last executing test programs: 2m50.340707495s ago: executing program 4 (id=987): r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000040)={0x200000000000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m49.441439022s ago: executing program 4 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, 0x1, 0x2, 0x301, 0xa6ff, 0x0, {0xa, 0x0, 0x3}}, 0x14}}, 0x4000) 2m46.356297362s ago: executing program 4 (id=999): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2f4, r1, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x53}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x9c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x8c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x86, 0xa, "05af914e16fe4cf5ccbae2fcef06222c61ff2d38e31cc9d3291a8dbeeea5e89507f255266a67e6341698b121b46765a4d59b3b2d3983fb113577caa13b256ff9feecbac0f1b6cffa6c23092f94ca86677dde47ee944b84e842f4f42e87805c389ab5039632ef770adeb6a327d360c23813712c2a4d7517646b1fcc1de283982336d0"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x224, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x20c, 0x4, 0x0, 0x1, [{0x208, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf6, 0x2, "2f09c8437e910ddc13ae70307a4eeac1dede65a4e9fa77dc84125d4662c313c448e3c6dffe4288b016eac8c4f9ec64cc2ec48c0885b86fba0fee57c03bc8c4917d0a29198c28e4a0e00588fe8165b26bff13c84fdd834edd195c42f857573177b059c3ebd64984a62232109c34d6ab9682fd1ec1931853e06074836135c1bf4e9a67f421f8fbfea8b24d423cd541c80b6f2c4f8c6d29b55246c0c658f98b1cdfeb84f07778d8daa51f8ae3cdc822768ad0afd0d37311de03dfbb503ae786127955ed326cc44465a2ad365bd042cdfcd9f51930bd6a3fce602e254e6175d48835bb67a32394670c10ea6bf9d3486a3c0c9ab3"}, @NL80211_PKTPAT_PATTERN={0x101, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xd}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4081) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x20, 0x30, 0x2, '4r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x2, &(0x7f0000000700)=0xe1b, 0x3) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0xc8, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_IES={0x9c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x6, 0x9b, 0x1, 0x3, 0x3, 0x2000, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x1]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x34, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x29, 0x3, "73e88d067737ab75ca1dc86dd81bc346f50426ef809feb5aae291b1c82b28191763b0e6417"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x3, 0xee8, 0x9, 0x4, 0x40, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xaa0, 0x7, 0x511e, 0x0, 0x520, 0x0, 0x9, 0x5, 0xfff, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x553, 0x7, 0x7, 0x200, 0x8, 0x5, 0x2]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xde}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40000890) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x7ffff000) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e00)={'filter\x00', 0x7, 0x4, 0x3f8, 0xf0, 0xe0, 0x200, 0xf0, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2}}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) dup3(r3, r3, 0x0) 2m38.43137307s ago: executing program 4 (id=1025): r0 = syz_io_uring_setup(0x3084, &(0x7f00000002c0), &(0x7f0000ffc000), &(0x7f0000ffc000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000057c0)) ioctl$KDMKTONE(r2, 0x4b30, 0x5) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000006740)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)=[{0x0}], 0xffffffffffffffff, 0x1}, 0x20) 2m36.487959251s ago: executing program 4 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f78790000140002800800034000fdff03080001400000000a0900010073797a30"], 0xc4}}, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 2m35.118452452s ago: executing program 4 (id=1039): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8040) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000001500)={0x0, 0x7}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x400, 0xfffffffa, 0x1, 0x0, 0x4b, r1}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000280), 0x4) clock_gettime(0x0, &(0x7f0000000040)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC], 0x401, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x22}, {r2, 0x4023}], 0x2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108ffffffc30000000000000000", @ANYRES32=0x0, @ANYBLOB="004000000000000008001b0000000000de72089bd79749e3ad88b751383f8ccecee94d74aab990b05fc036e9100e9a461339854aeefea90747"], 0x28}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) 2m19.713425476s ago: executing program 32 (id=1039): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8040) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000001500)={0x0, 0x7}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x400, 0xfffffffa, 0x1, 0x0, 0x4b, r1}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000280), 0x4) clock_gettime(0x0, &(0x7f0000000040)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC], 0x401, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x22}, {r2, 0x4023}], 0x2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108ffffffc30000000000000000", @ANYRES32=0x0, @ANYBLOB="004000000000000008001b0000000000de72089bd79749e3ad88b751383f8ccecee94d74aab990b05fc036e9100e9a461339854aeefea90747"], 0x28}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) 21.334066044s ago: executing program 5 (id=1389): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x800, 0x0, 0x2, 0x1}, 0x20) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34565559}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000090c0)={0x0, 0x0, &(0x7f0000009080)={&(0x7f00000038c0)=@newtaction={0x14, 0x4e, 0x334239e91bf4481f, 0x0, 0x0, {0x0, 0x1b}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) lsm_set_self_attr(0x68, &(0x7f0000000140)={0x0, 0x36d, 0xc7, 0xa7, "eb3476956e8ee04a7a255b0d8bc7e272db391f2bcd78d41218bbb048eef22752d072835457396e0efa360310dbde50e6b6220b3af5ab44b9ec506420a1d2e7e4cffd8d0662c5f107220209f920261e504337401df314061cf74b0d28024e17a1423aff7949e58dd5fddb4defa58aa6e0bc5a42684a217b256e9fd5c92393d91d6182c45a02525d19ed0bc784afd7a233842c16b226762f7907ed916048bc24682d197ffda73ec7"}, 0xc7, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="02210036d310d99aff416e000000000000000000000000e40000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) 19.947919471s ago: executing program 5 (id=1393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setrlimit(0x6, &(0x7f00000000c0)={0xf84, 0x1009}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x1ff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x24004800) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xbc0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], 0x38}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0xffff, 0x6, 0x0, 0x100003, 0x8001}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 17.311850764s ago: executing program 5 (id=1396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xffffff00, 0x0, 0xff, 0x1, {@mac=@link_local}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @broadcast, @multicast1, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x42b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001480)=ANY=[@ANYRESHEX]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x80000000, 0x20000800, 0x1000}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a2a44000000001010902440081010010000904005d1202060000052406000005242400000d240f010000000000000000000905810340000000fe0905820260000000000905030208"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001f00010000000000000000000300"], 0x114}], 0x1}, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 14.156061556s ago: executing program 1 (id=1405): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.944057068s ago: executing program 5 (id=1409): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc0106442, &(0x7f0000000300)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0xffffffb8}]}, &(0x7f00000001c0)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x2, 0x30}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xaa) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 11.183785439s ago: executing program 0 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a800000ff0300060000000414000100fe"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) 9.798594929s ago: executing program 0 (id=1414): process_vm_writev(0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x7, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpgid(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x38, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}}, 0x20000801) r6 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x1, 0x0, 0x0, "f759ca14860e4041836dd400", '\x00\x00\a\x00', "0300", "e859ad13", ["d5c2a7cdaeea2c6f8e00b600", "808e88e2e9ffffffffff00", "2971088d5453005a4e5200", "ff812500004000"]}) 9.716003464s ago: executing program 5 (id=1415): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f0700000000000000fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32=r6, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000440), 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x7, 0x9, 0x7, 0x7fff, 0xc48, 0x5}, &(0x7f0000000240)={0x0, 0xd, 0x8, 0xf, 0xfffffffffffffffa, 0xff, 0x2, 0x401}, &(0x7f0000000300)={0x1, 0x9, 0x8, 0x65, 0x5, 0xf17, 0x9, 0x6}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x8001]}, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x9, 0x7fffffff}) setsockopt$MRT_DONE(r9, 0x0, 0xc9, 0x0, 0x0) 9.587615942s ago: executing program 1 (id=1418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="a78092d4436f"}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0) recvmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x117000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639"}) 9.180321487s ago: executing program 2 (id=1419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc0106442, &(0x7f0000000300)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0xffffffb8}]}, &(0x7f00000001c0)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x2, 0x30}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 8.810383598s ago: executing program 2 (id=1420): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) 8.74749503s ago: executing program 3 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x8}, 0x18) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) 8.631739149s ago: executing program 2 (id=1422): syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000007400)={0x2020}, 0x2020) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000340)="f2a5b838018ee0baf80c66b8508c468366efbafc0cec0ffa902000650f01caf083b060004266b8010000000f01c1f0805302ac260f140e00200f01f0", 0x3c}], 0x1, 0x1, &(0x7f00000003c0), 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x285}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = eventfd(0x8) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r5, 0x1) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x1}, &(0x7f0000000100), &(0x7f00000012c0)) io_uring_enter(r6, 0x0, 0x3, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001ec0), r7) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 8.060208732s ago: executing program 0 (id=1423): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000480), 0x10) connect$can_bcm(r5, &(0x7f0000000300), 0x10) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x83b1, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x40) r6 = syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad3090503101000740406090403"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) mremap(&(0x7f0000569000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f000052a000/0x2000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) socket(0xf, 0x2, 0x2002) bind$alg(0xffffffffffffffff, 0x0, 0x0) 7.710897298s ago: executing program 3 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a800000ff0300060000000414000100fe"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) 6.790887926s ago: executing program 2 (id=1425): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/227, 0xe3}, {&(0x7f0000001200)=""/141, 0x8d}, {&(0x7f00000012c0)=""/168, 0xa8}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001400)=""/154, 0x9a}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000015c0)=""/201, 0xc9}], 0x3}, 0x8}, {{&(0x7f0000001700)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001780)=""/130, 0x82}, {&(0x7f0000001840)=""/217, 0xd9}], 0x2, &(0x7f0000001980)=""/128, 0x80}, 0xef54}], 0x3, 0x1000, &(0x7f0000001ac0)={0x0, 0x3938700}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001b00), 0x101080, 0x0) recvfrom$inet6(r1, &(0x7f0000001b40)=""/155, 0x9b, 0x2060, 0x0, 0x0) io_uring_enter(r1, 0x1b89, 0xbcd5, 0x0, &(0x7f0000001c00)={[0x82f2]}, 0x8) read(r1, &(0x7f0000001c40)=""/197, 0xc5) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000001dc0)={&(0x7f0000001d40)="5d076f45d1e6e52f77de9bb3b25671312d852a287584dc281aad95c6c18ca6008eba7f21fa9cce8e510fa6026ca503dac76805dd9854217646d1fb769a4246cc93", 0x41, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000001e80)={r2, 0x4c, &(0x7f0000001e00)=""/76}) r3 = syz_open_dev$vcsn(&(0x7f0000001ec0), 0x2c0, 0x200000) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x20, 0x3, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040851}, 0x404c810) bind$rds(r1, &(0x7f0000002000)={0x2, 0x4e23, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002040)={0x0, r1}, 0x10) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000002080), 0x80100) sendmsg$alg(r4, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000020c0)}], 0x1, &(0x7f0000002140)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x1048, 0x2000c800}, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000035c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0xa45c9807f7722e44}, 0xc, &(0x7f0000003580)={&(0x7f0000003240)={0x334, 0x14, 0x100, 0x70bd2a, 0x25dfdbfb, {0x2a, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "c3dbddcacb04f12e21995b3c7695a55ad6d775bb6df981a0aa2ba967"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "faa710b9072fd7261cd482c84ffa0a3484aa9f71a2e957e075c3ba19443e0d1af58e9e86fd00487107d54d65b7894212ecc5c506d01bd70595c7e0ecde6fb990b9fed469267f62c89df737d3691c985ecdd085f4ab6744f81dcb823727f78b611c03b6635e17e172abaa7e9a63dc95c989e2a56cb0148e61a5244f98b652ae499dd862a4e21bd18bc990fdeeab7e302d2ef8053e81429110abc8e1f65a065e5d8b6c5a176717c88ece8066b8cafb277a5c4d95744f4ada7e625050f7894e382ec9f2a5d2fc5dddfd6e236256f021a4b66a45ef9c53edc0e7ce4abb8e40ea48831a9b02ef746664042118cb62aa7308b32fff1537"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "09b442dbf73529c34031c492a61bcf9d85cc1c2fa4c94bfbd611d6ff229ca25ad1e33e79d17ca56b520d8241b6287b062c01fcdeba82a89e91e07b80ae37a608c38c9dc46e021f59b9d3dccb92eab7c80ce0426f7a9bcce9d4db25b8f3a60aea1c9496c3151eff3e5ec122076646c221b12983c03c1ca53f9330c44725e5e7c77f9f52e4ccb8c6ab7e8d900d8d24413068ae98f30794b15bf9606a47ce3fdac3a7bdbe623b52ffd1824321e9fcdd643c2ff046a674b19c1138227201d50ab8df45330724458e672bad5719"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "0c817c8b22e8f08fe5cd7bce11ea612f337fca5ca4334a5f75890fe9c374897033a42465e06de07b11cf12ebf9815f64bfcc9c8739cc9aa7431bb280c78ce5fc75fc84a226c2c37f44804a875574d74fcb721884fef79bb69e092e4f51efef98f4ccb3448775e054374c44b30b7d3f2e621ebfb9984c73a3830e9d1a0a741c9d69e7749ce3bd8c523a7486f73b522ff71372f8647442dca3dc0afddf107b8cb36c8fa1f899c89faf01ab79e7db097d3bf56791da32ab43c591310cb92cbb342d362994f7b9"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "1222ec221c461e5184c09286c51fe0cd106b36119710da56c1082284c52daa65e21aa9e77356e7d10791b552759739547380b43779a90f9deece700d975d6ca7f2265328307b5f2fc628fb4a9471009e0698a2e850dbb1aff88b9d3889e1b81b20958b557fcb3a"}]}, 0x334}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000003600)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000003640)={r2}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003680), r5) read$FUSE(r1, &(0x7f00000036c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000005700)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x29, 0x1, 0x5000000, 0xf, 0x4, 0x6, 0x6, 0x0, 0x0, 0x8, 0x9}}, 0x50) r7 = accept4$packet(r1, &(0x7f0000005780), &(0x7f00000057c0)=0x14, 0x80000) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f0000005800)={{r4}, "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"}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006800)={{{@in6=@private2, @in=@private}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000006900)=0xe8) accept$packet(r7, &(0x7f0000006940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006980)=0x14) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000006a80)={&(0x7f00000069c0), 0xc, &(0x7f0000006a40)={&(0x7f0000006a00)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x810) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006b00), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000006b40)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000006c00)={&(0x7f0000006ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x3c, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x8004) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000006c40)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, [0x61ee, 0x6, 0x4, 0x3bc, 0x30, 0x9, 0x80000000, 0x6, 0x9, 0x7, 0x6, 0x9, 0x800, 0x4f4, 0x7153]}, &(0x7f0000006d40)=0x100) 5.768856839s ago: executing program 2 (id=1426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f78790000140002800800034000fdff03080001400000000a0900010073797a30"], 0xc4}}, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 4.770287006s ago: executing program 0 (id=1427): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}}, 0x0) getsockopt$netlink(r2, 0x10e, 0x1, &(0x7f0000000000)=""/157, &(0x7f00000000c0)=0x9d) 4.683756198s ago: executing program 0 (id=1428): syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x5, 0x0, 0x1}]}, 0x1, [{0x0, 0x0}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r2 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0xd6b5, 0x2c}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa000009000400aaaaaaaaaabb007da72deb000a0004000180c20000000000060002000300000081fe0300010000000a000400bbbbbbbbbbbb00000a000400bbbbbbbbbbbb000000000400ffffffffffff0000080001"], 0xac}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x244, 0x1c, 0x8, 0x70bd26, 0x25dfdbfc, {0x1f}, [@nested={0x18, 