last executing test programs: 2m0.134779254s ago: executing program 2 (id=733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xf, &(0x7f0000000680)=@ringbuf, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0xffffffff, 0x2e7}, &(0x7f00000005c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') readv(r2, &(0x7f0000001440)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000200)={{0x0, 0x1}, 0x0, 0x21, 0x0, {0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000180)={r8, 0x9, 0x4, 0x7ff}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xe010, 0x0, 0xa, 0x2, 0x9, 0x6, 0x7, {r8, @in={{0x2, 0x4e21, @multicast2}}, 0x9c, 0x7, 0x7fffffff, 0x8001}}, &(0x7f0000000300)=0xb0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000100000000000002000000480004802800018007000100637400001c0002800500030001000000080001400000001708000240000000131c0001800a00010072656469720000000c00028008000140000000170900010073797a3000000000"], 0x9c}}, 0x0) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000280)=0x3ff800, 0x12) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000500)) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 1m57.912081445s ago: executing program 2 (id=737): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x8000) remap_file_pages(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x4, 0x3, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 1m53.697416655s ago: executing program 2 (id=742): pipe(&(0x7f0000000100)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xb767, @private2, 0x5, 0x2}, 0x20) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r7, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}}, 0x0) r11 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000640)="31953957dff1c4d54566d58e6f1921fd4720c9ff0851866668c4f6cf14ebf77f5de7e3d3020cf0afcfa9c30a1769915903a61078a0b99dcca392020e6548c19d3295262767336f84b22b485347de00000000000000000000000000aadd31133be75ee5eac6cb199731b966cfb5dcd25a52f5a2f144c36b1ea8d3461aff05c9dbb661345c36871807dad4100eb421f75a07575677b85770000f7989ad193ef226f4a4c2cc65d35986841b3e04b41357188a174c6292a4fbdcc807669ea86cf207", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r11, r12, r12}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000000)={&(0x7f0000000280)={'blake2b-384\x00'}}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x3e8, 0x3d8, 0x3d8, 0x3e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4, 0x1, 0x4, 0xd, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) 1m51.043556689s ago: executing program 2 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708008517c9ffedafa16c00000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000061383f4a522dc683622e7ae9a894be650b463f1d774817a2c84d530ab4998396baa68c29fcfd27618f8ad7eb3063f85670c38ec5165fbdbc236027bd0e3f0031b5d2391c4db1b670cfccd77bb46269773ce07676b9ef3880fc36adda31d491322e5f990f7d2fb36c8b95f99417b0aafcdc583c195a989c34855a9627a5466267c6131cc0e332150a8e3fd6", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x1951, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x2, 0x2b2}) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r4, 0x42) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x8000480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001b40)={r7, &(0x7f0000000a80), 0x0}, 0x20) write$UHID_INPUT(r6, 0x0, 0x0) 1m49.362060382s ago: executing program 2 (id=749): sched_setaffinity(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setpgid(r0, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000957fba85a9ca4e8c00000001000700"], 0x1c}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x18, 0x1, 0x0, "9611e6d6ff1f7506733200000000000000000300000000000000000083df00"}) ioctl$TCXONC(r4, 0x540a, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m45.775796225s ago: executing program 2 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r1, 0x0, 0x82, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000943f92f80e579a513f4b25af71b0ec4df665e66ba126f2f4d92d94b577d01b4220655e4733b29e541db144f580e99c483f1d9da315"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getpeername$ax25(r4, &(0x7f0000000400)={{}, [@null, @default, @bcast, @default, @rose, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ftruncate(r5, 0x80000001) listen(r2, 0xfff) socket$inet6(0xa, 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1m29.967756265s ago: executing program 32 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r1, 0x0, 0x82, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000943f92f80e579a513f4b25af71b0ec4df665e66ba126f2f4d92d94b577d01b4220655e4733b29e541db144f580e99c483f1d9da315"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getpeername$ax25(r4, &(0x7f0000000400)={{}, [@null, @default, @bcast, @default, @rose, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ftruncate(r5, 0x80000001) listen(r2, 0xfff) socket$inet6(0xa, 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 16.817347605s ago: executing program 3 (id=957): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008113b0ffbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103600000000001d300500000000004704000001ed00007b030000000000001d44020000000000620a00fe040400007203000000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14.112197677s ago: executing program 1 (id=964): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 13.178693145s ago: executing program 1 (id=966): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2$watch_queue(0x0, 0x80) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) io_uring_setup(0x26ce, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_ethernet(0x4e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f00000001c0)=0x4) sendmmsg$inet(r5, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)}], 0x1}}], 0x2, 0x16da) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/213, &(0x7f0000000180)=0xd5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.910864014s ago: executing program 4 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r5 = eventfd2(0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) 10.653026945s ago: executing program 5 (id=969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x765b, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000700)="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", 0x160}], 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="00002cbd7000fedbdf251d0000000c00990000100000610000000c0099007f000000700000000c009900ff0000005100000008000100690000000c009900f6be00006e0000002400238006000100bc000000060019000900000005000e000200000005001f000100000008000300", @ANYRES32=0x0, @ANYBLOB="14002380061c0019000000000006001b950e000000000000", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4080}, 0x44000) sendmmsg$inet6(r5, &(0x7f0000002300)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="d1", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x2, 0xc0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYBLOB="ffff0240df15"], 0xa) 9.986897472s ago: executing program 0 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0x40186f40, 0x20000502) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 8.799884849s ago: executing program 4 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40186f40, 0x20000502) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0xffffffffffffff9f, &(0x7f0000000340)={&(0x7f0000000300)=@getneightbl={0x14, 0x16, 0x727d4c0aeeddad0d, 0x0, 0xffffffff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.58831316s ago: executing program 0 (id=972): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 8.586440171s ago: executing program 1 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) 8.49426848s ago: executing program 5 (id=974): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x2000000064832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.636519147s ago: executing program 4 (id=975): syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r4, &(0x7f0000000300)='statm\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000001240)={{r6}, "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"}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r8, &(0x7f00000001c0), 0x2, 0x0) 7.590435479s ago: executing program 5 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x4004800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) fcntl$setlease(r1, 0x400, 0x1) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x400, 0xaae) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000da3000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/116, 0x74, 0xfe5d5f23a70d4f5f, &(0x7f0000000080)=""/121, 0x79}, &(0x7f0000000140)=0x40) 7.58924815s ago: executing program 3 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xf, &(0x7f0000000680)=@ringbuf, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0xffffffff, 0x2e7}, &(0x7f00000005c0), &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r6, 0x9, 0x4, 0x7ff}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xe010, 0x0, 0xa, 0x2, 0x9, 0x6, 0x7, {r6, @in={{0x2, 0x4e21, @multicast2}}, 0x9c, 0x7, 0x7fffffff, 0x8001}}, &(0x7f0000000300)=0xb0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000100000000000002000000480004802800018007000100637400001c0002800500030001000000080001400000001708000240000000131c0001800a00010072656469720000000c00028008000140000000170900010073797a3000"], 0x9c}}, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000280)=0x3ff800, 0x12) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_open_procfs$pagemap(r1, &(0x7f0000000500)) 6.848721748s ago: executing program 5 (id=978): ioperm(0x0, 0x5, 0xff000) prlimit64(0x0, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x64}}, 0x0) 6.726480693s ago: executing program 1 (id=979): ioperm(0x0, 0x5, 0xff000) prlimit64(0x0, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x64}}, 0x0) 4.637014471s ago: executing program 4 (id=980): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2800, 0x12d, 0x2}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000004f80)=[{&(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x1, 0x0, "7ea8e5dc714573a32216ebb3806f0c876af460d487eede35fe61f7c61a2a50038dd42dafde9ef5795f9eeabeabbd781e58057300831e00a1b11efaff9e2869", 0x14}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000100)="dcbe8733b6e1b29e", 0x8}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000140)="618d92c45e60f49533f6ff68", 0xc}], 0x3, &(0x7f00000001c0)={0xa8, 0x110, 0x14, "f21d873fd031f18e90dbbf3b7efd23a69872d9cedca66f9e125aa93538bbfdbca3bd8e219b48c937a5f735939ae89301226b8415591f55d70198c99fca465d01f477b9ba14a3d7581d74f7378309d176a029a11be31df2ac40284da85d1f4f217c4508e0f86fb88d99d5f14fcb3a756261aa4b9bc75398724bde453f3eeb3951bd099ba171cbc34be9d6febb1ab7054f4161d89093fff343"}, 0xa8, 0x1}, {&(0x7f0000000340)={0x27, r1, 0x1, 0x1, 0x0, 0x9, "17f24200a7f89a7627756addb020a0749e362823747be9c72954a11cb04f58299caa480ecb1d974ecbb7c6a4c132fc74bf0bfe7b6fea72165846f106080350", 0x27}, 0x60, &(0x7f0000003780)=[{&(0x7f00000003c0)="02f978e566839b9ab12684679565907374b4a9e5d5aa2f0e00c3162a6b003a610159f98786b6653e1fab1300fb19f0e8c9cd3d09fbd8d2f034b6a652388240c674d15c435032d51ec98675ca022bfd5f8c17c6732d8f69b32a9986bf8d16e4ba35b430b5d7dcc2277d", 0x69}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="2a228446d4f2cb3cb8e45b4a29937a0aa489a444bd0359f80b349b3b74e5dad4837088f57ea303a851bfdfea3f37103fa071bb699b036a7bda00737875393cf6e0ea5f226d5107451b59945e1372d2c746f026707bb25fc15a6143aafaa68149c4d0a9ad753912c90f0458feba2a64cf28237bafbe03d286a94f93794e446df711def36fc7c51dfa286efc966eda0b0ee858cbd68a45ce0161f1522303204d55ca1bfb703b1f3752d3560fe0defd5775b0c8ffd81487a6c243beadaee2693f8708d20c70efd61f5a202fa3734c21fa452ceb605c9a886599a27125c214dbd3", 0xdf}, {&(0x7f0000002680)="8bb59d0df26d6cd10847dfd414faea4cf2a2a10946fbc6c7a511e2b1efcfff61d4ad6fed51c0a1f60218b44a9b836480cc86241e5ad7426370717b13dbdca53d86f82238d1419ca810165b8bce934de541a6d19ea5e6fac04f7dc0a7bd84524b910ef348607634e8701548fdaf55243e71eb42b88c2102665a1ac644af52c46e6cbffa83ae5fe88b224641782271b738fe20a64103d374810f9d9bcde0707edb0bcecc087eeadc63a1bc12b29ed4be53d650b219ab58dd86bd81fa225ee600905f7dd0c9556f987a6335ea", 0xcb}, {&(0x7f0000002780)="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", 0x1000}], 0x5, 0x0, 0x0, 0x200cc000}, {&(0x7f0000003800)={0x27, r3, 0x0, 0x5, 0x4, 0x4b, "ebb31db2a6f44e4a8067f4e12f3cf4b4fc86d6ce4d12147bbbf2fc7ec0ed9a25e6bd2307f76eac080e4293eb5008a1ded897163a153018d88771b397cbe25f", 0x34}, 0x60, &(0x7f0000004cc0)=[{&(0x7f0000003880)="c538d8c9310d0724f00026d1026ce00dc5e4f75b824de2e5267be732ed775f6b7114c342bb2da2f7f29f744ce1e28da713cb7a3c4bc541d72ec49f3f5fe7c98d8cd7a77cb2a039f50ce2458e11b7e4fc8f69e2e745111f15aa1ae26c2dc48984a541c56e17aaebbd257e09a4c30bd0aec9782af285515d6d0d47459b5a8f4220850dd59ba09e7e4ab95b99e4e195edd5bf317c784b2dae1b2d7330095abd15d4ebe006", 0xa3}, {&(0x7f0000003940)="39e84e1271b7ad1c72277efab0f39af9b9abab82d78810a60abb8344e0415d628ca7c7f986d7cde2ad28bc6b060c88522da1b709468cc3b2e500b6806520cfe63096843db5759e1064cee129c1cdaf20a8e1279f17c9ed88cb87b4b87d1667905fea26182e9ccc9ee08446795c64b5b22595ae8316f46fd6de585dad8c4a3ab5b43055e6432f48eff34454f19a282a42acd8e839c9815748", 0x98}, {&(0x7f0000005080)="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", 0xfe}, {&(0x7f0000003b00)="cf72bf417dc109011151f20be02c3d5d6514d337784eeda1629a848920850c0beab2e37724d3d3c677aaad3cea08e9246e2d1a7342810c2523e349649db76bb79c1eee89dca339ad70362ec1daac7d7721f4e98664ab4caf16a66de0f285789175cb4c63eb4fd35308cc0633fdbeff72285e4368e139de4f480a76d9e990946fbe5503d4002cff6e7abf14997f572f8807bd8aac8d9b8d8c367e57fa52db290c1fbdb47f27461cc127453d37cb9305ec87a49be144af0aa19767f0f9414db5dddbb6c8637ec7c9a3a7af7cd49af3002fd1e3047852c2992791d7b05853e5614ac7becb562c0aff644c3092b0e93c7bc847b6aa192d38", 0xf6}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="f9c4567339fcd5c73090bdaf9b13d62f4b2af4bdf22050b9757ac90f71b4f067907fd6741122e794d2d5c833ebeb31a0834b44a9cbbdec0cb0a56b684bec047d6dba673d0ad9b9927ff7149c4262d50feeb14c9f609a414e7ed3f543cbbfa545635bae075412e48e86f014658eb0b1786ea2bfc24b3e11c76c3a858efc42c089a9d827c3ba885e3b73c720", 0x8b}], 0x6, &(0x7f0000000440)={0x40, 0x118, 0x0, "1c78756d97df573c953bb7b7f3351b31aef9bd204b32b6f1608677d3e31fe65cfb57ddea8faaebf03d092f"}, 0x40, 0x8000}, {&(0x7f0000004d40)={0x27, r6, 0x2000, 0x6, 0x37, 0x59, "879a96a99d4b98b0edef4a4d0ace449cb2a6296ba1f532214f565513e86a399aa709f7b5832f33de832edc24e7c9304ac2d9eeaa2c782fe3e374c6fc6c586a", 0x4}, 0x60, &(0x7f0000004e40)=[{&(0x7f0000004dc0)="19b30dee0240e147f357babf9acd05004ae097e043833ba767b263e312b511d18d5bf0d8938fca6d0a2a385c08831d76270265d79e488595b7", 0x39}, {&(0x7f0000004e00)="49f2836e3cca7973e59e46ebe987fb468aa98cba54ebe0edfdc0538a", 0x1c}], 0x2, &(0x7f0000005180)=ANY=[@ANYBLOB="e0000000000000000b0100000400000023b3405b2e763466459cc001bce4cf648d6c9ee32ca919cf538572cb4ed1f0eb7cd48d4622c4f1fadd48bb205aafb9b005be11da7570569ba04a9e84f28fa210862abd7d514295539c8495bc5cd39c0f2ab05f7b2ea41b5136b6db0768f9d8ad4648fab47af1451618f98ca6bb99c1b75e79821dfa44b47d54bd63e3e3370e4f66946d909736b8d342567e3a0c22ce9f5dbee95a4012b48ec10e21c842b756d7a52d78996fed7b1c63ac4b23909e884a8db4faad0a27129b32f86ae535c94f0ca8187bc6a02b09d61c0f8ad9020000006900523fe55579c58606b4c484b3451c5a82"], 0xe0}], 0x4, 0x8800) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000003ac0)={0x3, 0x4, {r8}, {0x0}, 0x3, 0x7ed19aba}) sendmmsg$unix(r10, &(0x7f0000007b00)=[{{&(0x7f0000000480)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000005680)=[{&(0x7f0000004e80)="e3329db136c3be5bc955744ab8186e924db6155addf1c4f15daf2dcc7fa12dc70e430c3814cc509c96709b6ccce7405a2319ac1d44bc824ebff91e3389a75022737c235b3cb5a03d67fde9e84aea358054a3e6ad4eda339c9ad459fa3650a625ce4fd83b11f8c6a5f3ca4e0095ed4018c33f29f366721748e07901db99cb73912c835a7310329ad79f39ac660cf8d9f2937a833bca57e5560511e667785ab5e2c8add0a5a113a6d3a6cacbb2cbf4c0b16f8db00b0e5dd1d6af6d6d82310800d15531c4ccc471a1653f3ec487d49c9874a6c4f2e4d9e27d", 0xd7}, {&(0x7f0000005280)="0336cd9f8d65199ed0b4af93f81d355af11130f86d435c1f2ceca172f11fb137b849880f7325df317dc40f21a63e9e8db76e7844566c2926c7f04ebb597ab79cf184746977eac1f1d2669094cdcc595788da13c89be142ff8923510e59f6572f3152cb466a5e5568cd297101206632f7086d9a1e14e0baaa34f79e9333da4a8acc894609d38fc06658746f5dfbfbde512a309f64c940", 0x96}, {&(0x7f0000005340)="f49fbd44e9369153988e49e7ee23eb51c4265fdcfd7ea9c80d83b2473a31578d319020bd73d9be534cd9b35ed3acc899798bf32bbc43a7de5bb0cb93a108ff4dced30eedbe13b85d78109cc4a71fa45a551e56f36a40a9c4b6ba1ccdd1c9e52f4055c9837f21cdb72d975925e8be8587c6abb8c08b46fd7015661ab171ada1f6f1d814fdf86f7540478bf67e73f821a4e032bdcd74ad456b00f6d08e0ea92dca971937c98137583ea0c691bca42aa6ba0dad126b0caf89dc2472f6576ba1a64ee0ece17c56cd7f72acba", 0xca}, {&(0x7f0000005440)="1d34c4b3595064e1f4f1b382b415b02b857ed7a4312cae1e7b8fe9220789f5f813575c6bbb5ceefc2fbfd484a1b59c2046d5c03666344e59ab0c1ea9d1cc2bd884a2f4dfc1ef5adb5ad1fe1f80cfa40b07cf089581a9ae9cf79cdd52b4d3d4bbb655b3cae6305d2471c3a69d370f33b2769276e854bf90c5909ca115ac57f162f1e13b5ec799b3e08962b9f26550b488e64998c0c8359ed3e341845d812dadf95523594073efa022b8cd33c426714cb86241c1521d900fc59d2c65e9701bfd791f7d4698057fe7a3c33b270b3c4ca7ee01a82db23e04947ce11ac79d09f7a2e33f6dfa8e08ba9c09bffbe0123d5f0563691d8b93f02b", 