rate_limit=0 audit_backlog_limit=64 [ 471.913042][T10116] xt_socket: unknown flags 0x50 [ 473.137281][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 474.275271][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 474.980826][T10134] i2c i2c-0: Invalid block write size 131 [ 475.971337][T10159] audit_log_start: 10899 callbacks suppressed [ 475.971356][T10159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 475.984531][T10159] audit: audit_lost=140829 audit_rate_limit=0 audit_backlog_limit=64 [ 475.992743][T10159] audit: backlog limit exceeded [ 476.001210][T10159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.007907][T10159] audit: audit_lost=140830 audit_rate_limit=0 audit_backlog_limit=64 [ 476.016220][T10159] audit: backlog limit exceeded [ 476.021118][T10159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.027774][T10159] audit: audit_lost=140831 audit_rate_limit=0 audit_backlog_limit=64 [ 476.036006][T10159] audit: backlog limit exceeded [ 476.040912][T10159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 477.356219][T10167] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1034'. [ 477.600110][T10171] xt_socket: unknown flags 0x50 [ 478.619602][T10169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.805105][T10177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.973391][T10177] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.1036'. [ 478.984279][T10177] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 479.275289][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 479.766021][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 479.800622][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.824376][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.874898][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.915143][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.928905][ T8] usb 1-1: Product: syz [ 479.933123][ T8] usb 1-1: Manufacturer: syz [ 479.958368][ T8] usb 1-1: SerialNumber: syz [ 479.967509][T10182] i2c i2c-0: Invalid block write size 131 [ 480.661364][T10189] bridge1: entered promiscuous mode [ 481.089756][ T29] kauditd_printk_skb: 8085 callbacks suppressed [ 481.089774][ T29] audit: type=1400 audit(1741095149.616:255433): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5822 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 481.133299][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 481.153462][ T5822] audit: audit_lost=141894 audit_rate_limit=0 audit_backlog_limit=64 [ 481.158495][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64 [ 481.169488][ T5196] audit: audit_lost=141895 audit_rate_limit=0 audit_backlog_limit=64 [ 481.184062][ T5822] audit: backlog limit exceeded [ 481.189343][ T5196] audit: backlog limit exceeded [ 481.189392][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64 [ 481.189406][ T5196] audit: audit_lost=141896 audit_rate_limit=0 audit_backlog_limit=64 [ 481.189444][ T5196] audit: backlog limit exceeded [ 481.444965][ C0] hrtimer: interrupt took 51780 ns [ 482.073963][ T8] usb 1-1: 0:2 : does not exist [ 482.260858][ T8] usb 1-1: unit 9 not found! [ 482.293717][ T8] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 482.423080][ T8] usb 1-1: USB disconnect, device number 19 [ 482.918750][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.184491][T10224] i2c i2c-0: Invalid block write size 131 [ 484.439694][T10232] gfs2: gfs2 mount does not exist [ 484.979447][T10233] sock: sock_timestamping_bind_phc: sock not bind to device [ 486.095092][ T29] kauditd_printk_skb: 21935 callbacks suppressed [ 486.095112][ T29] audit: type=1400 audit(1741095154.546:261292): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5982 comm="udevd" name="/" dev="sysfs" ino=1 [ 486.120120][T10246] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.170571][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.189184][T10248] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.195869][T10248] audit: audit_lost=147272 audit_rate_limit=0 audit_backlog_limit=64 [ 486.204200][T10248] audit: backlog limit exceeded [ 486.211815][T10248] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.218466][T10248] audit: audit_lost=147273 audit_rate_limit=0 audit_backlog_limit=64 [ 486.226655][T10248] audit: backlog limit exceeded [ 486.232255][T10246] audit: audit_lost=147274 audit_rate_limit=0 audit_backlog_limit=64 [ 491.785647][ C0] audit_log_start: 2103 callbacks suppressed [ 