0x34, 0x0, 0x1, [@generic="ef2820b2c115c4976a94c02a8df00a75a36df301"]}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r7}, @nested={0x115, 0x3b, 0x0, 0x1, [@generic="b5f9cfff11861ddc4f7a2c44db7faae9c4ff15add438cee66220c3", @typed={0x9, 0x5d, 0x0, 0x0, @str=',-#@\x00'}, @nested={0x4, 0x55}, @generic="2f80e71710ebe5f804d6def0e095c3ec15342dad9120c526e5d554f6423dbad9a5fa6d6c9d2715bdd73f37d4242c79661ea862c5bdc800758cc1199f2765dacca8ba6c1a07b0055a8d204c38cb11cbe5e0d53d900842da174431f82ab8bd6adeff42cfa227de67f458b8204f8ad8354f136c9b290f8faf0dad58060765de7b677ac602871b20db03d6a02aea492abd4de2541678bef1ed21702e9fbaaac43388a19c362fda9cf7fc5cc133f361eda380ddbc47bf2184b2ed1d58be75503386efeb1a7c82a3b7f4f755c405214cedca80d2ef37f5874418d8012ec2db106f836e6cb06c31523d"]}, @nested={0x6e, 0x79, 0x0, 0x1, [@generic="a0fde0f7d292c7285f403ce356cb1d1625040888130ebcf170894ca194c207f6", @nested={0x4, 0x80}, @generic="83fef43633dc5f1b38d51355c19084a8c7b48a3c032477c335b2e0e2460adf5f06127274e5aa7a57c0fe54bf464a5c58a331c3fc3c9775e78f37d4b26f7fd850234e13cec8f3"]}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r8}, @generic="68076f2458d04db2891ad65b5bc50c3f58b124f581e9f06a2bd37297e3217e03b71688ea6a599425ead2484ccb80661fc21a32247e8f96f7ae5c25dd1ebb7fa7aca06e71ec86f66baf767b1bce739b749fc3404fc1c59e4e14b5bd79d3eb0c43015170c6c5d98e4bce8fba6c2a", @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x19, 0x0, 0x0, @uid}]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x10) 4.378873434s ago: executing program 3 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) unshare(0x2000400) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r6 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000001000010000000000000008000000000000000000000006000000000000009500000000000100"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf32(r6, 0x0, 0x0) unshare(0x20000400) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x2284, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) 4.354809105s ago: executing program 2 (id=1430): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000700)={0x0, 0x6, 0x1, "cd"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x20, 0x1, 0xd6, {0xd6, 0x21, "d709c194a5149103f07651628a5b505082a2b50ce05ae4254cf377efdd4bbaf8b69cc548e2543bd893350418652f342f42fbe9d99944c37a112afbde3e9c238c30a1683a66b01af73d0312a2ec811dd95c24042fce6e203e0cf776e72f9f59581df0cde40bc2a46e2bb07b7bc578c22979cde1781aaeee43c7b0f43d99b2cff6c50b5bec2f28e9ec6451cf4f413a2eaeb74a2aa2fe0d2ac2e933b5f26f6b0313a540c91c90dad9db1cd097a6e67b6cddbc853d824e4e7d52dd5d6b1920600d0188229210f803930e66c73f5cad9373dc1d4ec03d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x93, @string={0x93, 0x3, "b83c9a610cd01db05733b813d973b19f666907061ab9f162595e6374c82493def216bf96184a31c4b6bc8dbaf088755fe09ee2e7634dceee229b35581cbf29556c572dd206c54af1f1729b2b3c5e4b9e4f9ee817f3dd2ab2b240a8dc3ab33ea145c599be0c02d624c94099873a7427518419bfbf4a82378c55eb06aaddcde6446c882c59bff9431b5e77cbc5561d1c15d1"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x40, 0xf, 0xb2, "98329d6f8146f0358bafd51f59261742ab1909b24c702c4102ff3699a05e27c844558d444d3bacdbfd390ecc5ff23f2cefa692488f1b9556f1dc0fa13440ae2decf2cf299d339fc28cfc826a848b6a792c44a9fe43d1e599b19a5a745618dc9518483bf84085ca2bff20f708d860884b1ae2283b98a6c183f88c43aa31e3455505dad3c042781acf52cc5fe3c917850e527dde365ea0edd1820408bd870f14e8b83266f160c4151632328d673196528f49a0"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x6f}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x81, 0x3, "d450a1"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "e9"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "589a"}, &(0x7f0000000440)={0x20, 0x84, 0x1, '@'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "59ee59"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x0, 0x11, 0xad, {0xad, 0x4, "690f8cc004cf5b21245cc5f456eabb79d77d78cc61412ce340803579317660ea9370ec13c94cf9ab89c77f7c12c924aa8a733ee3ef815372fc832bf712c3ae82593322c22cd967257de20d10fb6937b6bacb11d2b754d2caae0e8fa506a0bd6d64e393ff25ae52604996c5665b6c92eba722b4e8f3d489220d630738165665ba2ab97f1d6e8bfb1c7ea05167aabc0116b577592ade08af88ee6983d85429501320d586e9732c6ce4513a17"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000780)={0x20, 0x15, 0xe3, "f516cc7d51b0943f5e85e2ed85485d7a33141f01bc3cfa42cbcc6d3abd1651b55373b243b7fa3c33691b2efefe36128a459923d5df82add43d27dd7bdd8342aeda66352ab4c3a1194df5016e586b969484f51ab9ae75d7f8ad85d4d79d6dd1909dfa1b1d42118a6d4402080ac1ce006cea883b1789abd314ce3138dfb38627ef970beef7fb6b3dae7b978d5bfaf6bd68e1ca982a59a662564728242956a3919bad7f2a6fc723cb6b5357164ea7c1437622035e996f43d5440778788c42de700db90317e925b41f8c74e749d6a75cc55ba3a16605b6b82c3bebed5caa8ff7faf24c1dac"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x91, {0x8f, "e262826bddb0f74fcb665cc848c4422a5e19c687a4ee93773a761d607ff17be0f77c71a79c17be0e2d0867709912dad6a2f9497fa574af12c33f98ea12f7cb8e8295835920fc80a13c507c1548e9e687f458e38a6a5c4d3cc5340fe9330f9f7b4b5de750094ae34791b8f92bf9131f484fadd587b2038de487b48a9db064ee9c56c35d3174d78c45b1625c8b2431de"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0xf1}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x9}}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000ac0)=0x80000) 4.224236762s ago: executing program 1 (id=1431): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x4000, 0x0, 0x4]}}) 4.175857589s ago: executing program 5 (id=1432): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xffffffff, 0x4) keyctl$session_to_parent(0x12) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$video4linux(&(0x7f0000001380), 0x20000000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f0000000000)={0x1, 0xb}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f0000000600)=""/4, 0x4a, 0x4, 0x1, 0x2609, 0x0, @void, @value}, 0x28) connect$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6, 0x4}, 0x20) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) link(&(0x7f0000003800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffe00) 3.300745373s ago: executing program 0 (id=1433): process_vm_writev(0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x7, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpgid(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x38, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}}, 0x20000801) r6 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x1, 0x0, 0x0, "f759ca14860e4041836dd400", '\x00\x00\a\x00', "0300", "e859ad13", ["d5c2a7cdaeea2c6f8e00b600", "808e88e2e9ffffffffff00", "2971088d5453005a4e5200", "ff812500004000"]}) 3.291417824s ago: executing program 3 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x8}, 0x18) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) 3.164632719s ago: executing program 1 (id=1435): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x26, 0x5, 0x4ddf9b70) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000ec0)={0x0, 0x8, 0x5, 0x4, 0x18, 0x0, 0x7}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) 808.815897ms ago: executing program 3 (id=1436): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') pread64(r0, &(0x7f0000000000)=""/130, 0x82, 0x8) preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1, 0xffff, 0x5dd073cf) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="fab70960b8da1499d18ac45a58e23477e390a151d66f060604", 0x19}, {&(0x7f0000000140)="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", 0xfc}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000240)="04e84fa511fcafe826eb3e65a1256d3cce5a09777bd2c900e80b3d84a606bbda3729c4001044da75384b47d47c9e67f5adfac87b1b7b5c3f56bab7605fc4ea92317e041603ac88716f839ce9439e6847955470173d9526d5fa1420f364431c9b5417ed7cd4df5fbd9bfb474f229abae1e0a2da91af86b92627b4228e38620fcd53dc757182107db8ec41f824449d70fa861d418592998f636e3c3da8d541bf04a79a599306ca583e2e985ba8b310777fe8bfa6ae7c4bbcae181a982273f050f9921c4a", 0xc3}, {&(0x7f0000000340)="3dd73c3402c499f7f4d57e512a8a9452913b38f68507c6768b", 0x19}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000380)="b5bec5a62f3a5e10a47af4c3d4bdcb598d35486e96e46b3cb99aeb4b4eedad34d38a234c874106cfd990d4799ae9815b60cdf5cc7c4ce0a3c81e38410754cfb00af1806e9bbc38368de45bf55df1db9b7bd1b3b3a6185698f8627c7de722f4dc98df7fc68e496f71d28557eaf5358e17be35fa2c99a1f1bc5a8aefd7e14bd589c99519e026e4c1dbdc32bfff66eeeb56ab93af299d3bb0457c4ba27387dbedcee80af8373c7b10e25c55e001711f301f4863d5fe551efc3eb4d4e82393decc1647f2467cda8f3df46ec4bc0285d3c5a4b45c5103d4e700", 0xd7}, {&(0x7f0000000480)="a84b86b83c114a151bdb2206dc8df8aebd76651e1cc43b84a6ca348bcb6081f77c8dfb8826c817b0ad2195e8ce098482888fddf1507ab4860c4abc0a3fb4d9eb564143470fec40c4692469b2cd728e730fdfeb383ca0ded0e3b7d2886207c107eda47a3799ce9ed579cb9a4898e96737a1e47271186d0103111ab9b76aac1f94d28abd7db111ec57a91efa4180a7bb3011f5d5d1140552c697071df98021acc8e5e74f1c98a2323b209573b95f3b9230fa8c9782c815b406b92b5472d33b1580df4743b11e970c9d0a2380f9db2055097219b638715e9737b103cab8ed", 0xdd}, {&(0x7f0000000580)="e208c559465bfdbcd5b909380a7ff6e6738bf803311f654d1b3df3593fc94ae2a276792d927f31f70b9e0bbda9db21fa2720b59e", 0x34}, {&(0x7f00000005c0)="eb18109171", 0x5}], 0xa, 0x82, 0x4, 0x3) 506.191435ms ago: executing program 1 (id=1437): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xe6, 0x69}, 0x20) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) link(0x0, &(0x7f0000000600)='./bus\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325241, 0x4, 0x0, [{0x0, 0x1000000}, {}, {}, {}, {0x0, 0x3}], 0x0, 0x0, 0x2}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) 146.951905ms ago: executing program 1 (id=1438): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x1200, &(0x7f0000000340), 0x10) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a7, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000380)=0x2) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x18, 0x3, [{0x1, 0x12, "000001000010000200c0077b6f4fe6a3"}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @broadcast, @multicast1}}}}}}, 0x0) 0s ago: executing program 3 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a800000ff0300060000000414000100fe"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) kernel console output (not intermixed with test programs): 6524][ T9561] netlink_sendmsg+0x8e4/0xcb0 [ 419.441342][ T9561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.446681][ T9561] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 419.453158][ T9561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.458485][ T9561] __sock_sendmsg+0x221/0x270 [ 419.463217][ T9561] ____sys_sendmsg+0x52a/0x7e0 [ 419.468030][ T9561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.473355][ T9561] ? __fget_files+0x2a/0x410 [ 419.477986][ T9561] ? __fget_files+0x2a/0x410 [ 419.482615][ T9561] __sys_sendmsg+0x269/0x350 [ 419.487248][ T9561] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.492426][ T9561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 419.498816][ T9561] do_syscall_64+0xf3/0x230 [ 419.503364][ T9561] ? clear_bhb_loop+0x35/0x90 [ 419.508162][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.514102][ T9561] RIP: 0033:0x7fbd0bd85d29 [ 419.518547][ T9561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.538190][ T9561] RSP: 002b:00007fbd0cc3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.546645][ T9561] RAX: ffffffffffffffda RBX: 00007fbd0bf76160 RCX: 00007fbd0bd85d29 [ 419.554651][ T9561] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 419.562656][ T9561] RBP: 00007fbd0cc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 419.570661][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.578663][ T9561] R13: 0000000000000000 R14: 00007fbd0bf76160 R15: 00007ffec5fa9338 [ 419.586692][ T9561] [ 419.604913][ T9561] 9pnet_fd: Insufficient options for proto=fd [ 420.681261][ T9576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.567614][ T9551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.647799][ T9551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.000983][ T9551] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.015169][ T9551] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.040094][ T9551] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.054461][ T9551] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.200655][ T9551] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.210150][ T9551] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.219217][ T9551] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.228223][ T9551] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.688009][ T9599] macvlan1: entered promiscuous mode [ 422.800222][ T9599] macvlan1 (unregistering): left promiscuous mode [ 422.956392][ T5900] usbhid 3-1:0.0: can't add hid device: -71 [ 422.965391][ T5900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 423.006438][ T5900] usb 3-1: USB disconnect, device number 24 [ 423.287791][ T9615] No control pipe specified [ 423.293837][ T9615] tmpfs: Bad value for 'mpol' [ 423.950908][ T9619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.226978][ T9627] FAULT_INJECTION: forcing a failure. [ 425.226978][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 425.245532][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.0.1060 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 425.256275][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 425.266381][ T9627] Call Trace: [ 425.269706][ T9627] [ 425.272683][ T9627] dump_stack_lvl+0x241/0x360 [ 425.277421][ T9627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.282663][ T9627] ? __pfx__printk+0x10/0x10 [ 425.287294][ T9627] ? kmem_cache_alloc_noprof+0x48/0x380 [ 425.292887][ T9627] ? __pfx___might_resched+0x10/0x10 [ 425.298214][ T9627] should_fail_ex+0x3b0/0x4e0 [ 425.302917][ T9627] should_failslab+0xac/0x100 [ 425.307623][ T9627] ? vm_area_alloc+0x24/0x1d0 [ 425.312330][ T9627] kmem_cache_alloc_noprof+0x70/0x380 [ 425.317732][ T9627] vm_area_alloc+0x24/0x1d0 [ 425.322254][ T9627] __mmap_region+0x196e/0x2cd0 [ 425.327071][ T9627] ? __pfx___mmap_region+0x10/0x10 [ 425.332216][ T9627] ? __lock_acquire+0x1397/0x2100 [ 425.337303][ T9627] ? __pfx_validate_chain+0x10/0x10 [ 425.342535][ T9627] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 425.348795][ T9627] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 425.355404][ T9627] ? cap_mmap_addr+0x163/0x2c0 [ 425.360188][ T9627] mmap_region+0x226/0x2c0 [ 425.364661][ T9627] do_mmap+0x8f0/0x1000 [ 425.368841][ T9627] ? __pfx_do_mmap+0x10/0x10 [ 425.373447][ T9627] ? __pfx_down_write_killable+0x10/0x10 [ 425.379093][ T9627] ? __pfx_lock_acquire+0x10/0x10 [ 425.384135][ T9627] vm_mmap_pgoff+0x1dd/0x3d0 [ 425.388749][ T9627] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 425.393910][ T9627] ? __fget_files+0x2a/0x410 [ 425.398533][ T9627] ? __fget_files+0x395/0x410 [ 425.403233][ T9627] ? __fget_files+0x2a/0x410 [ 425.407844][ T9627] ksys_mmap_pgoff+0x4eb/0x720 [ 425.412628][ T9627] ? __x64_sys_mmap+0x7f/0x140 [ 425.417414][ T9627] do_syscall_64+0xf3/0x230 [ 425.422111][ T9627] ? clear_bhb_loop+0x35/0x90 [ 425.426803][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.432745][ T9627] RIP: 0033:0x7f63a0785d29 [ 425.437176][ T9627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.456798][ T9627] RSP: 002b:00007f63a150d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 425.465258][ T9627] RAX: ffffffffffffffda RBX: 00007f63a0975fa0 RCX: 00007f63a0785d29 [ 425.473258][ T9627] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 425.481251][ T9627] RBP: 00007f63a150d090 R08: 0000000000000005 R09: 0000000000000000 [ 425.489238][ T9627] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 425.497221][ T9627] R13: 0000000000000000 R14: 00007f63a0975fa0 R15: 00007ffd56b888f8 [ 425.505229][ T9627] [ 425.733275][ T9634] Bluetooth: MGMT ver 1.23 [ 425.887497][ T5895] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 426.075322][ T5895] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 426.185114][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.528569][ T5895] usb 3-1: config 0 descriptor?? [ 426.572039][ T9637] FAULT_INJECTION: forcing a failure. [ 426.572039][ T9637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.585545][ T9637] CPU: 1 UID: 0 PID: 9637 Comm: syz.1.1064 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 426.596284][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 426.606392][ T9637] Call Trace: [ 426.609706][ T9637] [ 426.612683][ T9637] dump_stack_lvl+0x241/0x360 [ 426.617420][ T9637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.622671][ T9637] ? __pfx__printk+0x10/0x10 [ 426.627306][ T9637] ? __pfx_lock_release+0x10/0x10 [ 426.632384][ T9637] ? process_measurement+0x1aea/0x1fb0 [ 426.637889][ T9637] should_fail_ex+0x3b0/0x4e0 [ 426.642605][ T9637] _copy_from_iter+0x424/0x1c20 [ 426.647479][ T9637] ? mark_lock+0x9a/0x360 [ 426.651835][ T9637] ? __pfx__copy_from_iter+0x10/0x10 [ 426.657142][ T9637] ? smack_socket_sendmsg+0x178/0x540 [ 426.662540][ T9637] bcm_sendmsg+0x157/0x7a0 [ 426.666979][ T9637] ? __pfx_bcm_sendmsg+0x10/0x10 [ 426.671950][ T9637] ? __pfx_bcm_sendmsg+0x10/0x10 [ 426.676905][ T9637] __sock_sendmsg+0x221/0x270 [ 426.681606][ T9637] ____sys_sendmsg+0x52a/0x7e0 [ 426.686386][ T9637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.691687][ T9637] ? __fget_files+0x2a/0x410 [ 426.696292][ T9637] ? __fget_files+0x2a/0x410 [ 426.700900][ T9637] __sys_sendmmsg+0x36a/0x720 [ 426.705602][ T9637] ? __pfx___sys_sendmmsg+0x10/0x10 [ 426.710826][ T9637] ? __pfx_lock_release+0x10/0x10 [ 426.715863][ T9637] ? kstrtouint_from_user+0x128/0x190 [ 426.721267][ T9637] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 426.727178][ T9637] ? ksys_write+0x22a/0x2b0 [ 426.731699][ T9637] ? __pfx_lock_release+0x10/0x10 [ 426.736740][ T9637] ? vfs_write+0x730/0xd30 [ 426.741203][ T9637] ? __mutex_unlock_slowpath+0x21e/0x790 [ 426.746876][ T9637] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.752879][ T9637] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.759223][ T9637] ? do_syscall_64+0x100/0x230 [ 426.764008][ T9637] __x64_sys_sendmmsg+0xa0/0xb0 [ 426.768901][ T9637] do_syscall_64+0xf3/0x230 [ 426.773510][ T9637] ? clear_bhb_loop+0x35/0x90 [ 426.778287][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.784197][ T9637] RIP: 0033:0x7fd0e5d85d29 [ 426.788626][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.808260][ T9637] RSP: 