last executing test programs: 1m7.359683621s ago: executing program 4 (id=1993): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x7, 0x9000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x6) getpeername$l2tp(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) unshare(0x600) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffff, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x1c) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0xa94, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f00000003c0)="4a14271fe92615126b4ab0e57a1cafaf0094542b790936bc89d0c095fd4baac97226c56a796ccf45c97688e4b16c9905c376c20fbe09c2c3c38c8775d0aa1b2bd4f9d13e2738ecb183a99e3d5b0c869253639a7aad7d267b57a8463aeb6ad27f11905de8b556661e155371ad02154b491c04bc64aba9e2d9618b18fd84093d6fcb821801980176bb10b114127631fac149", &(0x7f0000000480)=""/54, &(0x7f00000004c0)="1c52311a6d1d4672db9dbaceab48ca1ec7860c31d395973d963f2198a4afa86b137819c200e5b43a5d3bed065d6688042793707dfbf38530f8102d6a68562378e33c91c316348fe00c10f96207c75be642442f46cbe4a918ff1a5104e50934c7bb0902c3a36da0f779398ba5467ef3d5c0f84e61ee1cf1ffc600c54b1216166358411ad40c97011404fab446b7f2ec0d8c33f6e0279cbea3316f34ed02f429042ed5b4dda44ec9e5d5365b9115de0e8e44a034", &(0x7f0000000580)="b53bfbd0c1c3b23dd25789b600fb1570797f7b10d0e9a7c70ad4418d31d0a2fe056440185ea042d79b020897addacf", 0x0, r6}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000300)={0x1, 0x1, 0x7, r9, 0x5}, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40014) 58.907198202s ago: executing program 4 (id=2011): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x6}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = fcntl$getown(r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x24}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000640)=0x81) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 57.168465496s ago: executing program 4 (id=2015): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 54.439181199s ago: executing program 4 (id=2022): iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=@v2={0x2000000, [{0x1, 0x3}, {0x17, 0xa5fa}]}, 0x14, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 53.889319953s ago: executing program 4 (id=2025): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x6}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x24}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000640)=0x81) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 52.923140613s ago: executing program 4 (id=2028): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async, rerun: 32) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) (async, rerun: 64) socket$inet(0xa, 0x801, 0x84) (async, rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='fsi_master_acf_poll_response_busy\x00', r0, 0x0, 0x4}, 0x18) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40e00, 0x4b, '\x00', 0x0, @fallback=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xfffffffffffffffd], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000880)=""/4115, 0x1013}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000001a80)=""/207, 0xcf}], 0x7}, 0x80000000}], 0x4, 0x10000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="03b395f9608191bc1a1a8c65b40200000000000061164c0000682700"/44], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) 37.87593944s ago: executing program 32 (id=2028): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async, rerun: 32) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) (async, rerun: 64) socket$inet(0xa, 0x801, 0x84) (async, rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='fsi_master_acf_poll_response_busy\x00', r0, 0x0, 0x4}, 0x18) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40e00, 0x4b, '\x00', 0x0, @fallback=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xfffffffffffffffd], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000880)=""/4115, 0x1013}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000001a80)=""/207, 0xcf}], 0x7}, 0x80000000}], 0x4, 0x10000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="03b395f9608191bc1a1a8c65b40200000000000061164c0000682700"/44], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) 24.222920984s ago: executing program 0 (id=2114): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x5890c0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x480a}}, 0x20}, 0x1, 0x2}, 0x240000c4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0xf, 0x0, 0x1, 0xf}}], 0x18}}], 0x2, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x20050800) 23.551291194s ago: executing program 0 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 22.322459145s ago: executing program 0 (id=2120): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102376, 0x18fe8) mknodat(0xffffffffffffff9c, 0x0, 0x8, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.295672593s ago: executing program 0 (id=2145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x2}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x1a, 0x0, 0x1000, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507a1ff00", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) 12.62234571s ago: executing program 3 (id=2150): io_uring_enter(0xffffffffffffffff, 0x389b, 0x10db, 0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000039c000/0x1000)=nil, 0x1000}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x44}}, 0x0) (fail_nth: 11) 11.719957591s ago: executing program 3 (id=2152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000600050000000000050004000000000014000780080011400000000005001500800000000d000300686173683a6d616300"], 0x5c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x478, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x403, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x0, 0x61e4, 0x5, 0x7, 0x3, 0x4, 0x7, 0x3, 0x200, 0x5d1, 0x3, 0x7fff, 0x1200000, 0x8e9, 0x7, 0x7fffffff, 0x7fff, 0xfffffffa, 0x1, 0x80000001, 0x7, 0x401, 0x87, 0x2, 0x5, 0x200, 0x0, 0x6, 0xe4, 0x5, 0x3, 0x7f, 0xc, 0xf90, 0xb7, 0x8000, 0xffffff7f, 0x573000, 0x1, 0x0, 0x80000000, 0x8, 0x0, 0x7, 0x1, 0x1, 0x0, 0x4, 0x120, 0x6, 0x1, 0x5, 0x3, 0x9, 0x2, 0xfffffff9, 0x7ff, 0x2, 0x9, 0x1, 0x5, 0x6, 0x1, 0xfffff3fa, 0x1, 0x1, 0x0, 0x1, 0x8001, 0x101, 0x2, 0xffffbdf9, 0x0, 0xfffffffe, 0x1, 0x5, 0x6, 0x3, 0x7, 0x7ffc, 0x1, 0x0, 0x40, 0x3, 0xff, 0xc, 0x1ff, 0x0, 0x20, 0x5, 0x5, 0x3, 0x4, 0x2, 0x0, 0xcc, 0x9, 0x100, 0x4, 0xdd4, 0x9, 0x7f, 0x1, 0xc4000000, 0x58f, 0xbdc9, 0x0, 0xffff, 0xb97a, 0x308, 0xff, 0x7fffffff, 0x1, 0x982, 0x1, 0x2, 0x1000, 0x100, 0xa7e2, 0x5, 0x7fffffff, 0x1, 0x1000001, 0x7, 0x3, 0x7, 0x8, 0x400, 0x6, 0x1, 0x7, 0xd, 0x5, 0xa, 0x511, 0x5, 0x8, 0x5, 0xf61, 0xfffff7a7, 0x7fffffff, 0x8, 0xfffeffff, 0x8, 0x6a, 0x7, 0x3, 0x400, 0xb, 0xfffffffc, 0x1, 0x7, 0x667f, 0x5, 0x4f, 0x42a, 0x7, 0x200, 0x6, 0xfffff000, 0xc2, 0x0, 0xfff, 0x3, 0x80, 0x6ab, 0x2, 0x6c38, 0x10, 0x1, 0xe1, 0x5, 0x5, 0x4, 0x6, 0x2, 0xfffffffe, 0x2, 0xfffffff5, 0xffff, 0xee2, 0x8, 0x6, 0x9, 0x8, 0x7, 0x0, 0x2, 0x1ff, 0xd, 0x5, 0x4a, 0x1, 0xb, 0x5, 0xb, 0x5, 0x7c, 0x6, 0xa, 0x6c, 0x19c, 0xd46, 0x6, 0x3, 0x2, 0x1, 0x2, 0xfffffff7, 0x7, 0x8, 0xc, 0x3, 0x800, 0x81, 0x0, 0x200, 0x43, 0x1, 0x8, 0x3, 0x3, 0x0, 0x4, 0x7, 0x4, 0x6, 0x40, 0x4, 0xfffffffb, 0x9, 0x8, 0x6783, 0x0, 0x3, 0x6, 0x1, 0x6, 0x800, 0x79f, 0xfffffff9, 0x2, 0x6, 0x6fe6, 0x6, 0x5, 0xf, 0xfffffff7, 0x10000, 0x0, 0x401, 0x8001, 0xff, 0x2, 0x4]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1e1e}, @TCA_TBF_PRATE64={0xc, 0x5, 0xafa8d36186c14c7d}]}}]}, 0x478}}, 0x44080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r9}, 0x4) sendmmsg$inet6(r5, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 10.537157275s ago: executing program 0 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r1) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000100005ff0000000000000000004bc54aada101a39aff3c06fb1db35b0b3b9d6dde19f09725d05e0ddce71eb4d55e4101d4b1afe06eb30754cd1163b7c485daed7296279c776069230d8ff9d397e1333958a8e6630dbc12d7857ee507faa51fc8b42cf23c887eefe7f3f3896fa50a2a334d937840cefd4d2db54e645238662f11d4d222ddedf8435004573d28f757747ab19c91f1bf1d5464c259bf11982f1c96441eb66d92555d411c780b7b4265cdeb9a94fc7cd3f5d17ca113f5ba60a4e55e4498ab5d191dcc9f1ee1d2ac5fa1b9c1712f9dbe3a04b52e2b10d384069be3c0", @ANYRES32=0x0, @ANYBLOB="00000000402400002c0012800b00010062726964676500001c0002800c001f0001000000000000000c0020000100010000000000"], 0x4c}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRESDEC=r4, @ANYRES32=r2, @ANYRESDEC=r5], 0x6) 9.176366764s ago: executing program 0 (id=2156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102376, 0x18fe8) mknodat(0xffffffffffffff9c, 0x0, 0x8, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.106463006s ago: executing program 2 (id=2157): unshare(0x28020480) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37b", 0x23}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x4008850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000200)=0x2, 0x4) 9.102013125s ago: executing program 5 (id=2158): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = openat$ocfs2_control(0xffffff9c, 0x0, 0x20302, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x7af4262a4c8769b2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_emit_ethernet(0x166, &(0x7f0000000500)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x1, 0x8, 0x158, 0x64, 0x0, 0xff, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0x8, [{@remote, 0x3}, {@multicast2, 0xda18}, {@remote, 0x8}]}, @timestamp={0x44, 0x8, 0x5f, 0x0, 0x8, [0x4d918c35]}, @ssrr={0x89, 0xb, 0x68, [@loopback, @broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x3, "15"}, @generic={0x86, 0x7, "9128eb2ecd"}]}}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x12, 0x8, 0xffe1, 0x0, 0x5, {[@eol, @generic={0x2, 0x4, "3ca4"}, @exp_smc={0xfe, 0x6}, @nop, @window={0x3, 0x3, 0x8}, @fastopen={0x22, 0x12, "399cf6feb44610b9a269753af2787de9"}, @generic={0xfe, 0x2}, @exp_fastopen={0xfe, 0x10, 0xf989, "acbe39801b902cd8e798cb9d"}]}}, {"af5611cde73db8484491e5df9fe79c76915834349012e0cb224ec57f783c8f37db9c078ab2da60841993d9e8bf083cd0fe938aaaaaebc2ac0182c0c2e45ffbab99a8fa17089b586dd2c83c761b493112d4dd7a57a026130c1245bee6f17d7295b8f2f9719fcb2819d8056c09929eed73fa2a1942f7f7131afa1a734b8df0ebeec518eabc9a22434ead130873287326b94df7711b44d878579dd6e57dd85eabd5109eb7e40c304cb1c46b49790ea87ae0dd8e6b9d92ca1914d9bf0f20"}}}}}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 7.830014979s ago: executing program 5 (id=2160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)='A', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="e6", 0x1}) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14004801}, 0x800) 7.627123908s ago: executing program 2 (id=2162): socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}}, 0x4044) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x1, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x40844) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x157871790a9186f3, 0xfa, 0x7, 0x4, 0x28, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r7, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xd3f, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x2}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) ioprio_set$pid(0x1, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x20000023896) 6.558366219s ago: executing program 1 (id=2163): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs$userns(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)=0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ptrace$peek(0x1, r2, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup2\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup2\x00'}}, {@uid_gt={'uid>', r1}}, {@subj_role={'subj_role', 0x3d, '\x14^{'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@euid_eq={'euid', 0x3d, r1}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'cgroup2\x00'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(&(0x7f00000001c0)='./control/file0\x00') rmdir(0x0) 6.541516358s ago: executing program 5 (id=2164): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000040)=0x4) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x9af9, 0x204000) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc377, 0x0, 0x21}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100)="d99c11df96edfdfa22962a152598c8397e4ff460646aee7cfb746ce14d145312e1361671ae3ab432b9599a91d420fc4e90a46cb560e776cf3aa70771842cf79cca2482e0ebfd35e79c9c48c3cf371f7eb46a2749f12fc9e0dd8107bc2f709390230f654d75f99b011e4c3f1b62e29421ad179190d0ac8bc4a8d5cc42b62bc8808eb28f3ec22e66b7c8f2e7c6a4d0017fad904136f6edd369696397bb06b014b35b0d86182ef45b0c1cf97c3822f9a1ebae51179ed6fadcbee0302edcd957eb6df034906dcd5333830d08182d416f7a8e06853dcc", 0xd4, 0x40, &(0x7f0000000200)={0xa, 0x4e24, 0x7b8d, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendto$inet6(r5, &(0x7f00000002c0)="2d676ddcf3be3f4e446132eea8dbf5227c959cb26d771bbcea34a5bb43f9e4237132b27953caf2bc62dd9397255cf9b364cbfbd185f3ff96a26e3e84b95e688001ae007c931b2760c8a87e6cf816607581fa4d2648d06213cca56a9b12ee712a19e3e9ab3f88b30e2b8cb64baf58758fdb344e7c06c0e1c6fdf6942bd1573012e1665c1372daf9e4277b2185337536edcb3f10f9a3dae507c08d77abe08feb4baca2c0457061f105aca461ba44cbf46af6fd0764951838f78e6af6df5a4b72fd825eb4609afcfa3f91dd4f2685fb84c1c20a7dce2e464292231c291c245c1aa5079fc9c97e86f1f79dcafd16f25d", 0xee, 0x20000080, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8a1}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000500)={0x400, r6}) r7 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000540)={0x0, 0x6}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)={r8, 0x73, "942767325f1bc73bbbcb28ae0859a38defa4a6815b621f5ef150dea3c2abc3ebfcf1cde0ce4fd7d601329e90714d378687812032768cbaf4d4da675e4632e8c620f043ff020b44a1d0f3e813fa47b2be400134d576658a54467536ee303923985c7f1347f24d1be01c5debd45cab2d45cf37b3"}, &(0x7f0000000640)=0x7b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x7, 0x5, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000007c0)={0xc0000000000000, r6, r9}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000880)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0xc7a, 0x4e21, 0x4, 0x0, 0x80, 0x0, 0x0, r11, r12}, {0x5a8000000000000, 0x9, 0x9, 0x8, 0xf, 0x1, 0x100}, {0x10, 0x395, 0xfffffffffffffe51, 0x4}, 0xff, 0x6e6bb6, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private1, 0x4d3, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0xdd, 0x8, 0x81, 0x9}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'macvtap0\x00'}) ptrace(0x11, 0xffffffffffffffff) inotify_add_watch(r3, &(0x7f0000000a00)='./file0\x00', 0x10000000) r13 = socket(0x25, 0x0, 0x3) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000a40)=r5, 0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000a80)=0x0) sched_setaffinity(r14, 0x8, &(0x7f0000000ac0)=0x5) 5.406603854s ago: executing program 1 (id=2165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20008018) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x3, 0x2}]}}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$KDMKTONE(r2, 0x4b30, 0x1) bind$bt_l2cap(r6, &(0x7f00000003c0)={0x1f, 0x0, @none}, 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x4000, @none}, 0xe) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.340589994s ago: executing program 5 (id=2166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x1d, 0x2, 0x6) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2, {0x1}}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$kcm(r6, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.189840453s ago: executing program 3 (id=2167): socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x7, &(0x7f0000000280)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e1e, 0x0, @mcast1, 0x60}, 0x1c) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='7', 0x1, 0x4}]) 4.045792041s ago: executing program 5 (id=2168): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f00000004c0)="7c705b456b4193bc2f4769279001011cffe79c018de547e8e3fd24fc8b3076fb08568a6871efbf313879c5ab3d51fe24c3954b649635d18507b73e981570db45e25484f4a9533c6560563c49cd64d0aa379ada9028c7c8ad5fc4ae2ddffc6f3d1559135379a3b7848500965e9a82da08ab99ff8543435ddc2b042e33ba81852bcfa949f8d050c01b44e33e6828477eb44719751c1b99cb150ce1ca7ed88b4bec76d069e17409a117d30de203bd3ba75f3527ef3d61818b5497cba68d3241852282d782933d09d0c3c701e953cf40ca4088febace6c04bfdbe5b8578397cc4235bb4e", 0xe2, 0x4020800, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x230, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabbf}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c4be5d7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3000000, @local, 0x4}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x19}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) listen(r0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e2c3", 0x259584305129a66}) 3.914510068s ago: executing program 3 (id=2169): syz_io_uring_setup(0x5de9, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x3, 0x0) semop(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) 3.738784394s ago: executing program 3 (id=2170): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x6}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) r3 = fcntl$getown(r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x24}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000640)=0x81) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 3.725177142s ago: executing program 2 (id=2171): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a0000004001000000"], 0x80}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x11, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 3.663170894s ago: executing program 1 (id=2172): unshare(0x28020480) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37b", 0x23}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x4008850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000200)=0x2, 0x4) 3.621338947s ago: executing program 5 (id=2173): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x639, &(0x7f0000000300)={0x0, 0x5d71, 0x2, 0x2, 0x285}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) io_uring_enter(r5, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) ioctl$TCSETSF(r6, 