last executing test programs: 15.418221214s ago: executing program 0 (id=1614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x29d16e, 0xe74fa}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000020000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0xec}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x10040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r10 = creat(&(0x7f0000000400)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) write$P9_RREADLINK(r10, &(0x7f0000000280)={0x9}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="010000008b681cddadffffffe90c00070008000100", @ANYRES32=r0, @ANYBLOB="1400030076657468305f746f5f62617461647600"], 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 12.623283441s ago: executing program 4 (id=1626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x40f00, 0xda5f92a7a0138f3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @value}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$MSR(&(0x7f0000000300), 0xfffffffffffffffa, 0x0) r3 = memfd_secret(0x0) write$UHID_CREATE2(r3, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xff, 0x3, 0x1, 0xa, 0xb, 0x0, "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"}}, 0x217) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5}}, 0x4, 0x8}, 0x90) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200102) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f00000000c0)={0x7, 0xb6f, 0x6, {0x8e, 0xd}, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xc0800, 0x0, 0xffffffffffffffff}) write$cgroup_int(r9, &(0x7f0000000080)=0x3, 0xfffffffffffffff7) 11.493515098s ago: executing program 4 (id=1628): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007640), 0x0, 0x0) 11.103469011s ago: executing program 4 (id=1631): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_io_uring_setup(0x4072, &(0x7f000001ab40)={0x0, 0x0, 0x10100, 0x280, 0xfffffffd}, &(0x7f0000000380), &(0x7f0000000200)) unshare(0x60400) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xe8\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj<)\xf06\xc5\xab\x89\x19\xf2bzg\xdd\xcb\xf9\xbf\xcfk\b\x00\x00\x00\xa0\xb5\x04\x14\xfc\x92*\xa2\xd1\x97\x02\xca\xa1\xeb\xd6\xe6\xe67+\x11\xff\xd1f\xe4\x1d\xbb\xafc\xa5\xfc\xfa\xc8\xa7w\xeb\xbc\x90\xdb\x18\xe1\xae\xb0\b\x97/\x9a\xa3\'\xa2\x02\x8cO\x97\xee\xa1\xd3\x8d^\x03\x01\xc1\xf7\xc4\xea\xc7\x10s\f'}, {0x20, 'GPL\x00'}, {}, {}]}, 0x1e5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 11.06990136s ago: executing program 0 (id=1632): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1110, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) 10.986109443s ago: executing program 3 (id=1633): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x21c8, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2198, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x6}, {0x9, 0xaece, 0x3, 0x5}}}]}]}, @TCA_BASIC_EMATCHES={0x2168, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10b4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0xa}, {0x7ff, 0x9, 0x4, 0x7}}}, @TCF_EM_IPT={0x1038, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c67d7afca9f15f84a7c4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="fa97391d99599e35", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR=']']}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x7f}, {0xffffffffffffffff, 0x0, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0xf001}, {{0x2, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x53}}, @TCA_EMATCH_TREE_LIST={0x1088, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2808, 0x2, 0x4}, {0x77, 0x1, 0x0, '\r'}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xfb61, 0x2, 0xea3}, {0x5, 0xa, 0x1, "60e9382c6fde8c31f36c"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x3, 0x5}, {0x6, 0xb98, 0x1, 0x8}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xd, 0x0, 0x5}, "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"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5a, 0x7, 0xf}, {{0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8001}, {0x3, 0x2, 0x5, 0x3, 0x5, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x21c8}, 0x1, 0x0, 0x0, 0x80}, 0x40) 10.854251488s ago: executing program 4 (id=1635): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x603}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x0, 0x3}, 0x10, 0x2e39e, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000240)=[{0x1, 0x1, 0x0, 0x3}, {0x0, 0x4, 0xb, 0x1}], 0x10, 0x26, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xff45, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x42, 0x0) 10.272974731s ago: executing program 2 (id=1637): r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'sy\xa4', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 10.135558842s ago: executing program 3 (id=1638): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r5, 0x400448e7, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0100000b0601080005840008800c00078008001c40000000080c000580050015000f0000001c00078018000180140002400000000000000000000000000000000018010780140017007465616d5f736c6176655f31000000000c00078008000a40000000040c0007800800084000000084100007800900130073797a32000000000c00078008000840000001ac20000880100007800a001100192702c5669d00000c00078008000a40000100000900020073797a30"], 0x16c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900"], 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r9 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040961b0d0000000000000109022d00010000000009040000020300000009210000040122050009058103000000000209050203080001060487303ff89034856d425e4e384d017a15c87ccaa28beeaa257e8cfef06c533dad97f374fc969e19b14a20e336d1d2f0704681c62913f4558a99a90f9d9278f2ca6c8894c6409cd4a573670c694d8df8e4e693037da38abae1fe160ccdef153405d7bc637bbdf43b63d6ca24bc4f454d0d0b7267aaaed4d8e7758d4560bcbf9ebecc3d21ecead0b4a7538e22c1732e573ae9891daa9d6385b9c0f3ccf448a0a8901446cdb5d581f74d5a5c64a30869e7237d4cc59942"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000200)={0x2c, &(0x7f0000000100)={0x0, 0x21, 0x7, {0x7, 0x11, "58298a3a71"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.019629426s ago: executing program 2 (id=1639): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x44e34, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r8, 0x1, 0x2a, 0x0, &(0x7f0000001800)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="2e0f78413166b95d0b000066b89d7d3b1266ba000000000f30b8bd000f00d866b8010000000f01c10f090fc738660f388153e26766c7442400295b00006766c7442402070000006766c744240600000000670f0114242e0f01c30faba1a600", 0x5f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$cgroup_ro(r4, 0x0, 0x300, 0x0) 9.983670463s ago: executing program 4 (id=1640): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_print_times', 0x1a1081, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$proc_mixer(0xffffff9c, 0x0, 0x80a2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200008001002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe65f, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x20007, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0xa6bd, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xffffffbe, 0x40], [0x10000007, 0xf0000000, 0x779f, 0x8004, 0x2, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xfffffffc, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffd, 0x100, 0x8d2, 0x9, 0x0, 0x17fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x8000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800002, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0xffff8001, 0x3, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0xffffffa0, 0x57, 0x5, 0x3, 0x101, 0x10004, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x83, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket(0x5, 0x80000, 0x1) syz_io_uring_setup(0x1786, &(0x7f0000000140)={0x0, 0xaee2, 0x2000, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 7.610871846s ago: executing program 2 (id=1641): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007640), 0x0, 0x0) 7.465783124s ago: executing program 4 (id=1642): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x29d16e, 0xe74fa}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000020000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0xec}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x10040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r10 = creat(&(0x7f0000000400)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) write$P9_RREADLINK(r10, &(0x7f0000000280)={0x9}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="010000008b681cddadffffffe90c00070008000100", @ANYRES32=r0, @ANYBLOB="1400030076657468305f746f5f62617461647600"], 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 7.373948102s ago: executing program 0 (id=1643): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x20008010) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000200)="1f6c0f01c36565dbe40f20c06635000000200f22c066b91402000066b86144004866ba000000000f3036660f38308d5b0075000f69a28d230f0118", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}, 0x1, 0x300}, 0x4000000) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_devices(r6, 0x0, 0x2, 0x0) write$cgroup_devices(r7, 0x0, 0xa) ioctl$KVM_RUN(r4, 0xae80, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0xffe, 0x100000, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_open_dev$loop(0x0, 0x5f, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 7.279574646s ago: executing program 2 (id=1644): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000040)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r3], 0x58}}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a030000000000000000000100000a08000240000000040900010073797a3000a0190028000000000a03000000000000000000010000090900010073797a30000000000800024000000000140000001000010000000000000000000000000aa2b422e364accff381f46b6b077c668814a505b56ab20b"], 0x78}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x3, 0x0, 0x4) 6.787384143s ago: executing program 1 (id=1645): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af151fffffffe00"/28, 0x1c}], 0x2) 5.212677681s ago: executing program 0 (id=1646): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5.212081375s ago: executing program 3 (id=1647): mknodat$null(0xffffffffffffff9c, 0x0, 0x40, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/fscreate\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x4000c, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = syz_io_uring_setup(0x50ca, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r8, 0x291c, 0x0, 0x0, 0x0, 0x0) 5.115451935s ago: executing program 1 (id=1648): r0 = socket(0x40000000015, 0x5, 0x0) r1 = io_uring_setup(0x1c90, &(0x7f00000000c0)={0x0, 0x7c4d, 0x100, 0x0, 0xbe}) syz_io_uring_setup(0x353a, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000280)) (async) syz_io_uring_setup(0x353a, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000280)) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f20d0080aa603e6a51df55d6d32c8c6031d0650c16fce0102031909021b000105001000090433e7011870fd00090582020002000400219927bcfa51ff97c300fbe8390c7a"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f20d0080aa603e6a51df55d6d32c8c6031d0650c16fce0102031909021b000105001000090433e7011870fd00090582020002000400219927bcfa51ff97c300fbe8390c7a"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7}) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) (async) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/187, 0xbb, 0x0, 0x0}, &(0x7f0000000280)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001200)=0x40) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xec8, &(0x7f0000000500)={[{0xec2, 0x4e00, "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"}]}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000140)={@loopback, @multicast1}, &(0x7f00000001c0)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) close_range(r7, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) 4.851629867s ago: executing program 0 (id=1649): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x21c8, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2198, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x6}, {0x9, 0xaece, 0x3, 0x5}}}]}]}, @TCA_BASIC_EMATCHES={0x2168, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10b4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0xa}, {0x7ff, 