002b:00007fd0e6adc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.816705][ T9637] RAX: ffffffffffffffda RBX: 00007fd0e5f75fa0 RCX: 00007fd0e5d85d29 [ 426.824701][ T9637] RDX: 040000000000003a RSI: 0000000020001b00 RDI: 0000000000000006 [ 426.832690][ T9637] RBP: 00007fd0e6adc090 R08: 0000000000000000 R09: 0000000000000000 [ 426.840682][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.848677][ T9637] R13: 0000000000000000 R14: 00007fd0e5f75fa0 R15: 00007ffe068ee338 [ 426.856686][ T9637] [ 426.950568][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 426.962184][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 427.324760][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 427.330912][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 427.348307][ T5895] usb 3-1: USB disconnect, device number 25 [ 427.509277][ T9647] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1067'. [ 427.537806][ T9647] netlink: 'syz.0.1067': attribute type 3 has an invalid length. [ 429.071670][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1074'. [ 430.208133][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 430.217184][ T9667] bridge_slave_1: left allmulticast mode [ 430.223147][ T9667] bridge_slave_1: left promiscuous mode [ 430.231437][ T9667] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.998794][ T9667] bridge_slave_0: left allmulticast mode [ 431.004497][ T9667] bridge_slave_0: left promiscuous mode [ 431.010245][ T9667] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.239583][ T9676] FAULT_INJECTION: forcing a failure. [ 431.239583][ T9676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.260664][ T9676] CPU: 0 UID: 0 PID: 9676 Comm: syz.2.1076 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 431.271423][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 431.281522][ T9676] Call Trace: [ 431.284836][ T9676] [ 431.287801][ T9676] dump_stack_lvl+0x241/0x360 [ 431.292529][ T9676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.297776][ T9676] ? __pfx__printk+0x10/0x10 [ 431.302504][ T9676] ? __pfx_lock_release+0x10/0x10 [ 431.307578][ T9676] should_fail_ex+0x3b0/0x4e0 [ 431.312292][ T9676] _copy_from_iter+0x1e9/0x1c20 [ 431.317164][ T9676] ? __virt_addr_valid+0x183/0x530 [ 431.322316][ T9676] ? __pfx__copy_from_iter+0x10/0x10 [ 431.327618][ T9676] ? __virt_addr_valid+0x183/0x530 [ 431.332768][ T9676] ? __virt_addr_valid+0x183/0x530 [ 431.337892][ T9676] ? __virt_addr_valid+0x45f/0x530 [ 431.343015][ T9676] ? __phys_addr_symbol+0x2f/0x70 [ 431.348069][ T9676] ? __check_object_size+0x47a/0x730 [ 431.353380][ T9676] hci_sock_sendmsg+0x4f1/0x11c0 [ 431.358363][ T9676] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 431.365243][ T9676] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 431.370630][ T9676] ? get_pid_task+0x23/0x1f0 [ 431.375237][ T9676] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 431.380621][ T9676] __sock_sendmsg+0x221/0x270 [ 431.385321][ T9676] sock_write_iter+0x2d7/0x3f0 [ 431.390124][ T9676] ? __pfx_sock_write_iter+0x10/0x10 [ 431.395434][ T9676] ? bpf_lsm_file_permission+0x9/0x10 [ 431.400821][ T9676] ? security_file_permission+0x74/0x280 [ 431.406473][ T9676] vfs_write+0xaeb/0xd30 [ 431.410849][ T9676] ? __pfx_sock_write_iter+0x10/0x10 [ 431.416156][ T9676] ? __pfx_vfs_write+0x10/0x10 [ 431.420937][ T9676] ? __fget_files+0x2a/0x410 [ 431.425542][ T9676] ? __fget_files+0x2a/0x410 [ 431.430150][ T9676] ksys_write+0x18f/0x2b0 [ 431.434500][ T9676] ? __pfx_ksys_write+0x10/0x10 [ 431.439367][ T9676] ? do_syscall_64+0x100/0x230 [ 431.444161][ T9676] ? do_syscall_64+0xb6/0x230 [ 431.448857][ T9676] do_syscall_64+0xf3/0x230 [ 431.453382][ T9676] ? clear_bhb_loop+0x35/0x90 [ 431.458079][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.463990][ T9676] RIP: 0033:0x7fb5e1185d29 [ 431.468425][ T9676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.488057][ T9676] RSP: 002b:00007fb5e2005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.496495][ T9676] RAX: ffffffffffffffda RBX: 00007fb5e1375fa0 RCX: 00007fb5e1185d29 [ 431.504489][ T9676] RDX: 0000000000000007 RSI: 0000000020000340 RDI: 0000000000000004 [ 431.512483][ T9676] RBP: 00007fb5e2005090 R08: 0000000000000000 R09: 0000000000000000 [ 431.520474][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.528461][ T9676] R13: 0000000000000000 R14: 00007fb5e1375fa0 R15: 00007ffd16f45b88 [ 431.536491][ T9676] [ 431.539638][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.282889][ T9685] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 433.350228][ T9685] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 433.402701][ T9685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.419952][ T9685] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 433.917364][ T5868] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 433.938550][ T9700] process 'syz.1.1086' launched './file1' with NULL argv: empty string added [ 434.013862][ T5131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.026539][ T5131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.035433][ T5131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.044436][ T5131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.054641][ T5131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 434.062646][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.079040][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.086634][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.094522][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.105791][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.114155][ T5823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 434.122103][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.274418][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.284708][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.293890][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 434.304932][ T5868] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 434.314055][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.346592][ T9690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 434.396101][ T5868] hub 3-1:1.0: bad descriptor, ignoring hub [ 434.402286][ T5868] hub 3-1:1.0: probe with driver hub failed with error -5 [ 434.410093][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 434.415354][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 434.425391][ T5868] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 434.431548][ T5868] cdc_wdm 3-1:1.0: Unknown control protocol [ 434.520445][ T9701] chnl_net:caif_netlink_parms(): no params data found [ 434.775768][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.782686][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.789173][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.795817][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.802800][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.809446][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.815795][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.822434][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.829063][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.835713][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.842218][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.848860][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.855785][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.862437][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.868601][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 435.269563][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 435.276212][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 435.287492][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 435.294137][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 435.303346][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 435.309982][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 435.429370][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.439047][ T9716] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 435.453417][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.471422][ T9716] /dev/nullb0: Can't open blockdev [ 435.487846][ T9701] bridge_slave_0: entered allmulticast mode [ 435.507068][ T9701] bridge_slave_0: entered promiscuous mode [ 435.536801][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.550505][ T9725] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 435.557442][ T9725] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 435.564361][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.583083][ T9701] bridge_slave_1: entered allmulticast mode [ 435.605518][ T9701] bridge_slave_1: entered promiscuous mode [ 435.772008][ T9701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.837169][ T9701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.997157][ T9701] team0: Port device team_slave_0 added [ 436.179019][ T5868] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 436.189469][ T5823] Bluetooth: hci5: command tx timeout [ 436.423470][ T9701] team0: Port device team_slave_1 added [ 436.599621][ T5868] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.611206][ T5868] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 436.777855][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.836636][ T5868] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 436.904219][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.080919][ T9] usb 3-1: USB disconnect, device number 26 [ 437.095552][ T5868] usb 2-1: config 0 descriptor?? [ 437.853406][ T9701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.865011][ T9701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.944566][ T9701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.018625][ T9701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.034685][ T9701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.070933][ T9701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.199859][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 438.206034][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 438.258960][ T5868] usb 2-1: USB disconnect, device number 25 [ 438.267432][ T5823] Bluetooth: hci5: command tx timeout [ 438.367368][ T5900] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 438.381229][ T9701] hsr_slave_0: entered promiscuous mode [ 438.412122][ T9701] hsr_slave_1: entered promiscuous mode [ 438.458094][ T9701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.477316][ T9701] Cannot create hsr debugfs directory [ 438.553495][ T5900] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 438.571600][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.591813][ T5900] usb 4-1: Product: syz [ 438.606397][ T5900] usb 4-1: Manufacturer: syz [ 438.622155][ T5900] usb 4-1: SerialNumber: syz [ 438.645924][ T5900] usb 4-1: config 0 descriptor?? [ 438.665701][ T5900] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 438.717628][ T5868] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 438.879961][ T5868] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 438.906523][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.945678][ T5868] usb 1-1: config 0 descriptor?? [ 438.995227][ T9701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.000781][ T9763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1098'. [ 439.022285][ T9701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 439.031603][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1098'. [ 439.052803][ T9701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 439.068160][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.077792][ T9763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1098'. [ 439.086870][ T9763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1098'. [ 439.106765][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.141270][ T9701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 439.206821][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 439.389239][ T5900] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 439.396510][ T5900] sq905c 4-1:0.0: Reading version command failed [ 439.432162][ T5900] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 439.476325][ T9764] veth3: entered promiscuous mode [ 439.484963][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 439.517525][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 439.552498][ T5868] usb 1-1: USB disconnect, device number 18 [ 439.696189][ T9701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.727713][ T5895] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 439.741943][ T9701] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.798042][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.805258][ T6519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.885038][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.893624][ T6519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.922265][ T5895] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 439.944803][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.009958][ T5895] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 440.040930][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.089657][ T5895] usb 3-1: config 0 descriptor?? [ 440.122676][ T9701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.251095][ T29] audit: type=1326 audit(1734702880.649:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 440.313975][ T29] audit: type=1326 audit(1734702880.679:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 440.347742][ T5823] Bluetooth: hci5: command tx timeout [ 440.353587][ T5867] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 440.356615][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.383671][ T29] audit: type=1326 audit(1734702880.689:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 440.387681][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.477501][ T29] audit: type=1326 audit(1734702880.689:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 440.540856][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 440.585762][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.621228][ T29] audit: type=1326 audit(1734702880.689:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 440.647499][ T5867] usb 2-1: config 0 has no interfaces? [ 440.666795][ T5867] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 1.00 [ 440.717426][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.739216][ T29] audit: type=1326 audit(1734702880.689:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 440.853061][ T5867] usb 2-1: config 0 descriptor?? [ 440.861944][ T5895] usb 3-1: string descriptor 0 read error: -71 [ 440.919121][ T29] audit: type=1326 audit(1734702880.689:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 441.016154][ T5895] usb 3-1: USB disconnect, device number 27 [ 441.120983][ T9701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.186756][ T9784] fuse: Unknown parameter '0xffffffffffffffff0x000000000000000c' [ 441.267486][ T29] audit: type=1326 audit(1734702880.689:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 441.361450][ T29] audit: type=1326 audit(1734702880.689:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 441.494628][ T29] audit: type=1326 audit(1734702880.689:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9777 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 441.816742][ T9796] 9pnet_fd: Insufficient options for proto=fd [ 442.069360][ T5895] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 442.237683][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 442.286027][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.427884][ T5823] Bluetooth: hci5: command tx timeout [ 442.447501][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.478714][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.488328][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.496491][ T5895] usb 1-1: Product: syz [ 442.607907][ T5895] usb 1-1: Manufacturer: syz [ 442.612867][ T5895] usb 1-1: SerialNumber: syz [ 443.262962][ T5906] usb 4-1: USB disconnect, device number 29 [ 443.406481][ T5895] usb 1-1: 0:2 : does not exist [ 444.163319][ T5818] usb 2-1: USB disconnect, device number 26 [ 448.420529][ T5895] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 448.453512][ T5895] usb 1-1: USB disconnect, device number 19 [ 449.058325][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.101631][ T9701] veth0_vlan: entered promiscuous mode [ 449.172439][ T9701] veth1_vlan: entered promiscuous mode [ 449.343811][ T9701] veth0_macvtap: entered promiscuous mode [ 449.398129][ T9701] veth1_macvtap: entered promiscuous mode [ 449.453657][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.495523][ T9775] syz.1.1101 (9775) used greatest stack depth: 17552 bytes left [ 449.516188][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.554141][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.627421][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.689027][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.749191][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.810264][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.880698][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.926607][ T9701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.990174][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.053915][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.071244][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 450.099119][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 450.099139][ T29] audit: type=1326 audit(1734702890.499:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 450.143478][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.187910][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.227448][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.257770][ T5895] usb 2-1: device descriptor read/64, error -71 [ 450.271697][ T29] audit: type=1326 audit(1734702890.539:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 450.315609][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.357576][ T9701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.387791][ T29] audit: type=1326 audit(1734702890.559:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 450.420775][ T9701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.468599][ T9701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.496458][ T29] audit: type=1326 