0x5404, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000400)="0c030400c03c7032d60bec0200ffffffffffffffff1f272414457dfd0420be8aac151c6e50d90429d7f747189c8cce65481f886f0eb3a12ecb64fe81d301228d2f69a3626b22045a9519560b5991a54d5b6c3e40b81dce9f02e96155b19417cc39b3a5cb5a1fa018278768db4f86fd8328defdafec33ddd5c40fc8c9714d2ebac1af99e8ebcec69beef3d88536990286c1f060d12748b668c191f267437916a1dde07288bab894f2117872a46c9fc7dcfb259c202b721e6873fa22805bab19aaf4c487a7244de1fa6de21500"/217, 0xd9) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) iopl(0x3) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000003c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) 3.095245036s ago: executing program 1 (id=2174): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x24020400) io_setup(0x14000, &(0x7f0000000240)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1000000, 0x2, 0x0}}, 0x10) unshare(0x16020800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaabaaabbbbbbbbbbbb86dd606410a6001c000000000000000000000000ffff00000000fe8000000000000000000000000000aa04000000000000001ce302d74f6ae54b8ea6c756cdf9a157b64679a9"], 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x40090}, 0x800) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) 2.030458938s ago: executing program 2 (id=2175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x480, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x800) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x303040, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x24014050) 1.368898591s ago: executing program 1 (id=2176): r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1407, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) recvfrom$inet(r2, &(0x7f0000000200)=""/245, 0xf5, 0x160, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000340), 0x1001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cgroups\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000003c0)=""/11) r4 = dup(r1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x201, 0x0) write$UHID_INPUT(r3, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001480)={0x1, 0x2}, 0x4) pause() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r4}, '\x00'}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001500)="f4f1ba85da08ec8f2dd5b9399e7af9f0dd0c7b4a3012bf2cae5b228023c407746d6b7f99fa9d9c040fb0feea09b854528597fedacee4ad88b4bdd428fced9fbd499ef23c81decb17c4c17612722466aa6d716fa9f0a9a63c0ede57238cc8f1a7423dca665e5456f76ea1494d47725aefe4af41759c4cb0ff4aeb968af7b38e5ffc9e936cfe0c6382859ce856546dc85a734210d2b7d04191a6181a872f05eecb70b63d8dfea3", 0xa6) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000015c0)="581f652f2b705ff3990dc3ecc8111b5153316230494c841b1065fe5b6ea3da66922b5f29308d2c2d5b22ca855393cc4d66f01760d7dc5fe2d36c4b530137edb6b0e177a5c2105a2dd63bdfbbdab986b76752a3e10217ae5ffa66b8aa7d62a23ef4dd01dc46a7df1b523f2339e8f7d9dbed85cde3851559fd9808f354cd80bf7ab115e0de7ca7dac04e787d23296fcef3b601aff2964ea10565da3671017a80c1f5962a4f27fe42aef83fb74aad158e4a5b30dbedf1edbe314244011c5be7fcf84d05be3ec9a4df3cc070bb00b8eddf1be94966870386fa44cf39a25cb7499458c03b03776b12cd6e698b033223", 0xed}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="1cf9dfc42601c1a7445b71f91c2bbf3af8e1a8f5fb19711591bc13f384f7b2c19fb824280241e8541c72c25a4ee68fd8dab0805ff704a39485a5cbf1dec532469e965f76c1dbcf2084b8e1a8e1249f095d259cf7f92cf2c1bad52225a91fcdcb13696ca6b53acbf0daf1c7a8d9ac90ac68cd9aeb56da0e7fffaf6542bfd95e29459c9456ab0515a0a7e173dffb26b208ec1fb94a2bee0943336ede3e10d25815566b60505ff66163c6f688c5804ffa257b3b4ff495f61f5f1179ed0aae96aecfc9ca21ee1fba748ae75c6d413da57eb1feb2f8622b9dc2defbb9f8ec0b", 0xdd}, {&(0x7f0000001800)="c7f61df765d4be4b8ae4657694d8be716275a24444e3c276233a8260581a364e759bd1bc3bdfd834f4dbc9f7ee9e99b169e4eb870764cb280698b16868be740d816b3c98d9ab5be7b1dd6c123d708e3cb852468325a0d5555228d545e0eacee52c4878dad23a14754c56e75c97f7e0b975a3842ae778195c1f280ada31e5613700cb02a4d967071ee58f080f7dc884fdf783c9603fc2feb8b8eb0c19fc0b0fc0f6b551b6fbbbd86aeda28acbd5eb398859d3c9c1b1cdcf9bf33baec046ec3d13e0c97f9c1e983a5c456b5b94eff249fdd866c68e269ad51d3d7f7d3f2dd2f2dc2793e9afeffcafc9dd731c2bff8b98", 0xef}], 0x4, &(0x7f0000001940)=[{0x40, 0x103, 0xfffffffd, "c2736136140bf6fa349016ab7c78739e2189296b6fd1dd45dd51e174fab3582d9588b008b016a7a91e1a33779dbb44"}, {0xf8, 0x0, 0xfb2, "096a14531f7987a257a21dc94c65e784ee95aab66d7cb2d6264b78584a665b9f9fbd87fc87d615403f4d8b525e43310d9cbc2e051cee46503f16e7445d3d47980735a79f25d4fcb35568ab2ca8205db791222706f01f5919a8c1febe4a7d99daf8838c072f8a23b51baccca128171a2b7b465a008be3ea70761449bb9f4f5e10b89469910731d71eb9498a9d81ed5354d5e390e5e6f59b397dc178c8105af431679104b4bdbe5d67440c7bc8f18aaf0e052856ecbd7e5ba9c27e3f89fe7bae7942b5dc045db4dd27aac7554257ff868fe7bf3170e1cb6081ef5e37e50478c48589bb"}, {0x58, 0x103, 0xd, "17d7fcc034a827ba04eb58a5ac9ec97e2bac64a86ada04bd0e509762fe3b29057e7f504ba7b9d1d0783a9bb9ceba8b2a61a17cdba053025d44a9f41eb04d1696f1"}, {0x1010, 0x6, 0x9, "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"}, {0xd0, 0x117, 0x7, "ab98f6f0095a2aaf8c1a35b43bdb689bcfe221f192f091cbcf60c4e40e5fb100362b9d8dfff72a9301fe2f5f146cd2c36d4b991361ee6d022f725b261721fc212c68d866de986636e0e5f21d2bd23abce55d34feb31a14756c85eaafc5fd3404ceaae1aa617a7029012e676a6e1ba95a0da285757bcc8ab11ab698fb7be15320b4e332578f2b631728b668fa2f50b69fa31b27c53e886ce00d09607fa0560012e046b6143e8cbc92e24cd3877950cf206890815dd83ca68ae1bf8d"}], 0x1270}}], 0x1, 0x20000000) r7 = syz_open_dev$sndmidi(&(0x7f0000002c00), 0x7, 0x222080) getpid() mount$9p_rdma(&(0x7f0000002c40), &(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0), 0x2b00821, &(0x7f0000002d00)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}, {@common=@directio}], [{@appraise}, {@subj_role={'subj_role', 0x3d, '&/]+\\'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x35, 0x64, 0x34, 0x33, 0x37, 0x62, 0x36], 0x2d, [0x55, 0x32, 0x64, 0x63], 0x2d, [0x37, 0x36, 0x66, 0x33], 0x2d, [0x38, 0x32, 0x32], 0x2d, [0x63, 0x37, 0x39, 0x61, 0x31, 0x31, 0x36, 0x64]}}}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004000)={r5, 0x0, 0x1000, 0xff, &(0x7f0000002dc0)="63a2910c31d5eb2bc451d5618f18702bd0616f89fc4d12fee46c67bbff0302f40861a02482854af41d1ee9ebd77d7aa12fc4af4ac31bb93b21e7b94488f58ee8ac0c6420cbc1e3b52efb221657f12a323d65edf3c0048cae0c3f53a8421d08d2772c7c62619c9e83b3d6aa6094417309a4339f6cdecd0db0248307c37ab489c8170bc55531b2643135d0bc966ffd94962ff3f712942c367b2132b0f2a9e903a4ee822712413894f9a3df244a6ba0db1c52da0853e94ff8dc120b824cf9828c41d46173653eb63fce1419f2d920b978d244715af5067f7e7121a3e4fe7eeba91f8113f06cdddfd5858ba119164cfd13ba6f5f3f741edc6acd3e16992d92a85fea8bdedc615d3425ee8fbea5dc0bec5bdf84ee53abc2c9d0660d18718944c2700056347897406548414f9b0b0bd627c9417d7442ad2de205ea4a1e31c9318e92b82eeb57919796a3328cf00821d50a526624539645df58d4a4ddcdfe734de1c6ad69b04a80a2a01d8f596a45a161ecc59c6c79eead6c742fc0a4a684640f55c0d1ef129c45e1287e922b25146e78387fe656bdd90a044c57d005640fbe399f0f8f997db17a7cc70ae523529738efe35c47f57721cc777592fa02d103d7db088dc18424cdab043fa98a3cc7b05dd9718cf74b474b2b88b8dc37061cd6052473ee2c540fd59621b9e2006668b4d611197f0096073af24c9ba74d0d06299701d6605cf7f3e8ca88ed8ec45054e47e2cd48595caef1e634117dc6c1dfb93c5417c425f374a8277031bc97729df2d84cc86ab1dbae22b644f991eaf9e808bd520dd7b130b850d33693523e680a806f87ebba0006b8f1b254c170ab87d5b59700739c2b608b55fc81bcb8499f5b22e8e8bbe0d960fd83946ceb59e02fcc12545a463e1cdfd0c9e7032b6684ddf8d915ce289f7ef969e5d60619a649f7ae56a9d6306202cf3bbdea4cce80285cc277a67af64d24cf58771717f0876172477fbda56f8b5d37372d9826916f945d0ad3197184e1232f42390ac7811f0ce0e438b2a116239a302109c7dddede91107c2b24603b8091e204c2269c358350433175b5dbf15be6e83bd1a7c2be1944b2d32519537ddf3b3370047d21a81c9a1d0d2a1de00b91659f63d545c1a81e5f08510d5b47eb94f87d1913f89f6818deb1a0eddac6f75a62c30aa4f0844251eaa50b797d8d33397ea724bfa2c0fd30362fd1ad598a0dda52cdf47f17959720599762338655d631847a45c612192eb3291b1663c7351fbbe64cb87707aac16f7ed9e08ccfc6c6da55f423fbacb5337a1b26b1157c3eb754226dbed30f4f605cdf090820640a7b66d447f8a01befda18ce053ca9ac84976113bfd3f0714129d98d0816a185dc61c94224d611f46f698d79deb551240edd81f0144916972d4f6a31cf422b2036291499061dc1ba1ca34beef761781ece51348a39bd1c69e31cd3e5857ca504b411b5cb4e5a48a92f1bddb971c30092c9ec59e77d704ab4b12c40c066880307a4f8cb161a04268dd15f6b9eb0d5c16f9276de5a496a6276143d882f353cee4eec6ef763c346b9d9ba4eb722cb17a4f98ae33908ede5b1683199e9853b6e198026d2572701bfdaa339036df239509e879e19fc3509126d3643d5b625b71dfeb09f9fc187847f6ecbf13cac6956e29deeddae880b0e44f732301771e215b7109d57f8b75aeb5f6127d0c00bd4b4ceaf30e796a6c75fade521c8a813a829381592586560d20143786d5c9b1a09591a7b0bcc1a8ea922febd252fc5fe5b62a7db2f4cae4c8b6a0a2f1cb0d39961e015ebf160a82bd3c4b4080e78accba8a16f17e3050b8603d2a0d4246a7a7e463cf52a4a743f6eecf26bf26f3a8ea02ac454dc7227ab0f7939a68b1235d02921a49f4aa42dd8930b4713dbf46cbff08c0aebfa21ab2318b06f0b910eab978ddb60baf2ca403855df9fa4ee7c87c39379f5e020f8776a2e6c78e262d3005e33f682657bf98bc837f69ae7059c5b5762764336abd6732312694e1d1b0c9e6ca477c6a4e8b5a7fa029492396ff30e53275164c0501b12071d3f3fbdf7c82f705d91b3b310aa9b224b754f5a76f6cef1199336f844f507292b111d15bffe507bc13ebe9cff4aa2145bad8a885b132ecc09f3e9d5ea31c2966072cd2eab7268a9d1151c782419e690d0ba3a3d097e8d0db2927a1089e67cc77c73cc64dfe7e8817ad0d55b1b9c7a662f35d7c322155e3407766cde7b06bc3d8193b3145051d8c8087ee02578eb4fb9ab23c2404da861a011e863dfbf80cd3261992908cdf8a7b89ee7ed72fac882dfad427d7b75841b8f7d034805cfa6dc06039439e85e0d98558d053cf682ead4c1419becc3a723ff411e9a8e857d20f256de51fab174d6ebb6e6134c04a64e5d518d6bd3a0932f3a269be9a4b4e3c514af5dd5eb4c032a41c575e26919b9eb0e4b100b24e116395218f598ffcd43378cf2595d352a0da00a3ce342f3d57fd31ef35e24338a5c03c41691884cad4d8eea739bd01ce9445c4fdb2560d677c4b7d05aa16ec7c450db89da8bf6cc3d157c029dfbbc199b64ea3e88d267611941618d139edc21a196988ffc299408faed63f1eb38308940207eb0683d5090d7da47113ad6b48270498027c7137b26bb44b5899c35052df16cfe8bfb11f1fe4fc11028f906365d211746a573514046f5660fd408d37ff351afd00e99c5aa08725033e64af2f5f03c47889c3880415a1978aa85e44a7b4267d5dcf42862b339c9299af985621565d6b5d186dc42e10f463641616611ec6774bf4eb6b7f1fc94a77f340d7a7efd7ac9b88afdd53f7bd28a0231452cb788fd87c42687960f77fe7bc6cf0fc4e8f4343ab659076ca336899fbbf2f6216c9c414e86fa70688e682d3562f578ed182e098cec52af772c9a213682d6cefd89d12ccf8c805be76c3fb9ecd7b0ae5e133b06809223db482c095fa60e489ab834abe1e1afe714513ae83108359f885d98c2b8d4535f4aca6c17367b19acdd71bd93d32de2a22a08ec3fe34ac52b565a566f42376fe9fc3e9d8c0278364de7956cd29b2d18ffc81044369b5291d075f34ebb431566fe040610228873790c6177eeb61a508e205094b76066c2f4c85431081ccb8010378d0610c682e949f6cd6b2e8b2e33df5d8a25b420640a1eb9111ea89f57ecf8cace33cb3a02645e5b3a110eb8d5d8d740e07ada7c725574e70296b8a44c94abc367a6209e0d6bacc925de16e3b5a901a21fed8fff4b2fee0944739d404cd46db1211c42331d10fa8794d6b2f37a1ca72e18255995a3eb218121df08aec242f8ee9951706c0cfd2464a307ab48650430ac50ce9b1feedf791d4be8dc68364df563fda5e987858e972003242da5bc0d20a32a602b429efb32e9f78ed0755824096c7ca5ffb86cf8c6d7c94206600aa711ae72ce95fea543e9c36176619e8431c5a8fbf1b44d2188c693bbbe33c7fb739417664156a10a52ca8a47382c612653d0b5f7640fde1bbb887e548936361e387eac32aef80f16540972efd3917bbc357a74d0eb660b25ca09e2b1f49e9be107bcf76493edc3bc529834963d06fee52d51638960cc2485fb0ffacb4d01fb0c22719febda695a572706a64e87f37cca6b7a988e52de9f3571615f6f665ff4b4fc1324792308e6da9c5507f213d43dbd229794f357a13c1fa61c76add957f62686698074a8d96ee7d3cc24299bfbdf731b6d4809040524bfaad27f4eb8852db6bd3865dc8c1e06bcf874101d1b523732985fd01a56fa5c8911d1f1e771500d34e4a46553d8e5b99544a97525dc8d1cf09cdafcf6aed7f594a39c747ba62253702428d9fa36d9e54567185ee14470fcac5ec2ded1d2589d2c140f97fc04dbff9f08f5fabed393f328e0e6ded8aae8786d8e127adac02b0a875ca1f1085cb63ca8c53542851511f16db7aa8fe5f0afd1b147f5c0fd74b66647255f09bc84e3215f735db20830c132f77ab3543bc369dd8b2c5a0ea5fca0fc43a12dc4016d0311b099c904be42834299443a826e17f5b7e1bdc6e158346d0b4b28e79f18f0ccba068473781fddc41391849d1f0d667da49ad249d1269536d6da849ce202407fa17884cd7d3598f35044ada426e2dbf8d1f2147e59721ebf3b27b77018e6c01ecc43e9c677f573ecae47aaa2f3d0e02012403dc34db6c434e2a6b9a95c7cc124e21131493bcb91cec6d51dc0d86d580e58916598268fe3be6f73dc872b731efa2cf9dcf1fd4f0d14f7885f0df716dc7a2423a8757290be9bf0fbffb8b020df1ae32f8f2c954970cec05e6110036779eb3a7e7e6e31344952337a344b563e19c8ab45456f6c025425c0c901afa641d8e6098520294516181eecee8ff917ed61f9880609c88cad9e0bb7505d241da7a2e8cf572b0e99e0144da90ca336ec86fcb3d6bf9ea52b7535f8195de36d8dcc2fffb1d767f7fce8dc024a0e918f586c1f5189c71c7225ab8fff9e0dd12aeb69f5cd3a1cf31d4bd0042838c1b5fd138d42d0adde1538e77c8b0589c77cbf622ccb0dcbfeeb7ec9cf96a00c54641150dd38e656a8b9be37e680331cc662edd2e86890980d8e79423fc0b68e61a78d1f80e275b515d9db64a29dfa6b57e7ec9446c5463cc559ad1c5449599e095a40e57876d9bf18d80dc95b76683135a564de8cbdec0b8ffa8c233411666373eae58ba999cd6b6e974868681e2ea7aa92832caaaf1664fa1824414e6ae141d4c8a99bab1dd885027b1ad828ba0b47cdd56ed1b2c5ea67062874a35cd8a88313f24e2c6a5def91848c6d93aef215bb60a7231ced26ce651eb55fa2903bac4f3ebcfd1a02af514f252519f03daa1f09c4b1e5bb2bd5fcdcb6211b18224c8c433f2ba53c487d177dc3d5f7db8e5346c18cfc385b3b730ab26b94f6912bd99640b2bf1bd852f975045062639ea793ba3190e1832eb75add8128e28ae4dd1d571da15354e013580a191ccb0baeeb3310fb2c05ce7feb79c467d994335d8351c91222d800d36455819a169bd1928030e7a138bc5e21d5989929fcdc15b48d90691efaeef1d1afa1900d3cc93647b502e84b7144b342d3b7f26ed0f6cdc84c168da27421bdf63ba4cc1041fc15634e535279a0d2cfc0682541fc2d77fdbb96b4bb073786858fa0ddb919f632bdce141ba8f6f42405b5a655985e0ff2cda1dd01359fefbc0d5136a5d213ba7e216206c5fc6540de633ee2f8a8d66f4e7a30185c970d89cdd9c32d156df2e68ebdc8b62e03dc9053395cef313c6e98d27fd7efdc0c5364b3e8bf57ef49ba5110b06bd723f2f434104cd80842ab5c7c486f4c7aa9edb8d31039ff3e18e4a4ad9b183674dcab54fedc4ecee5d092171c2a06dbb3037be2b119294bb2cc27928d128bbfd888eb909ee23a3d9e622170859555a139303d3c055a0d2b5acbef31d3ab13fc34b0bd2f81d8b1ea4a3049ad8bb61b66186b8149e2fe544435597d1848ac6b60663681e58a60c604cb81d19169ef0869aca7f16bd3e1c8383741e45ac42b314931fee5f0acac65123d9cd949147255f1df8a7f2cd1d9bfbf5f73c0f6f5486b25b00ba8d03262e8b8004d1acc3bdecf6fccf807c13dfa7a0e5cbb7dbb418a2692ea13a454d2e89f8c99178c642b5b220a915eb117cede8fa3bacec2c0fb06762eda05877cfa97d0d5e62654686fb0c350a7736321a1212a5f775991d08186489cf689a3a27ab8db55d52ae59ac5c8b33a82f11fea809408873bfd5e65fd03f5953f09c4f8eee97454cebd7e832773a3a7997ed99e5faaba8d27137671e2e9240d34e371ce1d8878b476285d182", &(0x7f0000003dc0)=""/255, 0x0, 0x0, 0x6b, 0x89, &(0x7f0000003ec0)="8d532445956689754f6a93966ad5fb17e3fbdf9c156ac8bf9eeb23f58a4bd9b442a5a4d2be82d4b81889a84493a1822139dc0d06bd126d9efced9ab0dd0dfae7e04c3ddaa16124aca1af4c7c5f061852c937741d291fdb310b74c3dae2d01e069145cdc5d6cb841320db31", &(0x7f0000003f40)="3fdbad2339eb7ab234f45cd57a52aebeb6878406a522182a6d91936264a45a53bd4942609531cd2c3b8a843200fa5772907f9078bb83a1ee69112ca1693e8b3f014601d482020012efbb650f98d873d70448bf87b332ddc197381696886cda04dc9f0e7c8786bf7386cebe5614b5d39bcd7a8cc440877dfa3e7ef7adb8c630dae9c82c2dfd26fe2ca4", 0x4, 0x0, 0x9898}, 0x50) writev(0xffffffffffffffff, &(0x7f00000052c0)=[{&(0x7f0000004080)="7c678fd20fbe59c4e69383bd267adcff786e7c8d29c7bcda18d82ecbab8d7c05e84254d6e69b0124f8c4ad6248f86da8fb99188b8450d7b35cc2da0d2768601a8feb5d961ece45a2b3e591386fdce13389dc7e524a63e6dc74bb0badea5a48b459a5c25f21417e97bd6648887bc4d95c788407ab5ed339b35f50cdaf8b09567178efb83e399ca4a022b2eee685ed8efd7ea01bff954a68475eda5f0dfc22e5516ae6a12bcd8c5db719b559ea0749de26a161fd1251007a749373b8e22b8199e9c8", 0xc1}, {&(0x7f0000004180)="bb69b3966fdbe9bc5faf8b857c18dad9ee2a870e780673886fe3eae143ed8ebfa1c61a2f17912ef2c285ac5170db9ad5ce1b2f592b3566727f5ed9f71513358c19c043a687986049211cf1e0b013addcbee7a78b3c20cdfd541413c1fa24164eff602fdb08aa180219e2aa5ddd70ce9c396b6c836ae1c3befb04dd55d567266cb0c9e63e3cd21245a0bdd33515a6cf5875bae3b06a73847d5b65672d0c3d1f24f71c2268b12dd495562feeea377adf9f6c28ff91055b6235222ba2e7565f6454e938759ad70bf17dfb07685c8acab8efb357c5c47b53be62aa60d0", 0xdb}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="ec508cd4b53c26f57ef65e15d6c24961bde0f444156612595b10aa72576d189b2c627863df097d88f06056b12d72430ec48ddb73ae", 0x35}], 0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000005300)={r1}, 0x1) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000005340)=0xffffffff, 0x4) r8 = syz_socket_connect_nvme_tcp() tee(r8, r7, 0x98bf, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000005380), &(0x7f00000053c0)=0x4) 1.195028812s ago: executing program 3 (id=2177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f0000000140)=0x2, 0x6, 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x2, 0x0, 0xfffffffa, 0x100, 0xe, 0x5db}, {0x80000000, 0x400, 0x0, 0xfffffff7, 0x4, 0x8000, 0x9}]}) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) setrlimit(0x0, &(0x7f0000000180)={0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) clock_gettime(0x7, &(0x7f0000000100)) timer_settime(r3, 0x0, &(0x7f00000000c0)={{r4, r5+10000000}}, 0x0) unshare(0x40000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) futex(&(0x7f0000000140)=0x2, 0x6, 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x2, 0x0, 0xfffffffa, 0x100, 0xe, 0x5db}, {0x80000000, 0x400, 0x0, 0xfffffff7, 0x4, 0x8000, 0x9}]}) (async) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) (async) timer_create(0x3, 0x0, &(0x7f0000000300)) (async) setrlimit(0x0, &(0x7f0000000180)={0x2, 0x4}) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) (async) clock_gettime(0x7, &(0x7f0000000100)) (async) timer_settime(r3, 0x0, &(0x7f00000000c0)={{r4, r5+10000000}}, 0x0) (async) unshare(0x40000000) (async) 1.123075332s ago: executing program 2 (id=2178): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(&(0x7f0000000080)=[{r4, 0x30}, {0xffffffffffffffff, 0x1206}, {r0, 0x120}], 0x3, 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) sendmsg$nl_xfrm(r6, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000700)="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", 0x321, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) 79.967966ms ago: executing program 2 (id=2179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0xf5ff, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 0s ago: executing program 1 (id=2180): syz_io_uring_setup(0x5de9, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x3, 0x0) semop(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) kernel console output (not intermixed with test programs): 1: config 1 interface 218 has no altsetting 0 [ 568.607712][T10369] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 568.803656][ T5887] usb 2-1: config 1 interface 179 has no altsetting 0 [ 569.105707][ T5887] usb 2-1: New USB device found, idVendor=1737, idProduct=0073, bcdDevice=17.da [ 569.133457][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.153123][ T5887] usb 2-1: Product: syz [ 569.158293][ T5887] usb 2-1: Manufacturer: syz [ 569.163108][ T5887] usb 2-1: SerialNumber: syz [ 569.220163][ T5887] usb 2-1: can't set config #1, error -71 [ 569.247087][ T5887] usb 2-1: USB disconnect, device number 16 [ 569.346781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.446702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.376476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.556416][ T975] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 571.899970][ T975] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 571.933044][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 571.938746][ T975] usb 4-1: config 0 has no interface number 0 [ 572.030728][ T975] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 572.058834][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 572.304551][ T975] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 572.366598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.425169][ T975] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 572.451569][ T975] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 572.462663][ T975] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 572.635831][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.680304][ T975] usb 4-1: config 0 descriptor?? [ 572.709106][T10657] bridge0: port 3(vlan2) entered blocking state [ 572.714900][ T975] hub 4-1:0.3: bad descriptor, ignoring hub [ 572.740274][T10657] bridge0: port 3(vlan2) entered disabled state [ 572.762073][ T975] hub 4-1:0.3: probe with driver hub failed with error -5 [ 572.786650][T10657] vlan2: entered allmulticast mode [ 572.792073][T10657] batadv0: entered allmulticast mode [ 572.814798][ T975] sierra 4-1:0.3: Sierra USB modem converter detected [ 572.829249][T10657] vlan2: entered promiscuous mode [ 572.855717][T10657] batadv0: entered promiscuous mode [ 572.872527][T10657] bridge0: port 3(vlan2) entered blocking state [ 572.879856][T10657] bridge0: port 3(vlan2) entered forwarding state [ 572.893815][ T975] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 572.953970][ T975] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 573.166468][ T975] usb 4-1: USB disconnect, device number 25 [ 573.179698][ T975] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 573.199785][ T975] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 573.209498][ T975] sierra 4-1:0.3: device disconnected [ 573.316983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.466436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.486409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.548311][T10680] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 575.556740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.856046][T10684] FAULT_INJECTION: forcing a failure. [ 575.856046][T10684] name failslab, interval 1, probability 0, space 0, times 0 [ 576.072545][T10684] CPU: 1 UID: 0 PID: 10684 Comm: syz.4.1312 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 576.072579][T10684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.072592][T10684] Call Trace: [ 576.072600][T10684] [ 576.072609][T10684] dump_stack_lvl+0x241/0x360 [ 576.072647][T10684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.072674][T10684] ? __pfx__printk+0x10/0x10 [ 576.072708][T10684] ? ref_tracker_alloc+0x316/0x4c0 [ 576.072734][T10684] should_fail_ex+0x424/0x570 [ 576.072772][T10684] should_failslab+0xac/0x100 [ 576.072796][T10684] kmem_cache_alloc_noprof+0x78/0x390 [ 576.072817][T10684] ? skb_clone+0x20c/0x390 [ 576.072843][T10684] skb_clone+0x20c/0x390 [ 576.072876][T10684] __netlink_deliver_tap+0x3c4/0x7f0 [ 576.072916][T10684] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.072941][T10684] netlink_deliver_tap+0x19d/0x1b0 [ 576.072969][T10684] __netlink_sendskb+0x60/0xd0 [ 576.072994][T10684] netlink_dump+0xa7f/0xeb0 [ 576.073031][T10684] ? __pfx_netlink_dump+0x10/0x10 [ 576.073075][T10684] ? netlink_recvmsg+0x620/0x1180 [ 576.073105][T10684] ? netlink_recvmsg+0x620/0x1180 [ 576.073137][T10684] netlink_recvmsg+0x6c7/0x1180 [ 576.073162][T10684] ? __lock_acquire+0xad5/0xd80 [ 576.073191][T10684] ? __pfx_netlink_recvmsg+0x10/0x10 [ 576.073230][T10684] ? __fget_files+0x2a/0x420 [ 576.073256][T10684] ? __fget_files+0x39d/0x420 [ 576.073278][T10684] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 576.073307][T10684] ? __pfx_netlink_recvmsg+0x10/0x10 [ 576.073335][T10684] sock_recvmsg+0x22f/0x280 [ 576.073366][T10684] __sys_recvfrom+0x204/0x380 [ 576.073404][T10684] ? __pfx___sys_recvfrom+0x10/0x10 [ 576.073448][T10684] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 576.073499][T10684] __x64_sys_recvfrom+0xde/0x100 [ 576.073534][T10684] do_syscall_64+0xf3/0x230 [ 576.073561][T10684] ? clear_bhb_loop+0x45/0xa0 [ 576.073586][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.073607][T10684] RIP: 0033:0x7f542398ef34 [ 576.073625][T10684] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 576.073643][T10684] RSP: 002b:00007f5424849ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 576.073666][T10684] RAX: ffffffffffffffda RBX: 00007f5424849fc0 RCX: 00007f542398ef34 [ 576.073681][T10684] RDX: 0000000000001000 RSI: 00007f542484a010 RDI: 0000000000000003 [ 576.073695][T10684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.073707][T10684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 576.073720][T10684] R13: 00007f5424849f68 R14: 00007f542484a010 R15: 0000000000000000 [ 576.073753][T10684] [ 576.646385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.786546][ T5887] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 576.992200][ T5887] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 577.028160][ T5887] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 577.140333][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.204792][ T5887] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 577.227803][ T5887] usb 5-1: config 0 has no interface number 0 [ 577.234733][ T5887] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 577.295768][ T5887] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 577.303049][T10696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1316'. [ 577.361320][ T5887] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 577.393893][ T5887] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.407914][ T5887] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 577.443457][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.494604][ T5887] usb 5-1: config 0 descriptor?? [ 577.517102][ T5887] gspca_main: spca561-2.14.0 probing abcd:cdee [ 577.636466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.575061][ T5887] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 578.652938][ T5887] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.676680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.730295][ T5887] usb 5-1: MIDIStreaming interface descriptor not found [ 579.034983][ T5887] usb 5-1: USB disconnect, device number 25 [ 579.546329][ T5938] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 579.666476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.114601][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806bae3800: rx timeout, send abort [ 580.126605][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806bae3800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 580.608623][ T5938] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 580.623317][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.661044][ T5938] usb 3-1: config 0 has no interface number 0 [ 580.695647][ T5938] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 580.706560][ T5938] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 580.719595][ T5938] usb 3-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.736442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.747667][ T5938] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 580.757121][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.765244][ T5938] usb 3-1: Product: syz [ 580.770095][ T5938] usb 3-1: Manufacturer: syz [ 580.774730][ T5938] usb 3-1: SerialNumber: syz [ 580.822319][ T5938] usb 3-1: config 0 descriptor?? [ 580.835312][T10711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 580.942451][T10723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.019088][T10728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1328'. [ 581.082263][ T5938] usb 3-1: USB disconnect, device number 17 [ 581.106679][ T5890] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 581.258125][ T5890] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 581.272607][ T5890] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 581.282111][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.290217][ T5890] usb 4-1: Product: syz [ 581.294391][ T5890] usb 4-1: Manufacturer: syz [ 581.299688][ T5890] usb 4-1: SerialNumber: syz [ 581.307032][ T5889] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 581.456313][ T5889] usb 5-1: device descriptor read/64, error -71 [ 581.696320][ T5889] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 581.716441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.730509][ T5890] usb 4-1: selecting invalid altsetting 1 [ 581.989843][ T5889] usb 5-1: device descriptor read/64, error -71 [ 581.997021][ T5890] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 581.997159][ T5890] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 582.108356][ T5889] usb usb5-port1: attempt power cycle [ 582.311271][ T5887] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 582.456430][ T5887] usb 3-1: device descriptor read/64, error -71 [ 582.486392][ T5889] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 582.520301][ T5889] usb 5-1: device descriptor read/8, error -71 [ 582.745502][ T5887] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 582.769449][ T5889] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 582.786379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.800745][ T5889] usb 5-1: device descriptor read/8, error -71 [ 582.876435][ T5887] usb 3-1: device descriptor read/64, error -71 [ 582.917714][ T5889] usb usb5-port1: unable to enumerate USB device [ 582.998508][ T5887] usb usb3-port1: attempt power cycle [ 583.046379][ T5890] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 583.196300][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 583.203505][ T5890] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 583.211778][ T5890] usb 2-1: config 0 has no interface number 0 [ 583.218247][ T5890] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 583.231261][ T5890] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 583.240712][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 583.249239][ T5890] usb 2-1: Product: syz [ 583.255014][ T5890] usb 2-1: SerialNumber: syz [ 583.264199][ T5890] usb 2-1: config 0 descriptor?? [ 583.275952][ T5890] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 583.357462][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 583.379874][ T5887] usb 3-1: device descriptor read/8, error -71 [ 583.487248][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 583.488095][ T5938] usb 2-1: USB disconnect, device number 17 [ 583.494607][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 583.517952][ T5938] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 583.666442][ T5887] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 583.698467][ T5887] usb 3-1: device descriptor read/8, error -71 [ 583.810905][ T5887] usb usb3-port1: unable to enumerate USB device [ 583.834069][ T5887] usb 4-1: USB disconnect, device number 26 [ 583.906607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.241639][ T5887] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 584.512902][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.526772][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.564893][ T5887] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.641758][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 584.681967][ T5887] usb 4-1: SerialNumber: syz [ 584.886501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.709743][ T5887] usb 4-1: 0:2 : does not exist [ 585.783056][ T5887] usb 4-1: unit 255 not found! [ 585.793284][ T5887] usb 4-1: unit 8 not found! [ 585.946465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.983270][ T5887] usb 4-1: USB disconnect, device number 27 [ 586.956395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.046611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.272675][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 588.311367][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1340'. [ 588.346520][T10765] netlink: 'syz.3.1340': attribute type 21 has an invalid length. [ 588.477449][T10774] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 589.076424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.086428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.206412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.898588][T10808] CUSE: zero length info key specified [ 592.206485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.236458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.250250][T10821] syz_tun: entered allmulticast mode [ 593.787778][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 593.956671][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 593.983770][ T5890] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.006004][ T5890] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.032677][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 594.064548][ T5890] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 594.216378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.509411][ T5890] usb 3-1: Product: syz [ 594.513646][ T5890] usb 3-1: Manufacturer: syz [ 594.612423][ T5890] hub 3-1:4.0: USB hub found [ 594.825432][ T5890] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 595.306403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.227488][T10820] syz_tun: left allmulticast mode [ 596.236981][ T5890] usb 3-1: USB disconnect, device number 22 [ 596.396484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.059636][T10863] FAULT_INJECTION: forcing a failure. [ 597.059636][T10863] name failslab, interval 1, probability 0, space 0, times 0 [ 597.073178][T10863] CPU: 0 UID: 0 PID: 10863 Comm: syz.2.1367 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 597.073208][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 597.073221][T10863] Call Trace: [ 597.073231][T10863] [ 597.073240][T10863] dump_stack_lvl+0x241/0x360 [ 597.073277][T10863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.073307][T10863] ? __pfx__printk+0x10/0x10 [ 597.073330][T10863] ? do_raw_spin_lock+0x151/0x370 [ 597.073367][T10863] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.073401][T10863] should_fail_ex+0x424/0x570 [ 597.073441][T10863] should_failslab+0xac/0x100 [ 597.073466][T10863] __kmalloc_cache_noprof+0x73/0x370 [ 597.073487][T10863] ? serio_queue_event+0x11d/0x2f0 [ 597.073521][T10863] serio_queue_event+0x11d/0x2f0 [ 597.073559][T10863] userio_char_write+0x318/0x560 [ 597.073589][T10863] ? __pfx_userio_char_write+0x10/0x10 [ 597.073614][T10863] ? bpf_lsm_file_permission+0x9/0x10 [ 597.073638][T10863] ? rw_verify_area+0x246/0x630 [ 597.073666][T10863] ? __pfx_userio_char_write+0x10/0x10 [ 597.073694][T10863] vfs_write+0x2bc/0xd10 [ 597.073737][T10863] ? __pfx_vfs_write+0x10/0x10 [ 597.073768][T10863] ? __fget_files+0x2a/0x420 [ 597.073792][T10863] ? __fget_files+0x2a/0x420 [ 597.073819][T10863] ? __fget_files+0x39d/0x420 [ 597.073841][T10863] ? __fget_files+0x2a/0x420 [ 597.073876][T10863] ksys_write+0x19d/0x2d0 [ 597.073909][T10863] ? __pfx_ksys_write+0x10/0x10 [ 597.073945][T10863] ? do_syscall_64+0xb6/0x230 [ 597.073972][T10863] do_syscall_64+0xf3/0x230 [ 597.073994][T10863] ? clear_bhb_loop+0x45/0xa0 [ 597.074020][T10863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.074041][T10863] RIP: 0033:0x7fe837f8d169 [ 597.074062][T10863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.074080][T10863] RSP: 002b:00007fe838e80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.074102][T10863] RAX: ffffffffffffffda RBX: 00007fe8381a5fa0 RCX: 00007fe837f8d169 [ 597.074118][T10863] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 597.074131][T10863] RBP: 00007fe838e80090 R08: 0000000000000000 R09: 0000000000000000 [ 597.074144][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.074157][T10863] R13: 0000000000000000 R14: 00007fe8381a5fa0 R15: 00007ffe8aa37828 [ 597.074198][T10863] [ 597.074208][T10863] serio: Not enough memory to queue event 3 [ 597.476476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.025974][T10867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1369'. [ 598.416755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.814469][T10876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.526452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.836651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.536938][ T5889] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 600.576438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.645518][T10898] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 600.708890][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 600.742423][ T5889] usb 3-1: not running at top speed; connect to a high speed hub [ 600.772707][ T5889] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 600.817566][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.842313][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.876443][ T5889] usb 3-1: Product: syz [ 600.880647][ T5889] usb 3-1: Manufacturer: syz [ 600.921827][ T5889] usb 3-1: SerialNumber: syz [ 601.192059][ T5889] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 601.216106][ T5889] usb 3-1: unit 2 not found! [ 601.239634][ T5889] usb 3-1: unit 5 not found! [ 601.352302][ T5889] usb 3-1: USB disconnect, device number 23 [ 601.604412][T10916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.676391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.556374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.860194][T10932] FAULT_INJECTION: forcing a failure. [ 602.860194][T10932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.873959][T10932] CPU: 1 