0xf6}, {&(0x7f0000005540)="b2c0aac4005b700a725afd74e4feb2b1bf91a2a428545e164a2065254b701518ac3a3c91283a905c0342e6c5d76b4cab32fe62675df51f1eda48aa2614d7a599214349ee189f5d12183c50ca3300a8b133e631726dae6ed80ec546ed1ae6b10b8c24c965ea2df974d4f97a97a20fe093ff0a7770c9b48f66eb4d525d1a0aa8af3d4ceca60a9ff419ce06e5454fba6f17bacc41797597861ebcd5da1c0c83ea71dcfa", 0xa2}, {&(0x7f0000005600)="3ed873370ebf20a4331c7dac4f0810c968df51e255e96030637ae00b1a0d778444f881fbbb4c46484d526c7b8815b504bd06796c4c19a6f23dfb5c20b337a700f3c7925bfd4b09326ed426a6d0", 0x4d}], 0x6, &(0x7f0000007980)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r9, r0, r7, r2, 0xffffffffffffffff, r7, r2, r7, r10]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x34, 0x1, 0x1, [r9, 0xffffffffffffffff, r0, r2, r0, r9, r9, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r12}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x160, 0x8980}}], 0x1, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003a00)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() 4.572403101s ago: executing program 0 (id=981): r0 = io_uring_setup(0x69e, &(0x7f0000000180)={0x0, 0x80f502, 0x0, 0x0, 0x4}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) unshare(0x600) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0xe4, 0x5, 0x2}, 0x6) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x0) r4 = syz_io_uring_setup(0x2705, &(0x7f0000000280)={0x0, 0x1765, 0x20}, &(0x7f0000000100), &(0x7f0000000140)) signalfd4(r3, &(0x7f00000026c0)={[0x5]}, 0x8, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000000200)) 4.241006446s ago: executing program 0 (id=982): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'macvlan0\x00'}}, 0x1e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = dup(r1) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) 4.239427013s ago: executing program 3 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0x40186f40, 0x20000502) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.869753111s ago: executing program 5 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r1, 0x0, 0x82, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000943f92f80e579a513f4b25af71b0ec4df665e66ba126f2f4d92d94b577d01b4220655e4733b29e541db144f580e99c483f1d9da315"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getpeername$ax25(r5, &(0x7f0000000400)={{}, [@null, @default, @bcast, @default, @rose, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r6, 0x3, 0x0, @void}, 0x62) listen(r2, 0xfff) socket$inet6(0xa, 0x800, 0x0) 2.959827846s ago: executing program 0 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40186f40, 0x20000502) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0xffffffffffffff9f, &(0x7f0000000340)={&(0x7f0000000300)=@getneightbl={0x14, 0x16, 0x727d4c0aeeddad0d, 0x0, 0xffffffff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.906702709s ago: executing program 1 (id=986): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 2.809756491s ago: executing program 3 (id=987): pipe(&(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}}, 0x0) 2.808937562s ago: executing program 4 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0x40186f40, 0x20000502) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.189990243s ago: executing program 1 (id=989): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46"], 0x69) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80284504, &(0x7f0000000400)) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x26000bc7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r2, 0x4b4b, &(0x7f0000000080)) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x8002, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setflags(r4, 0x2, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000380)=""/210, 0x8}) r5 = syz_io_uring_setup(0x231b, &(0x7f0000000500)={0x0, 0x8bb6, 0x824, 0x3}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r5, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, 0x0, 0x1) r6 = memfd_create(&(0x7f0000000840)='5\xae`u?CZ=c\xad\xf91\x12s\a\xd7\x1c\xf9+\x01', 0x6) fallocate(r6, 0x0, 0x1000000, 0x5) mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='nsdelegate,memory_localevents,memory_localevents,pids_localevents']) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) r7 = io_uring_setup(0x1328, &(0x7f0000001200)={0x0, 0x92b5, 0x20, 0x5, 0x3c5}) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f0000002300)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8) 1.954803801s ago: executing program 0 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0x40186f40, 0x20000502) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.874686899s ago: executing program 4 (id=991): syz_usb_connect(0x4, 0xd6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b49a6510641102060947000000010902c400010200000009047a0102ee69c8f70905800810007f7c024904549731060ef242a8b1e0b91fb04e0725018107ff0009050e03400007889b9908e40bf446a69ae16f8629ed41c8c8c7315b2dd10f883ef7dfa99169546bb5e4aac04524552ac06a46e77d0643f4af82f0cb1921ac311779621daa09e98f9333b9e4a63e68a9c9a4c968124d8f59d254fbf0c8a9a10287716dc461ab512b0c60b78d57973e84eb6ce95d9d5198cf24a7dc8341b13adb40874c336c091c520386f3f6b580f5286a702368"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000007, 0x50, r0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') r5 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) dup2(r5, r3) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') 1.222025704s ago: executing program 3 (id=992): pipe(&(0x7f0000000100)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xb767, @private2, 0x5, 0x2}, 0x20) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r7, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}}, 0x0) r11 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000640)="31953957dff1c4d54566d58e6f1921fd4720c9ff0851866668c4f6cf14ebf77f5de7e3d3020cf0afcfa9c30a1769915903a61078a0b99dcca392020e6548c19d3295262767336f84b22b485347de00000000000000000000000000aadd31133be75ee5eac6cb199731b966cfb5dcd25a52f5a2f144c36b1ea8d3461aff05c9dbb661345c36871807dad4100eb421f75a07575677b85770000f7989ad193ef226f4a4c2cc65d35986841b3e04b41357188a174c6292a4fbdcc807669ea86cf207", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r11, r12, r12}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000000)={&(0x7f0000000280)={'blake2b-384\x00'}}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x3e8, 0x3d8, 0x3d8, 0x3e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4, 0x1, 0x4, 0xd, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) 135.319126ms ago: executing program 3 (id=993): unshare(0x62020600) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}}, 0x2000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012802800010069703667726574617000"], 0x58}}, 0x0) 0s ago: executing program 5 (id=994): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0xaaaa, &(0x7f0000000100)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') kernel console output (not intermixed with test programs): 49][ T6981] syz.2.272 (6981) used greatest stack depth: 18288 bytes left [ 164.989062][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 164.997592][ T29] audit: type=1326 audit(1733989623.178:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.038668][ T29] audit: type=1326 audit(1733989623.178:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.130040][ T29] audit: type=1326 audit(1733989623.178:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.131353][ T7000] netlink: 277 bytes leftover after parsing attributes in process `syz.1.275'. [ 165.192421][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 165.197777][ T29] audit: type=1326 audit(1733989623.178:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.230814][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 229, changing to 11 [ 165.247543][ T5870] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 165.267889][ T5870] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 165.279028][ T29] audit: type=1326 audit(1733989623.178:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.574369][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.666731][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.824981][ T29] audit: type=1326 audit(1733989623.178:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.847556][ T5870] usb 1-1: Product: 稆⪼㒈쩊䣠∘を戂괯る [ 165.861275][ T5870] usb 1-1: Manufacturer: 週直ꑞᑘ䶻ᇹ줗寤ફ骅ࡖ햲栤⨮Ɏã┛⾺⧅㕖뇸ꖈୋ쫥㨉⦎ì§ç»¯à½ ì€‚풶戣딓覗쨥긶⻰蔄ã’뮤떡踢Μè«åª°â§·ãœµã¡ºåš™èšä®¨êˆ–⸒覧앺é«ï¿ë¤Žï‚¹è–¤á‚˜ç”®ä’²éŸŽìšŸëŸ®ï„‚ﶨ䡑옹⛺ݙ蛅鑀í’⚬뎭ﮠ希岂愪タæ”敷铋窒å¥ì†¯ï˜Ÿé±‹à§Œí”¡ [ 165.898111][ T29] audit: type=1326 audit(1733989623.178:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.958441][ T5870] usb 1-1: SerialNumber: Ы [ 165.964834][ T29] audit: type=1326 audit(1733989623.178:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 165.994468][ T29] audit: type=1326 audit(1733989623.178:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 166.034838][ T29] audit: type=1326 audit(1733989623.178:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 166.057411][ T29] audit: type=1326 audit(1733989623.178:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 166.092273][ T29] audit: type=1326 audit(1733989623.178:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 166.223878][ T29] audit: type=1326 audit(1733989623.178:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 166.246211][ T29] audit: type=1326 audit(1733989623.178:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 166.363484][ T7015] 9pnet_fd: Insufficient options for proto=fd [ 166.430045][ T5870] cdc_ncm 1-1:1.0: bind() failure [ 166.443725][ T5870] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 166.458009][ T5870] cdc_ncm 1-1:1.1: bind() failure [ 166.474773][ T5870] usb 1-1: USB disconnect, device number 2 [ 166.918763][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.087721][ T7025] team0: No ports can be present during mode change [ 167.109237][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.120433][ T46] usb 3-1: config 0 interface 0 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 167.131492][ T46] usb 3-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.144794][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 167.255746][ T46] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 167.265161][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.273570][ T46] usb 3-1: Product: syz [ 167.277948][ T46] usb 3-1: Manufacturer: syz [ 167.282823][ T46] usb 3-1: SerialNumber: syz [ 167.431313][ T46] usb 3-1: config 0 descriptor?? [ 167.478661][ T5870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.480647][ T46] ir_toy 3-1:0.0: required endpoints not found [ 167.717600][ T7018] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 167.793162][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 167.805493][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.825563][ T5870] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.856366][ T5870] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.862180][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.908597][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.939244][ T5870] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 167.996145][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.015211][ T5870] usb 4-1: config 0 descriptor?? [ 168.047127][ T46] usb 3-1: USB disconnect, device number 5 [ 169.047767][ T5870] hkems 0003:2006:0118.0003: unknown main item tag 0x0 [ 169.054785][ T5870] hkems 0003:2006:0118.0003: unknown main item tag 0x0 [ 169.061947][ T5870] hkems 0003:2006:0118.0003: unknown main item tag 0x0 [ 169.069058][ T5870] hkems 0003:2006:0118.0003: unknown main item tag 0x0 [ 169.075967][ T5870] hkems 0003:2006:0118.0003: unknown main item tag 0x0 [ 169.085319][ T5870] hkems 0003:2006:0118.0003: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 169.097096][ T5870] hkems 0003:2006:0118.0003: no inputs found [ 169.103800][ T5870] hkems 0003:2006:0118.0003: force feedback init failed [ 169.167811][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.191617][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.849055][ T5870] usb 4-1: USB disconnect, device number 4 [ 169.879916][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 169.925892][ T7063] ntfs3(nullb0): Primary boot signature is not NTFS. [ 169.936450][ T7063] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 169.954619][ T7065] FAULT_INJECTION: forcing a failure. [ 169.954619][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 169.968729][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.0.296 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 169.979354][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.989434][ T7065] Call Trace: [ 169.992736][ T7065] [ 169.995692][ T7065] dump_stack_lvl+0x241/0x360 [ 170.000401][ T7065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.005639][ T7065] ? __pfx__printk+0x10/0x10 [ 170.010260][ T7065] ? __kmalloc_noprof+0xb5/0x4c0 [ 170.015228][ T7065] ? __pfx___might_resched+0x10/0x10 [ 170.020543][ T7065] should_fail_ex+0x3b0/0x4e0 [ 170.025234][ T7065] should_failslab+0xac/0x100 [ 170.029914][ T7065] __kmalloc_noprof+0xdd/0x4c0 [ 170.034678][ T7065] ? nla_strdup+0x9c/0x140 [ 170.039092][ T7065] ? __kasan_kmalloc+0x98/0xb0 [ 170.043860][ T7065] nla_strdup+0x9c/0x140 [ 170.048104][ T7065] nf_tables_newtable+0x59b/0x1e40 [ 170.053222][ T7065] ? nfnl_pernet+0x23/0x240 [ 170.057726][ T7065] ? __pfx_nf_tables_newtable+0x10/0x10 [ 170.063272][ T7065] ? __nla_parse+0x40/0x60 [ 170.067685][ T7065] nfnetlink_rcv+0x14e3/0x2ab0 [ 170.072470][ T7065] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 170.077612][ T7065] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.082805][ T7065] ? skb_clone+0x240/0x390 [ 170.087222][ T7065] ? __pfx_lock_release+0x10/0x10 [ 170.092251][ T7065] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.097449][ T7065] netlink_unicast+0x7f6/0x990 [ 170.102226][ T7065] ? __pfx_netlink_unicast+0x10/0x10 [ 170.107505][ T7065] ? __virt_addr_valid+0x45f/0x530 [ 170.112615][ T7065] ? __phys_addr_symbol+0x2f/0x70 [ 170.117635][ T7065] ? __check_object_size+0x47a/0x730 [ 170.122929][ T7065] netlink_sendmsg+0x8e4/0xcb0 [ 170.127705][ T7065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.132995][ T7065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.138276][ T7065] __sock_sendmsg+0x221/0x270 [ 170.142973][ T7065] ____sys_sendmsg+0x52a/0x7e0 [ 170.147752][ T7065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.153043][ T7065] ? __fget_files+0x2a/0x410 [ 170.157640][ T7065] ? __fget_files+0x2a/0x410 [ 170.162238][ T7065] __sys_sendmsg+0x269/0x350 [ 170.166826][ T7065] ? __pfx_lock_release+0x10/0x10 [ 170.171852][ T7065] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.176967][ T7065] ? __pfx_vfs_write+0x10/0x10 [ 170.181744][ T7065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.188066][ T7065] ? do_syscall_64+0x100/0x230 [ 170.192828][ T7065] ? do_syscall_64+0xb6/0x230 [ 170.197505][ T7065] do_syscall_64+0xf3/0x230 [ 170.202004][ T7065] ? clear_bhb_loop+0x35/0x90 [ 170.206684][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.212577][ T7065] RIP: 0033:0x7ff05cf7ff19 [ 170.216986][ T7065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.236594][ T7065] RSP: 002b:00007ff05dd23058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.245010][ T7065] RAX: ffffffffffffffda RBX: 00007ff05d145fa0 RCX: 00007ff05cf7ff19 [ 170.252974][ T7065] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 170.260938][ T7065] RBP: 00007ff05dd230a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.268901][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.276865][ T7065] R13: 0000000000000000 R14: 00007ff05d145fa0 R15: 00007fff6dbd3c18 [ 170.284839][ T7065] [ 170.340602][ T7067] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 170.396218][ T7067] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 171.103513][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.189468][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.284013][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.334704][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.428609][ T46] usb 5-1: SerialNumber: syz [ 171.565980][ T46] usb 5-1: bad CDC descriptors [ 172.122602][ T7087] overlayfs: failed to resolve './file0': -2 [ 172.804435][ T54] block nbd0: Receive control failed (result -32) [ 172.804435][ T5133] block nbd0: Receive control failed (result -32) [ 172.857418][ T7080] block nbd0: shutting down sockets [ 174.060650][ T9] usb 5-1: USB disconnect, device number 2 [ 174.268738][ T7111] netdevsim netdevsim4: Direct firmware load for printk failed with error -2 [ 174.277767][ T7111] netdevsim netdevsim4: Falling back to sysfs fallback for: printk [ 174.474747][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 174.474766][ T29] audit: type=1326 