0x9, 0x4, 0x7}}}, @TCF_EM_IPT={0x1038, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c67d7afca9f15f84a7c4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="fa97391d99599e35", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR=']']}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x7f}, {0xffffffffffffffff, 0x0, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0xf001}, {{0x2, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x53}}, @TCA_EMATCH_TREE_LIST={0x1088, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2808, 0x2, 0x4}, {0x77, 0x1, 0x0, '\r'}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xfb61, 0x2, 0xea3}, {0x5, 0xa, 0x1, "60e9382c6fde8c31f36c"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x3, 0x5}, {0x6, 0xb98, 0x1, 0x8}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xd, 0x0, 0x5}, "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"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5a, 0x7, 0xf}, {{0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8001}, {0x3, 0x2, 0x5, 0x3, 0x5, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x21c8}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4.533025321s ago: executing program 1 (id=1650): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x603}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0xd, 0x0, 0x3}, 0x10, 0x2e39e, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000240)=[{0x1, 0x1, 0x0, 0x3}, {0x0, 0x4, 0xb, 0x1}], 0x10, 0x26, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xff45, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x42, 0x0) 4.051542886s ago: executing program 1 (id=1651): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4, 0x0, @remote, 0x2}, 0x1c) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x3, &(0x7f0000000100)={0x0}, 0x7}, 0x24004044) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x40000026, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0x2) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x4, &(0x7f0000000080)={0x26, "14a6c63d876ff44271f1aca6e4482718dab7299602aed83463604d70b41d4008e3"}}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 3.971935126s ago: executing program 3 (id=1652): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000008) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000008) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.909860305s ago: executing program 0 (id=1653): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1110, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) 3.697967454s ago: executing program 2 (id=1654): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='ns\x00') renameat2(r0, &(0x7f0000000380)='./mnt\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x5) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000080)=0x790, 0x4) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000400)="d5799b042dd8fbdcb391869c6a05b0aad7ab12f2837b97fa541f73a12eb080f188eab493c3b5ee38b4aedfbd02354fe0e5a1a9466392975df1545430a742c6d0fa972d8f816196121955a88d265fad2e2e11007b0371e471f1a4ee1c07c5ccbead2d591ee5c6b0f7783eb153a2aee4193cace8e81284cf9817b1d601e118d0789717e52401ffc6d991dea21420fa88137d979da0a786750f2ab059eeae270dfa33a66b7e26943c", 0xa7, r1) keyctl$read(0xb, r2, &(0x7f00000009c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000040000a0000000600010017000000"], 0x1c}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) accept4$tipc(r9, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001440)={'#! ', './mnt', [{0x20, 'ns\x00'}, {0x20, 'ns\x00'}, {}, {0x20, '/\xba\''}, {0x20, 'ns\x00'}, {0x20, '\x00\x00\x00\x00\x00\x00\x00\xa348\f'}, {0x20, 'ns\x00'}], 0xa, "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"}, 0x102a) 2.144038172s ago: executing program 2 (id=1655): socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {0x4}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) 1.713358671s ago: executing program 1 (id=1656): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4, 0xfa00, {r0}}, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="db167c11db9f76abebdbd3f28bac9d7eb8936b3f74c217b370aec22c40052fd6eb7512e1a2fa842fd038ac8a892dd8d9426e1a40a52d634e7d7f946d5bb8bcd5c850bf44fdada5c15e1bf2786352543e5521055f2e36a7fe03082bff384c2d903702c5ea035bf4d73805a7a8472abfcb78c614b66a5a236097c9e13d96897c117550e4f46576909ef7e4669ff946c4c2a88db8efe10db853d01f0b979905a925a3a324ff7a", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 1.659437379s ago: executing program 3 (id=1657): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000440)=""/56, &(0x7f0000000200)=0x38) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_open_dev$vcsa(&(0x7f0000000000), 0x101, 0x40200) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 228.924839ms ago: executing program 1 (id=1658): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) unshare(0x20040600) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1068) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r7 = getpgid(0x0) syz_pidfd_open(r7, 0x0) pidfd_send_signal(r2, 0x40000001, 0x0, 0x4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 0s ago: executing program 3 (id=1659): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="000400002000"/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r2, 0x0, 0x9) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): ][ T8713] ? do_syscall_64+0xb6/0x230 [ 420.235666][ T8713] do_syscall_64+0xf3/0x230 [ 420.235692][ T8713] ? clear_bhb_loop+0x45/0xa0 [ 420.235717][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.235738][ T8713] RIP: 0033:0x7f0e0d58d169 [ 420.235757][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.235775][ T8713] RSP: 002b:00007f0e0e3e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 420.235798][ T8713] RAX: ffffffffffffffda RBX: 00007f0e0d7a5fa0 RCX: 00007f0e0d58d169 [ 420.235813][ T8713] RDX: 0000000000000100 RSI: 0000200000000300 RDI: 0000000000000003 [ 420.235828][ T8713] RBP: 00007f0e0e3e8090 R08: 0000000000000000 R09: 0000000000000000 [ 420.235841][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.235853][ T8713] R13: 0000000000000000 R14: 00007f0e0d7a5fa0 R15: 00007ffebaa25ae8 [ 420.235886][ T8713] [ 422.067116][ T52] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 422.287997][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 422.476267][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 422.529637][ T52] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 422.545056][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.553625][ T52] usb 4-1: Product: syz [ 422.558979][ T52] usb 4-1: Manufacturer: syz [ 422.566948][ T52] usb 4-1: SerialNumber: syz [ 422.593263][ T52] usb 4-1: config 0 descriptor?? [ 422.678119][ T52] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 423.734629][ T6328] usb 4-1: Failed to submit usb control message: -110 [ 423.839224][ T6328] usb 4-1: unable to send the bmi data to the device: -110 [ 423.925767][ T6328] usb 4-1: unable to get target info from device [ 424.040743][ T6328] usb 4-1: could not get target info (-110) [ 424.223872][ T8756] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 424.239254][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.283546][ T6328] usb 4-1: could not probe fw (-110) [ 424.315091][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.378939][ T8763] ip6t_srh: unknown srh invflags 7D00 [ 424.587959][ T8767] netlink: 'syz.4.719': attribute type 33 has an invalid length. [ 424.596185][ T8767] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.719'. [ 424.986829][ T5912] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 425.146767][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 425.172505][ T5912] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 425.183877][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.195982][ T5912] usb 5-1: Product: syz [ 425.211616][ T5912] usb 5-1: Manufacturer: syz [ 425.217231][ T5912] usb 5-1: SerialNumber: syz [ 425.239946][ T5912] usb 5-1: config 0 descriptor?? [ 425.251974][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 426.493473][ T5882] usb 4-1: USB disconnect, device number 15 [ 426.520180][ T8767] raw-gadget.2 gadget.4: fail, usb_ep_queue returned -108 [ 426.601278][ T8781] ceph: No mds server is up or the cluster is laggy [ 426.786969][ T5912] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 426.965400][ T5912] usb 5-1: device descriptor read/64, error -32 [ 427.232452][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 427.241911][ T5912] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 427.257102][ T978] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 427.386742][ T5912] usb 5-1: device descriptor read/64, error -32 [ 427.426867][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 427.637826][ T978] usb 1-1: config 0 has an invalid interface number: 104 but max is 0 [ 427.646128][ T978] usb 1-1: config 0 has no interface number 0 [ 427.696758][ T5912] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 428.078230][ T5880] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 428.564278][ T978] usb 1-1: config 0 interface 104 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 428.667093][ T5912] usb 5-1: device descriptor read/8, error -32 [ 428.682515][ T978] usb 1-1: config 0 interface 104 has no altsetting 0 [ 428.725336][ T978] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 429.629585][ T5880] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.636951][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.646779][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.659792][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.676796][ T978] usb 1-1: Product: syz [ 429.681096][ T978] usb 1-1: Manufacturer: syz [ 429.707022][ T978] usb 1-1: SerialNumber: syz [ 429.716920][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.728018][ T5912] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 429.765384][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.791596][ T5912] usb 5-1: device descriptor read/8, error -32 [ 429.791597][ T978] usb 1-1: config 0 descriptor?? [ 429.818247][ T5880] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.834483][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.836383][ T978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 429.891058][ T5880] usb 2-1: Product: syz [ 429.917572][ T5880] usb 2-1: Manufacturer: syz [ 429.928293][ T5912] gspca_se401: read req failed req 0x06 error -19 [ 430.004446][ T5912] usb 5-1: USB disconnect, device number 13 [ 430.388441][ T978] usb 1-1: setting power ON [ 430.401262][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 430.461922][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.473269][ T978] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 430.478933][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 430.551632][ T5912] raw-gadget.2 gadget.4: failed to queue reset event [ 430.552497][ T978] usb 1-1: media controller created [ 430.584383][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 430.598901][ T5880] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 430.621027][ T5880] cdc_wdm 2-1:1.0: Unknown control protocol [ 430.648142][ T5880] usb 2-1: USB disconnect, device number 14 [ 430.661583][ T5912] raw-gadget.2 gadget.4: failed to queue resume event [ 430.725540][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.766831][ T5912] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 430.947224][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 430.962949][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 430.970286][ T5912] raw-gadget.2 gadget.4: failed to queue reset event [ 431.758959][ T5912] raw-gadget.2 gadget.4: failed to queue resume event [ 431.769106][ T24] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 431.793560][ T978] usb 1-1: digital interface selection failed (-22) [ 431.796755][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.800616][ T978] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 431.823061][ T978] usb 1-1: setting power OFF [ 431.844808][ T8766] raw-gadget.2 gadget.4: failed to queue suspend event [ 431.852154][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 431.858868][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 431.868901][ T978] (NULL device *): no alternate interface [ 431.960763][ T5912] usb 5-1: device descriptor read/64, error -32 [ 431.973044][ T8766] raw-gadget.2 gadget.4: failed to queue disconnect event [ 432.008577][ T24] usb 4-1: config 0 descriptor?? [ 432.051169][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 432.213248][ T52] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 432.526894][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 432.586039][ T24] kaweth 4-1:0.0: Firmware present in device. [ 432.624793][ T52] usb 3-1: unable to get BOS descriptor or descriptor too short [ 432.637713][ T5823] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 432.671553][ T52] usb 3-1: no configurations [ 432.723305][ T52] usb 3-1: can't read configurations, error -22 [ 432.739247][ T978] usb 1-1: USB disconnect, device number 11 [ 432.877080][ T52] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 432.906970][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 432.920404][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.925144][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 432.925166][ T30] audit: type=1326 audit(1744078808.548:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.0.