491.785680][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.798274][ C0] audit: audit_lost=147976 audit_rate_limit=0 audit_backlog_limit=64 [ 491.806423][ C0] audit: backlog limit exceeded [ 491.812259][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.287344][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.293913][ C0] audit: audit_lost=147977 audit_rate_limit=0 audit_backlog_limit=64 [ 493.302056][ C0] audit: backlog limit exceeded [ 496.290819][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.297433][ C0] audit: audit_lost=147978 audit_rate_limit=0 audit_backlog_limit=64 [ 496.305564][ C0] audit: backlog limit exceeded [ 498.293417][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.300036][ C0] audit: audit_lost=147979 audit_rate_limit=0 audit_backlog_limit=64 [ 498.308198][ C0] audit: backlog limit exceeded [ 498.794574][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.801179][ C0] audit: audit_lost=147980 audit_rate_limit=0 audit_backlog_limit=64 [ 498.809291][ C0] audit: backlog limit exceeded [ 499.795749][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 499.802315][ C0] audit: audit_lost=147981 audit_rate_limit=0 audit_backlog_limit=64 [ 499.810435][ C0] audit: backlog limit exceeded [ 500.797073][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 505.802674][ C0] audit_log_start: 11 callbacks suppressed [ 505.802696][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 505.815191][ C0] audit: audit_lost=147986 audit_rate_limit=0 audit_backlog_limit=64 [ 505.823269][ C0] audit: backlog limit exceeded [ 506.303419][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.310026][ C0] audit: audit_lost=147987 audit_rate_limit=0 audit_backlog_limit=64 [ 506.318142][ C0] audit: backlog limit exceeded [ 506.804304][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.811030][ C0] audit: audit_lost=147988 audit_rate_limit=0 audit_backlog_limit=64 [ 506.819158][ C0] audit: backlog limit exceeded [ 507.305257][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.813734][ C0] audit_log_start: 14 callbacks suppressed [ 513.813757][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.826279][ C0] audit: audit_lost=147994 audit_rate_limit=0 audit_backlog_limit=64 [ 513.834374][ C0] audit: backlog limit exceeded [ 515.314579][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.321188][ C0] audit: audit_lost=147995 audit_rate_limit=0 audit_backlog_limit=64 [ 515.329396][ C0] audit: backlog limit exceeded [ 515.814859][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.821511][ C0] audit: audit_lost=147996 audit_rate_limit=0 audit_backlog_limit=64 [ 515.829671][ C0] audit: backlog limit exceeded [ 516.315535][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.817752][ C0] audit_log_start: 8 callbacks suppressed [ 518.817775][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.830089][ C0] audit: audit_lost=148000 audit_rate_limit=0 audit_backlog_limit=64 [ 518.838289][ C0] audit: backlog limit exceeded [ 521.375091][ T16] sched: DL replenish lagged too much [ 522.823150][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 522.829772][ C0] audit: audit_lost=148001 audit_rate_limit=0 audit_backlog_limit=64 [ 522.837904][ C0] audit: backlog limit exceeded [ 523.825362][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.831942][ C0] audit: audit_lost=148002 audit_rate_limit=0 audit_backlog_limit=64 [ 523.840069][ C0] audit: backlog limit exceeded [ 525.327715][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.334307][ C0] audit: audit_lost=148003 audit_rate_limit=0 audit_backlog_limit=64 [ 525.342459][ C0] audit: backlog limit exceeded [ 525.828658][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.835289][ C0] audit: audit_lost=148004 audit_rate_limit=0 audit_backlog_limit=64 [ 525.843370][ C0] audit: backlog limit exceeded [ 528.331321][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 530.333362][ C0] audit_log_start: 2 callbacks suppressed [ 530.333384][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 530.345723][ C0] audit: audit_lost=148006 audit_rate_limit=0 audit_backlog_limit=64 [ 530.353798][ C0] audit: backlog limit exceeded [ 530.833664][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 530.840272][ C0] audit: audit_lost=148007 audit_rate_limit=0 audit_backlog_limit=64 [ 530.848385][ C0] audit: backlog limit exceeded [ 532.335362][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.341931][ C0] audit: audit_lost=148008 audit_rate_limit=0 audit_backlog_limit=64 [ 532.350056][ C0] audit: backlog limit exceeded [ 532.835844][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.339215][ C0] audit_log_start: 5 callbacks suppressed [ 535.339246][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.351557][ C0] audit: audit_lost=148011 audit_rate_limit=0 audit_backlog_limit=64 [ 535.359669][ C0] audit: backlog limit exceeded [ 535.840082][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.846694][ C0] audit: audit_lost=148012 audit_rate_limit=0 audit_backlog_limit=64 [ 535.854772][ C0] audit: backlog limit exceeded [ 536.841968][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.848670][ C0] audit: audit_lost=148013 audit_rate_limit=0 audit_backlog_limit=64 [ 536.856790][ C0] audit: backlog limit exceeded [ 538.343652][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 540.847339][ C0] audit_log_start: 2 callbacks suppressed [ 540.847361][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 540.859679][ C0] audit: audit_lost=148015 audit_rate_limit=0 audit_backlog_limit=64 [ 540.867790][ C0] audit: backlog limit exceeded [ 541.348491][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.355094][ C0] audit: audit_lost=148016 audit_rate_limit=0 audit_backlog_limit=64 [ 541.363174][ C0] audit: backlog limit exceeded [ 541.848703][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.855336][ C0] audit: audit_lost=148017 audit_rate_limit=0 audit_backlog_limit=64 [ 541.863414][ C0] audit: backlog limit exceeded [ 544.851586][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.857495][ C0] audit_log_start: 5 callbacks suppressed [ 549.857535][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.869863][ C0] audit: audit_lost=148020 audit_rate_limit=0 audit_backlog_limit=64 [ 549.877974][ C0] audit: backlog limit exceeded [ 552.859183][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 552.865791][ C0] audit: audit_lost=148021 audit_rate_limit=0 audit_backlog_limit=64 [ 552.873955][ C0] audit: backlog limit exceeded [ 553.359911][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.366519][ C0] audit: audit_lost=148022 audit_rate_limit=0 audit_backlog_limit=64 [ 553.374598][ C0] audit: backlog limit exceeded [ 554.861652][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.868259][ C0] audit: audit_lost=148023 audit_rate_limit=0 audit_backlog_limit=64 [ 554.876377][ C0] audit: backlog limit exceeded [ 559.867528][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.874105][ C0] audit: audit_lost=148024 audit_rate_limit=0 audit_backlog_limit=64 [ 559.882224][ C0] audit: backlog limit exceeded [ 560.367953][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 560.374513][ C0] audit: audit_lost=148025 audit_rate_limit=0 audit_backlog_limit=64 [ 560.382636][ C0] audit: backlog limit exceeded [ 561.369139][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.375759][ C0] audit: audit_lost=148026 audit_rate_limit=0 audit_backlog_limit=64 [ 561.383843][ C0] audit: backlog limit exceeded [ 567.377090][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 567.383677][ C0] audit: audit_lost=148027 audit_rate_limit=0 audit_backlog_limit=64 [ 567.391820][ C0] audit: backlog limit exceeded [ 567.876641][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 567.883224][ C0] audit: audit_lost=148028 audit_rate_limit=0 audit_backlog_limit=64 [ 567.891353][ C0] audit: backlog limit exceeded [ 568.377544][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.384109][ C0] audit: audit_lost=148029 audit_rate_limit=0 audit_backlog_limit=64 [ 568.392243][ C0] audit: backlog limit exceeded [ 569.378758][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.883035][ C0] audit_log_start: 11 callbacks suppressed [ 572.883060][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.895508][ C0] audit: audit_lost=148034 audit_rate_limit=0 audit_backlog_limit=64 [ 572.903589][ C0] audit: backlog limit exceeded [ 573.883179][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.889876][ C0] audit: audit_lost=148035 audit_rate_limit=0 audit_backlog_limit=64 [ 573.897994][ C0] audit: backlog limit exceeded [ 574.384317][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.390941][ C0] audit: audit_lost=148036 audit_rate_limit=0 audit_backlog_limit=64 [ 574.399094][ C0] audit: backlog limit exceeded [ 575.886376][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.388927][ C0] audit_log_start: 5 callbacks suppressed [ 578.388949][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.401294][ C0] audit: audit_lost=148039 audit_rate_limit=0 audit_backlog_limit=64 [ 578.409454][ C0] audit: backlog limit exceeded [ 584.396470][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.403037][ C0] audit: audit_lost=148040 audit_rate_limit=0 audit_backlog_limit=64 [ 584.411172][ C0] audit: backlog limit exceeded [ 585.396358][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 585.402934][ C0] audit: audit_lost=148041 audit_rate_limit=0 audit_backlog_limit=64 [ 585.411056][ C0] audit: backlog limit exceeded [ 587.398071][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.404639][ C0] audit: audit_lost=148042 audit_rate_limit=0 audit_backlog_limit=64 [ 587.412771][ C0] audit: backlog limit exceeded [ 588.900220][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.901398][ C0] audit_log_start: 2 callbacks suppressed [ 589.901420][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.913742][ C0] audit: audit_lost=148044 audit_rate_limit=0 audit_backlog_limit=64 [ 589.921869][ C0] audit: backlog limit exceeded [ 590.901842][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 590.908464][ C0] audit: audit_lost=148045 audit_rate_limit=0 audit_backlog_limit=64 [ 590.916579][ C0] audit: backlog limit exceeded [ 591.354972][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 591.361969][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10246/1:b..l [ 591.370558][ C0] rcu: (detected by 0, t=10502 jiffies, g=36489, q=209 ncpus=2) [ 591.378375][ C0] task:syz.3.1057 state:R running task stack:24384 pid:10246 tgid:10245 ppid:5832 task_flags:0x400140 flags:0x00004002 [ 591.393185][ C0] Call Trace: [ 591.396484][ C0] [ 591.399429][ C0] __schedule+0x18bc/0x4c40 [ 591.403969][ C0] ? __pfx___schedule+0x10/0x10 [ 591.408937][ C0] ? preempt_schedule+0xe1/0xf0 [ 591.413799][ C0] preempt_schedule_common+0x84/0xd0 [ 591.419097][ C0] preempt_schedule+0xe1/0xf0 [ 591.423793][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 591.429183][ C0] ? __page_table_check_ptes_set+0x30f/0x410 [ 591.435193][ C0] preempt_schedule_thunk+0x1a/0x30 [ 591.440415][ C0] _raw_spin_unlock+0x3e/0x50 [ 591.445104][ C0] __handle_mm_fault+0x5ca8/0x70f0 [ 591.450257][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 591.455831][ C0] ? mt_find+0x2a9/0x920 [ 591.460094][ C0] ? __pfx_lock_release+0x10/0x10 [ 591.465148][ C0] ? mt_find+0x2a9/0x920 [ 591.469415][ C0] ? mt_find+0x6c8/0x920 [ 591.473943][ C0] ? __pfx_mt_find+0x10/0x10 [ 591.478565][ C0] ? find_vma+0xf9/0x170 [ 591.482818][ C0] ? __pfx_find_vma+0x10/0x10 [ 591.487510][ C0] handle_mm_fault+0x2c1/0x7e0 [ 591.492298][ C0] exc_page_fault+0x2b9/0x8b0 [ 591.496990][ C0] ? __might_fault+0xaa/0x120 [ 591.501773][ C0] asm_exc_page_fault+0x26/0x30 [ 591.506643][ C0] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 591.512463][ C0] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 591.532099][ C0] RSP: 0018:ffffc9000f857bc8 EFLAGS: 00050246 [ 591.538193][ C0] RAX: 0000000000000000 RBX: 000040000001b008 RCX: 0000000000000008 [ 591.546180][ C0] RDX: 0000000000000000 RSI: ffffc9000f857c40 RDI: 000040000001b000 [ 591.554257][ C0] RBP: ffffc9000f857cb0 R08: ffffc9000f857c47 R09: 1ffff92001f0af88 [ 591.562244][ C0] R10: dffffc0000000000 R11: fffff52001f0af89 R12: 0000000000000008 [ 591.570227][ C0] R13: 00007ffffffff000 R14: ffffc9000f857c40 R15: 000040000001b000 [ 591.578231][ C0] _copy_to_user+0x8b/0xb0 [ 591.582672][ C0] msr_read+0x184/0x260 [ 591.586872][ C0] ? __pfx_msr_read+0x10/0x10 [ 591.591569][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 591.596959][ C0] ? rw_verify_area+0x243/0x630 [ 591.602269][ C0] ? __pfx_msr_read+0x10/0x10 [ 591.606964][ C0] vfs_read+0x1f8/0xb40 [ 591.611151][ C0] ? __pfx_vfs_read+0x10/0x10 [ 591.615854][ C0] ? __fget_files+0x2a/0x410 [ 591.620463][ C0] ? __fget_files+0x395/0x410 [ 591.625153][ C0] ? __fget_files+0x2a/0x410 [ 591.629776][ C0] ksys_read+0x18f/0x2b0 [ 591.634039][ C0] ? __pfx_ksys_read+0x10/0x10 [ 591.638825][ C0] ? do_syscall_64+0x100/0x230 [ 591.643617][ C0] ? do_syscall_64+0xb6/0x230 [ 591.648317][ C0] do_syscall_64+0xf3/0x230 [ 591.652845][ C0] ? clear_bhb_loop+0x35/0x90 [ 591.657549][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.663468][ C0] RIP: 0033:0x7faf5dd8d169 [ 591.667893][ C0] RSP: 002b:00007faf5ec11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.676324][ C0] RAX: ffffffffffffffda RBX: 00007faf5dfa5fa0 RCX: 00007faf5dd8d169 [ 591.684310][ C0] RDX: 0000000000018ff8 RSI: 0000400000019680 