audit(1733989632.648:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7093 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868757ff19 code=0x7fc00000 [ 175.396988][ T7110] [U] vÔ3 [ 175.773815][ T7122] process 'syz.3.312' launched '/dev/fd/12' with NULL argv: empty string added [ 176.661734][ T5815] syz-executor (5815) used greatest stack depth: 18256 bytes left [ 177.349531][ T7150] overlayfs: failed to resolve './file0': -2 [ 177.995467][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.120978][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.169154][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.185437][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.193428][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.203335][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.194445][ T7169] overlay: Unknown parameter '/owerdir' [ 179.962238][ T7174] hub 2-0:1.0: USB hub found [ 179.969316][ T7174] hub 2-0:1.0: 1 port detected [ 179.981610][ T7174] IPv6: Can't replace route, no match found [ 179.991156][ T29] audit: type=1326 audit(1733989638.168:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.021360][ T29] audit: type=1326 audit(1733989638.168:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.043010][ T29] audit: type=1326 audit(1733989638.168:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.065052][ T29] audit: type=1326 audit(1733989638.168:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.087095][ T29] audit: type=1326 audit(1733989638.168:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.108798][ T29] audit: type=1326 audit(1733989638.168:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.130424][ T29] audit: type=1326 audit(1733989638.178:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.133638][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 180.151879][ T29] audit: type=1326 audit(1733989638.178:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.151914][ T29] audit: type=1326 audit(1733989638.178:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.151941][ T29] audit: type=1326 audit(1733989638.178:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7153 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 180.461897][ T7187] netlink: 272 bytes leftover after parsing attributes in process `syz.0.330'. [ 181.328893][ T54] Bluetooth: hci0: command tx timeout [ 181.578073][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 181.590302][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 182.286438][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.310469][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.339319][ T7157] bridge_slave_0: entered allmulticast mode [ 182.499827][ T7157] bridge_slave_0: entered promiscuous mode [ 182.520205][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'. [ 182.530567][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.537685][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.560788][ T7157] bridge_slave_1: entered allmulticast mode [ 182.568109][ T7157] bridge_slave_1: entered promiscuous mode [ 184.547182][ T54] Bluetooth: hci0: command tx timeout [ 186.614522][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 186.614551][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 186.620763][ T5821] Bluetooth: hci0: command tx timeout [ 186.635974][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 186.714937][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.739268][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.000917][ T7157] team0: Port device team_slave_0 added [ 187.009565][ T7157] team0: Port device team_slave_1 added [ 187.088126][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.107250][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.168622][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.185332][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.192423][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.219526][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.267259][ T7221] hub 2-0:1.0: USB hub found [ 187.272313][ T7221] hub 2-0:1.0: 1 port detected [ 187.461370][ T7221] IPv6: Can't replace route, no match found [ 187.481106][ T7157] hsr_slave_0: entered promiscuous mode [ 187.487638][ T7157] hsr_slave_1: entered promiscuous mode [ 187.500852][ T7157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.508446][ T7157] Cannot create hsr debugfs directory [ 189.035899][ T5133] Bluetooth: hci0: command tx timeout [ 189.504281][ T7157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.533456][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 189.533472][ T29] audit: type=1326 audit(1733989647.718:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7224 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c37ff19 code=0x7fc00000 [ 189.690640][ T7157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.743163][ T7250] FAULT_INJECTION: forcing a failure. [ 189.743163][ T7250] name failslab, interval 1, probability 0, space 0, times 0 [ 189.756074][ T7250] CPU: 0 UID: 0 PID: 7250 Comm: syz.1.349 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 189.766693][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.776775][ T7250] Call Trace: [ 189.780076][ T7250] [ 189.783027][ T7250] dump_stack_lvl+0x241/0x360 [ 189.787739][ T7250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.792968][ T7250] ? __pfx__printk+0x10/0x10 [ 189.797591][ T7250] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 189.803600][ T7250] ? __pfx___might_resched+0x10/0x10 [ 189.808926][ T7250] should_fail_ex+0x3b0/0x4e0 [ 189.813649][ T7250] should_failslab+0xac/0x100 [ 189.818369][ T7250] kmem_cache_alloc_node_noprof+0x77/0x380 [ 189.824207][ T7250] ? __alloc_skb+0x1c3/0x440 [ 189.828826][ T7250] __alloc_skb+0x1c3/0x440 [ 189.833274][ T7250] ? __pfx___alloc_skb+0x10/0x10 [ 189.838240][ T7250] ? netlink_ack_tlv_len+0x6e/0x200 [ 189.843468][ T7250] netlink_ack+0x145/0xa50 [ 189.847886][ T7250] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 189.853272][ T7250] ? __pfx_nl80211_post_doit+0x10/0x10 [ 189.858744][ T7250] ? __pfx___might_resched+0x10/0x10 [ 189.864052][ T7250] netlink_rcv_skb+0x262/0x430 [ 189.868829][ T7250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.873854][ T7250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.879144][ T7250] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 189.884632][ T7250] genl_rcv+0x28/0x40 [ 189.888637][ T7250] netlink_unicast+0x7f6/0x990 [ 189.893430][ T7250] ? __pfx_netlink_unicast+0x10/0x10 [ 189.898719][ T7250] ? __virt_addr_valid+0x45f/0x530 [ 189.903835][ T7250] ? __phys_addr_symbol+0x2f/0x70 [ 189.908856][ T7250] ? __check_object_size+0x47a/0x730 [ 189.914145][ T7250] netlink_sendmsg+0x8e4/0xcb0 [ 189.918932][ T7250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.924245][ T7250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.929536][ T7250] __sock_sendmsg+0x221/0x270 [ 189.934217][ T7250] ____sys_sendmsg+0x52a/0x7e0 [ 189.938984][ T7250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.944268][ T7250] ? __fget_files+0x2a/0x410 [ 189.948857][ T7250] ? __fget_files+0x2a/0x410 [ 189.953476][ T7250] __sys_sendmsg+0x269/0x350 [ 189.958094][ T7250] ? __pfx_lock_release+0x10/0x10 [ 189.963131][ T7250] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.968259][ T7250] ? __pfx_vfs_write+0x10/0x10 [ 189.973056][ T7250] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.979383][ T7250] ? do_syscall_64+0x100/0x230 [ 189.984151][ T7250] ? do_syscall_64+0xb6/0x230 [ 189.988840][ T7250] do_syscall_64+0xf3/0x230 [ 189.993446][ T7250] ? clear_bhb_loop+0x35/0x90 [ 189.998125][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.004017][ T7250] RIP: 0033:0x7f4c3c37ff19 [ 190.008428][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.028036][ T7250] RSP: 002b:00007f4c3d1d7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.036454][ T7250] RAX: ffffffffffffffda RBX: 00007f4c3c545fa0 RCX: 00007f4c3c37ff19 [ 190.044425][ T7250] RDX: 0000000000040840 RSI: 0000000020000180 RDI: 0000000000000003 [ 190.052391][ T7250] RBP: 00007f4c3d1d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.060388][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.068359][ T7250] R13: 0000000000000000 R14: 00007f4c3c545fa0 R15: 00007ffdde8b7788 [ 190.076347][ T7250] [ 190.440197][ T7157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.057089][ T7157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.388202][ T7271] netlink: 277 bytes leftover after parsing attributes in process `syz.4.348'. [ 191.854801][ T7157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.889865][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 191.889886][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 191.915671][ T7157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.895441][ T7157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.907320][ T7157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.046004][ T7265] netlink: 136 bytes leftover after parsing attributes in process `syz.2.356'. [ 193.723807][ T7265] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 194.046139][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.056194][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.061788][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.066360][ T29] audit: type=1800 audit(1733989652.258:122): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.361" name="bus" dev="overlay" ino=423 res=0 errno=0 [ 194.097346][ T7157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.099818][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.107916][ T7157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.145416][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.152600][ T6478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.161501][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.168707][ T6478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.282972][ T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.424422][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.473396][ T7157] veth0_vlan: entered promiscuous mode [ 194.496734][ T7157] veth1_vlan: entered promiscuous mode [ 194.519082][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 194.525799][ T46] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 194.539347][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.544800][ T7157] veth0_macvtap: entered promiscuous mode [ 194.561387][ T46] usb 1-1: config 0 descriptor?? [ 194.572018][ T46] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 194.586439][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.595537][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.609903][ T973] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 194.630261][ T7157] veth1_macvtap: entered promiscuous mode [ 194.664884][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.687785][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.699829][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.714292][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.726858][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.740042][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.750020][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.760933][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.771323][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.773013][ T46] gspca_nw80x: reg_w err -71 [ 194.781917][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.783126][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.797020][ T46] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 194.807481][ T46] usb 1-1: USB disconnect, device number 3 [ 194.828397][ T973] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.837877][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.852806][ T973] usb 2-1: config 0 descriptor?? [ 194.867498][ T973] cp210x 2-1:0.0: cp210x converter detected [ 194.875039][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.886907][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.925135][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.936355][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.946258][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.956986][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.967083][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.978137][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.988967][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.000481][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.013657][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.041580][ T7157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.067216][ T7157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.077715][ T7157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.087142][ T7157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.684460][ T973] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 195.750241][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.751060][ T973] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 195.766064][ T973] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 195.775772][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.786273][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.805618][ T973] usb 2-1: cp210x converter now attached to ttyUSB0 [ 195.999435][ T973] usb 2-1: USB disconnect, device number 5 [ 196.048738][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.061588][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.091804][ T973] cp210x 2-1:0.0: device disconnected [ 196.816517][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 196.856686][ T7321] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.371'. [ 196.965290][ T7321] openvswitch: netlink: Unknown key attributes 20 [ 198.253125][ T973] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 198.343434][ T7337] netlink: 48 bytes leftover after parsing attributes in process `syz.3.319'. [ 198.353058][ T7337] netlink: 1 bytes leftover after parsing attributes in process `syz.3.319'. [ 199.478828][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 199.513234][ T7349] Cannot find set identified by id 0 to match [ 200.468986][ T973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 200.693441][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.704053][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.757188][ T973] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.773582][ T973] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.778005][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.844242][ T973] usb 5-1: config 1 interface 0 has no altsetting 1 [ 201.527280][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.535431][ T46] usb 2-1: SerialNumber: syz [ 201.580185][ T973] usb 5-1: string descriptor 0 read error: -71 [ 201.586461][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 201.612687][ T46] usb 2-1: bad CDC descriptors [ 201.701386][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.726829][ T973] usb 5-1: can't set config #1, error -71 [ 201.795712][ T973] usb 5-1: USB disconnect, device number 3 [ 202.069133][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.150252][ T973] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 202.228732][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 202.272362][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.350344][ T46] usb 1-1: config 179 has no interface number 0 [ 202.433000][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 202.438583][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.491356][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 202.562954][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.568431][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 202.582455][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 202.601972][ T46] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.615563][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.622306][ T973] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 202.624969][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.718885][ T7368] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 202.730304][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.773079][ T973] usb 5-1: config 0 descriptor?? [ 203.001829][ T5868] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 203.183792][ T5868] usb 1-1: USB disconnect, device number 4 [ 203.183846][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 203.183883][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.225396][ T5868] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 203.225577][ T973] hid (null): unknown global tag 0x31 [ 203.254958][ T973] hid (null): unknown global tag 0xc [ 203.276154][ T973] hid (null): global environment stack underflow [ 203.296963][ T973] uclogic 0003:28BD:0042.0004: interface is invalid, ignoring [ 203.410582][ T5867] usb 2-1: USB disconnect, device number 6 [ 203.462567][ T973] usb 5-1: USB disconnect, device number 4 [ 