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7fc00000 [ 432.951730][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.000403][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.037072][ T5823] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 433.041393][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 433.059941][ T52] usb 3-1: unable to get BOS descriptor or descriptor too short [ 433.071143][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.077549][ T52] usb 3-1: no configurations [ 433.087224][ T5823] usb 2-1: config 0 descriptor?? [ 433.089915][ T52] usb 3-1: can't read configurations, error -22 [ 433.105282][ T24] kaweth 4-1:0.0: Statistics collection: 0 [ 433.114899][ T52] usb usb3-port1: attempt power cycle [ 433.126787][ T24] kaweth 4-1:0.0: Multicast filter limit: 0 [ 433.132734][ T24] kaweth 4-1:0.0: MTU: 0 [ 433.146749][ T24] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 433.514707][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 433.596792][ T52] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 433.637759][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 433.677486][ T52] usb 3-1: unable to get BOS descriptor or descriptor too short [ 433.814267][ T52] usb 3-1: no configurations [ 433.836838][ T52] usb 3-1: can't read configurations, error -22 [ 434.160210][ T5823] usbhid 2-1:0.0: can't add hid device: -71 [ 434.176701][ T52] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 434.235779][ T8848] netlink: 140 bytes leftover after parsing attributes in process `syz.4.744'. [ 434.282611][ T8848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.744'. [ 434.703594][ T52] usb 3-1: device not accepting address 13, error -71 [ 434.794906][ T5823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 434.828616][ T5823] usb 2-1: USB disconnect, device number 15 [ 434.841445][ T52] usb usb3-port1: unable to enumerate USB device [ 434.985545][ T24] kaweth 4-1:0.0: Error setting receive filter [ 435.008336][ T24] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 435.061623][ T24] usb 4-1: USB disconnect, device number 16 [ 435.431307][ T8863] netlink: 112 bytes leftover after parsing attributes in process `syz.0.748'. [ 436.028000][ T5911] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 436.224214][ T8869] netlink: 'syz.4.751': attribute type 11 has an invalid length. [ 436.243963][ T5911] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 436.255131][ T5911] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 436.275082][ T5911] usb 1-1: config 0 has no interface number 0 [ 436.281534][ T5911] usb 1-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 436.294515][ T5911] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.308412][ T5911] usb 1-1: config 0 interface 52 has no altsetting 0 [ 436.365814][ T5911] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 436.375705][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 436.611789][ T5911] usb 1-1: Product: syz [ 436.616228][ T5911] usb 1-1: SerialNumber: syz [ 436.639030][ T5911] usb 1-1: config 0 descriptor?? [ 436.701426][ C1] hrtimer: interrupt took 69471 ns [ 437.538180][ T8898] netlink: 140 bytes leftover after parsing attributes in process `syz.2.757'. [ 437.558004][ T8898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.757'. [ 438.465585][ T24] usb 1-1: USB disconnect, device number 12 [ 438.842085][ T8900] netlink: 140 bytes leftover after parsing attributes in process `syz.4.758'. [ 438.992549][ T8899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.758'. [ 439.116171][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 439.127036][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 439.139041][ T5911] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 440.126165][ T24] libceph: connect (1)[c::]:6789 error -101 [ 440.132320][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 440.138730][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 440.139893][ T8913] ip6gretap0: entered allmulticast mode [ 440.158132][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 440.205125][ T5911] usb 4-1: no configurations [ 440.300799][ T5911] usb 4-1: can't read configurations, error -22 [ 440.377887][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.400510][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.693575][ T24] libceph: connect (1)[c::]:6789 error -101 [ 440.827493][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 441.731035][ T8903] ceph: No mds server is up or the cluster is laggy [ 443.366316][ T8948] blktrace: Concurrent blktraces are not allowed on sg0 [ 444.543658][ T8968] netlink: 140 bytes leftover after parsing attributes in process `syz.2.772'. [ 444.578870][ T8968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.772'. [ 447.264128][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 447.457160][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 447.486300][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.553414][ T5911] usb 3-1: no configurations [ 447.578562][ T5911] usb 3-1: can't read configurations, error -22 [ 447.766370][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 448.151480][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 448.201611][ T30] audit: type=1107 audit(1744078822.953:68): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 448.883758][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 449.086060][ T9003] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 449.383821][ T5911] usb 3-1: no configurations [ 449.388595][ T5911] usb 3-1: can't read configurations, error -22 [ 449.413229][ T5911] usb usb3-port1: attempt power cycle [ 449.904502][ T5911] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 450.118904][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 450.217739][ T5911] usb 3-1: device descriptor read/all, error -71 [ 450.307388][ T52] libceph: connect (1)[c::]:6789 error -101 [ 450.350435][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 450.664751][ T24] libceph: connect (1)[c::]:6789 error -101 [ 450.670882][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 451.472440][ T24] libceph: connect (1)[c::]:6789 error -101 [ 451.487092][ T9013] ceph: No mds server is up or the cluster is laggy [ 451.700586][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 452.485281][ T9032] ubi31: attaching mtd0 [ 452.529187][ T9032] ubi31: scanning is finished [ 452.596900][ T9032] ubi31: empty MTD device detected [ 453.000570][ T30] audit: type=1326 audit(1744078827.471:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 453.493833][ T30] audit: type=1326 audit(1744078827.508:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 453.542051][ T9032] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 453.593758][ T9032] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 453.788426][ T30] audit: type=1326 audit(1744078827.527:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 453.789710][ T9036] netlink: 'syz.0.788': attribute type 6 has an invalid length. [ 453.810996][ T30] audit: type=1326 audit(1744078827.555:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 453.876322][ T9032] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 453.953927][ T30] audit: type=1326 audit(1744078827.555:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 454.007559][ T9032] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 454.071792][ T9032] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 454.125191][ T30] audit: type=1326 audit(1744078827.583:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 454.147688][ T9032] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 454.405067][ T9032] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1439914464 [ 454.427920][ T30] audit: type=1326 audit(1744078827.583:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 454.459143][ T9032] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 454.811010][ T9041] ubi31: background thread "ubi_bgt31d" started, PID 9041 [ 455.150196][ T30] audit: type=1326 audit(1744078827.602:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 455.171651][ T30] audit: type=1326 audit(1744078827.611:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 455.192953][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.199101][ T30] audit: type=1326 audit(1744078827.630:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 455.307227][ T30] audit: type=1326 audit(1744078827.639:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 455.407971][ T9049] netlink: 84 bytes leftover after parsing attributes in process `syz.0.790'. [ 455.473815][ T30] audit: type=1326 audit(1744078827.658:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc78d169 code=0x7ffc0000 [ 455.495251][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.416527][ T9061] 9pnet: Unknown protocol version 9p2000.uŒ>ˆ“@‘¾ÆjKð [ 458.948117][ T9083] FAULT_INJECTION: forcing a failure. [ 458.948117][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 460.210597][ T9083] CPU: 0 UID: 0 PID: 9083 Comm: syz.4.800 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 460.210629][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.210643][ T9083] Call Trace: [ 460.210651][ T9083] [ 460.210660][ T9083] dump_stack_lvl+0x241/0x360 [ 460.210701][ T9083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.210730][ T9083] ? __pfx__printk+0x10/0x10 [ 460.210763][ T9083] ? __pfx___might_resched+0x10/0x10 [ 460.210795][ T9083] should_fail_ex+0x424/0x570 [ 460.210824][ T9083] should_failslab+0xac/0x100 [ 460.210848][ T9083] __kmalloc_noprof+0xdf/0x4d0 [ 460.210869][ T9083] ? ovl_alloc_entry+0x21/0x70 [ 460.210900][ T9083] ovl_alloc_entry+0x21/0x70 [ 460.210926][ T9083] ovl_lookup+0x1dc4/0x2a70 [ 460.210992][ T9083] ? __pfx_ovl_lookup+0x10/0x10 [ 460.211013][ T9083] ? d_alloc_parallel+0x1503/0x1660 [ 460.211041][ T9083] ? register_lock_class+0x54/0x330 [ 460.211069][ T9083] ? __lock_acquire+0xad5/0xd80 [ 460.211089][ T9083] ? d_alloc_parallel+0x30f/0x1660 [ 460.211129][ T9083] ? __pfx_d_alloc_parallel+0x10/0x10 [ 460.211164][ T9083] ? __raw_spin_lock_init+0x45/0x100 [ 460.211196][ T9083] ? __init_waitqueue_head+0xae/0x150 [ 460.211232][ T9083] __lookup_slow+0x2b1/0x400 [ 460.211262][ T9083] ? __pfx___lookup_slow+0x10/0x10 [ 460.211298][ T9083] ? make_vfsuid+0x52/0xa0 [ 460.211331][ T9083] ? lookup_fast+0x196/0x5a0 [ 460.211375][ T9083] lookup_slow+0x53/0x70 [ 460.211404][ T9083] walk_component+0x2f4/0x420 [ 460.211434][ T9083] path_lookupat+0x169/0x440 [ 460.211468][ T9083] filename_lookup+0x290/0x670 [ 460.211502][ T9083] ? __pfx_filename_lookup+0x10/0x10 [ 460.211525][ T9083] ? __kasan_slab_alloc+0x66/0x80 [ 460.211583][ T9083] ? __lock_acquire+0xad5/0xd80 [ 460.211617][ T9083] do_linkat+0x141/0x700 [ 460.211647][ T9083] ? __pfx_do_linkat+0x10/0x10 [ 460.211672][ T9083] ? strncpy_from_user+0x143/0x280 [ 460.211698][ T9083] ? getname_flags+0x1e2/0x530 [ 460.211726][ T9083] __x64_sys_link+0x82/0x90 [ 460.211748][ T9083] do_syscall_64+0xf3/0x230 [ 460.211775][ T9083] ? clear_bhb_loop+0x45/0xa0 [ 460.211801][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.211822][ T9083] RIP: 0033:0x7fdf9d58d169 [ 460.211841][ T9083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.211860][ T9083] RSP: 002b:00007fdf9e4b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 