RDI: 0000000000000006 [ 591.692294][ C0] RBP: 00007faf5de0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 591.700278][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.708293][ C0] R13: 0000000000000000 R14: 00007faf5dfa5fa0 R15: 00007ffd018cae28 [ 591.716311][ C0] [ 591.719357][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g36489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 591.731690][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=25534 [ 591.739583][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g36489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 591.751043][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 591.761019][ C0] rcu: RCU grace-period kthread stack dump: [ 591.766913][ C0] task:rcu_preempt state:I stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 591.778853][ C0] Call Trace: [ 591.782142][ C0] [ 591.785085][ C0] __schedule+0x18bc/0x4c40 [ 591.789610][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 591.795534][ C0] ? __pfx___schedule+0x10/0x10 [ 591.800400][ C0] ? __pfx_lock_release+0x10/0x10 [ 591.805457][ C0] ? __pfx___mod_timer+0x10/0x10 [ 591.810411][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 591.816775][ C0] ? schedule+0x90/0x320 [ 591.821049][ C0] schedule+0x14b/0x320 [ 591.825572][ C0] schedule_timeout+0x15a/0x290 [ 591.830440][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 591.835826][ C0] ? __pfx_process_timeout+0x10/0x10 [ 591.841131][ C0] ? prepare_to_swait_event+0x330/0x350 [ 591.846696][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 591.851912][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 591.856784][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 591.862003][ C0] ? rcu_gp_init+0x1256/0x1630 [ 591.866794][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 591.871749][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 591.877925][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 591.883239][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 591.888459][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 591.893081][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 591.898298][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 591.904216][ C0] ? __kthread_parkme+0x169/0x1d0 [ 591.909262][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 591.914485][ C0] kthread+0x7a9/0x920 [ 591.918569][ C0] ? __pfx_kthread+0x10/0x10 [ 591.923191][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 591.928406][ C0] ? __pfx_kthread+0x10/0x10 [ 591.933014][ C0] ? __pfx_kthread+0x10/0x10 [ 591.937627][ C0] ? __pfx_kthread+0x10/0x10 [ 591.942229][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.947447][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 591.952660][ C0] ? __pfx_kthread+0x10/0x10 [ 591.957270][ C0] ret_from_fork+0x4b/0x80 [ 591.961698][ C0] ? __pfx_kthread+0x10/0x10 [ 591.966304][ C0] ret_from_fork_asm+0x1a/0x30 [ 591.971093][ C0] [ 591.974122][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 591.980463][ C0] Sending NMI from CPU 0 to CPUs 1: [ 591.985692][ C1] NMI backtrace for cpu 1 [ 591.985705][ C1] CPU: 1 UID: 0 PID: 10251 Comm: syz.4.1059 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 591.985723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 591.985733][ C1] RIP: 0010:lock_acquire+0x2a4/0x550 [ 591.985757][ C1] Code: 11 00 00 00 00 66 43 c7 44 25 15 00 00 43 c6 44 25 17 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 00 01 00 00 0f 85 95 02 00 00 <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 65 8b 05 [ 591.985772][ C1] RSP: 0018:ffffc90000a18b00 EFLAGS: 00000046 [ 591.985786][ C1] RAX: 182cf2b2246df300 RBX: 1ffff9200014316c RCX: ffff888065c046e8 [ 591.985798][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2ab700 RDI: ffffffff8c801c20 [ 591.985809][ C1] RBP: ffffc90000a18c58 R08: ffffffff94514847 R09: 1ffffffff28a2908 [ 591.985820][ C1] R10: dffffc0000000000 R11: fffffbfff28a2909 R12: 1ffff92000143168 [ 591.985832][ C1] R13: dffffc0000000000 R14: ffffc90000a18b60 R15: 0000000000000046 [ 591.985843][ C1] FS: 00007f36939b26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 591.985856][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.985866][ C1] CR2: 0000400000003c80 CR3: 000000006e3a2000 CR4: 00000000003526f0 [ 591.985880][ C1] DR0: 0000000000006f86 DR1: 0000000000000097 DR2: 0000000000000000 [ 591.985890][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 591.985899][ C1] Call Trace: [ 