audit(1734702890.559:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 450.537581][ T5895] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 450.568167][ T9818] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 450.600554][ T9701] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.418309][ T9701] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.428297][ T29] audit: type=1326 audit(1734702890.559:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 451.471066][ T5895] usb 2-1: device descriptor read/64, error -71 [ 451.496012][ T9701] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.541667][ T9701] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.573350][ T29] audit: type=1326 audit(1734702890.559:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 451.599204][ T5895] usb usb2-port1: attempt power cycle [ 451.778155][ T29] audit: type=1326 audit(1734702890.559:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 451.935251][ T29] audit: type=1326 audit(1734702890.569:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 452.001841][ T29] audit: type=1326 audit(1734702890.569:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e1185d29 code=0x7ffc0000 [ 452.017416][ T5895] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 452.023857][ T29] audit: type=1326 audit(1734702891.879:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7fc00000 [ 452.086940][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.118617][ T5895] usb 2-1: device descriptor read/8, error -71 [ 452.125011][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.307736][ T5906] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 452.450714][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.458796][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.548704][ T5895] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 452.842286][ T5895] usb 2-1: device descriptor read/8, error -71 [ 452.988234][ T5895] usb usb2-port1: unable to enumerate USB device [ 453.008358][ T5906] usb 4-1: device descriptor read/all, error -71 [ 453.258263][ T9836] IPv6: Can't replace route, no match found [ 453.844705][ T9840] 9pnet_fd: Insufficient options for proto=fd [ 454.804740][ T9854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1124'. [ 455.134912][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 455.134945][ T29] audit: type=1326 audit(1734702895.529:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 455.163773][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.257593][ T29] audit: type=1326 audit(1734702895.589:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 455.366417][ T29] audit: type=1326 audit(1734702895.589:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 455.399276][ T29] audit: type=1326 audit(1734702895.749:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 455.562983][ T29] audit: type=1326 audit(1734702895.789:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 455.627982][ T29] audit: type=1326 audit(1734702895.799:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 455.759735][ T29] audit: type=1326 audit(1734702895.839:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 455.932402][ T29] audit: type=1326 audit(1734702895.839:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 456.517755][ T29] audit: type=1326 audit(1734702895.839:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 456.785882][ T9874] bridge_slave_0: default FDB implementation only supports local addresses [ 456.937516][ T5895] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 457.027569][ T29] audit: type=1326 audit(1734702895.839:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 457.223527][ T5895] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 457.306079][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.739795][ T5895] usb 6-1: config 0 descriptor?? [ 457.956624][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 458.237581][ T3631] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 458.414398][ T3631] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 458.437580][ T3631] usb 4-1: config 0 has no interface number 0 [ 458.474858][ T3631] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.537891][ T3631] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.579532][ T3631] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 458.634110][ T3631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.741264][ T3631] usb 4-1: config 0 descriptor?? [ 458.794576][ T5895] usbhid 6-1:0.0: can't add hid device: -71 [ 458.815436][ T5895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 458.914550][ T5895] usb 6-1: USB disconnect, device number 2 [ 459.130465][ T9884] netlink: 'syz.0.1133': attribute type 11 has an invalid length. [ 459.178600][ T3631] asus 0003:0B05:17E0.000A: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input2 [ 459.204036][ T9884] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1133'. [ 459.261878][ T3631] asus 0003:0B05:17E0.000A: Asus input not registered [ 459.323578][ T3631] asus 0003:0B05:17E0.000A: probe with driver asus failed with error -12 [ 459.404641][ T3631] usb 4-1: USB disconnect, device number 32 [ 459.974773][ T9887] usb usb1: usbfs: process 9887 (syz.5.1134) did not claim interface 0 before use [ 460.696020][ T9898] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1139'. [ 461.989388][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1140'. [ 462.515570][ T9910] bridge0: port 3(gretap0) entered blocking state [ 462.575608][ T9910] bridge0: port 3(gretap0) entered disabled state [ 462.678748][ T9910] gretap0: entered allmulticast mode [ 462.735648][ T9910] gretap0: entered promiscuous mode [ 462.757395][ T5865] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 462.818300][ T9910] bridge0: port 3(gretap0) entered blocking state [ 462.825712][ T9910] bridge0: port 3(gretap0) entered forwarding state [ 462.938807][ T5865] usb 4-1: device descriptor read/64, error -71 [ 463.807483][ T5865] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 464.136845][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 464.136867][ T29] audit: type=1326 audit(1734702904.529:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 464.441329][ T29] audit: type=1326 audit(1734702904.539:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 464.475630][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'. [ 464.879026][ T9550] syz.4.1039: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 464.897400][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.4.1039 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 464.908114][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 464.918196][ T9550] Call Trace: [ 464.921499][ T9550] [ 464.924434][ T9550] dump_stack_lvl+0x241/0x360 [ 464.929128][ T9550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.934357][ T9550] ? __pfx__printk+0x10/0x10 [ 464.938968][ T9550] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 464.945404][ T9550] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 464.951923][ T9550] warn_alloc+0x278/0x410 [ 464.956265][ T9550] ? __pfx_warn_alloc+0x10/0x10 [ 464.961133][ T9550] ? relay_open_buf+0x231/0xd60 [ 464.965994][ T9550] ? __get_vm_area_node+0x1c8/0x2d0 [ 464.971200][ T9550] ? __get_vm_area_node+0x25c/0x2d0 [ 464.976411][ T9550] __vmalloc_node_range_noprof+0x62f/0x1380 [ 464.982339][ T9550] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 464.988116][ T9550] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 464.994480][ T9550] ? rcu_is_watching+0x15/0xb0 [ 464.999271][ T9550] ? trace_kmalloc+0x1f/0xd0 [ 465.003874][ T9550] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 465.009345][ T9550] ? rcu_is_watching+0x15/0xb0 [ 465.014127][ T9550] ? __kvmalloc_node_noprof+0x72/0x190 [ 465.019609][ T9550] __kvmalloc_node_noprof+0x142/0x190 [ 465.025001][ T9550] ? relay_open_buf+0x231/0xd60 [ 465.029877][ T9550] relay_open_buf+0x231/0xd60 [ 465.034584][ T9550] relay_open+0x3aa/0x890 [ 465.038946][ T9550] do_blk_trace_setup+0x573/0x9b0 [ 465.044005][ T9550] blk_trace_ioctl+0x359/0x9a0 [ 465.048790][ T9550] ? tomoyo_path_number_perm+0x6f9/0x860 [ 465.054443][ T9550] ? tomoyo_path_number_perm+0x206/0x860 [ 465.060094][ T9550] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 465.065391][ T9550] ? smack_log+0x123/0x540 [ 465.069832][ T9550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.075852][ T9550] ? __pfx_smack_log+0x10/0x10 [ 465.080642][ T9550] ? smk_access+0x4ab/0x4e0 [ 465.085179][ T9550] ? smack_file_ioctl+0x2f7/0x3a0 [ 465.090219][ T9550] ? __pfx_smack_file_ioctl+0x10/0x10 [ 465.095607][ T9550] ? file_to_blk_mode+0xcc/0x140 [ 465.100567][ T9550] blkdev_ioctl+0x40c/0x6a0 [ 465.105088][ T9550] ? __pfx_blkdev_ioctl+0x10/0x10 [ 465.110133][ T9550] ? __pfx_blkdev_ioctl+0x10/0x10 [ 465.115172][ T9550] __se_sys_ioctl+0xf5/0x170 [ 465.119789][ T9550] do_syscall_64+0xf3/0x230 [ 465.124316][ T9550] ? clear_bhb_loop+0x35/0x90 [ 465.129008][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.134923][ T9550] RIP: 0033:0x7f8cb4785d29 [ 465.139353][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.159070][ T9550] RSP: 002b:00007f8cb558b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.167506][ T9550] RAX: ffffffffffffffda RBX: 00007f8cb4975fa0 RCX: 00007f8cb4785d29 [ 465.175490][ T9550] RDX: 0000000020000100 RSI: 00000000c0481273 RDI: 0000000000000003 [ 465.183475][ T9550] RBP: 00007f8cb4801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 465.191458][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.199439][ T9550] R13: 0000000000000000 R14: 00007f8cb4975fa0 R15: 00007ffd496f9bc8 [ 465.207440][ T9550] [ 465.211265][ T9550] Mem-Info: [ 465.214432][ T9550] active_anon:2364 inactive_anon:3675 isolated_anon:150 [ 465.214432][ T9550] active_file:1539 inactive_file:1280 isolated_file:50 [ 465.214432][ T9550] unevictable:768 dirty:23 writeback:0 [ 465.214432][ T9550] slab_reclaimable:8095 slab_unreclaimable:100841 [ 465.214432][ T9550] mapped:34928 shmem:5493 pagetables:858 [ 465.214432][ T9550] sec_pagetables:0 bounce:0 [ 465.214432][ T9550] kernel_misc_reclaimable:0 [ 465.214432][ T9550] free:178904 free_pcp:1749 free_cma:0 [ 465.260996][ T9550] Node 0 active_anon:9300kB inactive_anon:8432kB active_file:4484kB inactive_file:1340kB unevictable:1536kB isolated(anon):600kB isolated(file):260kB mapped:133060kB dirty:124kB writeback:0kB shmem:14220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10928kB pagetables:3328kB sec_pagetables:0kB all_unreclaimable? no [ 465.294285][ T9550] Node 1 active_anon:84kB inactive_anon:6176kB active_file:1624kB inactive_file:3768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6492kB dirty:36kB writeback:0kB shmem:7660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:176kB pagetables:84kB sec_pagetables:0kB all_unreclaimable? no [ 465.326101][ T9550] Node 0 DMA free:5588kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:556kB inactive_anon:1280kB active_file:2156kB inactive_file:868kB unevictable:0kB writepending:92kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:8kB free_cma:0kB [ 465.355054][ T9550] lowmem_reserve[]: 0 2465 2466 0 0 [ 465.360977][ T9550] Node 0 DMA32 free:47888kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:7324kB inactive_anon:7072kB active_file:2512kB inactive_file:404kB unevictable:1536kB writepending:32kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:4064kB local_pcp:1448kB free_cma:0kB [ 465.391065][ T9550] lowmem_reserve[]: 0 0 0 0 0 [ 465.395858][ T9550] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:20kB inactive_anon:80kB active_file:116kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:12kB free_cma:0kB [ 465.404062][ T29] audit: type=1326 audit(1734702904.539:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 465.423023][ T9550] lowmem_reserve[]: 0 0 0 0 0 [ 465.449558][ T9550] Node 1 Normal free:667428kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:84kB inactive_anon:6176kB active_file:1624kB inactive_file:3768kB unevictable:1536kB writepending:36kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:1356kB local_pcp:840kB free_cma:0kB [ 465.480240][ T9550] lowmem_reserve[]: 0 0 0 0 0 [ 465.485622][ T9550] Node 0 DMA: 41*4kB (UM) 40*8kB (UM) 21*16kB (UM) 25*32kB (UM) 10*64kB (UM) 6*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 5588kB [ 465.501185][ T9550] Node 0 DMA32: 239*4kB (UME) 325*8kB (UME) 201*16kB (ME) 75*32kB (UME) 134*64kB (UME) 92*128kB (UME) 35*256kB (UME) 10*512kB (UME) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 46676kB [ 465.519082][ T9550] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 465.531134][ T9550] Node 1 Normal: 65*4kB (UME) 35*8kB (ME) 31*16kB (ME) 27*32kB (ME) 16*64kB (UME) 9*128kB (ME) 3*256kB (M) 8*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 159*4096kB (M) = 667372kB [ 465.549095][ T9550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.559333][ T9550] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 465.569232][ T9550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.578917][ T9550] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.588301][ T9550] 6638 total pagecache pages [ 465.593099][ T9550] 99 pages in swap cache [ 465.597380][ T29] audit: type=1326 audit(1734702904.539:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 465.597407][ T9550] Free swap = 108440kB [ 465.597422][ T9550] Total swap = 124996kB [ 465.627389][ T9550] 2097051 pages RAM [ 465.631225][ T9550] 0 pages HighMem/MovableOnly [ 465.635939][ T9550] 427005 pages reserved [ 465.640204][ T9550] 0 pages cma reserved [ 465.697450][ T29] audit: type=1326 audit(1734702904.539:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 465.829339][ T29] audit: type=1326 audit(1734702904.539:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 465.946213][ T29] audit: type=1326 audit(1734702904.539:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 466.087451][ T29] audit: type=1326 audit(1734702904.539:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 466.207565][ T29] audit: type=1326 audit(1734702904.539:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 466.349109][ T29] audit: type=1326 audit(1734702904.539:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e5d85d29 code=0x7ffc0000 [ 466.405999][ T9952] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 466.922128][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1156'. [ 470.960273][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 473.535620][T10005] FAULT_INJECTION: forcing a failure. [ 473.535620][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 473.589242][T10005] CPU: 1 UID: 0 PID: 10005 Comm: syz.0.1167 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 473.600116][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 473.610219][T10005] Call Trace: [ 473.613529][T10005] [ 473.616490][T10005] dump_stack_lvl+0x241/0x360 [ 473.621221][T10005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.626484][T10005] ? __pfx__printk+0x10/0x10 [ 473.631204][T10005] should_fail_ex+0x3b0/0x4e0 [ 473.635936][T10005] should_failslab+0xac/0x100 [ 473.640683][T10005] kmem_cache_alloc_node_noprof+0x77/0x380 [ 473.646538][T10005] ? __alloc_skb+0x1c3/0x440 [ 473.651178][T10005] __alloc_skb+0x1c3/0x440 [ 473.655639][T10005] ? __pfx___alloc_skb+0x10/0x10 [ 473.660619][T10005] ? notifier_call_chain+0x3cc/0x3f0 [ 473.665957][T10005] mr6_netlink_event+0xb9/0x1a0 [ 473.670864][T10005] ip6mr_mfc_add+0x2ead/0x35a0 [ 473.675666][T10005] ? ip6mr_mfc_add+0x2d9/0x35a0 [ 473.680562][T10005] ? __pfx_ip6mr_mfc_add+0x10/0x10 [ 473.685707][T10005] ? __mutex_lock+0x37f/0xee0 [ 473.690440][T10005] ? __might_fault+0xaa/0x120 [ 473.695153][T10005] ? __pfx_lock_release+0x10/0x10 [ 473.700213][T10005] ? ip6_mroute_setsockopt+0xa42/0x12a0 [ 473.705812][T10005] ? __pfx___mutex_lock+0x10/0x10 [ 473.710903][T10005] ip6_mroute_setsockopt+0xf44/0x12a0 [ 473.716338][T10005] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 473.722220][T10005] ? __might_fault+0xc6/0x120 [ 473.726948][T10005] do_ipv6_setsockopt+0x490/0x3640 [ 473.732116][T10005] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 473.737723][T10005] ? __pfx_lock_acquire+0x10/0x10 [ 473.742780][T10005] ? get_pid_task+0x23/0x1f0 [ 473.747412][T10005] ? __pfx_lock_release+0x10/0x10 [ 473.752474][T10005] ? kstrtouint_from_user+0x128/0x190 [ 473.757901][T10005] ? mark_lock+0x9a/0x360 [ 473.762274][T10005] ? __lock_acquire+0x1397/0x2100 [ 473.767348][T10005] ipv6_setsockopt+0x5d/0x170 [ 473.772068][T10005] rawv6_setsockopt+0x327/0x740 [ 473.776970][T10005] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 473.782386][T10005] ? __pfx_lock_acquire+0x10/0x10 [ 473.787455][T10005] ? sock_common_setsockopt+0x37/0xc0 [ 473.792886][T10005] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 473.798828][T10005] do_sock_setsockopt+0x3af/0x720 [ 473.803899][T10005] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 473.809497][T10005] ? __fget_files+0x395/0x410 [ 473.814204][T10005] ? __fget_files+0x2a/0x410 [ 473.818834][T10005] __x64_sys_setsockopt+0x1ee/0x280 [ 473.824080][T10005] do_syscall_64+0xf3/0x230 [ 473.828627][T10005] ? clear_bhb_loop+0x35/0x90 [ 473.833339][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.839279][T10005] RIP: 0033:0x7f63a0785d29 [ 473.843726][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.863478][T10005] RSP: 002b:00007f63a150d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.872042][T10005] RAX: ffffffffffffffda RBX: 00007f63a0975fa0 RCX: 00007f63a0785d29 [ 473.880062][T10005] RDX: 00000000000000cc RSI: 0000000000000029 RDI: 0000000000000003 [ 473.888068][T10005] RBP: 00007f63a150d090 R08: 000000000000005c R09: 0000000000000000 [ 473.896087][T10005] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.904094][T10005] R13: 0000000000000000 R14: 00007f63a0975fa0 R15: 00007ffd56b888f8 [ 473.912124][T10005] [ 474.485157][T10019] 9pnet_fd: Insufficient options for proto=fd [ 474.498225][T10016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.613439][T10028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1174'. [ 476.197725][ T46] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 476.383749][ T46] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 476.395412][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.760713][ T46] usb 4-1: config 0 descriptor?? [ 477.780251][ T46] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 