UID: 0 PID: 10932 Comm: syz.3.1391 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 602.873988][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 602.873998][T10932] Call Trace: [ 602.874004][T10932] [ 602.874011][T10932] dump_stack_lvl+0x241/0x360 [ 602.874037][T10932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.874058][T10932] ? __pfx__printk+0x10/0x10 [ 602.874087][T10932] should_fail_ex+0x424/0x570 [ 602.874114][T10932] _copy_from_user+0x2d/0xb0 [ 602.874135][T10932] core_sys_select+0x542/0xab0 [ 602.874159][T10932] ? __pfx_core_sys_select+0x10/0x10 [ 602.874171][T10932] ? rcu_read_lock_any_held+0xbb/0x160 [ 602.874195][T10932] ? vfs_write+0xb29/0xd10 [ 602.874233][T10932] ? __pfx_set_user_sigmask+0x10/0x10 [ 602.874249][T10932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 602.874265][T10932] ? __fget_files+0x2a/0x420 [ 602.874286][T10932] __se_sys_pselect6+0x356/0x3e0 [ 602.874304][T10932] ? fput+0x9b/0xd0 [ 602.874322][T10932] ? __pfx___se_sys_pselect6+0x10/0x10 [ 602.874343][T10932] ? __x64_sys_pselect6+0x21/0xf0 [ 602.874360][T10932] do_syscall_64+0xf3/0x230 [ 602.874380][T10932] ? clear_bhb_loop+0x45/0xa0 [ 602.874398][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.874412][T10932] RIP: 0033:0x7f7dd598d169 [ 602.874425][T10932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.874438][T10932] RSP: 002b:00007f7dd682d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 602.874454][T10932] RAX: ffffffffffffffda RBX: 00007f7dd5ba6080 RCX: 00007f7dd598d169 [ 602.874465][T10932] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 602.874481][T10932] RBP: 00007f7dd682d090 R08: 0000000000000000 R09: 0000000000000000 [ 602.874491][T10932] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 602.874500][T10932] R13: 0000000000000001 R14: 00007f7dd5ba6080 R15: 00007ffc292421d8 [ 602.874522][T10932] [ 603.566491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.736365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.763805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.252229][T10959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1398'. [ 605.666410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.193713][T10963] netlink: 'syz.1.1400': attribute type 19 has an invalid length. [ 606.300582][T10966] random: crng reseeded on system resumption [ 606.599475][ T5938] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 606.706578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.921858][ T5938] usb 5-1: device descriptor read/64, error -71 [ 607.061959][T10980] 9pnet_fd: Insufficient options for proto=fd [ 607.206276][ T5938] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 607.376553][ T5938] usb 5-1: device descriptor read/64, error -71 [ 607.544726][ T5938] usb usb5-port1: attempt power cycle [ 607.609554][T10996] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 607.716629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.759344][T11000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.876438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.806380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.946452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.060907][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 611.936385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.403102][T11044] overlayfs: missing 'workdir' [ 612.412498][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 612.926532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.086398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.701474][T11037] Set syz1 is full, maxelem 65536 reached [ 615.096405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.096460][T11053] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1423'. [ 615.665362][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1424'. [ 616.176364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.196445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.246415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.560028][ T53] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 618.736499][ T53] usb 2-1: device descriptor read/64, error -71 [ 619.166479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.226448][ T53] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 619.368734][T11096] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1435'. [ 619.397325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.400478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.404921][ T53] usb 2-1: device descriptor read/64, error -71 [ 619.517163][ T53] usb usb2-port1: attempt power cycle [ 619.519169][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 619.867068][ T53] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 619.927227][ T53] usb 2-1: device descriptor read/8, error -71 [ 620.356275][ T53] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 620.366376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.071466][T11118] FAULT_INJECTION: forcing a failure. [ 621.071466][T11118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.084806][T11118] CPU: 0 UID: 0 PID: 11118 Comm: syz.0.1440 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 621.084827][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 621.084837][T11118] Call Trace: [ 621.084843][T11118] [ 621.084849][T11118] dump_stack_lvl+0x241/0x360 [ 621.084876][T11118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.084897][T11118] ? __pfx__printk+0x10/0x10 [ 621.084926][T11118] should_fail_ex+0x424/0x570 [ 621.084953][T11118] _copy_from_user+0x2d/0xb0 [ 621.084974][T11118] copy_msghdr_from_user+0xb3/0x580 [ 621.084997][T11118] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 621.085014][T11118] ? __fget_files+0x2a/0x420 [ 621.085034][T11118] ? __fget_files+0x2a/0x420 [ 621.085057][T11118] __sys_sendmsg+0x20a/0x360 [ 621.085085][T11118] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.085149][T11118] ? do_syscall_64+0xb6/0x230 [ 621.085167][T11118] do_syscall_64+0xf3/0x230 [ 621.085182][T11118] ? clear_bhb_loop+0x45/0xa0 [ 621.085199][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.085214][T11118] RIP: 0033:0x7f7839b8d169 [ 621.085227][T11118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.085240][T11118] RSP: 002b:00007f78379f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.085256][T11118] RAX: ffffffffffffffda RBX: 00007f7839da6080 RCX: 00007f7839b8d169 [ 621.085267][T11118] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 621.085276][T11118] RBP: 00007f78379f6090 R08: 0000000000000000 R09: 0000000000000000 [ 621.085285][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.085294][T11118] R13: 0000000000000000 R14: 00007f7839da6080 R15: 00007fff6feaa758 [ 621.085317][T11118] [ 621.262354][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.276503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.540186][ T53] usb 2-1: device not accepting address 21, error -71 [ 621.555896][ T53] usb usb2-port1: unable to enumerate USB device [ 622.276474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.346420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.506389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.436361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.498285][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.526377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.697688][T11152] xfrm0: entered promiscuous mode [ 626.787476][T11152] xfrm0: entered allmulticast mode [ 627.546482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.586684][T11167] FAULT_INJECTION: forcing a failure. [ 627.586684][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.731166][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.2.1456 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 627.731199][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 627.731214][T11167] Call Trace: [ 627.731222][T11167] [ 627.731231][T11167] dump_stack_lvl+0x241/0x360 [ 627.731269][T11167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.731299][T11167] ? __pfx__printk+0x10/0x10 [ 627.731341][T11167] should_fail_ex+0x424/0x570 [ 627.731381][T11167] _copy_from_user+0x2d/0xb0 [ 627.731411][T11167] __sys_bpf+0x1c5/0x8b0 [ 627.731434][T11167] ? __pfx___sys_bpf+0x10/0x10 [ 627.731469][T11167] ? ksys_write+0x275/0x2d0 [ 627.731513][T11167] __x64_sys_bpf+0x7c/0x90 [ 627.731545][T11167] do_syscall_64+0xf3/0x230 [ 627.731569][T11167] ? clear_bhb_loop+0x45/0xa0 [ 627.731594][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.731615][T11167] RIP: 0033:0x7fe837f8d169 [ 627.731634][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.731653][T11167] RSP: 002b:00007fe838e80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 627.731676][T11167] RAX: ffffffffffffffda RBX: 00007fe8381a5fa0 RCX: 00007fe837f8d169 [ 627.731693][T11167] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 627.731706][T11167] RBP: 00007fe838e80090 R08: 0000000000000000 R09: 0000000000000000 [ 627.731719][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.731732][T11167] R13: 0000000000000001 R14: 00007fe8381a5fa0 R15: 00007ffe8aa37828 [ 627.731764][T11167] [ 628.626456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.236517][ T975] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 629.616386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.299986][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 630.325646][ T975] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 630.344920][ T975] usb 3-1: config 2 has no interface number 0 [ 630.361265][ T975] usb 3-1: config 2 interface 31 has no altsetting 0 [ 630.401931][ T975] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 630.412133][T11196] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1463'. [ 630.421660][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.455106][ T975] usb 3-1: Product: syz [ 630.461384][ T975] usb 3-1: Manufacturer: syz [ 630.482373][ T975] usb 3-1: SerialNumber: syz [ 630.656521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.087198][T11200] FAULT_INJECTION: forcing a failure. [ 631.087198][T11200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.106709][T11200] CPU: 1 UID: 0 PID: 11200 Comm: syz.0.1465 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 631.106742][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 631.106759][T11200] Call Trace: [ 631.106767][T11200] [ 631.106777][T11200] dump_stack_lvl+0x241/0x360 [ 631.106814][T11200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.106842][T11200] ? __pfx__printk+0x10/0x10 [ 631.106884][T11200] should_fail_ex+0x424/0x570 [ 631.106922][T11200] _copy_from_user+0x2d/0xb0 [ 631.106951][T11200] kstrtouint_from_user+0xce/0x1a0 [ 631.106978][T11200] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 631.107006][T11200] ? __lock_acquire+0xad5/0xd80 [ 631.107035][T11200] proc_fail_nth_write+0xac/0x2d0 [ 631.107062][T11200] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 631.107089][T11200] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.107121][T11200] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.107149][T11200] vfs_write+0x2bc/0xd10 [ 631.107184][T11200] ? fdget_pos+0x247/0x310 [ 631.107213][T11200] ? __pfx_vfs_write+0x10/0x10 [ 631.107244][T11200] ? __fget_files+0x2a/0x420 [ 631.107270][T11200] ? __fget_files+0x39d/0x420 [ 631.107292][T11200] ? __fget_files+0x2a/0x420 [ 631.107326][T11200] ksys_write+0x19d/0x2d0 [ 631.107358][T11200] ? __pfx_ksys_write+0x10/0x10 [ 631.107393][T11200] ? do_syscall_64+0xb6/0x230 [ 631.107418][T11200] do_syscall_64+0xf3/0x230 [ 631.107440][T11200] ? clear_bhb_loop+0x45/0xa0 [ 631.107465][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.107486][T11200] RIP: 0033:0x7f7839b8bc1f [ 631.107505][T11200] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 631.107601][T11200] RSP: 002b:00007f783a90d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 631.107623][T11200] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7839b8bc1f [ 631.107639][T11200] RDX: 0000000000000001 RSI: 00007f783a90d0a0 RDI: 0000000000000004 [ 631.107653][T11200] RBP: 00007f783a90d090 R08: 0000000000000000 R09: 0000000000000000 [ 631.107667][T11200] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 631.107679][T11200] R13: 0000000000000000 R14: 00007f7839da5fa0 R15: 00007fff6feaa758 [ 631.107714][T11200] [ 631.338020][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.746379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.836420][ T975] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 631.847698][ T975] usb 3-1: USB disconnect, device number 24 [ 632.806422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.214106][T11231] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.225397][T11231] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.234887][T11231] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.244438][T11231] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.726586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.846450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.816381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.128636][T11248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.235311][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1480'. [ 636.256741][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1480'. [ 636.265810][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1480'. [ 636.297412][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1480'. [ 636.886421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.156398][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.258535][T11261] xt_bpf: check failed: parse error [ 637.916425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.708146][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 638.857200][ T5894] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 638.998012][ T5894] usb 3-1: device descriptor read/64, error -71 [ 639.006425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.237139][ T5894] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 639.419718][T10369] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 639.878918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.976378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.048106][T11311] FAULT_INJECTION: forcing a failure. [ 640.048106][T11311] name failslab, interval 1, probability 0, space 0, times 0 [ 640.056774][ T5894] usb 3-1: device descriptor read/64, error -71 [ 640.065766][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.4.1498 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 640.065803][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 640.065818][T11311] Call Trace: [ 640.065828][T11311] [ 640.065838][T11311] dump_stack_lvl+0x241/0x360 [ 640.065879][T11311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.065910][T11311] ? __pfx__printk+0x10/0x10 [ 640.065945][T11311] ? __pfx___might_resched+0x10/0x10 [ 640.065976][T11311] should_fail_ex+0x424/0x570 [ 640.066018][T11311] should_failslab+0xac/0x100 [ 640.066043][T11311] ? __get_vm_area_node+0x132/0x2d0 [ 640.066066][T11311] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 640.066100][T11311] __get_vm_area_node+0x132/0x2d0 [ 640.066130][T11311] __vmalloc_node_range_noprof+0x349/0x1390 [ 640.066165][T11311] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 640.066190][T11311] ? kstrtoull+0x1d3/0x2f0 [ 640.066216][T11311] ? __pfx_kstrtoull+0x10/0x10 [ 640.066259][T11311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 640.066299][T11311] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 640.066326][T11311] __vmalloc_noprof+0x79/0x90 [ 640.066352][T11311] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 640.066376][T11311] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 640.066398][T11311] ? bpf_prog_alloc+0x28/0x1b0 [ 640.066423][T11311] bpf_prog_alloc+0x3a/0x1b0 [ 640.066447][T11311] bpf_prog_load+0x7f4/0x2250 [ 640.066484][T11311] ? __pfx_bpf_prog_load+0x10/0x10 [ 640.066534][T11311] ? bpf_lsm_bpf+0x9/0x10 [ 640.066560][T11311] __sys_bpf+0x5dd/0x8b0 [ 640.066585][T11311] ? __pfx___sys_bpf+0x10/0x10 [ 640.066621][T11311] ? ksys_write+0x275/0x2d0 [ 640.066667][T11311] __x64_sys_bpf+0x7c/0x90 [ 640.066699][T11311] do_syscall_64+0xf3/0x230 [ 640.066724][T11311] ? clear_bhb_loop+0x45/0xa0 [ 640.066751][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.066773][T11311] RIP: 0033:0x7f542398d169 [ 640.066794][T11311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.066813][T11311] RSP: 002b:00007f542484b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.066838][T11311] RAX: ffffffffffffffda RBX: 00007f5423ba5fa0 RCX: 00007f542398d169 [ 640.066854][T11311] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 640.066869][T11311] RBP: 00007f542484b090 R08: 0000000000000000 R09: 0000000000000000 [ 640.066883][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.066896][T11311] R13: 0000000000000001 R14: 00007f5423ba5fa0 R15: 00007ffc8ce06e38 [ 640.066931][T11311] [ 640.096889][T11311] syz.4.1498: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 640.097133][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.4.1498 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 640.097159][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 640.097172][T11311] Call Trace: [ 640.097180][T11311] [ 640.097188][T11311] dump_stack_lvl+0x241/0x360 [ 640.097223][T11311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.097274][T11311] ? __pfx__printk+0x10/0x10 [ 640.097300][T11311] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 640.097376][T11311] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 640.097404][T11311] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 640.097435][T11311] warn_alloc+0x27c/0x410 [ 640.097467][T11311] ? __pfx_warn_alloc+0x10/0x10 [ 640.097503][T11311] ? __get_vm_area_node+0x280/0x2d0 [ 640.097540][T11311] __vmalloc_node_range_noprof+0x36e/0x1390 [ 640.097617][T11311] ? kstrtoull+0x1d3/0x2f0 [ 640.097654][T11311] ? __pfx_kstrtoull+0x10/0x10 [ 640.097711][T11311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 640.097752][T11311] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 640.097775][T11311] __vmalloc_noprof+0x79/0x90 [ 640.097803][T11311] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 640.097827][T11311] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 640.097850][T11311] ? bpf_prog_alloc+0x28/0x1b0 [ 640.097875][T11311] bpf_prog_alloc+0x3a/0x1b0 [ 640.097901][T11311] bpf_prog_load+0x7f4/0x2250 [ 640.097939][T11311] ? __pfx_bpf_prog_load+0x10/0x10 [ 640.097989][T11311] ? bpf_lsm_bpf+0x9/0x10 [ 640.098019][T11311] __sys_bpf+0x5dd/0x8b0 [ 640.098044][T11311] ? __pfx___sys_bpf+0x10/0x10 [ 640.098080][T11311] ? ksys_write+0x275/0x2d0 [ 640.098131][T11311] __x64_sys_bpf+0x7c/0x90 [ 640.098169][T11311] do_syscall_64+0xf3/0x230 [ 640.098195][T11311] ? clear_bhb_loop+0x45/0xa0 [ 640.098222][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.098297][T11311] RIP: 0033:0x7f542398d169 [ 640.098323][T11311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.098343][T11311] RSP: 002b:00007f542484b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.098367][T11311] RAX: ffffffffffffffda RBX: 00007f5423ba5fa0 RCX: 00007f542398d169 [ 640.098385][T11311] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 640.098401][T11311] RBP: 00007f542484b090 R08: 0000000000000000 R09: 0000000000000000 [ 640.098416][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.098431][T11311] R13: 0000000000000001 R14: 00007f5423ba5fa0 R15: 00007ffc8ce06e38 [ 640.098466][T11311] [ 640.100181][T11311] Mem-Info: [ 640.266875][ T5894] usb usb3-port1: attempt power cycle [ 640.306351][T11311] active_anon:351 inactive_anon:3897 isolated_anon:0 [ 640.306351][T11311] active_file:6825 inactive_file:43882 isolated_file:0 [ 640.306351][T11311] unevictable:768 dirty:103 writeback:0 [ 640.306351][T11311] slab_reclaimable:10258 slab_unreclaimable:102325 [ 640.306351][T11311] mapped:31607 shmem:1438 pagetables:857 [ 640.306351][T11311] sec_pagetables:0 bounce:0 [ 640.306351][T11311] kernel_misc_reclaimable:0 [ 640.306351][T11311] free:1313988 free_pcp:1614 free_cma:0 [ 640.666387][T11311] Node 0 active_anon:1404kB inactive_anon:15588kB active_file:27228kB inactive_file:175528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123428kB dirty:412kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:3428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 640.716359][ T5894] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 640.760786][ T5894] usb 3-1: device descriptor read/8, error -71 [ 640.767674][T11311] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 640.806908][T11311] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.881055][T11311] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 640.908743][T11311] Node 0 DMA32 free:1333336kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:1400kB inactive_anon:15484kB active_file:27136kB inactive_file:175516kB unevictable:1536kB writepending:412kB present:3129332kB managed:2547804kB mlocked:0kB bounce:0kB free_pcp:10756kB local_pcp:10104kB free_cma:0kB [ 640.946726][T11311] lowmem_reserve[]: 0 0 0 0 0 [ 640.951777][T11311] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 641.026713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.091402][T11311] lowmem_reserve[]: 0 0 0 0 0 [ 641.106706][T11311] Node 1 Normal free:3907956kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 641.156619][T11311] lowmem_reserve[]: 0 0 0 0 0 [ 641.161549][T11311] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 641.184654][T11311] Node 0 DMA32: 467*4kB (ME) 554*8kB (UME) 284*16kB (UME) 500*32kB (UME) 392*64kB (UME) 52*128kB (UME) 45*256kB (UME) 24*512kB (UM) 20*1024kB (UME) 5*2048kB (ME) 298*4096kB (UM) = 1333724kB [ 641.203784][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.677991][T11311] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 641.708230][T11311] Node 1 Normal: 233*4kB (UE) 46*8kB (UME) 44*16kB (UME) 205*32kB (UME) 96*64kB (UME) 40*128kB (UME) 16*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3907956kB [ 641.798357][T11311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 641.891028][T11311] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 641.925716][T11311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.034018][T11311] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 642.045716][T11311] 52148 total pagecache pages [ 642.052752][T11311] 0 pages in swap cache [ 642.073866][T11311] Free swap = 124996kB [ 642.078682][T11311] Total swap = 124996kB [ 642.082867][T11311] 2097051 pages RAM [ 642.087405][T11311] 0 pages HighMem/MovableOnly [ 642.093615][T11311] 428441 pages reserved [ 642.099399][T11311] 0 pages cma reserved [ 642.166382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.156420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.483850][T10369] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 644.126381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.021743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.106898][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 645.261602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.994872][T11370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.130495][T11366] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 646.396409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.316444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.466341][T11383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1521'. [ 647.479160][ T5889] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 647.858860][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.874579][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.346416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.389126][ T5889] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 648.700513][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.732524][ T5889] usb 5-1: config 0 descriptor?? [ 649.396404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.434717][ T5889] sony 0003:054C:024B.0006: unexpected long global item [ 649.442903][ T5889] sony 0003:054C:024B.0006: parse failed [ 649.468588][ T5889] sony 0003:054C:024B.0006: probe with driver sony failed with error -22 [ 650.436452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.625516][ T5889] usb 5-1: USB disconnect, device number 33 [ 650.763325][T11417] FAULT_INJECTION: forcing a failure. [ 650.763325][T11417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.818378][T11417] CPU: 1 UID: 0 PID: 11417 Comm: syz.3.1533 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 650.818411][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 650.818423][T11417] Call Trace: [ 650.818431][T11417] [ 650.818439][T11417] dump_stack_lvl+0x241/0x360 [ 650.818475][T11417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.818503][T11417] ? __pfx__printk+0x10/0x10 [ 650.818543][T11417] should_fail_ex+0x424/0x570 [ 650.818580][T11417] _copy_from_user+0x2d/0xb0 [ 650.818611][T11417] userfaultfd_ioctl+0xd35/0x6a80 [ 650.818644][T11417] ? unwind_get_return_address+0x4d/0x90 [ 650.818670][T11417] ? arch_stack_walk+0xff/0x150 [ 650.818707][T11417] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 650.818738][T11417] ? stack_trace_save+0x11a/0x1d0 [ 650.818765][T11417] ? __pfx_stack_trace_save+0x10/0x10 [ 650.818787][T11417] ? stack_depot_save_flags+0x44/0x940 [ 650.818808][T11417] ? kasan_save_track+0x51/0x80 [ 650.818827][T11417] ? kasan_save_track+0x3f/0x80 [ 650.818846][T11417] ? kasan_save_free_info+0x40/0x50 [ 650.818862][T11417] ? __kasan_slab_free+0x59/0x70 [ 650.818882][T11417] ? kfree+0x198/0x430 [ 650.818894][T11417] ? tomoyo_path_number_perm+0x5fd/0x790 [ 650.818913][T11417] ? security_file_ioctl+0xc6/0x2a0 [ 650.818932][T11417] ? __se_sys_ioctl+0x46/0x160 [ 650.818951][T11417] ? do_syscall_64+0xf3/0x230 [ 650.818965][T11417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.819010][T11417] ? do_vfs_ioctl+0xef8/0x2750 [ 650.819036][T11417] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 650.819084][T11417] ? kasan_quarantine_put+0xdc/0x230 [ 650.819104][T11417] ? lockdep_hardirqs_on+0x9d/0x150 [ 650.819134][T11417] ? tomoyo_path_number_perm+0x215/0x790 [ 650.819156][T11417] ? tomoyo_path_number_perm+0x684/0x790 [ 650.819179][T11417] ? tomoyo_path_number_perm+0x215/0x790 [ 650.819198][T11417] ? smack_log+0x132/0x630 [ 650.819212][T11417] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 650.819240][T11417] ? __pfx_smack_log+0x10/0x10 [ 650.819255][T11417] ? smk_access+0x4ab/0x4e0 [ 650.819275][T11417] ? smk_tskacc+0x300/0x370 [ 650.819294][T11417] ? smack_file_ioctl+0x306/0x3b0 [ 650.819313][T11417] ? __pfx_smack_file_ioctl+0x10/0x10 [ 650.819341][T11417] ? ksys_write+0x266/0x2d0 [ 650.819367][T11417] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 650.819391][T11417] __se_sys_ioctl+0xf1/0x160 [ 650.819414][T11417] do_syscall_64+0xf3/0x230 [ 650.819429][T11417] ? clear_bhb_loop+0x45/0xa0 [ 650.819448][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.819462][T11417] RIP: 0033:0x7f7dd598d169 [ 650.819476][T11417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.819488][T11417] RSP: 002b:00007f7dd684e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.819504][T11417] RAX: ffffffffffffffda RBX: 00007f7dd5ba5fa0 RCX: 00007f7dd598d169 [ 650.819515][T11417] RDX: 0000000000000000 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 650.819524][T11417] RBP: 00007f7dd684e090 R08: 0000000000000000 R09: 0000000000000000 [ 650.819533][T11417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.819542][T11417] R13: 0000000000000000 R14: 00007f7dd5ba5fa0 R15: 00007ffc292421d8 [ 650.819564][T11417] [ 651.221404][T11420] xt_bpf: check failed: parse error [ 651.496443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.113005][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1534'. [ 652.486414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.526179][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.536433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.606507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.178541][T11460] input: syz0 as /devices/virtual/input/input17 [ 655.306899][T11465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1551'. [ 655.606398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.616366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.646618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.796389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.846703][T11500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1562'. [ 659.081486][T11505] ext4: Unknown parameter 'trans' [ 659.816380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.806411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.836359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.926375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.886503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.036427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.966382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.082850][T11578] FAULT_INJECTION: forcing a failure. [ 667.082850][T11578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.097717][T11578] CPU: 0 UID: 0 PID: 11578 Comm: syz.1.1588 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 667.097748][T11578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 667.097762][T11578] Call Trace: [ 667.097770][T11578] [ 667.097778][T11578] dump_stack_lvl+0x241/0x360 [ 667.097814][T11578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.097838][T11578] ? __pfx__printk+0x10/0x10 [ 667.097870][T11578] should_fail_ex+0x424/0x570 [ 667.097901][T11578] strncpy_from_user+0x36/0x280 [ 667.097929][T11578] getname_flags+0xf0/0x530 [ 667.097952][T11578] __x64_sys_mknodat+0x96/0xc0 [ 667.097977][T11578] do_syscall_64+0xf3/0x230 [ 667.097995][T11578] ? clear_bhb_loop+0x45/0xa0 [ 667.098015][T11578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.098031][T11578] RIP: 0033:0x7fe5b018d169 [ 667.098047][T11578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.098061][T11578] RSP: 002b:00007fe5b1058038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 667.098079][T11578] RAX: ffffffffffffffda RBX: 00007fe5b03a6080 RCX: 00007fe5b018d169 [ 667.098092][T11578] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 667.098105][T11578] RBP: 00007fe5b1058090 R08: 0000000000000000 R09: 0000000000000000 [ 667.098119][T11578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.098129][T11578] R13: 0000000000000000 R14: 00007fe5b03a6080 R15: 00007ffc220679e8 [ 667.098154][T11578] [ 667.116464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.076627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.246656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.186401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.247152][T11602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1574'. [ 671.176380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.216603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.336363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.276396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.427620][T11651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.448375][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1612'. [ 674.566686][T11650] xt_bpf: check failed: parse error [ 674.918047][T11652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.336364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.240292][T11662] xt_bpf: check failed: parse error [ 676.476427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.516440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.972523][T11674] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.516388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.546366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.372401][T10369] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 680.556400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.690442][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 681.112909][T11707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.335174][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1627'. [ 681.576333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.676472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.742568][T11727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.636468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.686426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.757199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.037461][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.796450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.297085][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1643'. [ 687.692704][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.926432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.936381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.966396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.966385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.096374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.086383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.086399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.106420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.166402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.296688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.305761][T11863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1672'. [ 698.406421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.366398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.396498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.456442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.426372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.396403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.446871][T11903] xt_bpf: check failed: parse error [ 703.574285][T11909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1685'. [ 704.456376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.566755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.546354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.556491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.616371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.666346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.696385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.756357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.816750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.896394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.846911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.986360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.651496][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1719'. [ 717.056585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.006388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.865683][T12050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.996442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.086358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.106343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.126456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.776720][T12082] netlink: 'syz.2.1733': attribute type 2 has an invalid length. [ 723.226421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.296379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.396331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.316372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.396347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.003499][T12132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.416399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.426438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.303872][T12148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.305577][T12148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1755'. [ 730.596384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.576361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.526399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.656352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.686393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.737020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.686378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.826735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.756380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.886599][T12222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.936404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.042997][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'. [ 740.896399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.956334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.873419][T12245] loop2: detected capacity change from 0 to 7 [ 742.956814][T12245] Dev loop2: unable to read RDB block 7 [ 743.018888][T12245] loop2: AHDI p1 p2 [ 743.026019][T12245] loop2: partition table partially beyond EOD, [ 743.026410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.145730][T12245] truncated [ 743.217751][T12245] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 744.036396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.056344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.194553][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ecc4400: rx timeout, send abort [ 745.206537][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ecc4400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 746.076337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.354434][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.409353][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'. [ 747.186354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.156374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.226818][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.296342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.196480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.256332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.506519][ T5894] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 752.158423][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 752.174527][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.187185][ T5894] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 752.232365][ T5894] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 752.266394][ T5894] usb 4-1: Manufacturer: syz [ 752.288908][ T5894] usb 4-1: config 0 descriptor?? [ 752.322835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.356342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.996747][ T978] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 754.013360][ T5894] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 754.041075][ T5894] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 754.070692][ T5894] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 754.139224][ T5894] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 754.153496][ T5894] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 754.169182][ T5894] cougar 0003:060B:700A.