206.149475][ T7405] delete_channel: no stack [ 206.309744][ T7398] delete_channel: no stack [ 206.748800][ T5867] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 206.902489][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.914807][ T5867] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 206.941149][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.951386][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.959999][ T5867] usb 5-1: SerialNumber: syz [ 206.976522][ T5867] usb 5-1: bad CDC descriptors [ 210.506654][ T973] usb 5-1: USB disconnect, device number 5 [ 212.659552][ T5868] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 212.848593][ T7454] delete_channel: no stack [ 213.410460][ T7437] delete_channel: no stack [ 213.777991][ T7457] delete_channel: no stack [ 213.946231][ T7443] delete_channel: no stack [ 215.568670][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.738863][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.909393][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.154246][ T46] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 216.412010][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.428198][ T46] usb 3-1: config 0 descriptor?? [ 217.834052][ T46] holtek_kbd 0003:04D9:A055.0005: unexpected long global item [ 217.842972][ T46] holtek_kbd 0003:04D9:A055.0005: probe with driver holtek_kbd failed with error -22 [ 217.956833][ T7510] delete_channel: no stack [ 218.112423][ T7496] delete_channel: no stack [ 218.177509][ T29] audit: type=1326 audit(1733989676.358:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbccc97ff19 code=0x100000 [ 218.297638][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 218.899359][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 220.347206][ T7528] netlink: 'syz.2.432': attribute type 3 has an invalid length. [ 220.457100][ T7526] warning: `syz.1.423' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 220.468738][ T7528] FAULT_INJECTION: forcing a failure. [ 220.468738][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 220.482627][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.2.432 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 220.493252][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.503332][ T7528] Call Trace: [ 220.506629][ T7528] [ 220.509582][ T7528] dump_stack_lvl+0x241/0x360 [ 220.514297][ T7528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.519529][ T7528] ? __pfx__printk+0x10/0x10 [ 220.524147][ T7528] ? ref_tracker_alloc+0x332/0x490 [ 220.529274][ T7528] should_fail_ex+0x3b0/0x4e0 [ 220.533956][ T7528] should_failslab+0xac/0x100 [ 220.538643][ T7528] ? skb_clone+0x20c/0x390 [ 220.543073][ T7528] kmem_cache_alloc_noprof+0x70/0x380 [ 220.548454][ T7528] skb_clone+0x20c/0x390 [ 220.552711][ T7528] __netlink_deliver_tap+0x3cc/0x7f0 [ 220.557997][ T7528] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.563190][ T7528] netlink_deliver_tap+0x19d/0x1b0 [ 220.568295][ T7528] netlink_sendskb+0x68/0x140 [ 220.572978][ T7528] netlink_unicast+0x39d/0x990 [ 220.577769][ T7528] ? __pfx_netlink_unicast+0x10/0x10 [ 220.583059][ T7528] netlink_rcv_skb+0x262/0x430 [ 220.587814][ T7528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.593269][ T7528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.598561][ T7528] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.603755][ T7528] netlink_unicast+0x7f6/0x990 [ 220.608535][ T7528] ? __pfx_netlink_unicast+0x10/0x10 [ 220.613821][ T7528] ? __virt_addr_valid+0x45f/0x530 [ 220.618931][ T7528] ? __phys_addr_symbol+0x2f/0x70 [ 220.623952][ T7528] ? __check_object_size+0x47a/0x730 [ 220.629241][ T7528] netlink_sendmsg+0x8e4/0xcb0 [ 220.634012][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.639300][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.644583][ T7528] __sock_sendmsg+0x221/0x270 [ 220.649259][ T7528] ____sys_sendmsg+0x52a/0x7e0 [ 220.654025][ T7528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.659305][ T7528] ? __fget_files+0x2a/0x410 [ 220.663889][ T7528] ? __fget_files+0x2a/0x410 [ 220.668480][ T7528] __sys_sendmsg+0x269/0x350 [ 220.673070][ T7528] ? __pfx_lock_release+0x10/0x10 [ 220.678088][ T7528] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.683202][ T7528] ? __pfx_vfs_write+0x10/0x10 [ 220.687978][ T7528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.694302][ T7528] ? do_syscall_64+0x100/0x230 [ 220.699093][ T7528] ? do_syscall_64+0xb6/0x230 [ 220.703807][ T7528] do_syscall_64+0xf3/0x230 [ 220.708336][ T7528] ? clear_bhb_loop+0x35/0x90 [ 220.713029][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.718927][ T7528] RIP: 0033:0x7fbccc97ff19 [ 220.723337][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.742962][ T7528] RSP: 002b:00007fbccd85d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.751374][ T7528] RAX: ffffffffffffffda RBX: 00007fbcccb45fa0 RCX: 00007fbccc97ff19 [ 220.759339][ T7528] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 220.767324][ T7528] RBP: 00007fbccd85d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.775296][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.783269][ T7528] R13: 0000000000000000 R14: 00007fbcccb45fa0 R15: 00007ffcc3ddff28 [ 220.791255][ T7528] [ 220.819580][ T46] usb 3-1: USB disconnect, device number 6 [ 222.723322][ T7558] delete_channel: no stack [ 223.261292][ T7552] delete_channel: no stack [ 224.183228][ T7564] dummy0: entered promiscuous mode [ 224.203824][ T7564] ipvlan0: entered promiscuous mode [ 224.219452][ T7564] ipvlan0: left promiscuous mode [ 224.252182][ T7564] dummy0: left promiscuous mode [ 224.383868][ T7564] netlink: 'syz.3.443': attribute type 34 has an invalid length. [ 226.006025][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.064276][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 227.104519][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.224821][ T5868] usb 2-1: config 12 has an invalid interface number: 30 but max is 0 [ 227.237556][ T5868] usb 2-1: config 12 has no interface number 0 [ 227.244258][ T5868] usb 2-1: config 12 interface 30 has no altsetting 0 [ 227.260565][ T5868] usb 2-1: New USB device found, idVendor=06cb, idProduct=0008, bcdDevice=df.cc [ 227.269753][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.277762][ T5868] usb 2-1: Product: syz [ 227.282308][ T5868] usb 2-1: Manufacturer: syz [ 227.287149][ T5868] usb 2-1: SerialNumber: syz [ 228.289633][ T5867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 228.958545][ C1] hrtimer: interrupt took 56823 ns [ 229.028215][ T5868] usb 2-1: selecting invalid altsetting 1 [ 229.043704][ T5868] usb 2-1: Can not set alternate setting to 1, error: -22 [ 229.123137][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 229.156039][ T5867] usb 4-1: config 0 has an invalid interface number: 100 but max is 0 [ 229.169509][ T5868] synaptics_usb 2-1:12.30: probe with driver synaptics_usb failed with error -22 [ 229.188691][ T5867] usb 4-1: config 0 has no interface number 0 [ 229.300065][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 229.533263][ T5867] usb 4-1: config 0 interface 100 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 16 [ 229.544500][ T5867] usb 4-1: config 0 interface 100 has no altsetting 0 [ 229.554802][ T5868] usb 2-1: USB disconnect, device number 7 [ 229.558086][ T7626] overlayfs: missing 'lowerdir' [ 229.570855][ T5867] usb 4-1: New USB device found, idVendor=0f11, idProduct=1001, bcdDevice=7d.4b [ 229.580212][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.588227][ T5867] usb 4-1: Product: syz [ 229.607652][ T5867] usb 4-1: Manufacturer: syz [ 229.614069][ T5867] usb 4-1: SerialNumber: syz [ 229.622324][ T5867] usb 4-1: config 0 descriptor?? [ 229.623758][ T7609] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 229.696829][ T7625] sctp: [Deprecated]: syz.1.457 (pid 7625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.696829][ T7625] Use struct sctp_sack_info instead [ 229.702954][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 229.849328][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 229.859921][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 230.364743][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 230.403451][ T7646] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (9) [ 232.044655][ T7646] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 232.077762][ T5867] ldusb 4-1:0.100: Interrupt in endpoint not found [ 232.276883][ T5867] usb 4-1: USB disconnect, device number 6 [ 234.838053][ T7685] FAULT_INJECTION: forcing a failure. [ 234.838053][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 234.854486][ T7676] bond0: entered promiscuous mode [ 234.866747][ T7676] bond_slave_0: entered promiscuous mode [ 234.900679][ T7676] bond_slave_1: entered promiscuous mode [ 235.139805][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.2.472 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 235.150454][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.160527][ T7685] Call Trace: [ 235.163814][ T7685] [ 235.166753][ T7685] dump_stack_lvl+0x241/0x360 [ 235.171456][ T7685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.176674][ T7685] ? __pfx__printk+0x10/0x10 [ 235.181283][ T7685] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 235.187276][ T7685] ? __pfx___might_resched+0x10/0x10 [ 235.192592][ T7685] should_fail_ex+0x3b0/0x4e0 [ 235.197289][ T7685] should_failslab+0xac/0x100 [ 235.201991][ T7685] kmem_cache_alloc_node_noprof+0x77/0x380 [ 235.207807][ T7685] ? __alloc_skb+0x1c3/0x440 [ 235.212410][ T7685] __alloc_skb+0x1c3/0x440 [ 235.216843][ T7685] ? __pfx___alloc_skb+0x10/0x10 [ 235.221795][ T7685] ? netlink_autobind+0xd6/0x2f0 [ 235.226744][ T7685] ? netlink_autobind+0x2b0/0x2f0 [ 235.231780][ T7685] netlink_sendmsg+0x638/0xcb0 [ 235.236566][ T7685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.241877][ T7685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.247174][ T7685] __sock_sendmsg+0x221/0x270 [ 235.251876][ T7685] ____sys_sendmsg+0x52a/0x7e0 [ 235.256662][ T7685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.261957][ T7685] ? __fget_files+0x2a/0x410 [ 235.266559][ T7685] ? __fget_files+0x2a/0x410 [ 235.271165][ T7685] __sys_sendmsg+0x269/0x350 [ 235.275765][ T7685] ? __pfx_lock_release+0x10/0x10 [ 235.280804][ T7685] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.285936][ T7685] ? __pfx_vfs_write+0x10/0x10 [ 235.290738][ T7685] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.297076][ T7685] ? do_syscall_64+0x100/0x230 [ 235.301859][ T7685] ? do_syscall_64+0xb6/0x230 [ 235.306552][ T7685] do_syscall_64+0xf3/0x230 [ 235.311067][ T7685] ? clear_bhb_loop+0x35/0x90 [ 235.315766][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.321677][ T7685] RIP: 0033:0x7fbccc97ff19 [ 235.326108][ T7685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.345734][ T7685] RSP: 002b:00007fbccd85d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.354182][ T7685] RAX: ffffffffffffffda RBX: 00007fbcccb45fa0 RCX: 00007fbccc97ff19 [ 235.362166][ T7685] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 235.370126][ T7685] RBP: 00007fbccd85d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 235.378084][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.386037][ T7685] R13: 0000000000000000 R14: 00007fbcccb45fa0 R15: 00007ffcc3ddff28 [ 235.394001][ T7685] [ 235.513739][ T7668] netlink: 'syz.0.471': attribute type 5 has an invalid length. [ 235.572426][ T29] audit: type=1800 audit(1733989693.708:124): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.469" name="bus" dev="overlay" ino=144 res=0 errno=0 [ 235.661333][ T7696] lo speed is unknown, defaulting to 1000 [ 235.667544][ T7696] lo speed is unknown, defaulting to 1000 [ 235.676934][ T7696] lo speed is unknown, defaulting to 1000 [ 235.687395][ T7696] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 235.700802][ T7696] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.731176][ T7696] lo speed is unknown, defaulting to 1000 [ 235.738217][ T7696] lo speed is unknown, defaulting to 1000 [ 235.755777][ T7696] lo speed is unknown, defaulting to 1000 [ 235.775993][ T7696] lo speed is unknown, defaulting to 1000 [ 235.786942][ T7696] lo speed is unknown, defaulting to 1000 [ 235.798940][ T7696] lo speed is unknown, defaulting to 1000 [ 238.088722][ T5867] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 239.776920][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'. [ 239.891013][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 239.904023][ T5867] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.913685][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.958597][ T5867] usb 5-1: Product: syz [ 239.968635][ T5867] usb 5-1: Manufacturer: syz [ 240.115741][ T5867] usb 5-1: SerialNumber: syz [ 240.123813][ T5867] usb 5-1: config 0 descriptor?? [ 240.256149][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 240.879951][ T7743] FAULT_INJECTION: forcing a failure. [ 240.879951][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 240.951825][ T7743] CPU: 0 UID: 0 PID: 7743 Comm: syz.2.488 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 240.962477][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.972561][ T7743] Call Trace: [ 240.975870][ T7743] [ 240.978824][ T7743] dump_stack_lvl+0x241/0x360 [ 240.983537][ T7743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.988786][ T7743] ? __pfx__printk+0x10/0x10 [ 240.993404][ T7743] ? fs_reclaim_acquire+0x93/0x130 [ 240.998595][ T7743] ? __pfx___might_resched+0x10/0x10 [ 241.003908][ T7743] should_fail_ex+0x3b0/0x4e0 [ 241.008612][ T7743] should_failslab+0xac/0x100 [ 241.013303][ T7743] __kmalloc_noprof+0xdd/0x4c0 [ 241.018067][ T7743] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 241.023790][ T7743] tomoyo_realpath_from_path+0xcf/0x5e0 [ 241.029343][ T7743] tomoyo_mount_permission+0x3bf/0xb80 [ 241.034804][ T7743] ? stack_depot_save_flags+0x37/0x940 [ 241.040262][ T7743] ? tomoyo_mount_permission+0x298/0xb80 [ 241.045895][ T7743] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 241.051902][ T7743] ? hook_sb_mount+0x10b/0x420 [ 241.056662][ T7743] ? security_sb_mount+0x22/0x2f0 [ 241.061693][ T7743] security_sb_mount+0xe0/0x2f0 [ 241.066549][ T7743] path_mount+0xb9/0xfa0 [ 241.070801][ T7743] ? kmem_cache_free+0x195/0x410 [ 241.075733][ T7743] ? user_path_at+0x44/0x60 [ 241.080237][ T7743] __se_sys_mount+0x2d6/0x3c0 [ 241.084915][ T7743] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 241.090901][ T7743] ? __pfx___se_sys_mount+0x10/0x10 [ 241.096097][ T7743] ? do_syscall_64+0x100/0x230 [ 241.100863][ T7743] ? __x64_sys_mount+0x20/0xc0 [ 241.105624][ T7743] do_syscall_64+0xf3/0x230 [ 241.110125][ T7743] ? clear_bhb_loop+0x35/0x90 [ 241.114811][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.120700][ T7743] RIP: 0033:0x7fbccc97ff19 [ 241.125111][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.144715][ T7743] RSP: 002b:00007fbccd85d058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.153126][ T7743] RAX: ffffffffffffffda RBX: 00007fbcccb45fa0 RCX: 00007fbccc97ff19 [ 241.161094][ T7743] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020100000 [ 241.169059][ T7743] RBP: 00007fbccd85d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.177023][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.184992][ T7743] R13: 0000000000000001 R14: 00007fbcccb45fa0 R15: 00007ffcc3ddff28 [ 241.193000][ T7743] [ 241.251893][ T5867] usb 5-1: USB disconnect, device number 6 [ 241.290321][ T7743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.799570][ T29] audit: type=1800 audit(1733989700.988:125): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.491" name="bus" dev="overlay" ino=628 res=0 errno=0 [ 244.901303][ T6272] udevd[6272]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.148209][ T7777] netlink: 277 bytes leftover after parsing attributes in process `syz.2.497'. [ 245.304683][ T7781] netlink: 'syz.3.498': attribute type 3 has an invalid length. [ 245.313791][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 245.541050][ T973] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 245.558667][ T5868] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 245.718705][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 245.718751][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 245.725729][ T5868] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 32 [ 245.739490][ T5868] usb 4-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.753638][ T973] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.757131][ T5868] usb 4-1: config 1 interface 0 has no altsetting 0 [ 245.770822][ T973] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 245.785674][ T973] usb 2-1: config 1 interface 0 has no altsetting 0 [ 245.803033][ T973] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 245.828997][ T5868] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.838082][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.847440][ T5868] usb 4-1: Product: 