477.879701][ T46] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 478.118876][ T46] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 478.126388][ T46] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 478.133936][ T46] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 478.143702][ T46] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 478.217907][ T46] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 9: -71 [ 478.247426][ T46] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -71 [ 478.301830][ T46] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 478.317331][ T46] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 478.494443][ T46] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71 [ 478.536686][ T46] usb 4-1: USB disconnect, device number 35 [ 478.578345][ T5868] kernel write not supported for file /adsp1 (pid: 5868 comm: kworker/0:5) [ 478.740417][ T5865] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 478.913798][ T5865] usb 1-1: Invalid ep0 maxpacket: 16 [ 479.047388][ T5865] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 479.217617][ T5865] usb 1-1: Invalid ep0 maxpacket: 16 [ 479.223562][ T5865] usb usb1-port1: attempt power cycle [ 479.380902][T10058] FAULT_INJECTION: forcing a failure. [ 479.380902][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 479.460776][T10058] CPU: 0 UID: 0 PID: 10058 Comm: syz.1.1184 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 479.471622][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 479.481728][T10058] Call Trace: [ 479.485046][T10058] [ 479.488009][T10058] dump_stack_lvl+0x241/0x360 [ 479.492737][T10058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.497980][T10058] ? __pfx__printk+0x10/0x10 [ 479.502622][T10058] ? fs_reclaim_acquire+0x93/0x130 [ 479.507875][T10058] ? __pfx___might_resched+0x10/0x10 [ 479.513221][T10058] should_fail_ex+0x3b0/0x4e0 [ 479.517940][T10058] should_failslab+0xac/0x100 [ 479.522670][T10058] __kmalloc_noprof+0xdd/0x4c0 [ 479.527476][T10058] ? kstrtouint_from_user+0x128/0x190 [ 479.532923][T10058] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 479.538709][T10058] tomoyo_realpath_from_path+0xcf/0x5e0 [ 479.544324][T10058] tomoyo_path_number_perm+0x236/0x860 [ 479.549835][T10058] ? __lock_acquire+0x1397/0x2100 [ 479.554911][T10058] ? tomoyo_path_number_perm+0x206/0x860 [ 479.560592][T10058] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 479.566660][T10058] ? __fget_files+0x2a/0x410 [ 479.571310][T10058] ? __fget_files+0x2a/0x410 [ 479.575944][T10058] security_file_ioctl+0xc6/0x2a0 [ 479.581106][T10058] __se_sys_ioctl+0x46/0x170 [ 479.585758][T10058] do_syscall_64+0xf3/0x230 [ 479.590320][T10058] ? clear_bhb_loop+0x35/0x90 [ 479.595037][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.600973][T10058] RIP: 0033:0x7fd0e5d85d29 [ 479.605420][T10058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.625076][T10058] RSP: 002b:00007fd0e6adc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.633511][T10058] RAX: ffffffffffffffda RBX: 00007fd0e5f75fa0 RCX: 00007fd0e5d85d29 [ 479.641494][T10058] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000004 [ 479.649475][T10058] RBP: 00007fd0e6adc090 R08: 0000000000000000 R09: 0000000000000000 [ 479.657457][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.665435][T10058] R13: 0000000000000000 R14: 00007fd0e5f75fa0 R15: 00007ffe068ee338 [ 479.673432][T10058] [ 479.748266][T10058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.556913][ T5865] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 480.587750][ T5865] usb 1-1: Invalid ep0 maxpacket: 16 [ 480.767379][ T5865] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 480.807345][ T5865] usb 1-1: Invalid ep0 maxpacket: 16 [ 480.814334][ T5865] usb usb1-port1: unable to enumerate USB device [ 481.162948][T10071] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1187'. [ 481.585330][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 481.938230][T10080] FAULT_INJECTION: forcing a failure. [ 481.938230][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 482.627150][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.2.1189 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 482.638016][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 482.648113][T10080] Call Trace: [ 482.651419][T10080] [ 482.654386][T10080] dump_stack_lvl+0x241/0x360 [ 482.659118][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.664371][T10080] ? __pfx__printk+0x10/0x10 [ 482.669014][T10080] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 482.675039][T10080] ? __pfx___might_resched+0x10/0x10 [ 482.680381][T10080] should_fail_ex+0x3b0/0x4e0 [ 482.685102][T10080] should_failslab+0xac/0x100 [ 482.689833][T10080] kmem_cache_alloc_node_noprof+0x77/0x380 [ 482.695677][T10080] ? __alloc_skb+0x1c3/0x440 [ 482.700314][T10080] __alloc_skb+0x1c3/0x440 [ 482.704780][T10080] ? __pfx___alloc_skb+0x10/0x10 [ 482.709762][T10080] ? netlink_ack_tlv_len+0x6e/0x200 [ 482.714998][T10080] netlink_ack+0x145/0xa50 [ 482.719469][T10080] netlink_rcv_skb+0x262/0x430 [ 482.724273][T10080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.729780][T10080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.735129][T10080] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.740380][T10080] netlink_unicast+0x7f6/0x990 [ 482.745205][T10080] ? __pfx_netlink_unicast+0x10/0x10 [ 482.750551][T10080] ? __virt_addr_valid+0x45f/0x530 [ 482.755745][T10080] ? __phys_addr_symbol+0x2f/0x70 [ 482.760821][T10080] ? __check_object_size+0x47a/0x730 [ 482.766166][T10080] netlink_sendmsg+0x8e4/0xcb0 [ 482.770988][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.776339][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.781678][T10080] __sock_sendmsg+0x221/0x270 [ 482.786413][T10080] ____sys_sendmsg+0x52a/0x7e0 [ 482.791243][T10080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.796591][T10080] ? __fget_files+0x2a/0x410 [ 482.801229][T10080] ? __fget_files+0x2a/0x410 [ 482.805872][T10080] __sys_sendmsg+0x269/0x350 [ 482.810508][T10080] ? __pfx_lock_release+0x10/0x10 [ 482.815579][T10080] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.820752][T10080] ? __pfx_vfs_write+0x10/0x10 [ 482.825598][T10080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.831987][T10080] ? do_syscall_64+0x100/0x230 [ 482.836810][T10080] ? do_syscall_64+0xb6/0x230 [ 482.841546][T10080] do_syscall_64+0xf3/0x230 [ 482.846098][T10080] ? clear_bhb_loop+0x35/0x90 [ 482.850820][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.856763][T10080] RIP: 0033:0x7fb5e1185d29 [ 482.861221][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.880879][T10080] RSP: 002b:00007fb5e2005038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.889352][T10080] RAX: ffffffffffffffda RBX: 00007fb5e1375fa0 RCX: 00007fb5e1185d29 [ 482.897369][T10080] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 482.905387][T10080] RBP: 00007fb5e2005090 R08: 0000000000000000 R09: 0000000000000000 [ 482.913405][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.921421][T10080] R13: 0000000000000000 R14: 00007fb5e1375fa0 R15: 00007ffd16f45b88 [ 482.929457][T10080] [ 484.158638][ T3631] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 485.277789][T10108] veth0_to_team: entered promiscuous mode [ 485.283595][T10108] veth0_to_team: entered allmulticast mode [ 485.417355][ T3631] usb 2-1: Using ep0 maxpacket: 16 [ 485.424554][ T3631] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 485.433387][ T3631] usb 2-1: config 0 has no interface number 0 [ 485.447298][ T3631] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 485.481159][ T3631] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 485.502185][ T3631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.510440][ T3631] usb 2-1: Product: syz [ 485.514682][ T3631] usb 2-1: Manufacturer: syz [ 485.519538][ T3631] usb 2-1: SerialNumber: syz [ 485.586795][ T3631] usb 2-1: config 0 descriptor?? [ 486.184083][T10126] FAULT_INJECTION: forcing a failure. [ 486.184083][T10126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.938263][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.2.1203 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 486.949110][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 486.959211][T10126] Call Trace: [ 486.962522][T10126] [ 486.965480][T10126] dump_stack_lvl+0x241/0x360 [ 486.970205][T10126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.975448][T10126] ? __pfx__printk+0x10/0x10 [ 486.980092][T10126] should_fail_ex+0x3b0/0x4e0 [ 486.984803][T10126] prepare_alloc_pages+0x1da/0x5b0 [ 486.989962][T10126] __alloc_pages_noprof+0x16f/0x710 [ 486.995213][T10126] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 487.000998][T10126] ? lockdep_init_map_type+0xa1/0x910 [ 487.006414][T10126] alloc_pages_mpol_noprof+0x3e8/0x680 [ 487.011948][T10126] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 487.017989][T10126] ? __init_waitqueue_head+0xae/0x150 [ 487.023410][T10126] ? alloc_pages_noprof+0xef/0x170 [ 487.028591][T10126] get_zeroed_page_noprof+0x17/0x40 [ 487.033839][T10126] rds_cong_from_addr+0x10f/0x380 [ 487.038917][T10126] ? rds_cong_get_maps+0x1f/0xb0 [ 487.043907][T10126] rds_cong_get_maps+0x28/0xb0 [ 487.048726][T10126] __rds_conn_create+0x9d6/0x1ed0 [ 487.053791][T10126] ? __rds_conn_create+0x2d1/0x1ed0 [ 487.059020][T10126] ? __pfx___rds_conn_create+0x10/0x10 [ 487.064511][T10126] rds_conn_create_outgoing+0x43/0x60 [ 487.069904][T10126] rds_sendmsg+0x1251/0x2270 [ 487.074527][T10126] ? __pfx_rds_sendmsg+0x10/0x10 [ 487.079482][T10126] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 487.085929][T10126] ? __pfx_lock_release+0x10/0x10 [ 487.090981][T10126] ? __pfx_rds_sendmsg+0x10/0x10 [ 487.095931][T10126] __sock_sendmsg+0x221/0x270 [ 487.100632][T10126] ____sys_sendmsg+0x52a/0x7e0 [ 487.105420][T10126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.110727][T10126] ? __fget_files+0x2a/0x410 [ 487.115328][T10126] ? __fget_files+0x2a/0x410 [ 487.119931][T10126] __sys_sendmsg+0x269/0x350 [ 487.124537][T10126] ? __pfx_lock_release+0x10/0x10 [ 487.129577][T10126] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.134712][T10126] ? __pfx_vfs_write+0x10/0x10 [ 487.139511][T10126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 487.145849][T10126] ? do_syscall_64+0x100/0x230 [ 487.150644][T10126] ? do_syscall_64+0xb6/0x230 [ 487.155343][T10126] do_syscall_64+0xf3/0x230 [ 487.159868][T10126] ? clear_bhb_loop+0x35/0x90 [ 487.164560][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.170475][T10126] RIP: 0033:0x7fb5e1185d29 [ 487.174903][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.194522][T10126] RSP: 002b:00007fb5e2005038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.202953][T10126] RAX: ffffffffffffffda RBX: 00007fb5e1375fa0 RCX: 00007fb5e1185d29 [ 487.210937][T10126] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 487.218917][T10126] RBP: 00007fb5e2005090 R08: 0000000000000000 R09: 0000000000000000 [ 487.226898][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.234878][T10126] R13: 0000000000000000 R14: 00007fb5e1375fa0 R15: 00007ffd16f45b88 [ 487.242876][T10126] [ 487.269718][ T3631] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input12 [ 487.500531][T10102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.551872][T10102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.596836][ T5868] usb 2-1: USB disconnect, device number 31 [ 488.182540][T10158] loop0: detected capacity change from 0 to 7 [ 489.829723][T10158] Dev loop0: unable to read RDB block 7 [ 489.835391][T10158] loop0: unable to read partition table [ 490.016888][T10164] FAULT_INJECTION: forcing a failure. [ 490.016888][T10164] name failslab, interval 1, probability 0, space 0, times 0 [ 490.047398][T10164] CPU: 0 UID: 0 PID: 10164 Comm: syz.2.1215 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 490.058249][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 490.068345][T10164] Call Trace: [ 490.071653][T10164] [ 490.074611][T10164] dump_stack_lvl+0x241/0x360 [ 490.079340][T10164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.084586][T10164] ? __pfx__printk+0x10/0x10 [ 490.089224][T10164] ? fs_reclaim_acquire+0x93/0x130 [ 490.094382][T10164] ? __pfx___might_resched+0x10/0x10 [ 490.099713][T10164] ? dynamic_dname+0x141/0x1b0 [ 490.104518][T10164] should_fail_ex+0x3b0/0x4e0 [ 490.109242][T10164] should_failslab+0xac/0x100 [ 490.113987][T10164] __kmalloc_noprof+0xdd/0x4c0 [ 490.118789][T10164] ? tomoyo_encode+0x26f/0x540 [ 490.123601][T10164] tomoyo_encode+0x26f/0x540 [ 490.128236][T10164] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 490.133832][T10164] tomoyo_realpath_from_path+0x59e/0x5e0 [ 490.139522][T10164] tomoyo_path_number_perm+0x236/0x860 [ 490.145016][T10164] ? __lock_acquire+0x1397/0x2100 [ 490.150086][T10164] ? tomoyo_path_number_perm+0x206/0x860 [ 490.155760][T10164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.161823][T10164] ? __fget_files+0x2a/0x410 [ 490.166451][T10164] ? __fget_files+0x2a/0x410 [ 490.171080][T10164] security_file_ioctl+0xc6/0x2a0 [ 490.176144][T10164] __se_sys_ioctl+0x46/0x170 [ 490.180787][T10164] do_syscall_64+0xf3/0x230 [ 490.185337][T10164] ? clear_bhb_loop+0x35/0x90 [ 490.190047][T10164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.195982][T10164] RIP: 0033:0x7fb5e1185d29 [ 490.200431][T10164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.220083][T10164] RSP: 002b:00007fb5e2005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.228549][T10164] RAX: ffffffffffffffda RBX: 00007fb5e1375fa0 RCX: 00007fb5e1185d29 [ 490.236562][T10164] RDX: 0000000020000200 RSI: 00000000c048aeca RDI: 000000000000000c [ 490.244571][T10164] RBP: 00007fb5e2005090 R08: 0000000000000000 R09: 0000000000000000 [ 490.252580][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.260588][T10164] R13: 0000000000000000 R14: 00007fb5e1375fa0 R15: 00007ffd16f45b88 [ 490.268618][T10164] [ 490.281467][T10164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.570749][T10158] loop0: partition table beyond EOD, truncated [ 490.617796][T10158] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 490.617796][T10158] ) failed (rc=-5) [ 490.867453][ T29] audit: type=1326 audit(1734702931.249:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.011843][ T29] audit: type=1326 audit(1734702931.249:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.157486][ T29] audit: type=1326 audit(1734702931.249:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.469401][ T29] audit: type=1326 audit(1734702931.259:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.499965][ T29] audit: type=1326 audit(1734702931.259:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.521667][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.528181][ T29] audit: type=1326 audit(1734702931.259:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.550448][ T29] audit: type=1326 audit(1734702931.259:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.572032][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.579605][ T29] audit: type=1326 audit(1734702931.259:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.601304][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.607917][ T29] audit: type=1326 audit(1734702931.259:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.629969][ T29] audit: type=1326 audit(1734702931.299:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10176 comm="syz.0.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f63a0785d29 code=0x7ffc0000 [ 491.651565][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.676758][ T5193] Dev loop0: unable to read RDB block 7 [ 491.717447][ T5193] loop0: unable to read partition table [ 491.747625][ T5193] loop0: partition table beyond EOD, truncated [ 492.064742][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'. [ 492.213840][T10185] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.957089][T10216] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ ' [ 494.128479][T10220] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 494.140256][T10220] batman_adv: batadv0: Adding interface: gretap1 [ 494.146655][T10220] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.172233][T10220] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 494.193568][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 494.527456][ T5868] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 494.898288][ T5868] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 494.906535][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.975008][ T5868] usb 3-1: config 0 has no interface number 0 [ 495.003772][ T5868] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 495.407606][ T5868] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 495.437373][ T5868] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 239 [ 495.464328][ T5868] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 495.474150][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.540345][ T5868] usb 3-1: Product: syz [ 495.544579][ T5868] usb 3-1: Manufacturer: syz [ 495.638965][ T5868] usb 3-1: SerialNumber: syz [ 495.722152][T10242] FAULT_INJECTION: forcing a failure. [ 495.722152][T10242] name failslab, interval 1, probability 0, space 0, times 0 [ 495.753874][T10242] CPU: 1 UID: 0 PID: 10242 Comm: syz.3.1237 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 495.764706][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 495.774778][T10242] Call Trace: [ 495.778062][T10242] [ 495.780994][T10242] dump_stack_lvl+0x241/0x360 [ 495.785682][T10242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.790891][T10242] ? __pfx__printk+0x10/0x10 [ 495.795488][T10242] ? kmem_cache_alloc_noprof+0x48/0x380 [ 495.801073][T10242] ? __pfx___might_resched+0x10/0x10 [ 495.806397][T10242] should_fail_ex+0x3b0/0x4e0 [ 495.811107][T10242] should_failslab+0xac/0x100 [ 495.815811][T10242] ? vm_area_dup+0x61/0x290 [ 495.820331][T10242] kmem_cache_alloc_noprof+0x70/0x380 [ 495.825729][T10242] vm_area_dup+0x61/0x290 [ 495.830094][T10242] __split_vma+0x1cb/0xc50 [ 495.834556][T10242] ? __pfx___split_vma+0x10/0x10 [ 495.839544][T10242] ? mas_find+0x950/0xbb0 [ 495.843890][T10242] vms_gather_munmap_vmas+0x4c1/0x1600 [ 495.849378][T10242] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 495.855281][T10242] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 