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 754.467036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.509060][ T5938] usb 4-1: USB disconnect, device number 28 [ 754.910665][ T978] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 754.927132][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.951330][ T978] usb 3-1: config 0 descriptor?? [ 755.306359][ T978] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 755.331392][ T978] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 755.355314][ T978] [drm:udl_init] *ERROR* Selecting channel failed [ 755.401808][ T978] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 755.486396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.643830][ T978] [drm] Initialized udl on minor 2 [ 755.652494][ T978] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 755.665026][ T978] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 755.676025][ T5894] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 755.864124][ T978] usb 3-1: USB disconnect, device number 29 [ 755.948361][ T5894] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 756.556321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.556856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.576722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.486242][T12411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1822'. [ 759.666392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.999686][T12416] dvmrp0: entered allmulticast mode [ 760.706319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.024542][T12422] dvmrp0: left allmulticast mode [ 761.592115][ T30] audit: type=1326 audit(1743685710.592:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 761.613682][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.622809][ T30] audit: type=1326 audit(1743685710.622:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 761.705924][ T30] audit: type=1326 audit(1743685710.622:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 761.736570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.792994][ T30] audit: type=1326 audit(1743685710.622:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 761.814515][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.919702][ T30] audit: type=1326 audit(1743685710.622:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 761.974668][ T30] audit: type=1326 audit(1743685710.652:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 761.996247][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.025743][ T30] audit: type=1326 audit(1743685710.652:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 762.047375][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.082444][ T30] audit: type=1326 audit(1743685710.652:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 762.109631][ T30] audit: type=1326 audit(1743685710.652:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 762.131155][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.157359][ T30] audit: type=1326 audit(1743685710.652:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12428 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542398d169 code=0x7ffc0000 [ 762.412709][ T5894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 762.586641][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 762.613081][ T5894] usb 4-1: config 0 has an invalid interface number: 228 but max is 0 [ 762.624312][ T5894] usb 4-1: config 0 has no interface number 0 [ 762.662033][ T5894] usb 4-1: config 0 interface 228 has no altsetting 0 [ 762.726335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.740806][ T5894] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 762.777798][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.811892][ T5894] usb 4-1: Product: syz [ 762.936240][ T5894] usb 4-1: Manufacturer: syz [ 763.382640][ T5894] usb 4-1: SerialNumber: syz [ 763.418054][ T5894] usb 4-1: config 0 descriptor?? [ 763.452024][ T5894] go7007 4-1:0.228: probe with driver go7007 failed with error -12 [ 763.712463][ T975] kernel write not supported for file /audio1 (pid: 975 comm: kworker/1:2) [ 763.746334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.901464][ T978] usb 4-1: USB disconnect, device number 29 [ 764.846356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.926326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.936342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.896293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.256171][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.946313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.986310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.036358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.036361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.136364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.216357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.266376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.262835][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'. [ 776.286587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.316383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.436590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.356368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.486315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.426310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.556384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.234734][T12653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.254558][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1898'. [ 783.516851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.606319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.586336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.706316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.636634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.792830][T12698] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1912'. [ 788.806448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.022090][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 789.025205][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1914'. [ 789.237714][T12703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.726370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.876437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.946345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.846347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.896311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.996340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.612189][T12772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.624368][T12772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1934'. [ 796.106323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.372374][T12778] FAULT_INJECTION: forcing a failure. [ 796.372374][T12778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.386200][T12778] CPU: 0 UID: 0 PID: 12778 Comm: syz.2.1935 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 796.386229][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 796.386242][T12778] Call Trace: [ 796.386249][T12778] [ 796.386257][T12778] dump_stack_lvl+0x241/0x360 [ 796.386297][T12778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.386327][T12778] ? __pfx__printk+0x10/0x10 [ 796.386368][T12778] should_fail_ex+0x424/0x570 [ 796.386407][T12778] _copy_to_user+0x31/0xb0 [ 796.386439][T12778] simple_read_from_buffer+0xc4/0x170 [ 796.386467][T12778] proc_fail_nth_read+0x1ef/0x260 [ 796.386498][T12778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 796.386529][T12778] ? rw_verify_area+0x246/0x630 [ 796.386556][T12778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 796.386585][T12778] vfs_read+0x21f/0xb90 [ 796.386619][T12778] ? __pfx___mutex_lock+0x10/0x10 [ 796.386643][T12778] ? __pfx_vfs_read+0x10/0x10 [ 796.386675][T12778] ? __fget_files+0x2a/0x420 [ 796.386702][T12778] ? __fget_files+0x39d/0x420 [ 796.386724][T12778] ? __fget_files+0x2a/0x420 [ 796.386759][T12778] ksys_read+0x19d/0x2d0 [ 796.386798][T12778] ? __pfx_ksys_read+0x10/0x10 [ 796.386834][T12778] ? do_syscall_64+0xb6/0x230 [ 796.386859][T12778] do_syscall_64+0xf3/0x230 [ 796.386881][T12778] ? clear_bhb_loop+0x45/0xa0 [ 796.386906][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.386927][T12778] RIP: 0033:0x7fe837f8bb7c [ 796.386948][T12778] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 796.386967][T12778] RSP: 002b:00007fe838e5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 796.386989][T12778] RAX: ffffffffffffffda RBX: 00007fe8381a6080 RCX: 00007fe837f8bb7c [ 796.387006][T12778] RDX: 000000000000000f RSI: 00007fe838e5f0a0 RDI: 000000000000000a [ 796.387019][T12778] RBP: 00007fe838e5f090 R08: 0000000000000000 R09: 0000000000000000 [ 796.387033][T12778] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 796.387045][T12778] R13: 0000000000000000 R14: 00007fe8381a6080 R15: 00007ffe8aa37828 [ 796.387079][T12778] [ 796.977257][T12788] netlink: 'syz.1.1938': attribute type 8 has an invalid length. [ 797.006622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.076303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.106341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.226420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.088215][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.102611][T12831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1951'. [ 801.206352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.379196][T12836] Invalid option length (1047681) for dns_resolver key [ 801.591130][T12836] loop2: detected capacity change from 0 to 7 [ 801.601024][T12836] Dev loop2: unable to read RDB block 7 [ 802.296346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.392276][T12836] loop2: unable to read partition table [ 802.399877][T12836] loop2: partition table beyond EOD, truncated [ 802.416224][T12836] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 802.501808][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 802.510966][T12844] vlan2: left allmulticast mode [ 802.515859][T12844] batadv0: left allmulticast mode [ 802.537259][T12844] vlan2: left promiscuous mode [ 802.542103][T12844] batadv0: left promiscuous mode [ 802.566694][T12844] bridge0: port 3(vlan2) entered disabled state [ 802.596519][T12844] bridge_slave_1: left allmulticast mode [ 802.602232][T12844] bridge_slave_1: left promiscuous mode [ 802.646654][T12844] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.746465][T12844] bridge_slave_0: left allmulticast mode [ 802.776509][T12844] bridge_slave_0: left promiscuous mode [ 802.827760][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.396321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.356350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.346311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.366669][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 806.446495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.416313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.486208][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 807.498777][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 807.689575][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.707356][ T10] usb 3-1: config 0 descriptor?? [ 808.506347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.148534][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.362725][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 809.526703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.629131][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 809.648388][ T10] usb 3-1: USB disconnect, device number 30 [ 809.860226][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1973'. [ 810.071928][ T5894] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 810.526249][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 810.526650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.546515][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 810.563118][ T5894] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 810.576267][ T5894] usb 4-1: config 0 has no interface number 0 [ 810.613846][ T5894] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 810.636891][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.654642][ T5894] usb 4-1: Product: syz [ 810.664721][ T5894] usb 4-1: Manufacturer: syz [ 810.676446][ T5894] usb 4-1: SerialNumber: syz [ 810.686526][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 810.705198][ T5894] usb 4-1: config 0 descriptor?? [ 810.718203][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.728987][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 810.748258][ T5894] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 810.757504][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 810.784989][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 810.806470][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.833226][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 810.854999][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 810.880652][ T10] usb 3-1: Manufacturer: syz [ 810.914339][ T10] usb 3-1: config 0 descriptor?? [ 810.959453][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.989842][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.045869][ T5894] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 811.368912][ T5894] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 811.421316][T12918] FAULT_INJECTION: forcing a failure. [ 811.421316][T12918] name failslab, interval 1, probability 0, space 0, times 0 [ 811.440222][T12918] CPU: 1 UID: 0 PID: 12918 Comm: syz.0.1979 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 811.440253][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 811.440267][T12918] Call Trace: [ 811.440275][T12918] [ 811.440284][T12918] dump_stack_lvl+0x241/0x360 [ 811.440321][T12918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.440350][T12918] ? __pfx__printk+0x10/0x10 [ 811.440382][T12918] ? __pfx___might_resched+0x10/0x10 [ 811.440411][T12918] should_fail_ex+0x424/0x570 [ 811.440450][T12918] should_failslab+0xac/0x100 [ 811.440476][T12918] __kmalloc_noprof+0xdf/0x4d0 [ 811.440497][T12918] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 811.440516][T12918] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 811.440542][T12918] tomoyo_realpath_from_path+0xcf/0x5e0 [ 811.440577][T12918] tomoyo_path_number_perm+0x245/0x790 [ 811.440610][T12918] ? tomoyo_path_number_perm+0x215/0x790 [ 811.440641][T12918] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 811.440677][T12918] ? ksys_write+0x24e/0x2d0 [ 811.440714][T12918] ? __lock_acquire+0xad5/0xd80 [ 811.440756][T12918] ? __fget_files+0x2a/0x420 [ 811.440788][T12918] ? __fget_files+0x2a/0x420 [ 811.440815][T12918] ? __fget_files+0x2a/0x420 [ 811.440845][T12918] security_file_ioctl+0xc6/0x2a0 [ 811.440877][T12918] __se_sys_ioctl+0x46/0x160 [ 811.440911][T12918] do_syscall_64+0xf3/0x230 [ 811.440933][T12918] ? clear_bhb_loop+0x45/0xa0 [ 811.440958][T12918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.440979][T12918] RIP: 0033:0x7f7839b8d169 [ 811.440998][T12918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.441017][T12918] RSP: 002b:00007f783a90d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.441040][T12918] RAX: ffffffffffffffda RBX: 00007f7839da5fa0 RCX: 00007f7839b8d169 [ 811.441056][T12918] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 811.441069][T12918] RBP: 00007f783a90d090 R08: 0000000000000000 R09: 0000000000000000 [ 811.441082][T12918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.441094][T12918] R13: 0000000000000000 R14: 00007f7839da5fa0 R15: 00007fff6feaa758 [ 811.441127][T12918] [ 811.441232][T12918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 811.577959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.186553][ T5894] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 812.277489][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 