460.211883][ T9083] RAX: ffffffffffffffda RBX: 00007fdf9d7a5fa0 RCX: 00007fdf9d58d169 [ 460.211899][ T9083] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 460.211914][ T9083] RBP: 00007fdf9e4b6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.211927][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.211940][ T9083] R13: 0000000000000000 R14: 00007fdf9d7a5fa0 R15: 00007ffead8ddf48 [ 460.211973][ T9083] [ 461.504063][ T9088] blktrace: Concurrent blktraces are not allowed on sg0 [ 462.330011][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 462.336859][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 462.628553][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 463.773547][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 463.951886][ T9098] ceph: No mds server is up or the cluster is laggy [ 464.332131][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 464.642942][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 466.842505][ T9146] netlink: 68 bytes leftover after parsing attributes in process `syz.2.817'. [ 471.338535][ T9183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.821'. [ 473.428193][ T9191] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 474.272567][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 474.278799][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 475.244364][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 475.250518][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 475.669942][ T5140] Bluetooth: hci0: command tx timeout [ 475.799870][ T24] libceph: connect (1)[c::]:6789 error -101 [ 476.421657][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 476.482750][ T9199] ceph: No mds server is up or the cluster is laggy [ 476.813008][ T5881] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 476.986402][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.033319][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.019486][ T5881] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 478.029339][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.040674][ T5881] usb 2-1: config 0 descriptor?? [ 479.106581][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 479.816890][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 479.881357][ T5881] usb 2-1: USB disconnect, device number 16 [ 486.201369][ T52] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 487.492707][ T5880] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 487.695904][ T9285] FAULT_INJECTION: forcing a failure. [ 487.695904][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 487.708763][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.0.852 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 487.708791][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.708805][ T9285] Call Trace: [ 487.708813][ T9285] [ 487.708822][ T9285] dump_stack_lvl+0x241/0x360 [ 487.708858][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.708887][ T9285] ? __pfx__printk+0x10/0x10 [ 487.708929][ T9285] should_fail_ex+0x424/0x570 [ 487.708957][ T9285] should_failslab+0xac/0x100 [ 487.708981][ T9285] kmem_cache_alloc_noprof+0x78/0x390 [ 487.709002][ T9285] ? skb_clone+0x20c/0x390 [ 487.709031][ T9285] skb_clone+0x20c/0x390 [ 487.709059][ T9285] __netlink_deliver_tap+0x3c4/0x7f0 [ 487.709101][ T9285] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.709129][ T9285] netlink_deliver_tap+0x19d/0x1b0 [ 487.709159][ T9285] netlink_unicast+0x7c6/0x9a0 [ 487.709196][ T9285] ? __pfx_netlink_unicast+0x10/0x10 [ 487.709224][ T9285] ? skb_put+0x114/0x1f0 [ 487.709250][ T9285] netlink_sendmsg+0x8c3/0xcd0 [ 487.709293][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.709337][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.709365][ T9285] __sock_sendmsg+0x221/0x270 [ 487.709394][ T9285] ____sys_sendmsg+0x523/0x860 [ 487.709422][ T9285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.709452][ T9285] ? __sys_sendmsg+0x1f8/0x360 [ 487.709481][ T9285] __sys_sendmsg+0x271/0x360 [ 487.709510][ T9285] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.709570][ T9285] ? vfs_write+0xb7f/0xd10 [ 487.709620][ T9285] ? do_syscall_64+0xb6/0x230 [ 487.709656][ T9285] do_syscall_64+0xf3/0x230 [ 487.709681][ T9285] ? clear_bhb_loop+0x45/0xa0 [ 487.709707][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.709728][ T9285] RIP: 0033:0x7fe1bc78d169 [ 487.709747][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.709771][ T9285] RSP: 002b:00007fe1bd65f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.709794][ T9285] RAX: ffffffffffffffda RBX: 00007fe1bc9a6160 RCX: 00007fe1bc78d169 [ 487.709809][ T9285] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000009 [ 487.709824][ T9285] RBP: 00007fe1bd65f090 R08: 0000000000000000 R09: 0000000000000000 [ 487.709837][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.709850][ T9285] R13: 0000000000000000 R14: 00007fe1bc9a6160 R15: 00007ffcf2146048 [ 487.709883][ T9285] [ 487.956139][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.971846][ T5823] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 488.051662][ T5880] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 488.075680][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 488.096110][ T5880] usb 3-1: SerialNumber: syz [ 488.241071][ T52] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 488.369228][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 488.388164][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.548519][ T5823] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 488.651378][ T5823] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 488.848453][ T5823] usb 2-1: config 4 has no interface number 0 [ 489.025847][ T5880] gspca_main: spca501-2.14.0 probing 0000:0000 [ 489.033395][ T5880] gspca_spca501: reg write: error -71 [ 489.038809][ T5880] spca501 3-1:14.0: Reg write failed for 0x02,0x0f,0x05 [ 489.046033][ T5880] spca501 3-1:14.0: probe with driver spca501 failed with error -22 [ 489.065150][ T5880] usb 3-1: USB disconnect, device number 18 [ 489.080961][ T5823] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 489.096829][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.105160][ T5823] usb 2-1: Product: syz [ 489.110419][ T5823] usb 2-1: Manufacturer: syz [ 489.115064][ T5823] usb 2-1: SerialNumber: syz [ 489.185485][ T52] usb 5-1: device descriptor read/64, error -71 [ 489.431015][ T52] usb usb5-port1: attempt power cycle [ 489.508649][ T5823] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 489.629041][ T5823] usb 2-1: No streaming interface found for terminal 6. [ 489.852007][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 489.854227][ T5823] usb 2-1: USB disconnect, device number 17 [ 489.871658][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 489.897973][ T52] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 489.920227][ T52] usb 5-1: device descriptor read/8, error -71 [ 490.074471][ T5880] IPVS: starting estimator thread 0... [ 490.076351][ T9305] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 490.166737][ T24] libceph: connect (1)[c::]:6789 error -101 [ 490.184240][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 490.312832][ T9307] IPVS: using max 26 ests per chain, 62400 per kthread [ 490.547269][ T9297] ceph: No mds server is up or the cluster is laggy [ 491.191297][ T52] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 491.244119][ T52] usb 5-1: device descriptor read/8, error -71 [ 491.720541][ T52] usb usb5-port1: unable to enumerate USB device [ 493.451196][ T9353] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 493.961262][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 497.115549][ T9378] ceph: No mds server is up or the cluster is laggy [ 497.242112][ T9386] netlink: 68 bytes leftover after parsing attributes in process `syz.3.875'. [ 497.500947][ T9393] No control pipe specified [ 498.825447][ T9409] FAULT_INJECTION: forcing a failure. [ 498.825447][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 498.847753][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.0.880 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 498.847777][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 498.847787][ T9409] Call Trace: [ 498.847793][ T9409] [ 498.847800][ T9409] dump_stack_lvl+0x241/0x360 [ 498.847828][ T9409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.847849][ T9409] ? __pfx__printk+0x10/0x10 [ 498.847872][ T9409] ? __pfx___might_resched+0x10/0x10 [ 498.847894][ T9409] should_fail_ex+0x424/0x570 [ 498.847913][ T9409] should_failslab+0xac/0x100 [ 498.847930][ T9409] __kmalloc_noprof+0xdf/0x4d0 [ 498.847946][ T9409] ? video_usercopy+0x204/0x1330 [ 498.847964][ T9409] video_usercopy+0x204/0x1330 [ 498.847986][ T9409] ? __pfx___video_do_ioctl+0x10/0x10 [ 498.848000][ T9409] ? __pfx_video_usercopy+0x10/0x10 [ 498.848012][ T9409] ? smack_file_ioctl+0x306/0x3b0 [ 498.848041][ T9409] ? __fget_files+0x2a/0x420 [ 498.848060][ T9409] ? __fget_files+0x2a/0x420 [ 498.848079][ T9409] v4l2_ioctl+0x189/0x1e0 [ 498.848101][ T9409] ? __pfx_v4l2_ioctl+0x10/0x10 [ 498.848123][ T9409] __se_sys_ioctl+0xf1/0x160 [ 498.848147][ T9409] do_syscall_64+0xf3/0x230 [ 498.848166][ T9409] ? clear_bhb_loop+0x45/0xa0 [ 498.848183][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.848197][ T9409] RIP: 0033:0x7fe1bc78d169 [ 498.848211][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.848224][ T9409] RSP: 002b:00007fe1bd6a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.848241][ T9409] RAX: ffffffffffffffda RBX: 00007fe1bc9a5fa0 RCX: 00007fe1bc78d169 [ 498.848252][ T9409] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 498.848262][ T9409] RBP: 00007fe1bd6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 498.848273][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.848282][ T9409] R13: 0000000000000000 R14: 00007fe1bc9a5fa0 R15: 00007ffcf2146048 [ 498.848305][ T9409] [ 500.802439][ T5823] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 501.129603][ T5823] usb 4-1: config 0 has no interfaces? [ 501.926092][ T5823] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 501.935231][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.960625][ T5823] usb 4-1: Product: syz [ 501.965493][ T5823] usb 4-1: Manufacturer: syz [ 501.972058][ T5823] usb 4-1: SerialNumber: syz [ 502.018349][ T5823] usb 4-1: config 0 descriptor?? [ 502.133967][ T5823] usb 4-1: can't set config #0, error -71 [ 502.161369][ T5823] usb 4-1: USB disconnect, device number 19 [ 502.492181][ T9437] FAT-fs (nullb0): bogus number of reserved sectors [ 502.499178][ T9437] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 502.812849][ T52] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 502.857624][ T9439] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 503.263276][ T52] usb 5-1: unable to get BOS descriptor or descriptor too short [ 503.277641][ T52] usb 5-1: not running at top speed; connect to a high speed hub [ 503.703351][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.282086][ T9442] ceph: No mds server is up or the cluster is laggy [ 504.529405][ T52] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.642112][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.650162][ T52] usb 5-1: Product: syz [ 504.774723][ T52] usb 5-1: Manufacturer: syz [ 505.289236][ T52] usb 5-1: SerialNumber: syz [ 505.581373][ T9458] program syz.0.896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.633404][ T52] usb 5-1: can't set config #1, error -71 [ 505.747456][ T52] usb 5-1: USB disconnect, device number 20 [ 506.044734][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.076575][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.238415][ T5882] IPVS: starting estimator thread 0... [ 507.368989][ T9480] IPVS: using max 25 ests per chain, 60000 per kthread [ 508.013914][ T9488] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 508.232670][ T9492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.903'. [ 508.856075][ T9491] netlink: 140 bytes leftover after parsing attributes in process `syz.1.903'. [ 510.524293][ T9509] program syz.2.