495.861287][T10242] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 495.867641][T10242] ? do_raw_spin_unlock+0x13c/0x8b0 [ 495.872860][T10242] ? finish_task_switch+0x1e5/0x870 [ 495.878074][T10242] do_vmi_align_munmap+0x3ff/0x6f0 [ 495.883206][T10242] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 495.888882][T10242] ? mas_find+0x8c0/0xbb0 [ 495.893223][T10242] ? mark_lock+0x9a/0x360 [ 495.897565][T10242] do_vmi_munmap+0x24e/0x2d0 [ 495.902173][T10242] do_munmap+0x18a/0x240 [ 495.906454][T10242] ? __pfx_do_munmap+0x10/0x10 [ 495.911250][T10242] ? __se_sys_mremap+0xe1f/0x1ac0 [ 495.916302][T10242] __se_sys_mremap+0xff7/0x1ac0 [ 495.921181][T10242] ? __pfx___se_sys_mremap+0x10/0x10 [ 495.926478][T10242] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 495.932421][T10242] ? rcu_read_unlock_trace_special+0x2a5/0x410 [ 495.938627][T10242] ? __pfx_lock_release+0x10/0x10 [ 495.943661][T10242] ? __pfx_rcu_read_unlock_trace_special+0x10/0x10 [ 495.950202][T10242] ? trace_sys_enter+0x74/0x120 [ 495.955062][T10242] ? rcu_is_watching+0x15/0xb0 [ 495.959859][T10242] ? trace_sys_enter+0x25/0x120 [ 495.964718][T10242] ? __x64_sys_mremap+0x20/0xc0 [ 495.969602][T10242] do_syscall_64+0xf3/0x230 [ 495.974139][T10242] ? clear_bhb_loop+0x35/0x90 [ 495.978826][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.984732][T10242] RIP: 0033:0x7fbd0bd85d29 [ 495.989153][T10242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.008766][T10242] RSP: 002b:00007fbd0cc7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 496.017187][T10242] RAX: ffffffffffffffda RBX: 00007fbd0bf75fa0 RCX: 00007fbd0bd85d29 [ 496.025174][T10242] RDX: 0000000000200000 RSI: 0000000000600000 RDI: 0000000020000000 [ 496.033153][T10242] RBP: 00007fbd0cc7d090 R08: 0000000020a00000 R09: 0000000000000000 [ 496.041130][T10242] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 496.049139][T10242] R13: 0000000000000000 R14: 00007fbd0bf75fa0 R15: 00007ffec5fa9338 [ 496.057151][T10242] [ 496.060320][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.100354][ T5868] usb 3-1: config 0 descriptor?? [ 496.530438][ T5868] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 496.827365][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 496.994157][ T5868] usb 3-1: USB disconnect, device number 28 [ 497.099775][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 497.144035][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.205019][ T9] usb 1-1: config 0 descriptor?? [ 497.649718][T10256] syzkaller0: entered promiscuous mode [ 497.655317][T10256] syzkaller0: entered allmulticast mode [ 499.048536][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 499.424109][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 499.457918][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 499.527697][ T9] usb 1-1: USB disconnect, device number 24 [ 500.558233][ T3631] IPVS: starting estimator thread 0... [ 500.757642][T10278] IPVS: using max 18 ests per chain, 43200 per kthread [ 500.979378][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 500.979401][ T29] audit: type=1326 audit(1734702941.379:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 501.163735][ T29] audit: type=1326 audit(1734702941.409:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 501.187450][ T29] audit: type=1326 audit(1734702941.429:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 501.242566][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 501.356164][ T29] audit: type=1326 audit(1734702941.429:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 501.441256][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 501.505159][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 501.567429][ T29] audit: type=1326 audit(1734702941.429:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 501.679318][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 501.796551][ T29] audit: type=1326 audit(1734702941.429:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 501.797166][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.825686][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.834281][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 501.846669][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 501.917542][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 501.958788][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 502.063348][ T29] audit: type=1326 audit(1734702941.429:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 502.110847][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 502.156317][ T29] audit: type=1326 audit(1734702941.429:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 502.187402][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 502.263882][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 502.277403][ T9] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 502.286649][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.292933][ T29] audit: type=1326 audit(1734702941.429:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 503.061404][ T9] usb 3-1: Product: syz [ 503.065666][ T9] usb 3-1: Manufacturer: syz [ 503.070604][ T9] usb 3-1: SerialNumber: syz [ 503.077787][ T9] usb 3-1: config 0 descriptor?? [ 503.198270][ T9] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 503.207739][ T9] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 503.228338][ T29] audit: type=1326 audit(1734702941.429:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10294 comm="syz.3.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bd85d29 code=0x7ffc0000 [ 503.881311][T10310] sp0: Synchronizing with TNC [ 504.074606][T10291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.096575][T10323] FAULT_INJECTION: forcing a failure. [ 504.096575][T10323] name failslab, interval 1, probability 0, space 0, times 0 [ 504.108068][T10291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.131601][T10323] CPU: 0 UID: 0 PID: 10323 Comm: syz.1.1257 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 504.142435][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 504.152530][T10323] Call Trace: [ 504.155854][T10323] [ 504.158823][T10323] dump_stack_lvl+0x241/0x360 [ 504.163553][T10323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.168804][T10323] ? __pfx__printk+0x10/0x10 [ 504.173438][T10323] ? fs_reclaim_acquire+0x93/0x130 [ 504.178580][T10323] ? __pfx___might_resched+0x10/0x10 [ 504.183899][T10323] should_fail_ex+0x3b0/0x4e0 [ 504.188603][T10323] should_failslab+0xac/0x100 [ 504.193315][T10323] __kmalloc_noprof+0xdd/0x4c0 [ 504.198100][T10323] ? tomoyo_encode+0x26f/0x540 [ 504.202899][T10323] tomoyo_encode+0x26f/0x540 [ 504.207522][T10323] tomoyo_realpath_from_path+0x59e/0x5e0 [ 504.213273][T10323] tomoyo_check_open_permission+0x258/0x4f0 [ 504.219184][T10323] ? tomoyo_check_open_permission+0x207/0x4f0 [ 504.225265][T10323] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 504.231722][T10323] ? do_raw_spin_unlock+0x13c/0x8b0 [ 504.236949][T10323] security_file_open+0xac/0x250 [ 504.241908][T10323] do_dentry_open+0x328/0x1b70 [ 504.246712][T10323] vfs_open+0x3e/0x330 [ 504.250896][T10323] path_openat+0x2c84/0x3590 [ 504.255529][T10323] ? __pfx_path_openat+0x10/0x10 [ 504.260503][T10323] do_filp_open+0x27f/0x4e0 [ 504.265030][T10323] ? __pfx_do_filp_open+0x10/0x10 [ 504.270072][T10323] ? do_raw_spin_lock+0x14f/0x370 [ 504.275165][T10323] do_sys_openat2+0x13e/0x1d0 [ 504.279859][T10323] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.285074][T10323] ? trace_sys_enter+0x74/0x120 [ 504.289953][T10323] __x64_sys_open+0x225/0x270 [ 504.294651][T10323] ? __pfx___x64_sys_open+0x10/0x10 [ 504.299862][T10323] ? __might_fault+0xc6/0x120 [ 504.304562][T10323] ? trace_sys_enter+0x74/0x120 [ 504.309432][T10323] ? rcu_is_watching+0x15/0xb0 [ 504.314214][T10323] ? trace_sys_enter+0x25/0x120 [ 504.319170][T10323] do_syscall_64+0xf3/0x230 [ 504.323698][T10323] ? clear_bhb_loop+0x35/0x90 [ 504.328397][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.334312][T10323] RIP: 0033:0x7fd0e5d85d29 [ 504.338741][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.358361][T10323] RSP: 002b:00007fd0e3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 504.366808][T10323] RAX: ffffffffffffffda RBX: 00007fd0e5f76080 RCX: 00007fd0e5d85d29 [ 504.374815][T10323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 504.382813][T10323] RBP: 00007fd0e3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.390820][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.398850][T10323] R13: 0000000000000000 R14: 00007fd0e5f76080 R15: 00007ffe068ee338 [ 504.406863][T10323] [ 504.409995][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.451029][T10323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.074881][ T3631] usb 3-1: USB disconnect, device number 29 [ 505.478164][T10333] FAULT_INJECTION: forcing a failure. [ 505.478164][T10333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.572948][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.0.1260 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 505.583794][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 505.593898][T10333] Call Trace: [ 505.597204][T10333] [ 505.600160][T10333] dump_stack_lvl+0x241/0x360 [ 505.604888][T10333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.610125][T10333] ? __pfx__printk+0x10/0x10 [ 505.614768][T10333] should_fail_ex+0x3b0/0x4e0 [ 505.619482][T10333] prepare_alloc_pages+0x1da/0x5b0 [ 505.624639][T10333] __alloc_pages_noprof+0x16f/0x710 [ 505.629886][T10333] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 505.635641][T10333] ? validate_chain+0x11e/0x5920 [ 505.640628][T10333] ? __lock_acquire+0x1397/0x2100 [ 505.645690][T10333] alloc_pages_mpol_noprof+0x3e8/0x680 [ 505.651199][T10333] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 505.657227][T10333] ? alloc_pages_noprof+0xef/0x170 [ 505.662382][T10333] __pud_alloc+0x96/0x4e0 [ 505.666748][T10333] ? __pfx___pud_alloc+0x10/0x10 [ 505.671720][T10333] ? __pfx_lock_release+0x10/0x10 [ 505.676790][T10333] handle_mm_fault+0x184f/0x1ad0 [ 505.681779][T10333] ? mt_find+0x2a9/0x920 [ 505.686079][T10333] ? __pfx_handle_mm_fault+0x10/0x10 [ 505.691417][T10333] ? __pfx_find_vma+0x10/0x10 [ 505.696135][T10333] ? vma_is_secretmem+0xd/0x50 [ 505.700960][T10333] ? check_vma_flags+0x3ee/0x5a0 [ 505.705944][T10333] __get_user_pages+0x1c82/0x49e0 [ 505.711066][T10333] ? __pfx___get_user_pages+0x10/0x10 [ 505.716513][T10333] get_user_pages_remote+0x31e/0xb60 [ 505.721856][T10333] ? __pfx_get_user_pages_remote+0x10/0x10 [ 505.727718][T10333] get_arg_page+0x266/0x580 [ 505.732259][T10333] ? __pfx_lock_release+0x10/0x10 [ 505.737328][T10333] ? __pfx_get_arg_page+0x10/0x10 [ 505.742395][T10333] ? __might_fault+0xaa/0x120 [ 505.747120][T10333] copy_string_kernel+0x148/0x1f0 [ 505.752191][T10333] do_execveat_common+0x3fd/0x6f0 [ 505.757260][T10333] __x64_sys_execve+0x92/0xb0 [ 505.761979][T10333] do_syscall_64+0xf3/0x230 [ 505.766532][T10333] ? clear_bhb_loop+0x35/0x90 [ 505.771246][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.777182][T10333] RIP: 0033:0x7f63a0785d29 [ 505.781626][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.801275][T10333] RSP: 002b:00007f63a150d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 505.809734][T10333] RAX: ffffffffffffffda RBX: 00007f63a0975fa0 RCX: 00007f63a0785d29 [ 505.817739][T10333] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000020000000 [ 505.825742][T10333] RBP: 00007f63a150d090 R08: 0000000000000000 R09: 0000000000000000 [ 505.833742][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.841754][T10333] R13: 0000000000000000 R14: 00007f63a0975fa0 R15: 00007ffd56b888f8 [ 505.849794][T10333] [ 506.528256][ T11] bridge_slave_1: left allmulticast mode [ 506.534461][ T11] bridge_slave_1: left promiscuous mode [ 506.553401][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.613176][T10340] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 506.619730][T10340] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 506.648965][ T11] bridge_slave_0: left allmulticast mode [ 506.654705][ T11] bridge_slave_0: left promiscuous mode [ 506.670129][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.097327][ T5865] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 508.469152][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 508.619627][ T5865] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.718083][ T5865] usb 1-1: config 0 has no interface number 0 [ 508.759972][ T5865] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 508.823897][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'. [ 508.882186][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.903307][ T5865] usb 1-1: Product: syz [ 508.933072][ T5865] usb 1-1: Manufacturer: syz [ 508.947892][ T5865] usb 1-1: SerialNumber: syz [ 508.980103][ T5865] usb 1-1: config 0 descriptor?? [ 508.993319][ T5865] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 509.257446][T10347] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 509.310061][T10347] CIFS: Unable to determine destination address [ 509.507707][ T5865] gspca_spca1528: reg_w err -110 [ 509.550542][ T5865] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 510.314926][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.342530][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.355730][ T11] bond0 (unregistering): Released all slaves [ 510.659027][ T9] usb 1-1: USB disconnect, device number 25 [ 510.864747][T10376] FAULT_INJECTION: forcing a failure. [ 510.864747][T10376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.891186][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.5.1270 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 510.902017][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 510.912091][T10376] Call Trace: [ 510.915382][T10376] [ 510.918328][T10376] dump_stack_lvl+0x241/0x360 [ 510.923029][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.928259][T10376] ? __pfx__printk+0x10/0x10 [ 510.932877][T10376] ? __pfx_lock_release+0x10/0x10 [ 510.937925][T10376] ? get_synthdev+0x117/0x2c0 [ 510.942643][T10376] should_fail_ex+0x3b0/0x4e0 [ 510.947352][T10376] _copy_from_user+0x2f/0xc0 [ 510.951968][T10376] snd_seq_oss_write+0x5a9/0xbb0 [ 510.956923][T10376] ? mark_lock+0x9a/0x360 [ 510.961289][T10376] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 510.966767][T10376] ? bpf_lsm_file_permission+0x9/0x10 [ 510.972167][T10376] ? security_file_permission+0x74/0x280 [ 510.977820][T10376] odev_write+0x5b/0x80 [ 510.981999][T10376] ? __pfx_odev_write+0x10/0x10 [ 510.986872][T10376] vfs_write+0x2a3/0xd30 [ 510.991137][T10376] ? __pfx_vfs_write+0x10/0x10 [ 510.995919][T10376] ? __fget_files+0x2a/0x410 [ 511.000524][T10376] ? __fget_files+0x395/0x410 [ 511.005214][T10376] ? __fget_files+0x2a/0x410 [ 511.009840][T10376] ksys_write+0x18f/0x2b0 [ 511.014189][T10376] ? __pfx_ksys_write+0x10/0x10 [ 511.019058][T10376] ? do_syscall_64+0x100/0x230 [ 511.023845][T10376] ? do_syscall_64+0xb6/0x230 [ 511.028553][T10376] do_syscall_64+0xf3/0x230 [ 511.033083][T10376] ? clear_bhb_loop+0x35/0x90 [ 511.037779][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.043695][T10376] RIP: 0033:0x7f77d8b85d29 [ 511.048128][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.067749][T10376] RSP: 002b:00007f77d99e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.076188][T10376] RAX: ffffffffffffffda RBX: 00007f77d8d75fa0 RCX: 00007f77d8b85d29 [ 511.084170][T10376] RDX: 000000000000fd85 RSI: 0000000020000080 RDI: 0000000000000004 [ 511.092149][T10376] RBP: 00007f77d99e1090 R08: 0000000000000000 R09: 0000000000000000 [ 511.100145][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.108136][T10376] R13: 0000000000000000 R14: 00007f77d8d75fa0 R15: 00007ffd9c94d7c8 [ 511.116132][T10376] [ 512.438733][T10393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.454488][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 512.620246][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 512.647756][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.706919][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 512.773632][ T9] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 512.836447][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.864733][ T9] usb 3-1: config 0 descriptor?? [ 512.877491][ T5865] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 513.060383][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 513.106050][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.138636][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.157779][ T11] hsr_slave_0: left promiscuous mode [ 513.164224][ T11] hsr_slave_1: left promiscuous mode [ 513.188498][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.216302][ T5865] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 513.240869][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.251199][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.276267][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.340299][ T5865] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.425653][ T5865] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 513.505508][ T9] cherry 0003:046A:0027.000C: item fetching failed at offset 3/5 [ 513.530263][ T5865] usb 1-1: Manufacturer: syz [ 513.562910][ T9] cherry 0003:046A:0027.000C: probe with driver cherry failed with error -22 [ 513.567337][ T5818] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 513.583204][ T5865] usb 1-1: config 0 descriptor?? [ 513.928206][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 513.945617][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.000045][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 514.012418][ T5818] usb 2-1: can't read configurations, error -61 [ 514.020978][ T5865] rc_core: IR keymap rc-hauppauge not found [ 514.047300][ T5865] Registered IR keymap rc-empty [ 514.052537][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.098325][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.116082][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.123015][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.149384][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 514.167510][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.167892][ T5818] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 514.184593][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 