812.285408][ T5890] usb 4-1: USB disconnect, device number 30 [ 812.321412][ T5890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 812.336599][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 812.345025][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.365194][ T5890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 812.383096][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.399664][ T5890] quatech2 4-1:0.51: device disconnected [ 812.405790][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 812.447242][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.459875][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 812.469225][ T5894] usb 5-1: SerialNumber: syz [ 812.490335][ T5894] cdc_acm 5-1:1.0: skipping garbage [ 812.606454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.776625][ T10] rc_core: IR keymap rc-hauppauge not found [ 812.782602][ T10] Registered IR keymap rc-empty [ 812.788627][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 812.826431][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 812.867650][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 812.890291][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 813.666361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.908443][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 813.940606][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 813.966376][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 813.986326][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 814.006756][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 814.028782][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 814.056457][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 814.086252][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 814.107192][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 814.136481][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 814.163413][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 814.192857][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 814.231918][ T10] usb 3-1: USB disconnect, device number 31 [ 814.696369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.275089][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 815.726394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.796779][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 815.808366][ T10] usb 3-1: too many configurations: 80, using maximum allowed: 8 [ 815.818405][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 815.836660][ T10] usb 3-1: can't read configurations, error -61 [ 815.891358][ T5894] usb 5-1: USB disconnect, device number 34 [ 816.701284][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 816.766364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.876321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.787158][T12973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.946333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.137942][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 819.775785][ T30] audit: type=1326 audit(1743685767.882:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12967 comm="syz.2.1994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe837f8d169 code=0x0 [ 819.986318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.956275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.056706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.036313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.106392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.122024][T13023] tmpfs: Unknown parameter 'mpo ' [ 825.086372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.286482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.356422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.536397][ T5952] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 828.196807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.251020][ T5952] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 828.380167][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.520464][ T5952] usb 5-1: Product: syz [ 828.524697][ T5952] usb 5-1: Manufacturer: syz [ 828.560874][ T5952] usb 5-1: SerialNumber: syz [ 828.614912][ T5952] usb 5-1: config 0 descriptor?? [ 828.873407][ T5952] usb 5-1: Firmware version (0.0) predates our first public release. [ 828.892918][ T5952] usb 5-1: Please update to version 0.2 or newer [ 828.926215][ T5894] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 829.062554][ T5952] usb 5-1: USB disconnect, device number 35 [ 829.153374][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 829.165454][ T5894] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 829.187634][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.225725][ T5894] usb 3-1: config 0 descriptor?? [ 829.232390][T13069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.376343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.135091][ T5894] arvo 0003:1E7D:30D4.0008: item fetching failed at offset 3/5 [ 830.151351][ T5894] arvo 0003:1E7D:30D4.0008: parse failed [ 830.164253][ T5894] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -22 [ 830.255285][T13069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.263946][T13069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.286346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.366398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.705166][ T975] usb 3-1: USB disconnect, device number 34 [ 832.386321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.067670][T13127] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 833.079744][T13127] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 833.406485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.486353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.989552][T13143] CIFS: iocharset name too long [ 835.546369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.741902][ T5894] hid (null): unknown global tag 0xe [ 835.761411][ T5894] hid-generic 0009:0080:0000.0009: unknown main item tag 0x0 [ 835.792749][ T5894] hid-generic 0009:0080:0000.0009: unknown main item tag 0x0 [ 835.802862][ T5894] hid-generic 0009:0080:0000.0009: unknown global tag 0xe [ 835.821131][ T5894] hid-generic 0009:0080:0000.0009: item 0 2 1 14 parsing failed [ 835.841718][ T5894] hid-generic 0009:0080:0000.0009: probe with driver hid-generic failed with error -22 [ 836.696470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.581744][T13184] tipc: Started in network mode [ 837.586889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.595332][T13184] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 837.607650][T13184] tipc: Enabled bearer , priority 0 [ 838.596390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.608454][T12605] tipc: Node number set to 11578026 [ 839.696292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.067022][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2063'. [ 840.766311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.716322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.518086][T13248] xt_bpf: check failed: parse error [ 842.806314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.916384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.886329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.986341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.036380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.151502][T13293] xt_bpf: check failed: parse error [ 848.081143][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 848.104025][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 848.115617][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.125614][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.137886][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.146317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.856288][ T5894] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 848.996526][ T5894] usb 4-1: device descriptor read/64, error -71 [ 849.050423][T13303] chnl_net:caif_netlink_parms(): no params data found [ 849.066413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.266268][ T5894] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 849.402859][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.420126][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.427896][ T5894] usb 4-1: device descriptor read/64, error -71 [ 849.453132][T13303] bridge_slave_0: entered allmulticast mode [ 849.460792][T13303] bridge_slave_0: entered promiscuous mode [ 849.471248][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.479516][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.487323][T13303] bridge_slave_1: entered allmulticast mode [ 849.498778][T13303] bridge_slave_1: entered promiscuous mode [ 849.556941][ T5894] usb usb4-port1: attempt power cycle [ 849.758663][T13303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.046524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.197911][T10369] Bluetooth: hci5: command tx timeout [ 850.594223][T13303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.701956][T13303] team0: Port device team_slave_0 added [ 850.713230][T13303] team0: Port device team_slave_1 added [ 850.733085][T13333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2093'. [ 850.820844][T13303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.836491][ T5894] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 850.846734][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.880948][T13335] xt_bpf: check failed: parse error [ 850.907352][ T5894] usb 4-1: device descriptor read/8, error -71 [ 850.924155][T13303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.985187][T13303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.994837][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.023732][T13303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.176314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.246366][ T5894] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 851.267045][ T5894] usb 4-1: device descriptor read/8, error -71 [ 851.274055][T13303] hsr_slave_0: entered promiscuous mode [ 851.282165][T13303] hsr_slave_1: entered promiscuous mode [ 851.289262][T13303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.298028][T13303] Cannot create hsr debugfs directory [ 851.376724][ T5894] usb usb4-port1: unable to enumerate USB device [ 852.059312][T13345] syz.3.2096: attempt to access beyond end of device [ 852.059312][T13345] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 852.074711][T13345] syz.3.2096: attempt to access beyond end of device [ 852.074711][T13345] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 852.088334][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 852.100019][T13345] syz.3.2096: attempt to access beyond end of device [ 852.100019][T13345] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 852.113644][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 852.123462][T13345] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 852.131284][T13345] UDF-fs: Scanning with blocksize 512 failed [ 852.151017][T13345] syz.3.2096: attempt to access beyond end of device [ 852.151017][T13345] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 852.166802][T13345] syz.3.2096: attempt to access beyond end of device [ 852.166802][T13345] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 852.180362][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 852.191210][T13345] syz.3.2096: attempt to access beyond end of device [ 852.191210][T13345] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 852.204956][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 852.214677][T13345] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 852.222539][T13345] UDF-fs: Scanning with blocksize 1024 failed [ 852.232650][T13345] syz.3.2096: attempt to access beyond end of device [ 852.232650][T13345] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 852.247043][T13345] syz.3.2096: attempt to access beyond end of device [ 852.247043][T13345] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 852.260387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.271678][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 852.283195][T13345] syz.3.2096: attempt to access beyond end of device [ 852.283195][T13345] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 852.296884][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 852.306646][T13345] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 852.314417][T13345] UDF-fs: Scanning with blocksize 2048 failed [ 852.323526][T13345] syz.3.2096: attempt to access beyond end of device [ 852.323526][T13345] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 852.338099][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 852.348947][T13345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 852.358864][T13345] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 852.367314][T13345] UDF-fs: Scanning with blocksize 4096 failed [ 852.373521][T13345] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 852.578641][T10369] Bluetooth: hci5: command tx timeout [ 853.176304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.203186][T13303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 853.253786][T13303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 853.308649][T13303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 853.331726][T13303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 853.595321][T13303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.658056][T13303] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.702220][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.709421][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.761457][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.768645][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.231818][T13303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.256326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.341242][T13353] overlayfs: missing 'lowerdir' [ 854.596306][T10369] Bluetooth: hci5: command tx timeout [ 855.296403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.625818][T13303] veth0_vlan: entered promiscuous mode [ 855.834278][T13303] veth1_vlan: entered promiscuous mode [ 856.326429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.450502][T13303] veth0_macvtap: entered promiscuous mode [ 856.766952][T10369] Bluetooth: hci5: command tx timeout [ 856.999773][T13303] veth1_macvtap: entered promiscuous mode [ 857.185937][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.207247][T13382] xt_bpf: check failed: parse error [ 857.268446][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.302208][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.342452][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.380181][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.394093][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.456322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.569066][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.580495][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.591387][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.608218][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.653082][T13303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.104693][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.169607][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.227307][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.251822][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.265030][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.286552][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.303726][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.315236][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.331721][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.343417][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.356393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.365195][T13303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.409513][T13303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.421041][T13303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.432695][T13303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.445333][T13303] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.547233][ T975] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 859.110550][ T975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.291983][ T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 859.305294][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.326881][ T975] usb 3-1: Product: syz [ 859.331323][ T975] usb 3-1: Manufacturer: syz [ 859.337043][ T975] usb 3-1: SerialNumber: syz [ 859.387879][ T975] cdc_subset 3-1:1.0: probe with driver cdc_subset failed with error -22 [ 859.418195][ T975] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 859.441536][ T975] cdc_ncm 3-1:1.0: bind() failure [ 859.461549][ T9899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.466404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.487686][ T9899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.500064][T13399] overlayfs: missing 'lowerdir' [ 859.541894][ T975] cdc_subset 3-1:1.1: probe with driver cdc_subset failed with error -22 [ 859.567494][ T975] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 859.598354][ T9899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.609779][ T975] cdc_ncm 3-1:1.1: bind() failure [ 859.620789][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.632263][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.632533][ T9899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.789793][ T975] usb 3-1: USB disconnect, device number 35 [ 860.456304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.520604][T13422] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2113'. [ 860.697917][T13425] xt_bpf: check failed: parse error [ 861.023224][T13432] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 861.036547][T13428] overlayfs: missing 'lowerdir' [ 861.049567][T13432] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 861.486285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.126040][T13430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 862.150364][T13430] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 862.172040][T13430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 