591.985906][ C1] [ 591.985913][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 591.985946][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 591.985987][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 591.986019][ C1] ? nmi_handle+0x2a/0x5a0 [ 591.986073][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 591.986105][ C1] ? nmi_handle+0x14f/0x5a0 [ 591.986126][ C1] ? nmi_handle+0x2a/0x5a0 [ 591.986146][ C1] ? lock_acquire+0x2a4/0x550 [ 591.986166][ C1] ? default_do_nmi+0x63/0x160 [ 591.986181][ C1] ? exc_nmi+0x123/0x1f0 [ 591.986196][ C1] ? end_repeat_nmi+0xf/0x53 [ 591.986223][ C1] ? lock_acquire+0x2a4/0x550 [ 591.986242][ C1] ? lock_acquire+0x2a4/0x550 [ 591.986262][ C1] ? lock_acquire+0x2a4/0x550 [ 591.986282][ C1] [ 591.986287][ C1] [ 591.986296][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 591.986315][ C1] ? advance_sched+0x9b4/0xca0 [ 591.986331][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 591.986348][ C1] ? __pfx_lock_release+0x10/0x10 [ 591.986371][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 591.986388][ C1] ? taprio_set_budgets+0x32c/0x370 [ 591.986406][ C1] ? advance_sched+0xa02/0xca0 [ 591.986422][ C1] advance_sched+0xa1e/0xca0 [ 591.986439][ C1] ? advance_sched+0xa02/0xca0 [ 591.986461][ C1] ? __pfx_advance_sched+0x10/0x10 [ 591.986478][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 591.986502][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 591.986516][ C1] ? sched_clock+0x4a/0x70 [ 591.986533][ C1] ? read_tsc+0x9/0x20 [ 591.986548][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 591.986571][ C1] hrtimer_interrupt+0x403/0xa40 [ 591.986597][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 591.986620][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 591.986640][ C1] [ 591.986644][ C1] [ 591.986650][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 591.986678][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 591.986698][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 1d 23 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 0d 8c f5 65 8b 05 94 7f 00 74 85 c0 74 43 48 c7 04 24 0e 36 [ 591.986710][ C1] RSP: 0018:ffffc9000faa7ba0 EFLAGS: 00000206 [ 591.986723][ C1] RAX: 182cf2b2246df300 RBX: 1ffff92001f54f78 RCX: ffffffff819d2a9a [ 591.986734][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2aa4a0 RDI: 0000000000000001 [ 591.986745][ C1] RBP: ffffc9000faa7c30 R08: ffffffff94514847 R09: 1ffffffff28a2908 [ 591.986759][ C1] R10: dffffc0000000000 R11: fffffbfff28a2909 R12: dffffc0000000000 [ 591.986770][ C1] R13: 1ffff92001f54f74 R14: ffffc9000faa7bc0 R15: 0000000000000246 [ 591.986786][ C1] ? mark_lock+0x9a/0x360 [ 591.986810][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 591.986829][ C1] ? read_tsc+0x9/0x20 [ 591.986847][ C1] clock_was_set+0x686/0x810 [ 591.986869][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 591.986889][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 591.986911][ C1] ? do_settimeofday64+0x328/0x5e0 [ 591.986929][ C1] ? timekeeping_update_from_shadow+0x2b6/0x350 [ 591.986950][ C1] do_settimeofday64+0x343/0x5e0 [ 591.986970][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 591.986987][ C1] ? hci_ibs_wake_retrans_timeout+0x1d6/0x270 [ 591.987008][ C1] ? capable+0x89/0xe0 [ 591.987024][ C1] ? security_settime64+0x74/0x280 [ 591.987043][ C1] __x64_sys_clock_settime+0x23a/0x280 [ 591.987065][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 591.987091][ C1] do_syscall_64+0xf3/0x230 [ 591.987111][ C1] ? clear_bhb_loop+0x35/0x90 [ 591.987132][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.987151][ C1] RIP: 0033:0x7f3692b8d169 [ 591.987165][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.987178][ C1] RSP: 002b:00007f36939b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 591.987192][ C1] RAX: ffffffffffffffda RBX: 00007f3692da5fa0 RCX: 00007f3692b8d169 [ 591.987203][ C1] RDX: 0000000000000000 RSI: 0000400000003c80 RDI: 0000000000000000 [ 591.987212][ C1] RBP: 00007f3692c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 591.987221][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.987230][ C1] R13: 0000000000000000 R14: 00007f3692da5fa0 R15: 00007ffd2cce1eb8 [ 591.987247][ C1] [ 592.547503][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.554320][ C0] audit: audit_lost=148046 audit_rate_limit=0 audit_backlog_limit=64 [ 592.562455][ C0] audit: backlog limit exceeded [ 592.567490][ C0] audit: audit_backlog=65 > audit_backlog_limit=64