514.189487][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.219796][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.234406][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.237875][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.256179][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.284834][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.307588][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.320131][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.328294][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.367352][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 514.390134][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.390657][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.423118][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.447856][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.471081][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.509170][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.527705][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 514.550510][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.561336][ T5818] usb 2-1: can't read configurations, error -61 [ 514.577570][ T5818] usb usb2-port1: attempt power cycle [ 514.582971][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 514.598973][ T5865] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 514.613872][ T5865] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 514.662852][ T5865] usb 1-1: USB disconnect, device number 26 [ 514.947461][ T5818] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 515.027743][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 515.044311][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 515.073884][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 515.097370][ T5818] usb 2-1: can't read configurations, error -61 [ 515.248398][ T5818] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 515.306166][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 515.318264][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 515.377901][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 515.395855][ T5818] usb 2-1: can't read configurations, error -61 [ 515.412865][ T5818] usb usb2-port1: unable to enumerate USB device [ 515.423270][ T11] team0 (unregistering): Port device team_slave_1 removed [ 515.529748][ T11] team0 (unregistering): Port device team_slave_0 removed [ 516.459229][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 516.851447][ T5900] usb 3-1: USB disconnect, device number 30 [ 516.967506][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1283'. [ 517.895936][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1283'. [ 517.953546][T10448] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 517.953599][T10448] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 519.296618][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 519.296641][ T29] audit: type=1326 audit(1734702959.689:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0e5d85d29 code=0x0 [ 520.927383][ T5895] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 521.092679][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.148075][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 521.379236][ T5895] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 521.667430][ T5900] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 521.727999][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.762479][ T5895] usb 2-1: config 0 descriptor?? [ 521.927409][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 521.931104][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 521.958697][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 521.970164][ T5900] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 521.979978][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.032944][T10506] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 522.079089][ T5900] usb 4-1: config 0 descriptor?? [ 522.284667][ T5895] Bluetooth: Can't get state to change to load configuration err [ 522.294435][ T5895] Bluetooth: Loading sysconfig file failed [ 522.323891][ T5895] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 522.369177][ T5895] usb 2-1: USB disconnect, device number 36 [ 522.437377][T10499] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 522.549395][T10515] openvswitch: netlink: IP tunnel dst address not specified [ 522.559642][ T5900] elan 0003:04F3:0755.000D: unknown main item tag 0x3 [ 522.596436][ T5900] elan 0003:04F3:0755.000D: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 522.617383][T10499] usb 6-1: Using ep0 maxpacket: 32 [ 522.624361][T10499] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.673882][T10499] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 522.693610][T10499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.733513][T10499] usb 6-1: Product: syz [ 522.748204][T10499] usb 6-1: Manufacturer: syz [ 522.752878][T10499] usb 6-1: SerialNumber: syz [ 522.777804][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.781701][T10499] usb 6-1: config 0 descriptor?? [ 522.786538][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.813216][ T9881] usb 4-1: USB disconnect, device number 36 [ 523.110711][T10499] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 523.437636][ T5900] usb 6-1: USB disconnect, device number 3 [ 523.625130][T10541] 9pnet_fd: Insufficient options for proto=fd [ 524.295027][T10499] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 524.479575][T10499] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.511516][T10499] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.890102][T10499] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.906830][T10499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.915723][T10499] usb 1-1: Product: syz [ 524.920404][T10499] usb 1-1: Manufacturer: syz [ 524.926498][T10499] usb 1-1: SerialNumber: syz [ 525.228821][T10499] usb 1-1: 0:2 : does not exist [ 525.252552][T10499] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 525.530117][T10499] usb 1-1: USB disconnect, device number 27 [ 525.906944][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.313067][T10608] 9pnet_fd: Insufficient options for proto=fd [ 528.332387][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 528.827420][ T46] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 528.967550][ T46] usb 4-1: device descriptor read/64, error -71 [ 529.217371][ T46] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 529.367804][ T46] usb 4-1: device descriptor read/64, error -71 [ 529.505927][ T46] usb usb4-port1: attempt power cycle [ 529.998361][ T46] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 530.028104][ T46] usb 4-1: device descriptor read/8, error -71 [ 530.268221][ T46] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 530.299385][ T46] usb 4-1: device descriptor read/8, error -71 [ 530.422953][ T46] usb usb4-port1: unable to enumerate USB device [ 530.637466][ T5900] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 530.787642][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 530.795951][T10663] netlink: 'syz.1.1327': attribute type 12 has an invalid length. [ 530.801103][ T5900] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 530.825148][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.867144][ T5900] usb 6-1: Product: syz [ 530.874291][ T5900] usb 6-1: Manufacturer: syz [ 530.892017][ T5900] usb 6-1: SerialNumber: syz [ 530.912126][ T5900] usb 6-1: config 0 descriptor?? [ 530.930230][ T5900] gspca_main: se401-2.14.0 probing 047d:5003 [ 531.028677][T10671] 9pnet_fd: Insufficient options for proto=fd [ 531.957759][ T5900] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 531.988269][ T5900] usb 6-1: USB disconnect, device number 4 [ 532.108501][T10680] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 532.128534][T10680] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 532.144553][T10680] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 532.517650][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.544469][T10709] xt_l2tp: invalid flags combination: 0 [ 532.571035][ T5895] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 533.414297][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 533.750380][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 534.026980][T10727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1339'. [ 534.087633][ T5895] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 534.096418][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.117559][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 534.122534][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1339'. [ 534.126927][ T5895] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.178717][T10727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1339'. [ 534.207406][T10727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1339'. [ 534.232411][ T5895] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.415345][ T5895] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 534.435531][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.472353][ T5895] usb 1-1: Product: syz [ 534.485263][ T5895] usb 1-1: Manufacturer: syz [ 534.577352][ T5900] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 534.669898][ T5895] cdc_wdm 1-1:1.0: skipping garbage [ 534.676286][ T5895] cdc_wdm 1-1:1.0: skipping garbage [ 534.698943][ T5895] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 534.727954][ T5900] usb 6-1: device descriptor read/64, error -71 [ 534.751524][ T5895] cdc_wdm 1-1:1.0: Unknown control protocol [ 534.787837][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 534.872456][T10689] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 534.948749][T10689] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 534.978397][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 535.004525][T10689] ebtables: ebtables: counters copy to user failed while replacing table [ 535.084924][T10750] pim6reg: entered allmulticast mode [ 535.127519][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 535.134184][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 535.144524][ T9] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 535.157367][T10689] pim6reg: left allmulticast mode [ 535.167381][ T5900] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 535.178562][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 535.200117][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.246655][ T9] usb 2-1: Product: syz [ 535.261275][ T9] usb 2-1: Manufacturer: syz [ 535.265957][ T9] usb 2-1: SerialNumber: syz [ 535.304148][ T5900] usb 6-1: device descriptor read/64, error -71 [ 535.413034][T10756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.439661][T10756] bond0: (slave bond2): Enslaving as an active interface with an up link [ 535.460043][ T5900] usb usb6-port1: attempt power cycle [ 535.485400][ T5895] usb 1-1: USB disconnect, device number 28 [ 535.787853][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 535.817431][ T5900] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 536.081114][ T5900] usb 6-1: device descriptor read/8, error -71 [ 536.359942][ T5900] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 536.411296][ T5900] usb 6-1: device descriptor read/8, error -71 [ 536.617704][ T5900] usb usb6-port1: unable to enumerate USB device [ 536.952444][ T5900] usb 2-1: USB disconnect, device number 37 [ 537.947384][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 538.584092][T10803] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 538.590657][T10803] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 538.611777][ T5906] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 538.749304][ T5906] usb 2-1: device descriptor read/64, error -71 [ 539.967252][ T5906] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 540.412421][ T5906] usb 2-1: device descriptor read/64, error -71 [ 540.534004][ T5906] usb usb2-port1: attempt power cycle [ 540.603606][ T29] audit: type=1326 audit(1734702980.999:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10822 comm="syz.0.1358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63a0785d29 code=0x0 [ 540.957615][ T5865] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 541.277334][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 541.284470][ T5865] usb 1-1: too many endpoints for config 0 interface 0 altsetting 128: 129, using maximum allowed: 30 [ 541.320603][ T5865] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.349362][ T5865] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 541.402546][ T5865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 541.630999][ T5865] usb 1-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00 [ 541.743267][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.760290][ T5865] usb 1-1: config 0 descriptor?? [ 542.182578][ T5865] wacom 0003:056A:0035.000E: unknown main item tag 0x0 [ 542.200632][ T5865] wacom 0003:056A:0035.000E: unknown main item tag 0x0 [ 542.224973][ T5865] wacom 0003:056A:0035.000E: unknown main item tag 0x0 [ 542.247335][ T5865] wacom 0003:056A:0035.000E: unknown main item tag 0x0 [ 542.272451][ T5865] wacom 0003:056A:0035.000E: unknown main item tag 0x0 [ 542.308903][ T5865] wacom 0003:056A:0035.000E: hidraw0: USB HID v0.00 Device [HID 056a:0035] on usb-dummy_hcd.0-1/input0 [ 542.821351][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.869024][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.755671][ T5895] usb 1-1: USB disconnect, device number 29 [ 544.871439][T10895] Smack: duplicate mount options [ 545.946564][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 548.011814][T10929] syz.5.1378[10929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.011894][T10929] syz.5.1378[10929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.085020][T10929] syz.5.1378[10929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.217459][ T5865] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 551.247370][ T5906] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 551.472283][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.480054][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 551.490376][ T5865] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.533404][ T5865] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 551.546290][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.577919][ T5865] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 551.590343][ T5906] usb 2-1: config 0 descriptor?? [ 551.630242][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.649852][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.680182][ T5865] usb 1-1: Product: syz [ 551.700225][ T5865] usb 1-1: Manufacturer: syz [ 551.716906][ T5865] usb 1-1: SerialNumber: syz [ 551.848324][T10972] FAULT_INJECTION: forcing a failure. [ 551.848324][T10972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.877181][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.2.1388 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 551.888033][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 551.898129][T10972] Call Trace: [ 551.901453][T10972] [ 551.904419][T10972] dump_stack_lvl+0x241/0x360 [ 551.909162][T10972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.914416][T10972] ? __pfx__printk+0x10/0x10 [ 551.919130][T10972] ? snprintf+0xda/0x120 [ 551.923431][T10972] should_fail_ex+0x3b0/0x4e0 [ 551.928166][T10972] _copy_to_user+0x31/0xb0 [ 551.932651][T10972] simple_read_from_buffer+0xca/0x150 [ 551.938081][T10972] proc_fail_nth_read+0x1e9/0x250 [ 551.943161][T10972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.945265][T10947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.948734][T10972] ? rw_verify_area+0x568/0x6f0 [ 551.956555][T10947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.960672][T10972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.973391][T10972] vfs_read+0x1fc/0xb70 [ 551.977622][T10972] ? __pfx___mutex_lock+0x10/0x10 [ 551.982720][T10972] ? __pfx_vfs_read+0x10/0x10 [ 551.987463][T10972] ? __fget_files+0x2a/0x410 [ 551.992110][T10972] ? __fget_files+0x395/0x410 [ 551.996841][T10972] ? __fget_files+0x2a/0x410 [ 552.001489][T10972] ksys_read+0x18f/0x2b0 [ 552.005783][T10972] ? __pfx_ksys_read+0x10/0x10 [ 552.010600][T10972] ? do_syscall_64+0x100/0x230 [ 552.015424][T10972] ? do_syscall_64+0xb6/0x230 [ 552.020162][T10972] do_syscall_64+0xf3/0x230 [ 552.024736][T10972] ? clear_bhb_loop+0x35/0x90 [ 552.029471][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.035421][T10972] RIP: 0033:0x7fb5e118473c [ 552.038225][T10944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.039852][T10972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 552.039879][T10972] RSP: 002b:00007fb5e2005030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.047853][T10944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.066888][T10972] RAX: ffffffffffffffda RBX: 00007fb5e1375fa0 RCX: 00007fb5e118473c [ 552.066918][T10972] RDX: 000000000000000f RSI: 00007fb5e20050a0 RDI: 0000000000000004 [ 552.066933][T10972] RBP: 00007fb5e2005090 R08: 0000000000000000 R09: 0000000000000000 [ 552.066947][T10972] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.066961][T10972] R13: 0000000000000000 R14: 00007fb5e1375fa0 R15: 00007ffd16f45b88 [ 552.066997][T10972] [ 552.274490][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.297955][T10944] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 552.423335][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.669961][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1389'. [ 552.698640][ T5906] video4linux radio48: keene_cmd_set failed (-110) [ 552.725083][ T5906] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 552.782681][ T5865] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 552.789184][ T5865] cdc_ncm 1-1:1.0: bind() failure [ 552.799143][ T5865] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 552.806134][ T5865] cdc_ncm 1-1:1.1: bind() failure [ 552.870140][ T5865] usb 1-1: USB disconnect, device number 30 [ 552.954221][ T46] usb 2-1: USB disconnect, device number 41 [ 556.262979][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 556.347385][ T5865] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 556.527556][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 556.561288][ T5865] usb 6-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 