862.184900][T13430] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 862.245974][T13430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.300930][T13430] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 862.536374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.433083][T13448] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2123'. [ 863.452750][T13450] FAULT_INJECTION: forcing a failure. [ 863.452750][T13450] name failslab, interval 1, probability 0, space 0, times 0 [ 863.467393][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2123'. [ 863.479519][T13450] CPU: 0 UID: 0 PID: 13450 Comm: syz.3.2124 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 863.479541][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 863.479551][T13450] Call Trace: [ 863.479557][T13450] [ 863.479563][T13450] dump_stack_lvl+0x241/0x360 [ 863.479590][T13450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.479610][T13450] ? __pfx__printk+0x10/0x10 [ 863.479634][T13450] ? ref_tracker_alloc+0x316/0x4c0 [ 863.479653][T13450] should_fail_ex+0x424/0x570 [ 863.479680][T13450] should_failslab+0xac/0x100 [ 863.479697][T13450] kmem_cache_alloc_noprof+0x78/0x390 [ 863.479712][T13450] ? skb_clone+0x20c/0x390 [ 863.479730][T13450] skb_clone+0x20c/0x390 [ 863.479748][T13450] __netlink_deliver_tap+0x3c4/0x7f0 [ 863.479777][T13450] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.479794][T13450] netlink_deliver_tap+0x19d/0x1b0 [ 863.479814][T13450] netlink_sendskb+0x68/0x140 [ 863.479831][T13450] netlink_unicast+0x39f/0x9a0 [ 863.479845][T13450] ? __asan_memcpy+0x40/0x70 [ 863.479870][T13450] ? __pfx_netlink_unicast+0x10/0x10 [ 863.479894][T13450] netlink_rcv_skb+0x296/0x480 [ 863.479913][T13450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.479934][T13450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.479966][T13450] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.479987][T13450] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.480007][T13450] netlink_unicast+0x7f8/0x9a0 [ 863.480030][T13450] ? __pfx_netlink_unicast+0x10/0x10 [ 863.480048][T13450] ? skb_put+0x114/0x1f0 [ 863.480080][T13450] netlink_sendmsg+0x8c3/0xcd0 [ 863.480108][T13450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.480137][T13450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.480154][T13450] __sock_sendmsg+0x221/0x270 [ 863.480175][T13450] ____sys_sendmsg+0x523/0x860 [ 863.480206][T13450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.480227][T13450] ? __fget_files+0x2a/0x420 [ 863.480247][T13450] ? __fget_files+0x2a/0x420 [ 863.480271][T13450] __sys_sendmsg+0x271/0x360 [ 863.480298][T13450] ? __pfx___sys_sendmsg+0x10/0x10 [ 863.480362][T13450] ? do_syscall_64+0xb6/0x230 [ 863.480379][T13450] do_syscall_64+0xf3/0x230 [ 863.480394][T13450] ? clear_bhb_loop+0x45/0xa0 [ 863.480412][T13450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.480426][T13450] RIP: 0033:0x7f7dd598d169 [ 863.480440][T13450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.480453][T13450] RSP: 002b:00007f7dd684e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.480473][T13450] RAX: ffffffffffffffda RBX: 00007f7dd5ba5fa0 RCX: 00007f7dd598d169 [ 863.480484][T13450] RDX: 0000000020008800 RSI: 0000200000000080 RDI: 0000000000000003 [ 863.480494][T13450] RBP: 00007f7dd684e090 R08: 0000000000000000 R09: 0000000000000000 [ 863.480504][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.480512][T13450] R13: 0000000000000000 R14: 00007f7dd5ba5fa0 R15: 00007ffc292421d8 [ 863.480535][T13450] [ 863.686392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.724794][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.971793][T13430] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 863.979660][T13430] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 864.335746][T13459] xt_bpf: check failed: parse error [ 864.411845][T13462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.656278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.716400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.185518][T13472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.846320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.746298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.553588][T13488] FAULT_INJECTION: forcing a failure. [ 868.553588][T13488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.585518][T13488] CPU: 0 UID: 0 PID: 13488 Comm: syz.5.2136 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 868.585550][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 868.585563][T13488] Call Trace: [ 868.585572][T13488] [ 868.585580][T13488] dump_stack_lvl+0x241/0x360 [ 868.585617][T13488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 868.585645][T13488] ? __pfx__printk+0x10/0x10 [ 868.585686][T13488] should_fail_ex+0x424/0x570 [ 868.585724][T13488] _copy_to_user+0x31/0xb0 [ 868.585755][T13488] bpf_verifier_vlog+0x3c9/0x900 [ 868.585797][T13488] __btf_verifier_log+0xd7/0x120 [ 868.585829][T13488] ? bpf_verifier_vlog+0x3d6/0x900 [ 868.585858][T13488] ? bpf_verifier_vlog+0x3d6/0x900 [ 868.585885][T13488] ? __pfx___btf_verifier_log+0x10/0x10 [ 868.585932][T13488] btf_verifier_log_member+0x5cc/0x7b0 [ 868.585971][T13488] ? btf_struct_check_meta+0x90e/0xcf0 [ 868.585989][T13488] ? btf_struct_check_meta+0x6d9/0xcf0 [ 868.586011][T13488] ? __pfx_btf_verifier_log_member+0x10/0x10 [ 868.586064][T13488] btf_struct_check_meta+0x92f/0xcf0 [ 868.586096][T13488] btf_parse_type_sec+0x4d9/0x2660 [ 868.586130][T13488] ? bpf_verifier_vlog+0x3d6/0x900 [ 868.586166][T13488] ? btf_check_sec_info+0x37d/0x4f0 [ 868.586195][T13488] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 868.586225][T13488] ? btf_parse_str_sec+0x21f/0x2b0 [ 868.586253][T13488] btf_new_fd+0x44c/0xcf0 [ 868.586298][T13488] ? __pfx_btf_new_fd+0x10/0x10 [ 868.586330][T13488] ? bpf_btf_load+0xcf/0x1a0 [ 868.586353][T13488] __sys_bpf+0x72f/0x8b0 [ 868.586375][T13488] ? __pfx___sys_bpf+0x10/0x10 [ 868.586409][T13488] ? ksys_write+0x275/0x2d0 [ 868.586452][T13488] __x64_sys_bpf+0x7c/0x90 [ 868.586482][T13488] do_syscall_64+0xf3/0x230 [ 868.586505][T13488] ? clear_bhb_loop+0x45/0xa0 [ 868.586530][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.586550][T13488] RIP: 0033:0x7f2df358d169 [ 868.586569][T13488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.586588][T13488] RSP: 002b:00007f2df449a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 868.586611][T13488] RAX: ffffffffffffffda RBX: 00007f2df37a5fa0 RCX: 00007f2df358d169 [ 868.586626][T13488] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 868.586640][T13488] RBP: 00007f2df449a090 R08: 0000000000000000 R09: 0000000000000000 [ 868.586653][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 868.586667][T13488] R13: 0000000000000001 R14: 00007f2df37a5fa0 R15: 00007fff6327e948 [ 868.586699][T13488] [ 868.896296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.373064][T13495] xt_TCPMSS: Only works on TCP SYN packets [ 869.781965][T13505] xt_bpf: check failed: parse error [ 869.816428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.863153][T13506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.133122][T13512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2142'. [ 870.326804][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.846387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.876430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.089289][ T5890] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 872.237291][T13537] FAULT_INJECTION: forcing a failure. [ 872.237291][T13537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.250529][T13537] CPU: 0 UID: 0 PID: 13537 Comm: syz.3.2150 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 872.250558][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 872.250571][T13537] Call Trace: [ 872.250581][T13537] [ 872.250590][T13537] dump_stack_lvl+0x241/0x360 [ 872.250628][T13537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.250659][T13537] ? __pfx__printk+0x10/0x10 [ 872.250702][T13537] should_fail_ex+0x424/0x570 [ 872.250741][T13537] _copy_from_user+0x2d/0xb0 [ 872.250772][T13537] kstrtouint_from_user+0xce/0x1a0 [ 872.250818][T13537] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 872.250845][T13537] ? ovs_nla_copy_actions+0x140/0x3e0 [ 872.250873][T13537] ? preempt_schedule_common+0x84/0xd0 [ 872.250907][T13537] ? preempt_schedule+0xe4/0xf0 [ 872.250937][T13537] ? __pfx_preempt_schedule+0x10/0x10 [ 872.250973][T13537] proc_fail_nth_write+0xac/0x2d0 [ 872.251006][T13537] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 872.251031][T13537] ? preempt_schedule_thunk+0x16/0x30 [ 872.251054][T13537] ? sb_start_write+0x107/0x1c0 [ 872.251094][T13537] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 872.251124][T13537] vfs_write+0x2bc/0xd10 [ 872.251160][T13537] ? fdget_pos+0x247/0x310 [ 872.251190][T13537] ? __pfx_vfs_write+0x10/0x10 [ 872.251223][T13537] ? __fget_files+0x2a/0x420 [ 872.251249][T13537] ? __fget_files+0x39d/0x420 [ 872.251272][T13537] ? __fget_files+0x2a/0x420 [ 872.251307][T13537] ksys_write+0x19d/0x2d0 [ 872.251340][T13537] ? __pfx_ksys_write+0x10/0x10 [ 872.251375][T13537] ? trace_irq_enable+0x2c/0x120 [ 872.251411][T13537] do_syscall_64+0xf3/0x230 [ 872.251433][T13537] ? clear_bhb_loop+0x45/0xa0 [ 872.251460][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.251481][T13537] RIP: 0033:0x7f7dd598bc1f [ 872.251500][T13537] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 872.251519][T13537] RSP: 002b:00007f7dd680c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 872.251541][T13537] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7dd598bc1f [ 872.251556][T13537] RDX: 0000000000000001 RSI: 00007f7dd680c0a0 RDI: 0000000000000009 [ 872.251570][T13537] RBP: 00007f7dd680c090 R08: 0000000000000000 R09: 0000000000000000 [ 872.251584][T13537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 872.251597][T13537] R13: 0000000000000000 R14: 00007f7dd5ba6160 R15: 00007ffc292421d8 [ 872.251631][T13537] [ 872.747585][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.757679][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 872.774226][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.787225][ T5890] usb 3-1: config 0 descriptor?? [ 872.921184][T13542] netlink: 'syz.3.2152': attribute type 5 has an invalid length. [ 873.016291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.214133][ T5890] lg-g15 0003:046D:C222.000A: unbalanced delimiter at end of report description [ 873.234289][T13545] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 873.261795][ T5890] lg-g15 0003:046D:C222.000A: probe with driver lg-g15 failed with error -22 [ 874.006347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.739523][T13553] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2155'. [ 875.086349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.199125][T13455] usb 3-1: USB disconnect, device number 36 [ 875.604386][T13561] xt_bpf: check failed: parse error [ 876.066296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.136272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.166295][T13589] overlayfs: missing 'lowerdir' [ 878.226343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.216331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.594297][T13600] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 880.226280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.559454][T13606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2169'. [ 880.577104][T13608] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 881.296266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.486382][T13622] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2171'. [ 882.346308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.356488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.396033][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 989.403048][ C0] rcu: 1-...!: (1 ticks this GP) idle=4504/1/0x4000000000000000 softirq=61285/61285 fqs=0 [ 989.414148][ C0] rcu: (detected by 0, t=10502 jiffies, g=56485, q=100 ncpus=2) [ 989.421907][ C0] Sending NMI from CPU 0 to CPUs 1: [ 989.421942][ C1] NMI backtrace for cpu 1 [ 989.421961][ C1] CPU: 1 UID: 0 PID: 13303 Comm: syz-executor Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 989.421982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 989.421994][ C1] RIP: 0010:__asan_memset+0x27/0x50 [ 989.422023][ C1] Code: 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 5d e6 ff ff 84 c0 74 12 <48> 89 ef 44 89 f6 48 89 da 5b 41 5e 5d e9 17 1d fd 09 31 c0 5b 41 [ 989.422038][ C1] RSP: 0018:ffffc90000a08cb8 EFLAGS: 00000002 [ 989.422055][ C1] RAX: ffffffff8c239301 RBX: 0000000000000018 RCX: ffffffff8c239380 [ 989.422068][ C1] RDX: 0000000000000001 RSI: 0000000000000018 RDI: ffff88807f30f340 [ 989.422079][ C1] RBP: ffff88807f30f340 R08: ffff88807f30f357 R09: 1ffff1100fe61e6a [ 989.422091][ C1] R10: dffffc0000000000 R11: ffffed100fe61e6b R12: ffff8880b8727810 [ 989.422104][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f30f340 [ 989.422117][ C1] FS: 000055557765a500(0000) GS:ffff8881250cf000(0000) knlGS:0000000000000000 [ 989.422131][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 989.422143][ C1] CR2: 00007fe8381a7bac CR3: 0000000049cde000 CR4: 00000000003526f0 [ 989.422158][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 989.422168][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 989.422178][ C1] Call Trace: [ 989.422186][ C1] [ 989.422196][ C1] timerqueue_add+0x200/0x290 [ 989.422220][ C1] ? rcu_is_watching+0x15/0xb0 [ 989.422241][ C1] ? enqueue_hrtimer+0x14f/0x3c0 [ 989.422263][ C1] __hrtimer_run_queues+0x6d6/0xd40 [ 989.422283][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 989.422320][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 989.422338][ C1] ? sched_clock_cpu+0x77/0x4d0 [ 989.422356][ C1] ? read_tsc+0x9/0x20 [ 989.422380][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 989.422410][ C1] hrtimer_interrupt+0x403/0xa40 [ 989.422442][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 989.422466][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 989.422498][ C1] [ 989.422504][ C1] [ 989.422511][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 989.422529][ C1] RIP: 0010:__x64_sys_clock_nanosleep+0x0/0xb0 [ 989.422547][ C1] Code: 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 a8 1d 75 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 [ 989.422561][ C1] RSP: 0018:ffffc90004b3ff08 EFLAGS: 00000246 [ 989.422575][ C1] RAX: 6bd4846502b67900 RBX: ffffc90004b3ff10 RCX: ffffffff81cb352c [ 989.422588][ C1] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: ffffc90004b3ff58 [ 989.422599][ C1] RBP: ffffc90004b3ff48 R08: ffffffff905e9677 R09: 1ffffffff20bd2ce [ 989.422612][ C1] R10: dffffc0000000000 R11: fffffbfff20bd2cf R12: ffff8880266a3c00 [ 989.422625][ C1] R13: 0000000000000000 R14: ffffc90004b3ff58 R15: 00000000000000e6 [ 989.422641][ C1] ? trace_irq_enable+0x2c/0x120 [ 989.422671][ C1] do_syscall_64+0xf3/0x230 [ 989.422688][ C1] ? clear_bhb_loop+0x45/0xa0 [ 989.422707][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.422723][ C1] RIP: 0033:0x7f2df35bfa25 [ 989.422741][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 989.422754][ C1] RSP: 002b:00007fff6327ec60 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 989.422770][ C1] RAX: ffffffffffffffda RBX: 000000000000003a RCX: 00007f2df35bfa25 [ 989.422783][ C1] RDX: 00007fff6327eca0 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.422793][ C1] RBP: 00007fff6327ed0c R08: 0000000000000000 R09: 0000000000000000 [ 989.422804][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 989.422815][ C1] R13: 00000000000927c0 R14: 00000000000d7e7d R15: 00007fff6327ed60 [ 989.422836][ C1] [ 989.422933][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g56485 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 989.824934][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=60514 [ 989.832846][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g56485 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 989.844235][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 989.854217][ C0] rcu: RCU grace-period kthread stack dump: [ 989.860116][ C0] task:rcu_preempt state:I stack:26520 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 989.872069][ C0] Call Trace: [ 989.875365][ C0] [ 989.878321][ C0] __schedule+0x1b33/0x51f0 [ 989.882883][ C0] ? schedule+0x163/0x360 [ 989.887247][ C0] ? __pfx___schedule+0x10/0x10 [ 989.892142][ C0] ? schedule+0x90/0x360 [ 989.896415][ C0] ? schedule+0x90/0x360 [ 989.900712][ C0] schedule+0x163/0x360 [ 989.904902][ C0] schedule_timeout+0x15b/0x2b0 [ 989.909783][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 989.915182][ C0] ? __pfx_process_timeout+0x10/0x10 [ 989.920499][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 989.926072][ C0] ? prepare_to_swait_event+0x308/0x340 [ 989.931647][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 989.936869][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 989.941751][ C0] ? rcu_gp_init+0x1279/0x1690 [ 989.946544][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 989.951497][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 989.957417][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 989.962724][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 989.968658][ C0] ? finish_swait+0xdb/0x200 [ 989.973282][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 989.978511][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 989.983127][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 989.988349][ C0] ? __kthread_parkme+0x1a8/0x200 [ 989.993402][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 989.998621][ C0] kthread+0x7b7/0x940 [ 990.002733][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 990.007953][ C0] ? __pfx_kthread+0x10/0x10 [ 990.012568][ C0] ? __pfx_kthread+0x10/0x10 [ 990.017183][ C0] ? __pfx_kthread+0x10/0x10 [ 990.021799][ C0] ? __pfx_kthread+0x10/0x10 [ 990.026417][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 990.031643][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 990.036875][ C0] ? __pfx_kthread+0x10/0x10 [ 990.041495][ C0] ret_from_fork+0x4b/0x80 [ 990.045933][ C0] ? __pfx_kthread+0x10/0x10 [ 990.050547][ C0] ret_from_fork_asm+0x1a/0x30 [ 990.055358][ C0]