亨皆銖ⲅ进鶹ⶎ쇈瘴༶￡ê¾ï—¾ä‘«âºè¶æ¡•íšŠì’žçž¨á°½é¶î ç˜‡è­ï˜½é­™ê¤šá¡¾ì¢´ã‹¤í–¡é½Žî¿—☚î–ê½£ê追쥨唺罔ᙊꪊâ¾ì¡²ë›¦çŽ¼ãº®ã¤¢ï¹†ê¹î¢©ê·§å¿Ÿë¶¸ë¾œæ›­ç‘²î‡€å“•ï·‰æ§î²‰è•¤è’šáª»àº†è¢ä®†è¸µà§£è—¶î¢¤í²ìŠ¤ä…¸î‚쒲馄⃦哋똎崙桖âŒç»Žè§žê‰¢åž±ç­ à¿’㌗Ճ챓湵⺠[ 245.869346][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.924575][ T973] usb 2-1: Product: syz [ 245.929374][ T973] usb 2-1: Manufacturer: syz [ 245.933994][ T973] usb 2-1: SerialNumber: syz [ 245.947948][ T5868] usb 4-1: Manufacturer: á  [ 245.955012][ T5868] usb 4-1: SerialNumber: 細쀋%ã„娢é»å¡’影敷싪ר횬쮚낣晑㭦ꬱé›ì©‹ë—쬳年⫸輡 [ 245.979211][ T7781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 245.986488][ T7781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 246.750178][ T5868] usb 4-1: USB disconnect, device number 7 [ 246.953736][ T973] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 247.054958][ T5178] bcm5974 2-1:1.0: could not read from device [ 247.079852][ T5178] bcm5974 2-1:1.0: could not read from device [ 247.106075][ T5178] bcm5974 2-1:1.0: could not read from device [ 247.106182][ T973] usb 2-1: USB disconnect, device number 8 [ 247.348360][ T5178] bcm5974 2-1:1.0: could not read from device [ 250.379511][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.399337][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.542795][ T7849] lo speed is unknown, defaulting to 1000 [ 250.551442][ T7849] lo speed is unknown, defaulting to 1000 [ 250.557819][ T7849] lo speed is unknown, defaulting to 1000 [ 250.573393][ T7849] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 250.608716][ T5867] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 250.632476][ T7849] lo speed is unknown, defaulting to 1000 [ 250.669802][ T7849] lo speed is unknown, defaulting to 1000 [ 250.714490][ T7849] lo speed is unknown, defaulting to 1000 [ 250.737275][ T7849] lo speed is unknown, defaulting to 1000 [ 250.747338][ T7849] lo speed is unknown, defaulting to 1000 [ 250.765190][ T7849] lo speed is unknown, defaulting to 1000 [ 250.775873][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.810716][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.840931][ T7857] FAULT_INJECTION: forcing a failure. [ 250.840931][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 250.854120][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.3.519 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 250.864743][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.874825][ T7857] Call Trace: [ 250.878121][ T7857] [ 250.881069][ T7857] dump_stack_lvl+0x241/0x360 [ 250.885787][ T7857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.891010][ T7857] ? __pfx__printk+0x10/0x10 [ 250.895628][ T7857] ? __lock_acquire+0x1397/0x2100 [ 250.900684][ T7857] should_fail_ex+0x3b0/0x4e0 [ 250.905402][ T7857] should_failslab+0xac/0x100 [ 250.910114][ T7857] kmem_cache_alloc_node_noprof+0x77/0x380 [ 250.915948][ T7857] ? __alloc_skb+0x1c3/0x440 [ 250.920567][ T7857] __alloc_skb+0x1c3/0x440 [ 250.925003][ T7857] ? sctp_bind_addrs_to_raw+0xe6/0x2b0 [ 250.930494][ T7857] ? __pfx___alloc_skb+0x10/0x10 [ 250.935456][ T7857] ? sctp_del_bind_addr+0x160/0x190 [ 250.940688][ T7857] _sctp_make_chunk+0x58/0x460 [ 250.945482][ T7857] sctp_make_init+0x603/0x2840 [ 250.950269][ T7857] ? init_timer_key+0x9f/0x320 [ 250.955055][ T7857] ? kernel_text_address+0xa7/0xe0 [ 250.960197][ T7857] ? __pfx_sctp_make_init+0x10/0x10 [ 250.965424][ T7857] ? stack_trace_save+0x118/0x1d0 [ 250.970488][ T7857] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 250.975567][ T7857] ? __pfx_sctp_pname+0x10/0x10 [ 250.980452][ T7857] sctp_do_sm+0x1f1/0x60c0 [ 250.984920][ T7857] ? kasan_save_track+0x51/0x80 [ 250.989797][ T7857] ? __kasan_kmalloc+0x98/0xb0 [ 250.994586][ T7857] ? sctp_stream_init_ext+0x56/0x180 [ 250.999892][ T7857] ? sctp_sendmsg_to_asoc+0x12fd/0x1800 [ 251.005457][ T7857] ? __sock_sendmsg+0x1a6/0x270 [ 251.010335][ T7857] ? __sys_sendto+0x363/0x4c0 [ 251.015034][ T7857] ? __x64_sys_sendto+0xde/0x100 [ 251.019985][ T7857] ? do_syscall_64+0xf3/0x230 [ 251.024663][ T7857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.030736][ T7857] ? __pfx_sctp_do_sm+0x10/0x10 [ 251.035612][ T7857] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 251.041424][ T7857] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 251.046797][ T7857] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 251.052078][ T7857] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 251.057367][ T7857] ? __asan_memcpy+0x40/0x70 [ 251.061956][ T7857] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 251.067332][ T7857] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 251.073044][ T7857] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 251.078513][ T7857] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 251.084320][ T7857] ? sctp_sendmsg+0xbb9/0x3520 [ 251.089081][ T7857] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 251.094879][ T7857] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 251.100766][ T7857] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 251.106316][ T7857] sctp_sendmsg+0x1bc3/0x3520 [ 251.111000][ T7857] ? __pfx_sctp_sendmsg+0x10/0x10 [ 251.116020][ T7857] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 251.122794][ T7857] ? inet_sendmsg+0x330/0x390 [ 251.127506][ T7857] __sock_sendmsg+0x1a6/0x270 [ 251.132189][ T7857] __sys_sendto+0x363/0x4c0 [ 251.136694][ T7857] ? __pfx___sys_sendto+0x10/0x10 [ 251.141714][ T7857] ? __mutex_unlock_slowpath+0x21e/0x790 [ 251.147354][ T7857] ? __fget_files+0x2a/0x410 [ 251.151946][ T7857] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.157923][ T7857] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.164248][ T7857] __x64_sys_sendto+0xde/0x100 [ 251.169009][ T7857] do_syscall_64+0xf3/0x230 [ 251.173515][ T7857] ? clear_bhb_loop+0x35/0x90 [ 251.178194][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.184108][ T7857] RIP: 0033:0x7fd1abd7ff19 [ 251.188528][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.208131][ T7857] RSP: 002b:00007fd1acad2058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 251.216542][ T7857] RAX: ffffffffffffffda RBX: 00007fd1abf45fa0 RCX: 00007fd1abd7ff19 [ 251.224515][ T7857] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000003 [ 251.232487][ T7857] RBP: 00007fd1acad20a0 R08: 000000002005ffe4 R09: 000000000000001c [ 251.240455][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.248430][ T7857] R13: 0000000000000000 R14: 00007fd1abf45fa0 R15: 00007fff2f11c078 [ 251.256409][ T7857] [ 251.259588][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.274861][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.303277][ T5867] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 251.328573][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.482605][ T5867] usb 5-1: config 0 descriptor?? [ 251.979304][ T7827] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 251.987173][ T7827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.805170][ T973] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 252.906945][ T5867] hid-alps 0003:044E:120B.0006: unknown main item tag 0x0 [ 252.915744][ T5867] hid-alps 0003:044E:120B.0006: unknown main item tag 0x0 [ 252.915791][ T5867] hid-alps 0003:044E:120B.0006: unknown main item tag 0x0 [ 252.932708][ T5867] hid-alps 0003:044E:120B.0006: unknown main item tag 0x0 [ 252.940137][ T5867] hid-alps 0003:044E:120B.0006: unknown main item tag 0x0 [ 252.953062][ T5867] hid-alps 0003:044E:120B.0006: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 253.010302][ T973] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.039678][ T973] usb 2-1: config 1 interface 0 has no altsetting 0 [ 253.107304][ T973] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 253.130936][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.155821][ T5867] usb 5-1: USB disconnect, device number 7 [ 253.156949][ T7870] FAULT_INJECTION: forcing a failure. [ 253.156949][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 253.189899][ T973] usb 2-1: Product: syz [ 253.194114][ T973] usb 2-1: Manufacturer: syz [ 253.194801][ T7870] CPU: 1 UID: 0 PID: 7870 Comm: syz.0.524 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 253.200357][ T973] usb 2-1: SerialNumber: syz [ 253.209267][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.209309][ T7870] Call Trace: [ 253.209317][ T7870] [ 253.209327][ T7870] dump_stack_lvl+0x241/0x360 [ 253.234880][ T7870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.240119][ T7870] ? __pfx__printk+0x10/0x10 [ 253.244755][ T7870] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 253.250853][ T7870] ? __pfx___might_resched+0x10/0x10 [ 253.256176][ T7870] should_fail_ex+0x3b0/0x4e0 [ 253.260884][ T7870] should_failslab+0xac/0x100 [ 253.265586][ T7870] kmem_cache_alloc_node_noprof+0x77/0x380 [ 253.271412][ T7870] ? __alloc_skb+0x1c3/0x440 [ 253.276032][ T7870] __alloc_skb+0x1c3/0x440 [ 253.280471][ T7870] ? __pfx_genl_done+0x10/0x10 [ 253.285271][ T7870] ? __pfx___alloc_skb+0x10/0x10 [ 253.290234][ T7870] ? netlink_ack_tlv_len+0x6e/0x200 [ 253.295462][ T7870] netlink_ack+0x145/0xa50 [ 253.299896][ T7870] ? __pfx_ethnl_tunnel_info_start+0x10/0x10 [ 253.305903][ T7870] ? __pfx___might_resched+0x10/0x10 [ 253.311224][ T7870] netlink_rcv_skb+0x262/0x430 [ 253.316024][ T7870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.321075][ T7870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.326393][ T7870] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 253.331884][ T7870] genl_rcv+0x28/0x40 [ 253.335886][ T7870] netlink_unicast+0x7f6/0x990 [ 253.340684][ T7870] ? __pfx_netlink_unicast+0x10/0x10 [ 253.345989][ T7870] ? __virt_addr_valid+0x45f/0x530 [ 253.351118][ T7870] ? __phys_addr_symbol+0x2f/0x70 [ 253.356160][ T7870] ? __check_object_size+0x47a/0x730 [ 253.361471][ T7870] netlink_sendmsg+0x8e4/0xcb0 [ 253.366264][ T7870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.371582][ T7870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.376887][ T7870] __sock_sendmsg+0x221/0x270 [ 253.381591][ T7870] ____sys_sendmsg+0x52a/0x7e0 [ 253.386380][ T7870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.391683][ T7870] ? __fget_files+0x2a/0x410 [ 253.396293][ T7870] ? __fget_files+0x2a/0x410 [ 253.400912][ T7870] __sys_sendmsg+0x269/0x350 [ 253.405524][ T7870] ? __pfx_lock_release+0x10/0x10 [ 253.410569][ T7870] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.415709][ T7870] ? __pfx_vfs_write+0x10/0x10 [ 253.420516][ T7870] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.426860][ T7870] ? do_syscall_64+0x100/0x230 [ 253.431647][ T7870] ? do_syscall_64+0xb6/0x230 [ 253.436348][ T7870] do_syscall_64+0xf3/0x230 [ 253.440874][ T7870] ? clear_bhb_loop+0x35/0x90 [ 253.445579][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.451492][ T7870] RIP: 0033:0x7ff05cf7ff19 [ 253.455922][ T7870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.475550][ T7870] RSP: 002b:00007ff05dd23058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.483993][ T7870] RAX: ffffffffffffffda RBX: 00007ff05d145fa0 RCX: 00007ff05cf7ff19 [ 253.491982][ T7870] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 253.499970][ T7870] RBP: 00007ff05dd230a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.507946][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.515931][ T7870] R13: 0000000000000000 R14: 00007ff05d145fa0 R15: 00007fff6dbd3c18 [ 253.523919][ T7870] [ 253.535670][ T7871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.521'. [ 253.568700][ T973] usbhid 2-1:1.0: can't add hid device: -71 [ 253.576012][ T973] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 253.595956][ T973] usb 2-1: USB disconnect, device number 9 [ 253.746250][ T7877] netlink: 277 bytes leftover after parsing attributes in process `syz.2.523'. [ 256.698769][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.705106][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.975460][ T5903] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 258.523547][ T7917] team0: No ports can be present during mode change [ 260.789580][ T7936] netlink: 48 bytes leftover after parsing attributes in process `syz.4.536'. [ 260.798729][ T7936] netlink: 1 bytes leftover after parsing attributes in process `syz.4.536'. [ 262.953280][ T7938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.538'. [ 264.600501][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 265.981858][ T29] audit: type=1800 audit(1733989724.168:126): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.543" name="bus" dev="overlay" ino=704 res=0 errno=0 [ 268.007945][ T7983] [U] vÔ3 [ 268.336192][ T8011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.551'. [ 268.345876][ T8011] netlink: 1 bytes leftover after parsing attributes in process `syz.2.551'. [ 268.948443][ T8008] openvswitch: netlink: IP tunnel dst address not specified [ 273.697108][ T8054] netdevsim netdevsim3: Direct firmware load for printk failed with error -2 [ 273.707194][ T8054] netdevsim netdevsim3: Falling back to sysfs fallback for: printk [ 274.545297][ T8052] [U] vÔ3 [ 278.312940][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 279.145440][ T8100] team0: No ports can be present during mode change [ 280.557788][ T8116] netlink: 104 bytes leftover after parsing attributes in process `syz.2.578'. [ 280.637221][ T8121] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 280.884542][ T8119] netlink: 277 bytes leftover after parsing attributes in process `syz.3.580'. [ 281.425537][ T8128] netlink: 277 bytes leftover after parsing attributes in process `syz.1.581'. [ 283.026249][ T8137] team0: No ports can be present during mode change [ 284.505603][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 284.998215][ T8151] netlink: 'syz.4.589': attribute type 4 has an invalid length. [ 285.062479][ T8155] netlink: 'syz.4.589': attribute type 4 has an invalid length. [ 285.093328][ T8150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.590'. [ 285.160289][ T8156] C: renamed from team_slave_0 (while UP) [ 285.202933][ T8156] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 285.223008][ T8156] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.634521][ T8163] netlink: 277 bytes leftover after parsing attributes in process `syz.1.592'. [ 287.398123][ T5867] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 288.140460][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 288.301122][ T5867] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.319832][ T5867] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 288.337242][ T5867] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 288.347145][ T5867] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.356404][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.374341][ T5867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.403926][ T46] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 288.406831][ T8187] team0: No ports can be present during mode change [ 288.425927][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 288.442122][ T46] usb 2-1: can't read configurations, error -61 [ 288.690235][ T5867] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 288.871682][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.074904][ T5867] usb 5-1: USB disconnect, device number 8 [ 289.131479][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 289.239469][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 290.260926][ T46] usb 2-1: device descriptor read/all, error -71 [ 290.282335][ T46] usb usb2-port1: attempt power cycle [ 291.487677][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.487723][ T5903] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.570928][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.570963][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.570983][ T5903] usb 1-1: SerialNumber: syz [ 291.742835][ T5903] usb 1-1: bad CDC descriptors [ 291.986012][ T9] usb 1-1: USB disconnect, device number 6 [ 294.030025][ T8227] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 294.971407][ T29] audit: type=1800 audit(1733989753.128:127): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.615" name="bus" dev="overlay" ino=307 res=0 errno=0 [ 299.509381][ T8270] netlink: 277 bytes leftover after parsing attributes in process `syz.3.624'. [ 299.835369][ T8277] team0: No ports can be present during mode change [ 300.267227][ T8283] lo speed is unknown, defaulting to 1000 [ 300.281511][ T8283] lo speed is unknown, defaulting to 1000 [ 302.340072][ T8301] netlink: 48 bytes leftover after parsing attributes in process `syz.3.630'. [ 304.518804][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 306.025911][ T8337] netdevsim netdevsim3: Direct firmware load for printk failed with error -2 [ 306.036204][ T8337] netdevsim netdevsim3: Falling back to sysfs fallback for: printk [ 306.138910][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 306.301705][ T8339] netlink: 'syz.0.641': attribute type 4 has an invalid length. [ 306.319007][ T8345] netlink: 'syz.0.641': attribute type 4 