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.884727][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 513.235121][ T9519] siw: device registration error -23 [ 515.397086][ T9538] netlink: 140 bytes leftover after parsing attributes in process `syz.2.915'. [ 515.432582][ T9538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.915'. [ 516.574818][ T52] kernel write not supported for file /666/attr/fscreate (pid: 52 comm: kworker/1:1) [ 516.658823][ T5823] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 516.824482][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.919'. [ 517.331410][ T5823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.344769][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.355998][ T5823] usb 5-1: config 1 interface 1 has no altsetting 0 [ 517.365983][ T5823] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.387686][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.409341][ T5823] usb 5-1: Product: syz [ 517.415347][ T5823] usb 5-1: Manufacturer: syz [ 517.460614][ T5823] usb 5-1: SerialNumber: syz [ 517.494016][ T5823] usb 5-1: selecting invalid altsetting 1 [ 517.835771][ T5823] usb 5-1: selecting invalid altsetting 0 [ 517.956215][ T5823] usb 5-1: selecting invalid altsetting 0 [ 518.039853][ T5823] cdc_ncm 5-1:1.0: bind() failure [ 518.108435][ T5823] usb 5-1: selecting invalid altsetting 0 [ 518.123259][ T5823] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 518.181022][ T5823] usb 5-1: USB disconnect, device number 21 [ 519.036459][ T9565] program syz.0.921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.275402][ T9586] netlink: 140 bytes leftover after parsing attributes in process `syz.1.927'. [ 521.393093][ T9587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'. [ 522.044221][ T9588] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 524.961219][ T9618] tipc: Started in network mode [ 524.973856][ T9618] tipc: Node identity 4, cluster identity 4711 [ 525.014830][ T9618] tipc: Node number set to 4 [ 525.645435][ T978] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 525.818477][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 525.960145][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.941'. [ 526.664863][ T9635] netlink: 140 bytes leftover after parsing attributes in process `syz.4.941'. [ 526.983952][ T978] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 527.004821][ T978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.056977][ T978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.088590][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.107629][ T978] usb 3-1: Product: syz [ 527.118431][ T978] usb 3-1: Manufacturer: syz [ 527.133505][ T978] usb 3-1: SerialNumber: syz [ 527.464946][ T5919] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 527.978635][ T978] usb 3-1: 0:2 : does not exist [ 527.997281][ T978] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 528.091270][ T978] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 528.162632][ T5919] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 528.177127][ T978] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 528.191766][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.201600][ T5919] usb 2-1: Product: syz [ 528.211248][ T5919] usb 2-1: Manufacturer: syz [ 528.219324][ T5919] usb 2-1: SerialNumber: syz [ 528.227736][ T978] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 528.246382][ T9652] FAULT_INJECTION: forcing a failure. [ 528.246382][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 528.259610][ T5919] usb 2-1: config 0 descriptor?? [ 528.273223][ T5919] ch341 2-1:0.0: ch341-uart converter detected [ 528.285751][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.0.948 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 528.285781][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 528.285795][ T9652] Call Trace: [ 528.285803][ T9652] [ 528.285812][ T9652] dump_stack_lvl+0x241/0x360 [ 528.285849][ T9652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.285878][ T9652] ? __pfx__printk+0x10/0x10 [ 528.285912][ T9652] ? __pfx___might_resched+0x10/0x10 [ 528.285940][ T9652] should_fail_ex+0x424/0x570 [ 528.285968][ T9652] should_failslab+0xac/0x100 [ 528.285992][ T9652] __kmalloc_noprof+0xdf/0x4d0 [ 528.286012][ T9652] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 528.286033][ T9652] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 528.286059][ T9652] tomoyo_realpath_from_path+0xcf/0x5e0 [ 528.286094][ T9652] tomoyo_mount_permission+0x3cb/0xbd0 [ 528.286135][ T9652] ? tomoyo_mount_permission+0x29d/0xbd0 [ 528.286172][ T9652] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 528.286264][ T9652] security_sb_mount+0xe0/0x2f0 [ 528.286293][ T9652] path_mount+0xb9/0xfa0 [ 528.286314][ T9652] ? kmem_cache_free+0x197/0x410 [ 528.286335][ T9652] ? user_path_at+0x44/0x60 [ 528.286372][ T9652] __se_sys_mount+0x38c/0x400 [ 528.286418][ T9652] ? __pfx___se_sys_mount+0x10/0x10 [ 528.286450][ T9652] ? __x64_sys_mount+0x20/0xc0 [ 528.286477][ T9652] do_syscall_64+0xf3/0x230 [ 528.286503][ T9652] ? clear_bhb_loop+0x45/0xa0 [ 528.286529][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.286550][ T9652] RIP: 0033:0x7fe1bc78d169 [ 528.286569][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.286587][ T9652] RSP: 002b:00007fe1bd6a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 528.286612][ T9652] RAX: ffffffffffffffda RBX: 00007fe1bc9a5fa0 RCX: 00007fe1bc78d169 [ 528.286629][ T9652] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 528.286642][ T9652] RBP: 00007fe1bd6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 528.286656][ T9652] R10: 0000000000820061 R11: 0000000000000246 R12: 0000000000000001 [ 528.286669][ T9652] R13: 0000000000000000 R14: 00007fe1bc9a5fa0 R15: 00007ffcf2146048 [ 528.286703][ T9652] [ 528.286712][ T9652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.319061][ T978] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 528.532449][ T5919] usb 2-1: failed to receive control message: -121 [ 528.539141][ T5919] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 528.647149][ T978] usb 3-1: USB disconnect, device number 19 [ 528.776275][ T9640] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 529.538320][ T9664] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 529.797223][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.213684][ T52] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 530.460600][ T9680] netlink: 140 bytes leftover after parsing attributes in process `syz.3.954'. [ 530.480875][ T9680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.954'. [ 530.575949][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 530.621744][ T52] usb 1-1: config 6 has an invalid interface number: 63 but max is 0 [ 531.024662][ T52] usb 1-1: config 6 has no interface number 0 [ 531.030851][ T52] usb 1-1: config 6 interface 63 has no altsetting 0 [ 531.059547][ T52] usb 1-1: string descriptor 0 read error: -71 [ 531.065899][ T52] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=c3.8c [ 531.183328][ T9681] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 531.210436][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.283784][ T52] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 531.348510][ T52] usb 1-1: no configuration chosen from 1 choice [ 531.360002][ T978] usb 2-1: USB disconnect, device number 18 [ 531.408099][ T978] ch341 2-1:0.0: device disconnected [ 531.415969][ T52] usb 1-1: USB disconnect, device number 13 [ 531.538865][ T9685] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 533.046213][ T978] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 533.125077][ T5823] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 533.366150][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 534.226158][ T978] usb 1-1: config 4 has an invalid interface number: 71 but max is 0 [ 534.239706][ T5823] usb 4-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 534.923653][ T978] usb 1-1: config 4 has no interface number 0 [ 534.939867][ T5823] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 534.949022][ T978] usb 1-1: config 4 interface 71 has no altsetting 0 [ 534.960350][ T5823] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 534.970002][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.989914][ T978] usb 1-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=9e.80 [ 535.001591][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.009647][ T978] usb 1-1: Product: syz [ 535.026044][ T978] usb 1-1: Manufacturer: syz [ 535.030902][ T978] usb 1-1: SerialNumber: syz [ 535.054316][ T5823] usb 4-1: config 0 descriptor?? [ 538.150305][ T5882] usb 4-1: USB disconnect, device number 20 [ 538.327388][ T978] quatech2 1-1:4.71: Quatech 2nd gen USB to Serial Driver converter detected [ 538.374442][ T978] usb 1-1: qt2_attach - failed to power on unit: -71 [ 538.391072][ T978] quatech2 1-1:4.71: probe with driver quatech2 failed with error -71 [ 538.442315][ T9745] ip6t_srh: unknown srh invflags 7D00 [ 538.449051][ T978] usb 1-1: USB disconnect, device number 14 [ 538.554698][ T5823] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 538.724217][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.748408][ T5823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 538.775180][ T5823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 538.801147][ T5823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 538.832126][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.840988][ T5823] usb 2-1: Product: syz [ 538.845304][ T5823] usb 2-1: Manufacturer: syz [ 538.849951][ T5823] usb 2-1: SerialNumber: syz [ 538.869982][ T9742] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 541.812942][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 541.812964][ T30] audit: type=1107 audit(1744078909.824:96): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 542.036684][ T52] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 542.037786][ T5823] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 542.525941][ T5823] usb 2-1: USB disconnect, device number 19 [ 543.380003][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 543.551864][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.587552][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.797554][ T5823] usblp0: removed [ 544.193428][ T9796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.351772][ T9796] FAULT_INJECTION: forcing a failure. [ 544.351772][ T9796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.388082][ T9796] CPU: 0 UID: 0 PID: 9796 Comm: syz.4.987 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 544.388110][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 544.388120][ T9796] Call Trace: [ 544.388127][ T9796] [ 544.388134][ T9796] dump_stack_lvl+0x241/0x360 [ 544.388161][ T9796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.388186][ T9796] ? __pfx__printk+0x10/0x10 [ 544.388225][ T9796] should_fail_ex+0x424/0x570 [ 544.388251][ T9796] _copy_to_user+0x31/0xb0 [ 544.388285][ T9796] simple_read_from_buffer+0xc4/0x170 [ 544.388312][ T9796] proc_fail_nth_read+0x1ef/0x260 [ 544.388343][ T9796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.388374][ T9796] ? rw_verify_area+0x246/0x630 [ 544.388400][ T9796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.388421][ T9796] vfs_read+0x21f/0xb90 [ 544.388445][ T9796] ? __pfx___mutex_lock+0x10/0x10 [ 544.388463][ T9796] ? __pfx_vfs_read+0x10/0x10 [ 544.388496][ T9796] ? __fget_files+0x2a/0x420 [ 544.388522][ T9796] ? __fget_files+0x39d/0x420 [ 544.388545][ T9796] ? __fget_files+0x2a/0x420 [ 544.388576][ T52] usb 4-1: unable to get BOS descriptor or descriptor too short [ 544.388579][ T9796] ksys_read+0x19d/0x2d0 [ 544.388610][ T9796] ? __pfx_ksys_read+0x10/0x10 [ 544.388654][ T9796] ? do_syscall_64+0xb6/0x230 [ 544.388684][ T9796] do_syscall_64+0xf3/0x230 [ 544.388711][ T9796] ? clear_bhb_loop+0x45/0xa0 [ 544.388757][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.388779][ T9796] RIP: 0033:0x7fdf9d58bb7c [ 544.388800][ T9796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 544.388819][ T9796] RSP: 002b:00007fdf9e4b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.388843][ T9796] RAX: ffffffffffffffda RBX: 00007fdf9d7a5fa0 RCX: 00007fdf9d58bb7c [ 544.388859][ T9796] RDX: 000000000000000f RSI: 00007fdf9e4b60a0 RDI: 0000000000000004 [ 544.388873][ T9796] RBP: 00007fdf9e4b6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.388888][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.388901][ T9796] R13: 0000000000000000 R14: 00007fdf9d7a5fa0 R15: 00007ffead8ddf48 [ 544.388935][ T9796] [ 