556.623723][ T5865] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 556.709794][ T5865] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.782149][ T5865] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 556.831794][ T5865] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 556.893635][ T5865] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 556.937272][ T5865] usb 6-1: config 1 interface 0 has no altsetting 0 [ 556.958079][ T5865] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 556.977447][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 556.998559][ T5865] usb 6-1: SerialNumber: syz [ 557.016275][T11018] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.024984][T11018] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.050528][ T5865] usb 6-1: bad CDC descriptors [ 557.117396][ T46] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 557.252757][T11009] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.267388][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 557.283907][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.298203][T11009] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.300847][ T46] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 557.348309][ T46] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 557.374659][ T5865] cdc_subset 6-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Linux Device, 4a:1b:93:12:25:6f [ 557.400779][ T46] usb 2-1: config 8 has no interface number 0 [ 557.436429][ T46] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.550038][ T46] usb 2-1: config 8 interface 132 has no altsetting 0 [ 557.666897][ T46] usb 2-1: string descriptor 0 read error: -22 [ 557.761335][ T46] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 557.904184][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.049324][ T46] usb-storage 2-1:8.132: USB Mass Storage device detected [ 558.068847][T11018] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1396'. [ 558.087541][ T46] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 558.276677][ T46] usb 2-1: USB disconnect, device number 42 [ 559.257337][ T5900] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 559.356384][ T5865] usb 6-1: USB disconnect, device number 9 [ 559.503129][ T5865] cdc_subset 6-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Linux Device [ 559.541257][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 559.597841][T11091] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 559.607769][T11091] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1407'. [ 559.632242][ T5900] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 559.728143][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.755793][ T5900] usb 2-1: Product: syz [ 559.772287][ T5900] usb 2-1: Manufacturer: syz [ 559.787451][ T5900] usb 2-1: SerialNumber: syz [ 559.928794][ T5900] usb 2-1: config 0 descriptor?? [ 560.154837][ T5900] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 561.112621][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 562.207897][T11121] IPv6: Can't replace route, no match found [ 563.271190][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.277710][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.383103][ T5900] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 563.435810][ T5900] usb 2-1: USB disconnect, device number 43 [ 564.106235][T11150] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1416'. [ 565.693905][ T46] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 565.898002][ T46] usb 1-1: device descriptor read/64, error -71 [ 566.419052][ T46] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 566.557373][ T46] usb 1-1: device descriptor read/64, error -71 [ 566.669308][ T46] usb usb1-port1: attempt power cycle [ 567.018972][ T46] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 567.056250][ T46] usb 1-1: device descriptor read/8, error -71 [ 567.312908][ T46] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 567.340380][ T46] usb 1-1: device descriptor read/8, error -71 [ 567.463245][ T46] usb usb1-port1: unable to enumerate USB device [ 568.617360][T11182] IPv6: Can't replace route, no match found [ 568.630646][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.643382][T11189] batadv_slave_1: entered promiscuous mode [ 569.118652][ T5895] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 569.618107][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 569.715520][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.726072][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 569.735929][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.751684][ T5895] usb 3-1: config 0 descriptor?? [ 569.760343][ T5895] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 571.459731][ T5895] gspca_vc032x: reg_w err -110 [ 571.464592][ T5895] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 573.162185][ T29] audit: type=1400 audit(1868920741.563:1899): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11250 comm="syz.1.1438" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 573.182731][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.177171][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 678.184197][ C0] rcu: 1-...!: (1 GPs behind) idle=83bc/1/0x4000000000000000 softirq=41518/41520 fqs=2 [ 678.195625][ C0] rcu: (detected by 0, t=10502 jiffies, g=43465, q=206 ncpus=2) [ 678.203672][ C0] Sending NMI from CPU 0 to CPUs 1: [ 678.203711][ C1] NMI backtrace for cpu 1 [ 678.203727][ C1] CPU: 1 UID: 0 PID: 11252 Comm: dhcpcd-run-hook Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 678.203748][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 678.203760][ C1] RIP: 0010:check_preemption_disabled+0x7/0x120 [ 678.203797][ C1] Code: c6 40 db 5e 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 <48> 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d 9c [ 678.203812][ C1] RSP: 0018:ffffc90000a18ad8 EFLAGS: 00000096 [ 678.203829][ C1] RAX: 0000000000000001 RBX: ffffc90000a18b60 RCX: ffff888020b164d8 [ 678.203842][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aa960 RDI: ffffffff8c5edb60 [ 678.203856][ C1] RBP: ffffc90000a18c48 R08: ffffffff94270a17 R09: 1ffffffff284e142 [ 678.203870][ C1] R10: dffffc0000000000 R11: fffffbfff284e143 R12: 1ffff92000143168 [ 678.203883][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000046 [ 678.203896][ C1] FS: 00007fcbf1eb6380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 678.203912][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.203925][ C1] CR2: 00007fcbf20a35e8 CR3: 0000000097ed6000 CR4: 00000000003526f0 [ 678.203941][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 678.203952][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 678.203964][ C1] Call Trace: [ 678.203971][ C1] [ 678.203982][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 678.204013][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 678.204045][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 678.204088][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 678.204126][ C1] ? nmi_handle+0x14f/0x5a0 [ 678.204155][ C1] ? nmi_handle+0x2a/0x5a0 [ 678.204186][ C1] ? check_preemption_disabled+0x7/0x120 [ 678.204224][ C1] ? default_do_nmi+0x63/0x160 [ 678.204254][ C1] ? exc_nmi+0x123/0x1f0 [ 678.204282][ C1] ? end_repeat_nmi+0xf/0x53 [ 678.204316][ C1] ? check_preemption_disabled+0x7/0x120 [ 678.204355][ C1] ? check_preemption_disabled+0x7/0x120 [ 678.204401][ C1] ? check_preemption_disabled+0x7/0x120 [ 678.204429][ C1] [ 678.204435][ C1] [ 678.204442][ C1] lock_acquire+0x1fd/0x550 [ 678.204463][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 678.204483][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 678.204507][ C1] ? __hrtimer_run_queues+0x477/0xd30 [ 678.204532][ C1] ? __pfx_lock_release+0x10/0x10 [ 678.204553][ C1] ? __pfx_advance_sched+0x10/0x10 [ 678.204575][ C1] _raw_spin_lock+0x2e/0x40 [ 678.204595][ C1] ? advance_sched+0xab/0xca0 [ 678.204615][ C1] advance_sched+0xab/0xca0 [ 678.204636][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 678.204661][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 678.204688][ C1] ? __pfx_advance_sched+0x10/0x10 [ 678.204708][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 678.204740][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 678.204763][ C1] ? sched_clock+0x4a/0x70 [ 678.204788][ C1] ? read_tsc+0x9/0x20 [ 678.204811][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 678.204835][ C1] hrtimer_interrupt+0x403/0xa40 [ 678.204868][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 678.204890][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 678.204915][ C1] [ 678.204921][ C1] [ 678.204927][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.204956][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 678.204975][ C1] Code: 8b 3d c4 9f 8d 0c 48 89 de 5b e9 e3 64 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 80 d4 03 00 65 8b 15 d0 60 64 7e 81 e2 00 01 ff 00 [ 678.204989][ C1] RSP: 0018:ffffc90004ecf850 EFLAGS: 00000246 [ 678.205005][ C1] RAX: ffffffff8474be01 RBX: 0000000000000020 RCX: dffffc0000000000 [ 678.205018][ C1] RDX: ffff888020b15a00 RSI: 0000000000000020 RDI: 0000000000000020 [ 678.205030][ C1] RBP: 0000000000000020 R08: ffffffff8474bd43 R09: ffffffff8bbc5b94 [ 678.205043][ C1] R10: 0000000000000012 R11: ffff888020b15a00 R12: 0000000000000026 [ 678.205055][ C1] R13: ffff888143a80ad4 R14: ffff88807c6f4c00 R15: 0000000000000001 [ 678.205071][ C1] ? vsnprintf+0x184/0x1da0 [ 678.205090][ C1] ? tomoyo_write_log2+0x1b3/0x8e0 [ 678.205112][ C1] ? tomoyo_write_log2+0x271/0x8e0 [ 678.205137][ C1] tomoyo_write_log2+0x271/0x8e0 [ 678.205163][ C1] tomoyo_supervisor+0x159/0x11f0 [ 678.205190][ C1] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 678.205214][ C1] ? get_user_pages_remote+0x8c4/0xb60 [ 678.205240][ C1] ? tomoyo_path_matches_pattern+0x17a/0x270 [ 678.205270][ C1] ? tomoyo_check_acl+0x3b3/0x3f0 [ 678.205297][ C1] ? __pfx_tomoyo_check_env_acl+0x10/0x10 [ 678.205316][ C1] tomoyo_env_perm+0x178/0x210 [ 678.205333][ C1] ? __pfx_tomoyo_env_perm+0x10/0x10 [ 678.205362][ C1] ? __kmalloc_cache_noprof+0x243/0x390 [ 678.205380][ C1] ? tomoyo_find_next_domain+0x11cc/0x1d40 [ 678.205415][ C1] tomoyo_find_next_domain+0x146e/0x1d40 [ 678.205450][ C1] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 678.205483][ C1] ? tomoyo_bprm_check_security+0xeb/0x180 [ 678.205507][ C1] tomoyo_bprm_check_security+0x117/0x180 [ 678.205534][ C1] security_bprm_check+0x86/0x250 [ 678.205558][ C1] bprm_execve+0xa53/0x17a0 [ 678.205581][ C1] ? __pfx_lock_release+0x10/0x10 [ 678.205606][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 678.205627][ C1] ? put_arg_page+0xe0/0x260 [ 678.205654][ C1] do_execveat_common+0x55f/0x6f0 [ 678.205682][ C1] __x64_sys_execve+0x92/0xb0 [ 678.205705][ C1] do_syscall_64+0xf3/0x230 [ 678.205732][ C1] ? clear_bhb_loop+0x35/0x90 [ 678.205749][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.205775][ C1] RIP: 0033:0x7fcbf1ff0ef7 [ 678.205792][ C1] Code: ba 0f 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 63 d8 fb ff 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 90 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 01 3f 0f 00 f7 d8 64 89 01 48 [ 678.205808][ C1] RSP: 002b:00007ffd92dc7798 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 678.205826][ C1] RAX: ffffffffffffffda RBX: 000055e5a3586f50 RCX: 00007fcbf1ff0ef7 [ 678.205839][ C1] RDX: 000055e5a3586ff8 RSI: 000055e5a3586f50 RDI: 000055e5a35870a8 [ 678.205852][ C1] RBP: 000055e5a35870a8 R08: 000055e5a35870ad R09: 00007ffd92dcade4 [ 678.205866][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 000055e5a3586ff8 [ 678.205877][ C1] R13: 00007fcbf219e904 R14: 000055e5a3586ff8 R15: 0000000000000000 [ 678.205897][ C1] [ 678.206705][ C0] rcu: rcu_preempt kthread starved for 10497 jiffies! g43465 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 678.847963][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 678.857964][ C0] rcu: RCU grace-period kthread stack dump: [ 678.863871][ C0] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 678.875677][ C0] Call Trace: [ 678.878985][ C0] [ 678.881944][ C0] __schedule+0x17fb/0x4be0 [ 678.886530][ C0] ? __pfx___schedule+0x10/0x10 [ 678.891508][ C0] ? __pfx_lock_release+0x10/0x10 [ 678.896576][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 678.902939][ C0] ? schedule+0x90/0x320 [ 678.907218][ C0] schedule+0x14b/0x320 [ 678.911412][ C0] schedule_timeout+0x15a/0x290 [ 678.916297][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 678.921713][ C0] ? __pfx_process_timeout+0x10/0x10 [ 678.927044][ C0] ? prepare_to_swait_event+0x330/0x350 [ 678.932625][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 678.937508][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 678.942754][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 678.948946][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 678.954280][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 678.958913][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.964152][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 678.970082][ C0] ? __kthread_parkme+0x169/0x1d0 [ 678.975139][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.980382][ C0] kthread+0x2f0/0x390 [ 678.984487][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.989721][ C0] ? __pfx_kthread+0x10/0x10 [ 678.994352][ C0] ret_from_fork+0x4b/0x80 [ 678.998799][ C0] ? __pfx_kthread+0x10/0x10 [ 679.003421][ C0] ret_from_fork_asm+0x1a/0x30 [ 679.008241][ C0] [ 679.011284][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 679.017631][ C0] CPU: 0 UID: 0 PID: 1151 Comm: kworker/u8:6 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 679.028506][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 679.038589][ C0] Workqueue: events_unbound toggle_allocation_gate [ 679.045144][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 679.051332][ C0] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 80 d4 03 00 65 8b 15 d0 60 64 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 679.071055][ C0] RSP: 0018:ffffc90003edf6d8 EFLAGS: 00000202 [ 679.077153][ C0] RAX: ffffffff81938ebb RBX: 1ffff110170e88b9 RCX: ffff888027471e00 [ 679.085153][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 679.093167][ C0] RBP: ffffc90003edf8e0 R08: ffffffff81938e8a R09: 1ffffffff284e110 [ 679.101169][ C0] R10: dffffc0000000000 R11: fffffbfff284e111 R12: dffffc0000000000 [ 679.109256][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 679.117262][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 679.126224][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.132835][ C0] CR2: 0000555573fe9808 CR3: 000000000e736000 CR4: 00000000003526f0 [ 679.140856][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 679.148851][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 679.156847][ C0] Call Trace: [ 679.160160][ C0] [ 679.163028][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 679.169398][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 679.175079][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 679.180919][ C0] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 679.187215][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 679.193857][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 679.200135][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 679.205550][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 679.211223][ C0] ? acct_account_cputime+0x207/0x210 [ 679.216634][ C0] ? update_process_times+0x242/0x2f0 [ 679.222038][ C0] ? tick_nohz_handler+0x37c/0x500 [ 679.227195][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 679.232693][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 679.238116][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 679.243869][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 679.248843][ C0] ? read_tsc+0x9/0x20 [ 679.252946][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 679.259048][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 679.264218][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 679.270422][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 679.276264][ C0] [ 679.279220][ C0] [ 679.282177][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 679.288378][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 679.294567][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 679.300759][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 679.306336][ C0] smp_call_function_many_cond+0x1a0b/0x2c60 [ 679.312365][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 679.317435][ C0] ? __pfx___text_poke+0x10/0x10 [ 679.322408][ C0] ? process_scheduled_works+0x976/0x1840 [ 679.328174][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 679.334539][ C0] ? __pfx___might_resched+0x10/0x10 [ 679.339861][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 679.345795][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 679.350859][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 679.356012][ C0] text_poke_bp_batch+0x352/0xb30 [ 679.361094][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 679.367129][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 679.373340][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 679.378955][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 679.385267][ C0] ? process_scheduled_works+0x976/0x1840 [ 679.391040][ C0] text_poke_finish+0x30/0x50 [ 679.395763][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 679.401788][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 679.407729][ C0] static_key_enable+0x1a/0x20 [ 679.412530][ C0] toggle_allocation_gate+0xbc/0x260 [ 679.417859][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 679.423792][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 679.430170][ C0] process_scheduled_works+0xa66/0x1840 [ 679.435797][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 679.441837][ C0] ? assign_work+0x364/0x3d0 [ 679.446477][ C0] worker_thread+0x870/0xd30 [ 679.451116][ C0] ? __kthread_parkme+0x169/0x1d0 [ 679.456177][ C0] ? __pfx_worker_thread+0x10/0x10 [ 679.461326][ C0] kthread+0x2f0/0x390 [ 679.465430][ C0] ? __pfx_worker_thread+0x10/0x10 [ 679.470570][ C0] ? __pfx_kthread+0x10/0x10 [ 679.475197][ C0] ret_from_fork+0x4b/0x80 [ 679.479670][ C0] ? __pfx_kthread+0x10/0x10 [ 679.484293][ C0] ret_from_fork_asm+0x1a/0x30 [ 679.489113][ C0]