has an invalid length. [ 306.957345][ T8336] [U] vÔ3vÔ3 [ 311.589228][ T8391] team0: No ports can be present during mode change [ 314.693262][ T8423] syz.3.663 (8423) used greatest stack depth: 17680 bytes left [ 314.856598][ T8427] IPv6: Can't replace route, no match found [ 314.876615][ T29] audit: type=1326 audit(1733989773.058:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz.4.662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x0 [ 315.328632][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 315.452044][ T8402] [U] vÔ3 [ 315.487296][ T8430] xt_CT: No such helper "pptp" [ 315.497131][ T8436] FAULT_INJECTION: forcing a failure. [ 315.497131][ T8436] name failslab, interval 1, probability 0, space 0, times 0 [ 315.512240][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.1.665 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 315.522867][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.532948][ T8436] Call Trace: [ 315.536243][ T8436] [ 315.539192][ T8436] dump_stack_lvl+0x241/0x360 [ 315.543902][ T8436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.549123][ T8436] ? __pfx__printk+0x10/0x10 [ 315.553718][ T8436] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 315.559614][ T8436] ? __pfx___might_resched+0x10/0x10 [ 315.564905][ T8436] should_fail_ex+0x3b0/0x4e0 [ 315.569591][ T8436] should_failslab+0xac/0x100 [ 315.574279][ T8436] ? __get_vm_area_node+0x132/0x2d0 [ 315.579473][ T8436] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 315.585187][ T8436] __get_vm_area_node+0x132/0x2d0 [ 315.590208][ T8436] __vmalloc_node_range_noprof+0x344/0x1380 [ 315.596098][ T8436] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 315.601640][ T8436] ? mark_lock+0x9a/0x360 [ 315.605978][ T8436] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.612304][ T8436] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 315.617841][ T8436] __vmalloc_noprof+0x79/0x90 [ 315.622514][ T8436] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 315.628056][ T8436] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 315.633427][ T8436] ? bpf_prog_alloc+0x28/0x1b0 [ 315.638191][ T8436] bpf_prog_alloc+0x3a/0x1b0 [ 315.642781][ T8436] bpf_prog_load+0x7f7/0x20f0 [ 315.647463][ T8436] ? __pfx_bpf_prog_load+0x10/0x10 [ 315.652569][ T8436] ? __pfx___might_resched+0x10/0x10 [ 315.657872][ T8436] ? __might_fault+0xc6/0x120 [ 315.662578][ T8436] __sys_bpf+0x4ee/0x810 [ 315.666821][ T8436] ? __pfx___sys_bpf+0x10/0x10 [ 315.671593][ T8436] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.677570][ T8436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.683897][ T8436] ? do_syscall_64+0x100/0x230 [ 315.688663][ T8436] __x64_sys_bpf+0x7c/0x90 [ 315.693081][ T8436] do_syscall_64+0xf3/0x230 [ 315.697588][ T8436] ? clear_bhb_loop+0x35/0x90 [ 315.702271][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.708161][ T8436] RIP: 0033:0x7f4c3c37ff19 [ 315.712578][ T8436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.732206][ T8436] RSP: 002b:00007f4c3d1d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.740631][ T8436] RAX: ffffffffffffffda RBX: 00007f4c3c545fa0 RCX: 00007f4c3c37ff19 [ 315.748608][ T8436] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 315.756587][ T8436] RBP: 00007f4c3d1d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.764557][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.772535][ T8436] R13: 0000000000000000 R14: 00007f4c3c545fa0 R15: 00007ffdde8b7788 [ 315.780519][ T8436] [ 315.821759][ T8436] syz.1.665: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.829362][ T9] usb 4-1: device descriptor read/64, error -71 [ 315.839418][ T8436] CPU: 1 UID: 0 PID: 8436 Comm: syz.1.665 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 315.855595][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.865680][ T8436] Call Trace: [ 315.868993][ T8436] [ 315.871949][ T8436] dump_stack_lvl+0x241/0x360 [ 315.876643][ T8436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.881852][ T8436] ? __pfx__printk+0x10/0x10 [ 315.886447][ T8436] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 315.892864][ T8436] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 315.899378][ T8436] warn_alloc+0x278/0x410 [ 315.903718][ T8436] ? __pfx_warn_alloc+0x10/0x10 [ 315.908565][ T8436] ? __kasan_kmalloc+0x23/0xb0 [ 315.913339][ T8436] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 315.919320][ T8436] ? __get_vm_area_node+0x280/0x2d0 [ 315.924517][ T8436] __vmalloc_node_range_noprof+0x369/0x1380 [ 315.930406][ T8436] ? mark_lock+0x9a/0x360 [ 315.934749][ T8436] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.941086][ T8436] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 315.946635][ T8436] __vmalloc_noprof+0x79/0x90 [ 315.951317][ T8436] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 315.956858][ T8436] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 315.962223][ T8436] ? bpf_prog_alloc+0x28/0x1b0 [ 315.966981][ T8436] bpf_prog_alloc+0x3a/0x1b0 [ 315.971567][ T8436] bpf_prog_load+0x7f7/0x20f0 [ 315.976246][ T8436] ? __pfx_bpf_prog_load+0x10/0x10 [ 315.981353][ T8436] ? __pfx___might_resched+0x10/0x10 [ 315.986654][ T8436] ? __might_fault+0xc6/0x120 [ 315.991330][ T8436] __sys_bpf+0x4ee/0x810 [ 315.995586][ T8436] ? __pfx___sys_bpf+0x10/0x10 [ 316.000351][ T8436] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.006332][ T8436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.012662][ T8436] ? do_syscall_64+0x100/0x230 [ 316.017427][ T8436] __x64_sys_bpf+0x7c/0x90 [ 316.021845][ T8436] do_syscall_64+0xf3/0x230 [ 316.026354][ T8436] ? clear_bhb_loop+0x35/0x90 [ 316.031042][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.036934][ T8436] RIP: 0033:0x7f4c3c37ff19 [ 316.041355][ T8436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.060968][ T8436] RSP: 002b:00007f4c3d1d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.069388][ T8436] RAX: ffffffffffffffda RBX: 00007f4c3c545fa0 RCX: 00007f4c3c37ff19 [ 316.077354][ T8436] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 316.085324][ T8436] RBP: 00007f4c3d1d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.093293][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.101259][ T8436] R13: 0000000000000000 R14: 00007f4c3c545fa0 R15: 00007ffdde8b7788 [ 316.109237][ T8436] [ 316.154781][ T8436] Mem-Info: [ 316.158071][ T8436] active_anon:2576 inactive_anon:7240 isolated_anon:0 [ 316.158071][ T8436] active_file:21209 inactive_file:38068 isolated_file:0 [ 316.158071][ T8436] unevictable:1216 dirty:105 writeback:0 [ 316.158071][ T8436] slab_reclaimable:10924 slab_unreclaimable:101150 [ 316.158071][ T8436] mapped:32228 shmem:6589 pagetables:1020 [ 316.158071][ T8436] sec_pagetables:0 bounce:0 [ 316.158071][ T8436] kernel_misc_reclaimable:0 [ 316.158071][ T8436] free:1310927 free_pcp:1015 free_cma:0 [ 316.278857][ T8436] Node 0 active_anon:19408kB inactive_anon:27320kB active_file:84760kB inactive_file:152272kB unevictable:3328kB isolated(anon):0kB isolated(file):0kB mapped:127328kB dirty:420kB writeback:0kB shmem:32420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11632kB pagetables:3944kB sec_pagetables:0kB all_unreclaimable? no [ 316.318276][ T8436] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 316.351001][ T8436] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.390327][ T8436] lowmem_reserve[]: 0 2465 2466 0 0 [ 316.397110][ T8436] Node 0 DMA32 free:1311276kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19468kB inactive_anon:30592kB active_file:83976kB inactive_file:152220kB unevictable:3328kB writepending:440kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:5380kB local_pcp:5364kB free_cma:0kB [ 316.437512][ T8436] lowmem_reserve[]: 0 0 0 0 0 [ 316.460214][ T8436] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.488962][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 316.508013][ T8436] lowmem_reserve[]: 0 0 0 0 0 [ 316.518374][ T8436] Node 1 Normal free:3905080kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.553259][ T8436] lowmem_reserve[]: 0 0 0 0 0 [ 316.558026][ T8436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.574306][ T8436] Node 0 DMA32: 31*4kB (M) 40*8kB (UM) 191*16kB (UME) 1283*32kB (UME) 1303*64kB (UM) 351*128kB (UME) 151*256kB (UME) 51*512kB (UME) 29*1024kB (UME) 17*2048kB (UME) 249*4096kB (UM) = 1322060kB [ 316.594344][ T8436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.654863][ T9] usb 4-1: device descriptor read/64, error -71 [ 316.819079][ T8436] Node 1 Normal: 224*4kB (UM) 61*8kB (UME) 45*16kB (UME) 226*32kB (UME) 101*64kB (UME) 33*128kB (UME) 20*256kB (UM) 12*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 943*4096kB (M) = 3905080kB [ 316.934056][ T8436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.288611][ T9] usb usb4-port1: attempt power cycle [ 317.421119][ T8436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.483925][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.492339][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.540856][ T8436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.567607][ T8436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.597984][ T8436] 64850 total pagecache pages [ 317.612303][ T8436] 0 pages in swap cache [ 317.616496][ T8436] Free swap = 124476kB [ 317.620800][ T8436] Total swap = 124996kB [ 317.624965][ T8436] 2097051 pages RAM [ 317.628842][ T8436] 0 pages HighMem/MovableOnly [ 317.633523][ T8436] 427005 pages reserved [ 317.637679][ T8436] 0 pages cma reserved [ 318.073069][ T8456] netlink: 277 bytes leftover after parsing attributes in process `syz.0.669'. [ 318.690997][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 319.194494][ T9] usb 4-1: device not accepting address 10, error -71 [ 325.051482][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 326.286303][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 332.935521][ T8573] delete_channel: no stack [ 333.616040][ T8569] delete_channel: no stack [ 333.896524][ T29] audit: type=1800 audit(1733989792.078:129): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.694" name="bus" dev="overlay" ino=880 res=0 errno=0 [ 333.940178][ T8580] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 333.947865][ T8580] netlink: 152 bytes leftover after parsing attributes in process `syz.1.697'. [ 334.216660][ T8580] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 337.722455][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 339.694177][ T8618] netlink: 'syz.2.710': attribute type 4 has an invalid length. [ 339.702117][ T8618] netlink: 152 bytes leftover after parsing attributes in process `syz.2.710'. [ 339.716312][ T8618] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 341.708639][ T5903] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 341.903005][ T8646] netlink: 277 bytes leftover after parsing attributes in process `syz.4.714'. [ 343.498605][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 343.621724][ T5903] usb 1-1: config 253 has an invalid interface number: 186 but max is 2 [ 343.638767][ T5903] usb 1-1: config 253 has an invalid interface number: 45 but max is 2 [ 343.662209][ T5903] usb 1-1: config 253 has an invalid interface number: 7 but max is 2 [ 343.671251][ T5903] usb 1-1: config 253 has an invalid interface number: 9 but max is 2 [ 343.679895][ T5903] usb 1-1: config 253 has 4 interfaces, different from the descriptor's value: 3 [ 343.696542][ T5903] usb 1-1: config 253 has no interface number 0 [ 343.706359][ T5903] usb 1-1: config 253 has no interface number 1 [ 344.179468][ T5903] usb 1-1: config 253 has no interface number 2 [ 344.185771][ T5903] usb 1-1: config 253 has no interface number 3 [ 344.192895][ T5903] usb 1-1: config 253 interface 186 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 344.207858][ T5903] usb 1-1: config 253 interface 186 altsetting 1 endpoint 0x5 has invalid maxpacket 447, setting to 64 [ 344.219643][ T5903] usb 1-1: config 253 interface 186 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 344.258678][ T5903] usb 1-1: config 253 interface 186 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 344.269826][ T5903] usb 1-1: config 253 interface 186 altsetting 1 endpoint 0xC has an invalid bInterval 119, changing to 10 [ 344.281368][ T5903] usb 1-1: config 253 interface 186 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 344.292482][ T5903] usb 1-1: config 253 interface 186 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 344.304340][ T5903] usb 1-1: config 253 interface 186 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 344.316030][ T5903] usb 1-1: config 253 interface 186 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 344.327120][ T5903] usb 1-1: config 253 interface 186 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 344.342980][ T5903] usb 1-1: config 253 interface 186 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 344.354010][ T5903] usb 1-1: config 253 interface 45 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 344.365225][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 344.376328][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 344.387655][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 344.398861][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 344.410912][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 344.422576][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 344.434002][ T5903] usb 1-1: config 253 interface 45 altsetting 255 bulk endpoint 0x8 has invalid maxpacket 32 [ 344.465460][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 344.476799][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 344.487930][ T5903] usb 1-1: config 253 interface 45 altsetting 255 endpoint 0x1 has invalid maxpacket 1600, setting to 64 [ 344.499892][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 344.511677][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 344.528758][ T5903] usb 1-1: config 253 interface 45 altsetting 255 has 13 endpoint descriptors, different from the interface descriptor's value: 15 [ 344.542421][ T5903] usb 1-1: too many endpoints for config 253 interface 7 altsetting 39: 105, using maximum allowed: 30 [ 344.556436][ T5903] usb 1-1: config 253 interface 7 altsetting 39 has a duplicate endpoint with address 0xE, skipping [ 344.567431][ T5903] usb 1-1: config 253 interface 7 altsetting 39 has a duplicate endpoint with address 0x9, skipping [ 344.578447][ T5903] usb 1-1: config 253 interface 7 altsetting 39 has 2 endpoint descriptors, different from the interface descriptor's value: 105 [ 344.592385][ T5903] usb 1-1: config 253 interface 9 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 344.603837][ T5903] usb 1-1: config 253 interface 9 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 344.615373][ T5903] usb 1-1: config 253 interface 9 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 344.627103][ T5903] usb 1-1: config 253 interface 9 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 344.638051][ T5903] usb 1-1: config 253 interface 9 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 344.648850][ T5903] usb 1-1: config 253 interface 186 has no altsetting 0 [ 344.655846][ T5903] usb 1-1: config 253 interface 45 has no altsetting 0 [ 344.663112][ T5903] usb 1-1: config 253 interface 7 has no altsetting 0 [ 344.671296][ T5903] usb 1-1: config 253 interface 9 has no altsetting 0 [ 345.790531][ T5903] usb 1-1: string descriptor 0 read error: -71 [ 345.796976][ T5903] usb 1-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=4e.a4 [ 345.826594][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.059239][ T8665] netlink: 277 bytes leftover after parsing attributes in process `syz.4.720'. [ 346.139058][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 346.603302][ T5903] usb 1-1: can't set config #253, error -71 [ 346.687873][ T5903] usb 1-1: USB disconnect, device number 7 [ 346.984501][ T8669] netlink: 'syz.4.721': attribute type 4 has an invalid length. [ 347.058729][ T8669] netlink: 152 bytes leftover after parsing attributes in process `syz.4.721'. [ 347.103962][ T8669] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 347.978482][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 350.729901][ T8695] delete_channel: no stack [ 350.928089][ T8690] delete_channel: no stack [ 351.575924][ T8704] syz.2.729: attempt to access beyond end of device [ 351.575924][ T8704] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 351.593645][ T8704] FAT-fs (nbd2): unable to read boot sector [ 353.410114][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.732'. [ 353.559560][ T8711] FAULT_INJECTION: forcing a failure. [ 353.559560][ T8711] name failslab, interval 1, probability 0, space 0, times 0 [ 353.572699][ T8711] CPU: 0 UID: 0 PID: 8711 Comm: syz.3.732 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 353.583326][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.593410][ T8711] Call Trace: [ 353.596718][ T8711] [ 353.599671][ T8711] dump_stack_lvl+0x241/0x360 [ 353.604382][ T8711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.609603][ T8711] ? __pfx__printk+0x10/0x10 [ 353.614216][ T8711] ? __kmalloc_noprof+0xb5/0x4c0 [ 353.619177][ T8711] ? __pfx___might_resched+0x10/0x10 [ 353.624496][ T8711] should_fail_ex+0x3b0/0x4e0 [ 353.629205][ T8711] should_failslab+0xac/0x100 [ 353.633911][ T8711] __kmalloc_noprof+0xdd/0x4c0 [ 353.638729][ T8711] ? compute_effective_progs+0x260/0x5b0 [ 353.644393][ T8711] compute_effective_progs+0x260/0x5b0 [ 353.649878][ T8711] update_effective_progs+0x53/0x210 [ 353.655190][ T8711] cgroup_bpf_attach+0xe84/0x1240 [ 353.660242][ T8711] ? __pfx_cgroup_bpf_attach+0x10/0x10 [ 353.665724][ T8711] ? bpf_link_prime+0x171/0x240 [ 353.670608][ T8711] cgroup_bpf_link_attach+0x237/0x3c0 [ 353.676006][ T8711] ? __pfx_cgroup_bpf_link_attach+0x10/0x10 [ 353.681925][ T8711] ? ns_capable+0x8a/0xf0 [ 353.686288][ T8711] ? attach_type_to_prog_type+0x444/0x460 [ 353.692036][ T8711] ? bpf_prog_attach_check_attach_type+0x166/0x4f0 [ 353.698564][ T8711] link_create+0x4f6/0x870 [ 353.703012][ T8711] __sys_bpf+0x4bc/0x810 [ 353.707279][ T8711] ? __pfx___sys_bpf+0x10/0x10 [ 353.712081][ T8711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.718082][ T8711] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.724436][ T8711] ? do_syscall_64+0x100/0x230 [ 353.729236][ T8711] __x64_sys_bpf+0x7c/0x90 [ 353.733677][ T8711] do_syscall_64+0xf3/0x230 [ 353.738215][ T8711] ? clear_bhb_loop+0x35/0x90 [ 353.742926][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.748847][ T8711] RIP: 0033:0x7fd1abd7ff19 [ 353.753282][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.772915][ T8711] RSP: 002b:00007fd1acab1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.781359][ T8711] RAX: ffffffffffffffda RBX: 00007fd1abf46080 RCX: 00007fd1abd7ff19 [ 353.789353][ T8711] RDX: 0000000000000020 RSI: 0000000020000400 RDI: 000000000000001c [ 353.797363][ T8711] RBP: 00007fd1acab10a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.805358][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.813356][ T8711] R13: 0000000000000000 R14: 00007fd1abf46080 R15: 00007fff2f11c078 [ 353.821366][ T8711] [ 353.931116][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'. [ 354.318133][ T8720] binder: BINDER_SET_CONTEXT_MGR already set [ 354.324646][ T8720] binder: 8719:8720 ioctl 4018620d 20000040 returned -16 [ 354.417756][ T8723] netlink: 'syz.1.736': attribute type 4 has an invalid length. [ 354.425855][ T8723] netlink: 152 bytes leftover after parsing attributes in process `syz.1.736'. [ 354.434956][ T8723] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 360.963750][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.743'. [ 364.554241][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 365.012272][ T8789] netlink: 'syz.0.750': attribute type 4 has an invalid length. [ 365.037887][ T8789] netlink: 152 bytes leftover after parsing attributes in process `syz.0.750'. [ 365.152053][ T8789] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 365.935773][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 366.850196][ T8802] netlink: 277 bytes leftover after parsing attributes in process `syz.3.752'. [ 368.780473][ T8820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 370.498649][ T8826] team0: No ports can be present during mode change [ 372.297178][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 372.888127][ T8837] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.761' sets config #0 [ 373.322899][ T8846] Bluetooth: MGMT ver 1.23 [ 373.581924][ T8848] trusted_key: syz.4.763 sent an empty control message without MSG_MORE. [ 373.672207][ T8845] tipc: Started in network mode [ 373.677120][ T8845] tipc: Node identity 101, cluster identity 4711 [ 373.714264][ T8845] tipc: Node number set to 257 [ 375.424124][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 375.730955][ T8870] netdevsim netdevsim0: Direct firmware load for printk failed with error -2 [ 375.740482][ T8870] netdevsim netdevsim0: Falling back to sysfs fallback for: printk [ 376.357966][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 376.630983][ T8871] [U] vÔ3vÔ3 [ 376.726543][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 378.288262][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.780'. [ 378.412667][ T8907] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 378.541415][ T8907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 378.888927][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 378.918928][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.925436][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.463099][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 380.843865][ T8921] netdevsim netdevsim0: Direct firmware load for printk failed with error -2 [ 380.852728][ T8921] netdevsim netdevsim0: Falling back to sysfs fallback for: printk [ 381.269752][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 381.646667][ T29] audit: type=1800 audit(1733989839.828:130): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.786" name="bus" dev="overlay" ino=871 res=0 errno=0 [ 382.048401][ T8920] [U] vÔ3 [ 382.836725][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.853858][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.862919][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.875467][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.883118][ T5133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 382.890621][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.961756][ T8946] lo speed is unknown, defaulting to 1000 [ 382.969607][ T8946] lo speed is unknown, defaulting to 1000 [ 383.223583][ T8961] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 384.543283][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 385.075865][ T5835] Bluetooth: hci5: command tx timeout [ 387.187730][ T5835] Bluetooth: hci5: command tx timeout [ 387.203740][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.222934][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.285868][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 387.497001][ T8946] bridge_slave_0: entered allmulticast mode [ 387.515491][ T8946] bridge_slave_0: entered promiscuous mode [ 387.556779][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.598791][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.607105][ T8946] bridge_slave_1: entered allmulticast mode [ 387.823444][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 387.834766][ T8946] bridge_slave_1: entered promiscuous mode [ 387.845103][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.798'. [ 388.922626][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.963830][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.238865][ T5835] Bluetooth: hci5: command tx timeout [ 391.499392][ T5835] Bluetooth: hci5: command tx timeout [ 391.522271][ T8946] team0: Port device team_slave_0 added [ 391.564695][ T8946] team0: Port device team_slave_1 added [ 391.720514][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.742480][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.773172][ T8946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.807423][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.816356][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.939772][ T8946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.012915][ T8946] hsr_slave_0: entered promiscuous mode [ 392.025052][ T9033] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 392.042617][ T8946] hsr_slave_1: entered promiscuous mode [ 392.061888][ T8946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.140162][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'. [ 392.625518][ T8946] Cannot create hsr debugfs directory [ 394.487068][ T8946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.603013][ T8946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.717172][ T8946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.923141][ T8946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 396.525909][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.545844][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.563998][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.571184][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.582817][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.589960][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.641954][ T8946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.652645][ T8946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.408008][ T9077] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 397.857131][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.047522][ T9087] team0: No ports can be present during mode change [ 398.772293][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 400.147687][ T8946] veth0_vlan: entered promiscuous mode [ 400.617279][ T8946] veth1_vlan: entered promiscuous mode [ 400.913540][ T8946] veth0_macvtap: entered promiscuous mode [ 400.930905][ T9117] syz.3.828: attempt to access beyond end of device [ 400.930905][ T9117] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 400.994496][ T8946] veth1_macvtap: entered promiscuous mode [ 401.028781][ T9117] FAT-fs (nbd3): unable to read boot sector [ 401.091096][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.156691][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.166839][ T5867] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 401.228575][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.304753][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.356074][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.367140][ T5867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.407933][ T5867] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 401.438822][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.489174][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.498258][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 401.507203][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.549986][ T5867] usb 1-1: SerialNumber: syz [ 401.568888][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.604203][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.604618][ T5867] usb 1-1: bad CDC descriptors [ 401.614728][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.614761][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.614778][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.617530][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.661584][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.679189][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.707635][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.728612][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.768991][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.798631][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.816770][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.846367][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.102441][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.214553][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.224720][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.772495][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.824245][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.943300][ T8946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.988739][ T8946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.045782][ T8946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.166070][ T8946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.132747][ T46] usb 1-1: USB disconnect, device number 8 [ 404.234252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.272008][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.280035][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.283554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.408049][ T9143] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 404.718847][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 405.515631][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 406.100649][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.123083][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 406.209488][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.572162][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 406.600378][ T46] usb 4-1: SerialNumber: syz [ 406.746179][ T46] usb 4-1: bad CDC descriptors [ 406.904408][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 406.963230][ T9172] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 407.159231][ T9172] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 407.397074][ T29] audit: type=1800 audit(1733989865.578:131): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.843" name="bus" dev="overlay" ino=37 res=0 errno=0 [ 408.239639][ T973] usb 4-1: USB disconnect, device number 12 [ 409.364034][ T9199] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 409.398599][ T9200] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.847' sets config #0 [ 411.043857][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 411.055315][ T9215] netlink: 'syz.4.852': attribute type 4 has an invalid length. [ 411.093027][ T9215] netlink: 'syz.4.852': attribute type 4 has an invalid length. [ 411.989801][ T9228] syz.1.855: attempt to access beyond end of device [ 411.989801][ T9228] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 412.119445][ T9228] FAT-fs (nbd1): unable to read boot sector [ 412.526093][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.854'. [ 413.531846][ T9241] mkiss: ax0: crc mode is auto. [ 414.863682][ T9245] team0: No ports can be present during mode change [ 414.895399][ T29] audit: type=1800 audit(1733989873.068:132): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.859" name="bus" dev="overlay" ino=70 res=0 errno=0 [ 415.326303][ T9253] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 415.419021][ T9256] netlink: 277 bytes leftover after parsing attributes in process `syz.3.861'. [ 418.572619][ T9268] [U] vÔ3 [ 418.914434][ T9283] netlink: 48 bytes leftover after parsing attributes in process `syz.4.868'. [ 419.826057][ T9287] netlink: 277 bytes leftover after parsing attributes in process `syz.3.869'. [ 420.866125][ T9295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 421.324691][ T9307] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.872' sets config #0 [ 422.011559][ T9313] netlink: 277 bytes leftover after parsing attributes in process `syz.5.875'. [ 423.141761][ T29] audit: type=1326 audit(1733989881.328:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dacd7ff19 code=0x7fc00000 [ 423.338691][ T5870] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 423.554650][ T9334] netdevsim netdevsim4: Direct firmware load for printk failed with error -2 [ 423.564173][ T9334] netdevsim netdevsim4: Falling back to sysfs fallback for: printk [ 423.668603][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 423.754346][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.771824][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.909151][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.939373][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 423.958622][ T5870] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 423.986104][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.017782][ T5870] usb 6-1: config 0 descriptor?? [ 424.395820][ T9332] [U] vÔ3 [ 424.559602][ T9346] netlink: 277 bytes leftover after parsing attributes in process `syz.0.884'. [ 425.123900][ T5870] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 425.130915][ T5870] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 425.137830][ T5870] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 425.144880][ T5870] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 425.152881][ T5870] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 425.212983][ T5870] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.5-1/input0 [ 425.296013][ T5870] usb 6-1: USB disconnect, device number 2 [ 425.309649][ T9352] FAULT_INJECTION: forcing a failure. [ 425.309649][ T9352] name failslab, interval 1, probability 0, space 0, times 0 [ 425.358879][ T9352] CPU: 0 UID: 0 PID: 9352 Comm: syz.3.885 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 425.369529][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 425.379595][ T9352] Call Trace: [ 425.382871][ T9352] [ 425.385797][ T9352] dump_stack_lvl+0x241/0x360 [ 425.390573][ T9352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.395771][ T9352] ? __pfx__printk+0x10/0x10 [ 425.400362][ T9352] ? fs_reclaim_acquire+0x93/0x130 [ 425.405479][ T9352] ? __pfx___might_resched+0x10/0x10 [ 425.410769][ T9352] ? dynamic_dname+0x141/0x1b0 [ 425.415542][ T9352] should_fail_ex+0x3b0/0x4e0 [ 425.420227][ T9352] should_failslab+0xac/0x100 [ 425.424908][ T9352] __kmalloc_noprof+0xdd/0x4c0 [ 425.429672][ T9352] ? tomoyo_encode+0x26f/0x540 [ 425.434433][ T9352] tomoyo_encode+0x26f/0x540 [ 425.439021][ T9352] ? __pfx_sockfs_dname+0x10/0x10 [ 425.444045][ T9352] tomoyo_realpath_from_path+0x59e/0x5e0 [ 425.449683][ T9352] tomoyo_path_number_perm+0x236/0x860 [ 425.455136][ T9352] ? __lock_acquire+0x1397/0x2100 [ 425.460158][ T9352] ? tomoyo_path_number_perm+0x206/0x860 [ 425.465788][ T9352] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.471790][ T9352] ? __fget_files+0x2a/0x410 [ 425.476378][ T9352] ? __fget_files+0x2a/0x410 [ 425.480962][ T9352] security_file_ioctl+0xc6/0x2a0 [ 425.485983][ T9352] __se_sys_ioctl+0x46/0x170 [ 425.490571][ T9352] do_syscall_64+0xf3/0x230 [ 425.495073][ T9352] ? clear_bhb_loop+0x35/0x90 [ 425.499754][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.505649][ T9352] RIP: 0033:0x7fd1abd7ff19 [ 425.510065][ T9352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.529669][ T9352] RSP: 002b:00007fd1acad2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.538105][ T9352] RAX: ffffffffffffffda RBX: 00007fd1abf45fa0 RCX: 00007fd1abd7ff19 [ 425.546095][ T9352] RDX: 0000000020000040 RSI: 0000000000008b26 RDI: 0000000000000003 [ 425.554068][ T9352] RBP: 00007fd1acad20a0 R08: 0000000000000000 R09: 0000000000000000 [ 425.562036][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.570002][ T9352] R13: 0000000000000000 R14: 00007fd1abf45fa0 R15: 00007fff2f11c078 [ 425.577982][ T9352] [ 425.609844][ T9352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.476407][ T29] audit: type=1800 audit(1733989885.658:134): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.893" name="bus" dev="overlay" ino=1025 res=0 errno=0 [ 427.606051][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 427.628389][ T9381] netlink: 'syz.3.894': attribute type 4 has an invalid length. [ 427.657338][ T9381] netlink: 'syz.3.894': attribute type 4 has an invalid length. [ 429.890510][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 429.998666][ T29] audit: type=1326 audit(1733989887.518:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9374 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 430.054356][ T29] audit: type=1326 audit(1733989887.528:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9374 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 430.086773][ T29] audit: type=1326 audit(1733989887.528:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9374 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 430.174559][ T29] audit: type=1326 audit(1733989887.528:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9374 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 430.215609][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 430.246778][ T29] audit: type=1326 audit(1733989887.528:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9374 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 430.270863][ T9404] netlink: 'syz.5.900': attribute type 4 has an invalid length. [ 430.313134][ T29] audit: type=1326 audit(1733989887.528:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9374 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 430.319626][ T9404] netlink: 'syz.5.900': attribute type 4 has an invalid length. [ 430.438783][ T5869] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 430.616347][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.720368][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 431.328103][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.337505][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 431.357114][ T5869] usb 1-1: SerialNumber: syz [ 431.373143][ T5869] usb 1-1: bad CDC descriptors [ 433.423153][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 433.550164][ T9427] netlink: 'syz.3.906': attribute type 4 has an invalid length. [ 433.596506][ T9427] netlink: 'syz.3.906': attribute type 4 has an invalid length. [ 434.217668][ T9439] delete_channel: no stack [ 434.223124][ T9438] delete_channel: no stack [ 435.051984][ T5868] usb 1-1: USB disconnect, device number 9 [ 435.102031][ T9444] syz.4.912: attempt to access beyond end of device [ 435.102031][ T9444] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 435.121633][ T9444] FAT-fs (nbd4): unable to read boot sector [ 435.520028][ T29] audit: type=1326 audit(1733989893.668:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.5.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 435.608201][ T29] audit: type=1326 audit(1733989893.668:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.5.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a4b7ff19 code=0x7fc00000 [ 436.330350][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.917'. [ 437.320236][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 437.359328][ T9472] netlink: 'syz.3.919': attribute type 4 has an invalid length. [ 437.454468][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 437.675634][ T9476] delete_channel: no stack [ 437.680919][ T9475] delete_channel: no stack [ 438.363560][ T9481] netlink: 'syz.3.919': attribute type 4 has an invalid length. [ 439.826561][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 440.322186][ T9498] syz.3.926: attempt to access beyond end of device [ 440.322186][ T9498] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 440.410122][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.416671][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.446285][ T9498] FAT-fs (nbd3): unable to read boot sector [ 440.543651][ T5868] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 440.711638][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.722049][ T5868] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 440.736481][ T5868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.780617][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 441.004961][ T5868] usb 6-1: SerialNumber: syz [ 441.048628][ T5868] usb 6-1: bad CDC descriptors [ 442.686397][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 443.251391][ T5870] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 443.342102][ T9530] ubi0: attaching mtd0 [ 443.348997][ T9530] ubi0: scanning is finished [ 443.353628][ T9530] ubi0: empty MTD device detected [ 444.391416][ T973] usb 6-1: USB disconnect, device number 3 [ 444.531625][ T9530] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 445.162201][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 445.175013][ T5870] usb 4-1: config 1 has an invalid interface number: 44 but max is 1 [ 445.221065][ T5870] usb 4-1: config 1 has an invalid interface number: 44 but max is 1 [ 445.277712][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 445.286914][ T5870] usb 4-1: config 1 has no interface number 0 [ 445.293117][ T5870] usb 4-1: config 1 interface 44 has no altsetting 0 [ 445.300418][ T5870] usb 4-1: config 1 interface 44 has no altsetting 1 [ 445.945352][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.937'. [ 446.947954][ T5870] usb 4-1: New USB device found, idVendor=132b, idProduct=000b, bcdDevice= 0.01 [ 446.957203][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.967690][ T9547] syz.4.939: attempt to access beyond end of device [ 446.967690][ T9547] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 446.987619][ T9547] FAT-fs (nbd4): unable to read boot sector [ 447.302613][ T5870] usb 4-1: can't set config #1, error -71 [ 447.620591][ T5870] usb 4-1: USB disconnect, device number 13 [ 448.693121][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 449.187858][ T9568] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.945' sets config #0 [ 449.311125][ T9570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.943'. [ 449.320211][ T9570] netlink: 1 bytes leftover after parsing attributes in process `syz.0.943'. [ 449.688720][ T5868] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 449.812988][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'. [ 449.909284][ T5868] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.026206][ T5868] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 450.218105][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.407485][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 450.456920][ T5868] usb 5-1: SerialNumber: syz [ 450.672090][ T5868] usb 5-1: bad CDC descriptors [ 452.506730][ T973] usb 5-1: USB disconnect, device number 9 [ 456.262000][ T9625] netlink: 277 bytes leftover after parsing attributes in process `syz.4.959'. [ 457.051121][ T9628] syz.5.958: attempt to access beyond end of device [ 457.051121][ T9628] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 457.107378][ T9628] FAT-fs (nbd5): unable to read boot sector [ 457.569890][ T9638] netlink: 277 bytes leftover after parsing attributes in process `syz.1.961'. [ 458.707928][ T9652] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.960' sets config #0 [ 458.818757][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 459.022806][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.042412][ T5870] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 459.085062][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.105727][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 459.117727][ T5870] usb 6-1: SerialNumber: syz [ 459.146261][ T5870] usb 6-1: bad CDC descriptors [ 461.779859][ T46] usb 6-1: USB disconnect, device number 4 [ 465.741990][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 467.399569][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 468.663225][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 468.782019][ T9724] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 468.798437][ T9724] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 471.441223][ T9756] syz.1.989: attempt to access beyond end of device [ 471.441223][ T9756] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 471.457165][ T9756] FAT-fs (nbd1): unable to read boot sector [ 472.432682][ T9763] lo speed is unknown, defaulting to 1000 [ 472.450944][ T9763] lo speed is unknown, defaulting to 1000 [ 472.835804][ T9769] ubi0: attaching mtd0 [ 472.841176][ T9769] ubi0: scanning is finished [ 472.846536][ T9769] ------------[ cut here ]------------ [ 472.852419][ T9769] notifier callback ubi_wl_reboot_notifier already registered [ 472.852522][ T9769] WARNING: CPU: 0 PID: 9769 at kernel/notifier.c:24 notifier_chain_register+0x29b/0x3f0 [ 472.869786][ T9769] Modules linked in: [ 472.873710][ T9769] CPU: 0 UID: 0 PID: 9769 Comm: syz.0.990 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 472.884402][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.894716][ T9769] RIP: 0010:notifier_chain_register+0x29b/0x3f0 [ 472.901128][ T9769] Code: ef 33 00 90 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 b5 c5 97 00 48 8b 33 48 c7 c7 c0 02 0a 8c e8 a6 98 f4 ff 90 <0f> 0b 90 90 bb ef ff ff ff eb b4 e8 b5 ef 33 00 90 0f 0b 90 e9 36 [ 472.922250][ T9769] RSP: 0018:ffffc9000c257948 EFLAGS: 00010246 [ 472.928372][ T9769] RAX: 2bf97f2ac7b84500 RBX: ffff888032b258c8 RCX: 0000000000080000 [ 472.936424][ T9769] RDX: ffffc900119ed000 RSI: 0000000000008a86 RDI: 0000000000008a87 [ 472.944752][ T9769] RBP: 0000000000000001 R08: ffffffff81600962 R09: fffffbfff1cfa210 [ 472.952855][ T9769] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: dffffc0000000000 [ 472.960919][ T9769] R13: ffff888032b258c8 R14: dffffc0000000000 R15: ffffffff8f95c448 [ 472.968953][ T9769] FS: 00007ff05dcc06c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 472.977916][ T9769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.984619][ T9769] CR2: 0000001b2f405ff8 CR3: 000000002d6f2000 CR4: 00000000003526f0 [ 472.992657][ T9769] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.000702][ T9769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.008746][ T9769] Call Trace: [ 473.012057][ T9769] [ 473.015017][ T9769] ? __warn+0x165/0x4d0 [ 473.020663][ T9769] ? notifier_chain_register+0x29b/0x3f0 [ 473.026358][ T9769] ? report_bug+0x2b3/0x500 [ 473.030942][ T9769] ? notifier_chain_register+0x29b/0x3f0 [ 473.036618][ T9769] ? handle_bug+0x60/0x90 [ 473.041008][ T9769] ? exc_invalid_op+0x1a/0x50 [ 473.045712][ T9769] ? asm_exc_invalid_op+0x1a/0x20 [ 473.050811][ T9769] ? __warn_printk+0x292/0x360 [ 473.055613][ T9769] ? notifier_chain_register+0x29b/0x3f0 [ 473.061545][ T9769] ? notifier_chain_register+0x29a/0x3f0 [ 473.067215][ T9769] blocking_notifier_chain_register+0x61/0xc0 [ 473.073349][ T9769] ubi_wl_init+0x3396/0x3720 [ 473.077990][ T9769] ubi_attach+0x3e01/0x5b80 [ 473.082582][ T9769] ? __pfx_ubi_attach+0x10/0x10 [ 473.087469][ T9769] ? ubi_attach_mtd_dev+0x19fa/0x3540 [ 473.092949][ T9769] ubi_attach_mtd_dev+0x1a3a/0x3540 [ 473.098205][ T9769] ctrl_cdev_ioctl+0x346/0x570 [ 473.103038][ T9769] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 473.108365][ T9769] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 473.113747][ T9769] __se_sys_ioctl+0xf5/0x170 [ 473.118372][ T9769] do_syscall_64+0xf3/0x230 [ 473.123722][ T9769] ? clear_bhb_loop+0x35/0x90 [ 473.129152][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.135106][ T9769] RIP: 0033:0x7ff05cf7ff19 [ 473.139581][ T9769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.159333][ T9769] RSP: 002b:00007ff05dcc0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.167788][ T9769] RAX: ffffffffffffffda RBX: 00007ff05d146240 RCX: 00007ff05cf7ff19 [ 473.175816][ T9769] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 000000000000000b [ 473.183835][ T9769] RBP: 00007ff05cff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 473.191875][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.199896][ T9769] R13: 0000000000000000 R14: 00007ff05d146240 R15: 00007fff6dbd3c18 [ 473.207904][ T9769] [ 473.211008][ T9769] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 473.218300][ T9769] CPU: 0 UID: 0 PID: 9769 Comm: syz.0.990 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 473.228892][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 473.238945][ T9769] Call Trace: [ 473.242220][ T9769] [ 473.245151][ T9769] dump_stack_lvl+0x241/0x360 [ 473.249834][ T9769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.255033][ T9769] ? __pfx__printk+0x10/0x10 [ 473.259620][ T9769] ? _printk+0xd5/0x120 [ 473.263772][ T9769] ? __init_begin+0x41000/0x41000 [ 473.268797][ T9769] ? vscnprintf+0x5d/0x90 [ 473.273125][ T9769] panic+0x349/0x880 [ 473.277021][ T9769] ? __warn+0x174/0x4d0 [ 473.281172][ T9769] ? __pfx_panic+0x10/0x10 [ 473.285601][ T9769] __warn+0x344/0x4d0 [ 473.289584][ T9769] ? notifier_chain_register+0x29b/0x3f0 [ 473.295221][ T9769] report_bug+0x2b3/0x500 [ 473.299552][ T9769] ? notifier_chain_register+0x29b/0x3f0 [ 473.305191][ T9769] handle_bug+0x60/0x90 [ 473.309350][ T9769] exc_invalid_op+0x1a/0x50 [ 473.313855][ T9769] asm_exc_invalid_op+0x1a/0x20 [ 473.318707][ T9769] RIP: 0010:notifier_chain_register+0x29b/0x3f0 [ 473.324959][ T9769] Code: ef 33 00 90 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 b5 c5 97 00 48 8b 33 48 c7 c7 c0 02 0a 8c e8 a6 98 f4 ff 90 <0f> 0b 90 90 bb ef ff ff ff eb b4 e8 b5 ef 33 00 90 0f 0b 90 e9 36 [ 473.344579][ T9769] RSP: 0018:ffffc9000c257948 EFLAGS: 00010246 [ 473.350650][ T9769] RAX: 2bf97f2ac7b84500 RBX: ffff888032b258c8 RCX: 0000000000080000 [ 473.358619][ T9769] RDX: ffffc900119ed000 RSI: 0000000000008a86 RDI: 0000000000008a87 [ 473.366586][ T9769] RBP: 0000000000000001 R08: ffffffff81600962 R09: fffffbfff1cfa210 [ 473.374560][ T9769] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: dffffc0000000000 [ 473.382540][ T9769] R13: ffff888032b258c8 R14: dffffc0000000000 R15: ffffffff8f95c448 [ 473.390516][ T9769] ? __warn_printk+0x292/0x360 [ 473.395287][ T9769] ? notifier_chain_register+0x29a/0x3f0 [ 473.400933][ T9769] blocking_notifier_chain_register+0x61/0xc0 [ 473.406997][ T9769] ubi_wl_init+0x3396/0x3720 [ 473.411604][ T9769] ubi_attach+0x3e01/0x5b80 [ 473.416133][ T9769] ? __pfx_ubi_attach+0x10/0x10 [ 473.420988][ T9769] ? ubi_attach_mtd_dev+0x19fa/0x3540 [ 473.426362][ T9769] ubi_attach_mtd_dev+0x1a3a/0x3540 [ 473.431585][ T9769] ctrl_cdev_ioctl+0x346/0x570 [ 473.436361][ T9769] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 473.441653][ T9769] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 473.446939][ T9769] __se_sys_ioctl+0xf5/0x170 [ 473.451539][ T9769] do_syscall_64+0xf3/0x230 [ 473.456044][ T9769] ? clear_bhb_loop+0x35/0x90 [ 473.460725][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.466618][ T9769] RIP: 0033:0x7ff05cf7ff19 [ 473.471030][ T9769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.490633][ T9769] RSP: 002b:00007ff05dcc0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.499054][ T9769] RAX: ffffffffffffffda RBX: 00007ff05d146240 RCX: 00007ff05cf7ff19 [ 473.507025][ T9769] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 000000000000000b [ 473.514990][ T9769] RBP: 00007ff05cff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 473.522955][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.530924][ T9769] R13: 0000000000000000 R14: 00007ff05d146240 R15: 00007fff6dbd3c18 [ 473.538905][ T9769] [ 473.542178][ T9769] Kernel Offset: disabled [ 473.546565][ T9769] Rebooting in 86400 seconds..