545.112871][ T52] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 545.121267][ T52] usb 4-1: can't read configurations, error -71 [ 545.575599][ T9812] ip6t_srh: unknown srh invflags 7D00 [ 545.824974][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 545.846540][ T9814] netlink: 140 bytes leftover after parsing attributes in process `syz.4.994'. [ 545.857047][ T9814] netlink: 140 bytes leftover after parsing attributes in process `syz.4.994'. [ 545.872507][ T9814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.994'. [ 547.131433][ T9825] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 547.319093][ T9825] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.329041][ T9825] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.340170][ T9825] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.349612][ T9825] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.688669][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 548.562733][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.996'. [ 548.984981][ T9845] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 554.369299][ T9890] FAULT_INJECTION: forcing a failure. [ 554.369299][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 554.382360][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.2.1016 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 554.382388][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.382401][ T9890] Call Trace: [ 554.382409][ T9890] [ 554.382418][ T9890] dump_stack_lvl+0x241/0x360 [ 554.382455][ T9890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.382484][ T9890] ? __pfx__printk+0x10/0x10 [ 554.382515][ T9890] ? __pfx___might_resched+0x10/0x10 [ 554.382544][ T9890] should_fail_ex+0x424/0x570 [ 554.382569][ T9890] should_failslab+0xac/0x100 [ 554.382591][ T9890] ? __get_vm_area_node+0x132/0x2d0 [ 554.382612][ T9890] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 554.382644][ T9890] __get_vm_area_node+0x132/0x2d0 [ 554.382670][ T9890] __vmalloc_node_range_noprof+0x349/0x1390 [ 554.382696][ T9890] ? __do_replace+0xce/0xc60 [ 554.382735][ T9890] ? xt_find_target+0x1e1/0x240 [ 554.382779][ T9890] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 554.382825][ T9890] ? __do_replace+0xce/0xc60 [ 554.382855][ T9890] vzalloc_noprof+0x79/0x90 [ 554.382880][ T9890] ? __do_replace+0xce/0xc60 [ 554.382910][ T9890] __do_replace+0xce/0xc60 [ 554.382945][ T9890] ? __pfx_translate_table+0x10/0x10 [ 554.382983][ T9890] ? __pfx___do_replace+0x10/0x10 [ 554.383028][ T9890] ? copy_from_sockptr_offset+0x60/0xb0 [ 554.383062][ T9890] do_arpt_set_ctl+0x10dd/0x1650 [ 554.383102][ T9890] ? __mutex_trylock_common+0x184/0x2e0 [ 554.383129][ T9890] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 554.383164][ T9890] ? __pfx___mutex_trylock_common+0x10/0x10 [ 554.383209][ T9890] ? __mutex_unlock_slowpath+0x229/0x800 [ 554.383246][ T9890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.383275][ T9890] ? __pfx___mutex_lock+0x10/0x10 [ 554.383298][ T9890] ? rcu_read_lock_any_held+0xbb/0x160 [ 554.383323][ T9890] nf_setsockopt+0x295/0x2c0 [ 554.383347][ T9890] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 554.383370][ T9890] smc_setsockopt+0x25c/0xd50 [ 554.383392][ T9890] ? __pfx_smc_setsockopt+0x10/0x10 [ 554.383407][ T9890] ? __lock_acquire+0xad5/0xd80 [ 554.383427][ T9890] ? __pfx_smc_setsockopt+0x10/0x10 [ 554.383442][ T9890] do_sock_setsockopt+0x3b1/0x710 [ 554.383462][ T9890] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 554.383475][ T9890] ? __fget_files+0x2a/0x420 [ 554.383499][ T9890] ? __fget_files+0x39d/0x420 [ 554.383515][ T9890] ? __fget_files+0x2a/0x420 [ 554.383539][ T9890] __x64_sys_setsockopt+0x1ee/0x280 [ 554.383562][ T9890] do_syscall_64+0xf3/0x230 [ 554.383587][ T9890] ? clear_bhb_loop+0x45/0xa0 [ 554.383613][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.383630][ T9890] RIP: 0033:0x7f0e0d58d169 [ 554.383644][ T9890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.383657][ T9890] RSP: 002b:00007f0e0e3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.383673][ T9890] RAX: ffffffffffffffda RBX: 00007f0e0d7a6080 RCX: 00007f0e0d58d169 [ 554.383685][ T9890] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 554.383693][ T9890] RBP: 00007f0e0e3c7090 R08: 0000000000000440 R09: 0000000000000000 [ 554.383703][ T9890] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 554.383712][ T9890] R13: 0000000000000000 R14: 00007f0e0d7a6080 R15: 00007ffebaa25ae8 [ 554.383735][ T9890] [ 554.707434][ T9890] syz.2.1016: vmalloc error: size 64, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 554.722255][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.2.1016 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 554.722275][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.722284][ T9890] Call Trace: [ 554.722291][ T9890] [ 554.722297][ T9890] dump_stack_lvl+0x241/0x360 [ 554.722324][ T9890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.722344][ T9890] ? __pfx__printk+0x10/0x10 [ 554.722362][ T9890] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 554.722384][ T9890] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 554.722403][ T9890] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 554.722425][ T9890] warn_alloc+0x27c/0x410 [ 554.722447][ T9890] ? __pfx_warn_alloc+0x10/0x10 [ 554.722473][ T9890] ? __get_vm_area_node+0x280/0x2d0 [ 554.722503][ T9890] __vmalloc_node_range_noprof+0x36e/0x1390 [ 554.722531][ T9890] ? xt_find_target+0x1e1/0x240 [ 554.722574][ T9890] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 554.722612][ T9890] ? __do_replace+0xce/0xc60 [ 554.722636][ T9890] vzalloc_noprof+0x79/0x90 [ 554.722653][ T9890] ? __do_replace+0xce/0xc60 [ 554.722673][ T9890] __do_replace+0xce/0xc60 [ 554.722697][ T9890] ? __pfx_translate_table+0x10/0x10 [ 554.722723][ T9890] ? __pfx___do_replace+0x10/0x10 [ 554.722752][ T9890] ? copy_from_sockptr_offset+0x60/0xb0 [ 554.722776][ T9890] do_arpt_set_ctl+0x10dd/0x1650 [ 554.722808][ T9890] ? __mutex_trylock_common+0x184/0x2e0 [ 554.722827][ T9890] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 554.722851][ T9890] ? __pfx___mutex_trylock_common+0x10/0x10 [ 554.722883][ T9890] ? __mutex_unlock_slowpath+0x229/0x800 [ 554.722908][ T9890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.722929][ T9890] ? __pfx___mutex_lock+0x10/0x10 [ 554.722947][ T9890] ? rcu_read_lock_any_held+0xbb/0x160 [ 554.722971][ T9890] nf_setsockopt+0x295/0x2c0 [ 554.722994][ T9890] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 554.723017][ T9890] smc_setsockopt+0x25c/0xd50 [ 554.723039][ T9890] ? __pfx_smc_setsockopt+0x10/0x10 [ 554.723054][ T9890] ? __lock_acquire+0xad5/0xd80 [ 554.723073][ T9890] ? __pfx_smc_setsockopt+0x10/0x10 [ 554.723088][ T9890] do_sock_setsockopt+0x3b1/0x710 [ 554.723107][ T9890] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 554.723120][ T9890] ? __fget_files+0x2a/0x420 [ 554.723139][ T9890] ? __fget_files+0x39d/0x420 [ 554.723154][ T9890] ? __fget_files+0x2a/0x420 [ 554.723176][ T9890] __x64_sys_setsockopt+0x1ee/0x280 [ 554.723196][ T9890] do_syscall_64+0xf3/0x230 [ 554.723214][ T9890] ? clear_bhb_loop+0x45/0xa0 [ 554.723232][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.723246][ T9890] RIP: 0033:0x7f0e0d58d169 [ 554.723259][ T9890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.723271][ T9890] RSP: 002b:00007f0e0e3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.723286][ T9890] RAX: ffffffffffffffda RBX: 00007f0e0d7a6080 RCX: 00007f0e0d58d169 [ 554.723297][ T9890] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 554.723306][ T9890] RBP: 00007f0e0e3c7090 R08: 0000000000000440 R09: 0000000000000000 [ 554.723315][ T9890] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 554.723324][ T9890] R13: 0000000000000000 R14: 00007f0e0d7a6080 R15: 00007ffebaa25ae8 [ 554.723346][ T9890] [ 554.723352][ T9890] Mem-Info: [ 555.052775][ T9890] active_anon:7301 inactive_anon:16718 isolated_anon:0 [ 555.052775][ T9890] active_file:16756 inactive_file:40783 isolated_file:0 [ 555.052775][ T9890] unevictable:768 dirty:133 writeback:0 [ 555.052775][ T9890] slab_reclaimable:9971 slab_unreclaimable:100212 [ 555.052775][ T9890] mapped:35920 shmem:19959 pagetables:999 [ 555.052775][ T9890] sec_pagetables:0 bounce:0 [ 555.052775][ T9890] kernel_misc_reclaimable:0 [ 555.052775][ T9890] free:1296890 free_pcp:4295 free_cma:0 [ 555.099748][ T9890] Node 0 active_anon:29204kB inactive_anon:66872kB active_file:66948kB inactive_file:163132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143680kB dirty:532kB writeback:0kB shmem:78300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11804kB pagetables:3996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 555.133634][ T9890] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 555.164862][ T9890] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 555.193222][ T9890] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 555.199048][ T9890] Node 0 DMA32 free:1268988kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:29200kB inactive_anon:66868kB active_file:66856kB inactive_file:163120kB unevictable:1536kB writepending:448kB present:3129332kB managed:2547752kB mlocked:0kB bounce:0kB free_pcp:15052kB local_pcp:9716kB free_cma:0kB [ 555.229956][ T9890] lowmem_reserve[]: 0 0 0 0 0 [ 555.234676][ T9890] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 555.261335][ T9890] lowmem_reserve[]: 0 0 0 0 0 [ 555.266055][ T9890] Node 1 Normal free:3903212kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2064kB local_pcp:0kB free_cma:0kB [ 555.299277][ T9890] lowmem_reserve[]: 0 0 0 0 0 [ 555.304568][ T9890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 555.317379][ T9890] Node 0 DMA32: 979*4kB (UE) 514*8kB (UE) 173*16kB (UE) 269*32kB (UME) 222*64kB (UME) 33*128kB (UME) 15*256kB (UME) 9*512kB (UME) 6*1024kB (M) 8*2048kB (UME) 293*4096kB (UM) = 1268940kB [ 555.335850][ T9890] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 555.347384][ T9890] Node 1 Normal: 27*4kB (UE) 20*8kB (UME) 56*16kB (UME) 225*32kB (UME) 95*64kB (UME) 37*128kB (UME) 16*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 5*2048kB (UME) 943*4096kB (M) = 3903212kB [ 555.403276][ T9890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.431467][ T9890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.440886][ T9890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.450572][ T9890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.460009][ T9890] 77248 total pagecache pages [ 555.464786][ T9890] 0 pages in swap cache [ 555.469036][ T9890] Free swap = 124996kB [ 555.473190][ T9890] Total swap = 124996kB [ 555.477517][ T9890] 2097051 pages RAM [ 555.481324][ T9890] 0 pages HighMem/MovableOnly [ 555.486062][ T9890] 428454 pages reserved [ 555.490213][ T9890] 0 pages cma reserved [ 555.851198][ T978] kernel write not supported for file /728/attr/fscreate (pid: 978 comm: kworker/0:2) [ 557.141092][ T9906] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1006'. [ 557.153336][ T9906] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1006'. [ 557.167237][ T9906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1006'. [ 557.364878][ T9912] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 560.000417][ T9938] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1028'. [ 560.010647][ T9938] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1028'. [ 560.028130][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1028'. [ 560.911255][ T52] kernel write not supported for file /726/attr/fscreate (pid: 52 comm: kworker/1:1) [ 561.292540][ T9954] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1032'. [ 561.303326][ T9954] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1032'. [ 561.319718][ T9954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'. [ 561.964747][ T9953] ceph: No mds server is up or the cluster is laggy [ 562.760932][ T9971] program syz.4.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.189826][ T9981] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1041'. [ 563.199302][ T9981] ip6gretap0: left allmulticast mode [ 563.207238][ T9981] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1041'. [ 563.222914][ T9981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1041'. [ 564.489428][ T9998] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1048'. [ 564.499300][ T9998] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1048'. [ 564.514120][ T9998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1048'. [ 564.539995][ T52] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 564.968953][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 564.998587][ T24] libceph: connect (1)[c::]:6789 error -101 [ 565.445907][T10001] ceph: No mds server is up or the cluster is laggy [ 566.011470][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 566.035585][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.044427][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.093283][ T52] usb 5-1: unable to get BOS descriptor or descriptor too short [ 566.212087][ T52] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 566.221205][ T52] usb 5-1: can't read configurations, error -71 [ 566.546306][T10012] program syz.0.1052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.681056][T10036] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1061'. [ 568.690621][T10036] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1061'. [ 568.705093][T10036] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1061'. [ 569.204416][ T5912] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 569.870472][T10044] ceph: No mds server is up or the cluster is laggy [ 570.120510][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 570.143864][ T5912] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.232398][ T5912] usb 2-1: config 0 has no interface number 0 [ 570.240018][T10050] program syz.4.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.483412][ T5912] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 571.397332][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.204042][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.221637][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.263742][ T5912] usb 2-1: Product: syz [ 572.267968][ T5912] usb 2-1: Manufacturer: syz [ 572.675369][ T5912] usb 2-1: SerialNumber: syz [ 572.686211][ T5823] kernel write not supported for file /770/attr/fscreate (pid: 5823 comm: kworker/0:3) [ 572.713637][ T5912] usb 2-1: config 0 descriptor?? [ 574.061869][ T5912] usb 2-1: can't set config #0, error -71 [ 574.129763][ T5912] usb 2-1: USB disconnect, device number 20 [ 574.510390][T10082] program syz.3.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.617561][T10084] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1074'. [ 575.125085][T10084] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1074'. [ 575.761770][T10094] ceph: No mds server is up or the cluster is laggy [ 576.040233][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1074'. [ 581.117119][ T978] kernel write not supported for file /792/attr/fscreate (pid: 978 comm: kworker/0:2) [ 584.673340][T10173] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1093'. [ 584.744087][T10173] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1093'. [ 584.878251][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1093'. [ 593.539932][T10265] siw: device registration error -23 [ 596.566793][ T5882] kernel write not supported for file /793/attr/fscreate (pid: 5882 comm: kworker/0:5) [ 597.259783][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1130'. [ 600.010640][T10335] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1137'. [ 600.020411][T10335] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1137'. [ 600.037221][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1137'. [ 602.746845][T10356] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 603.287443][T10356] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1142'. [ 604.213962][ T5882] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 604.512035][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 604.524571][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.324516][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 605.380845][ T5882] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 605.413898][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.490792][T10373] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 605.738481][ T5882] usb 5-1: config 0 descriptor?? [ 605.981232][ T5882] usb 5-1: bad CDC descriptors [ 606.297218][ T5912] usb 5-1: USB disconnect, device number 24 [ 606.515970][T10384] blktrace: Concurrent blktraces are not allowed on sg0 [ 607.717512][T10392] ip6t_srh: unknown srh invflags 7D00 [ 613.096188][T10425] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 613.791673][T10427] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1163'. [ 613.801375][T10427] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1163'. [ 613.815599][T10427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1163'. [ 614.188975][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 614.198056][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 614.892056][ T5882] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 615.063618][ T5882] usb 3-1: device descriptor read/64, error -71 [ 615.256098][ T5823] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 615.568668][ T5823] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.597104][ T5823] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.744724][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 616.444501][ T5823] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 616.452917][ T5823] usb 5-1: Product: syz [ 616.464272][ T5823] usb 5-1: Manufacturer: syz [ 616.580271][ T5823] hub 5-1:4.0: USB hub found [ 616.805894][ T5823] hub 5-1:4.0: 8 ports detected [ 616.849071][ T5823] hub 5-1:4.0: insufficient power available to use all downstream ports [ 617.907663][ T5823] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 617.915496][ T5823] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 618.635200][ T5823] usb 5-1: USB disconnect, device number 25 [ 620.809169][T10476] ip6t_srh: unknown srh invflags 7D00 [ 621.215549][T10486] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1178'. [ 621.265940][T10486] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1178'. [ 622.098297][ T24] kernel write not supported for file /847/attr/fscreate (pid: 24 comm: kworker/1:0) [ 623.524313][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1181'. [ 625.457428][T10528] ip6t_srh: unknown srh invflags 7D00 [ 625.569469][T10531] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1189'. [ 633.016310][T10583] ip6t_srh: unknown srh invflags 7D00 [ 636.916591][T10545] Process accounting resumed [ 637.412156][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.420185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.592071][T10615] mmap: syz.3.1209 (10615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 638.754307][T10617] overlayfs: missing 'lowerdir' [ 638.938318][T10629] ip6t_srh: unknown srh invflags 7D00 [ 639.048141][T10631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1215'. [ 641.122281][T10642] team0: Port device team_slave_1 removed [ 642.663857][T10658] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 644.842518][T10680] ip6t_srh: unknown srh invflags 7D00 [ 650.098149][T10711] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 651.751536][T10736] ip6t_srh: unknown srh invflags 7D00 [ 655.044906][T10751] exFAT-fs (nullb0): invalid boot record signature [ 655.055632][T10751] exFAT-fs (nullb0): failed to read boot sector [ 655.077786][T10751] exFAT-fs (nullb0): failed to recognize exfat type [ 655.998643][T10759] ceph: No mds server is up or the cluster is laggy [ 656.363038][ T5911] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 657.263495][ T5911] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 657.277371][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.295676][ T5911] usb 4-1: config 0 descriptor?? [ 657.308502][ T5911] cp210x 4-1:0.0: cp210x converter detected [ 657.542230][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1247'. [ 657.602740][ T5911] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 657.633569][ T5911] cp210x 4-1:0.0: querying part number failed [ 657.653696][ T5911] usb 4-1: cp210x converter now attached to ttyUSB0 [ 659.711249][ T5823] usb 4-1: USB disconnect, device number 23 [ 660.705939][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 660.737322][ T5823] cp210x 4-1:0.0: device disconnected [ 662.734866][T10799] ceph: No mds server is up or the cluster is laggy [ 666.511173][ T24] kernel write not supported for file /926/attr/fscreate (pid: 24 comm: kworker/1:0) [ 666.772178][T10833] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 666.940276][ T978] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 667.800395][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 667.963703][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.003279][T10836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1268'. [ 668.054784][ T978] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 668.075008][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.090286][ T978] usb 5-1: Product: syz [ 668.235122][ T978] usb 5-1: Manufacturer: syz [ 668.239816][ T978] usb 5-1: SerialNumber: syz [ 668.250191][ T978] usb 5-1: config 0 descriptor?? [ 668.296565][ T978] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 668.304650][ T978] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 669.214128][ T978] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 670.389234][T10862] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 670.587060][ T978] usb 5-1: USB disconnect, device number 26 [ 670.629689][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1273'. [ 671.638804][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 671.785537][T10882] lo speed is unknown, defaulting to 1000 [ 671.830876][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 673.032605][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.055273][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.439498][T10890] netlink: 'syz.0.1281': attribute type 23 has an invalid length. [ 673.610694][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 673.623796][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 673.635627][ T24] usb 5-1: can't read configurations, error -71 [ 674.262065][T10887] lo speed is unknown, defaulting to 1000 [ 676.107368][T10907] random: crng reseeded on system resumption [ 679.613858][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 680.010065][T10960] tmpfs: Unknown parameter 'no' [ 683.068572][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 689.379369][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 695.276143][T11062] random: crng reseeded on system resumption [ 697.084232][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 697.232276][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 697.301207][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 697.330730][T11055] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1318'. [ 698.792063][T11091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1328'. [ 698.935212][T11095] syz.1.1328: attempt to access beyond end of device [ 698.935212][T11095] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 698.943210][T11096] netlink: 'syz.4.1330': attribute type 21 has an invalid length. [ 699.038637][T11096] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1330'. [ 699.047883][T11096] netlink: 'syz.4.1330': attribute type 4 has an invalid length. [ 699.156584][T11095] MINIX-fs: unable to read superblock [ 699.219573][T11096] netlink: 'syz.4.1330': attribute type 3 has an invalid length. [ 700.054649][T11096] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1330'. [ 700.304392][T11104] lo speed is unknown, defaulting to 1000 [ 700.696183][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 700.717390][T11087] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 701.647940][T11087] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 702.216447][T11087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 702.255180][T11087] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 702.324213][T11087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 702.341398][T11087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 702.549557][T11125] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1334'. [ 702.682863][T11125] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1334'. [ 702.848647][T11128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1334'. [ 702.940523][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 703.097630][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.114898][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.734184][ T5911] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 703.744593][T11142] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 703.935128][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 703.965223][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.056149][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 704.127250][T11155] FAULT_INJECTION: forcing a failure. [ 704.127250][T11155] name failslab, interval 1, probability 0, space 0, times 0 [ 704.140312][T11155] CPU: 0 UID: 0 PID: 11155 Comm: syz.2.1343 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 704.140341][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 704.140354][T11155] Call Trace: [ 704.140362][T11155] [ 704.140371][T11155] dump_stack_lvl+0x241/0x360 [ 704.140408][T11155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.140437][T11155] ? __pfx__printk+0x10/0x10 [ 704.140469][T11155] ? __pfx___might_resched+0x10/0x10 [ 704.140499][T11155] should_fail_ex+0x424/0x570 [ 704.140527][T11155] should_failslab+0xac/0x100 [ 704.140550][T11155] __kmalloc_noprof+0xdf/0x4d0 [ 704.140571][T11155] ? tomoyo_encode+0x26f/0x540 [ 704.140597][T11155] tomoyo_encode+0x26f/0x540 [ 704.140623][T11155] tomoyo_realpath_from_path+0x59e/0x5e0 [ 704.140658][T11155] tomoyo_path_number_perm+0x245/0x790 [ 704.140692][T11155] ? tomoyo_path_number_perm+0x215/0x790 [ 704.140723][T11155] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 704.140759][T11155] ? ksys_write+0x24e/0x2d0 [ 704.140796][T11155] ? __lock_acquire+0xad5/0xd80 [ 704.140837][T11155] ? __fget_files+0x2a/0x420 [ 704.140860][T11155] ? __fget_files+0x2a/0x420 [ 704.140886][T11155] ? __fget_files+0x2a/0x420 [ 704.140915][T11155] security_file_ioctl+0xc6/0x2a0 [ 704.140947][T11155] __se_sys_ioctl+0x46/0x160 [ 704.140980][T11155] do_syscall_64+0xf3/0x230 [ 704.141006][T11155] ? clear_bhb_loop+0x45/0xa0 [ 704.141031][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.141052][T11155] RIP: 0033:0x7f0e0d58d169 [ 704.141070][T11155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.141088][T11155] RSP: 002b:00007f0e0e3e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.141111][T11155] RAX: ffffffffffffffda RBX: 00007f0e0d7a5fa0 RCX: 00007f0e0d58d169 [ 704.141126][T11155] RDX: 0000200000000140 RSI: 0000000040044104 RDI: 0000000000000006 [ 704.141140][T11155] RBP: 00007f0e0e3e8090 R08: 0000000000000000 R09: 0000000000000000 [ 704.141154][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.141166][T11155] R13: 0000000000000000 R14: 00007f0e0d7a5fa0 R15: 00007ffebaa25ae8 [ 704.141198][T11155] [ 704.141235][T11155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 704.373010][ T5911] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 704.373132][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 704.432615][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.477896][ T5911] usb 5-1: config 0 descriptor?? [ 704.545420][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 705.654026][ T978] Process accounting resumed [ 705.673257][ T5883] Process accounting resumed [ 706.617825][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 706.846209][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 707.507885][T11137] Process accounting resumed [ 707.525943][ T24] usb 5-1: USB disconnect, device number 29 [ 709.985634][ T978] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 710.170807][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 710.195502][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 710.271259][T11207] FAULT_INJECTION: forcing a failure. [ 710.271259][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 710.284171][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.4.1357 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 710.284200][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 710.284213][T11207] Call Trace: [ 710.284222][T11207] [ 710.284231][T11207] dump_stack_lvl+0x241/0x360 [ 710.284268][T11207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.284298][T11207] ? __pfx__printk+0x10/0x10 [ 710.284330][T11207] ? __pfx___might_resched+0x10/0x10 [ 710.284361][T11207] should_fail_ex+0x424/0x570 [ 710.284389][T11207] should_failslab+0xac/0x100 [ 710.284413][T11207] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 710.284437][T11207] ? __alloc_skb+0x1c2/0x480 [ 710.284473][T11207] __alloc_skb+0x1c2/0x480 [ 710.284512][T11207] ? __pfx___alloc_skb+0x10/0x10 [ 710.284547][T11207] ? netlink_autobind+0xd6/0x2f0 [ 710.284577][T11207] ? netlink_autobind+0x2b0/0x2f0 [ 710.284613][T11207] netlink_sendmsg+0x638/0xcd0 [ 710.284657][T11207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.284707][T11207] ? trace_sched_exit_tp+0x3c/0x120 [ 710.284742][T11207] ? _parse_integer_limit+0x1b4/0x200 [ 710.284772][T11207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.284799][T11207] __sock_sendmsg+0x221/0x270 [ 710.284830][T11207] sock_write_iter+0x2d9/0x3f0 [ 710.284858][T11207] ? __pfx_sock_write_iter+0x10/0x10 [ 710.284908][T11207] do_iter_readv_writev+0x71f/0x9d0 [ 710.284946][T11207] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 710.284983][T11207] ? bpf_lsm_file_permission+0x9/0x10 [ 710.285007][T11207] ? rw_verify_area+0x246/0x630 [ 710.285038][T11207] vfs_writev+0x38d/0xbc0 [ 710.285060][T11207] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 710.285091][T11207] ? vfs_write+0xb29/0xd10 [ 710.285140][T11207] ? __lock_acquire+0xad5/0xd80 [ 710.285162][T11207] ? __pfx_vfs_writev+0x10/0x10 [ 710.285204][T11207] ? __fget_files+0x2a/0x420 [ 710.285242][T11207] ? __fget_files+0x39d/0x420 [ 710.285264][T11207] ? __fget_files+0x2a/0x420 [ 710.285297][T11207] do_writev+0x1b8/0x360 [ 710.285326][T11207] ? __pfx_do_writev+0x10/0x10 [ 710.285356][T11207] ? do_syscall_64+0xb6/0x230 [ 710.285384][T11207] do_syscall_64+0xf3/0x230 [ 710.285409][T11207] ? clear_bhb_loop+0x45/0xa0 [ 710.285434][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.285454][T11207] RIP: 0033:0x7fdf9d58d169 [ 710.285473][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.285491][T11207] RSP: 002b:00007fdf9e495038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 710.285513][T11207] RAX: ffffffffffffffda RBX: 00007fdf9d7a6080 RCX: 00007fdf9d58d169 [ 710.285528][T11207] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 710.285541][T11207] RBP: 00007fdf9e495090 R08: 0000000000000000 R09: 0000000000000000 [ 710.285554][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.285566][T11207] R13: 0000000000000000 R14: 00007fdf9d7a6080 R15: 00007ffead8ddf48 [ 710.285598][T11207] [ 710.904849][ T978] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 710.945073][ T978] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 711.011342][ T978] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 711.198914][ T978] usb 1-1: Product: syz [ 711.203368][ T978] usb 1-1: Manufacturer: syz [ 711.212246][ T978] usb 1-1: SerialNumber: syz [ 711.243473][ T978] usb 1-1: config 0 descriptor?? [ 711.282861][T11209] ip6t_srh: unknown srh invflags 7D00 [ 711.496431][ T978] usb 1-1: USB disconnect, device number 15 [ 711.808399][T11220] FAULT_INJECTION: forcing a failure. [ 711.808399][T11220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.821702][T11220] CPU: 1 UID: 0 PID: 11220 Comm: syz.2.1361 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 711.821729][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 711.821742][T11220] Call Trace: [ 711.821751][T11220] [ 711.821759][T11220] dump_stack_lvl+0x241/0x360 [ 711.821796][T11220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.821825][T11220] ? __pfx__printk+0x10/0x10 [ 711.821861][T11220] should_fail_ex+0x424/0x570 [ 711.821889][T11220] _copy_to_user+0x31/0xb0 [ 711.821917][T11220] simple_read_from_buffer+0xc4/0x170 [ 711.821938][T11220] proc_fail_nth_read+0x1ef/0x260 [ 711.821961][T11220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 711.822008][T11220] ? rw_verify_area+0x246/0x630 [ 711.822029][T11220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 711.822051][T11220] vfs_read+0x21f/0xb90 [ 711.822077][T11220] ? __pfx___mutex_lock+0x10/0x10 [ 711.822098][T11220] ? __pfx_vfs_read+0x10/0x10 [ 711.822122][T11220] ? __fget_files+0x2a/0x420 [ 711.822142][T11220] ? __fget_files+0x39d/0x420 [ 711.822159][T11220] ? __fget_files+0x2a/0x420 [ 711.822187][T11220] ksys_read+0x19d/0x2d0 [ 711.822211][T11220] ? __pfx_ksys_read+0x10/0x10 [ 711.822238][T11220] ? do_syscall_64+0xb6/0x230 [ 711.822259][T11220] do_syscall_64+0xf3/0x230 [ 711.822279][T11220] ? clear_bhb_loop+0x45/0xa0 [ 711.822299][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.822315][T11220] RIP: 0033:0x7f0e0d58bb7c [ 711.822330][T11220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 711.822344][T11220] RSP: 002b:00007f0e0e3a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 711.822361][T11220] RAX: ffffffffffffffda RBX: 00007f0e0d7a6160 RCX: 00007f0e0d58bb7c [ 711.822373][T11220] RDX: 000000000000000f RSI: 00007f0e0e3a60a0 RDI: 0000000000000006 [ 711.822383][T11220] RBP: 00007f0e0e3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 711.822394][T11220] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.822404][T11220] R13: 0000000000000000 R14: 00007f0e0d7a6160 R15: 00007ffebaa25ae8 [ 711.822435][T11220] [ 713.548195][T11230] 9pnet_rdma: rdma_create_trans (11230): problem binding to privport: 13 [ 716.137900][T11249] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 716.556567][T11240] openvswitch: netlink: Actions may not be safe on all matching packets [ 717.734380][T11258] ip6t_srh: unknown srh invflags 7D00 [ 718.067888][ T978] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 718.310734][T11272] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1374'. [ 718.321863][T11272] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1374'. [ 718.387404][T11272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1374'. [ 718.933675][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 718.967373][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.031186][ T978] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 719.077769][ T978] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 719.364854][ T978] usb 5-1: Product: syz [ 719.457912][ T978] usb 5-1: SerialNumber: syz [ 719.492608][ T978] usb 5-1: config 0 descriptor?? [ 721.036084][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.077270][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.884749][ T978] usb 5-1: USB disconnect, device number 30 [ 722.962868][T11308] ip6t_srh: unknown srh invflags 7D00 [ 723.135521][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 723.586550][ T24] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 723.609812][ T24] usb 5-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 723.649227][ T24] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 723.688408][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 723.744855][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.006749][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.104397][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.286389][ T24] ath6kl: Failed to submit usb control message: -71 [ 724.293626][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 724.700660][ T24] ath6kl: Unable to send get target info: -71 [ 724.735250][ T24] ath6kl: Failed to init ath6kl core: -71 [ 724.833279][ T24] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 724.881580][ T24] usb 5-1: USB disconnect, device number 31 [ 725.081307][ T5823] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 725.305262][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 725.310745][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1389'. [ 725.319927][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 725.319981][ T5823] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 725.320007][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.323448][ T5823] usb 1-1: config 0 descriptor?? [ 725.403965][ T5823] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 725.551402][T11331] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 725.882077][T11309] input: syz0 as /devices/virtual/input/input11 [ 727.482433][ T5185] bcm5974 1-1:0.0: could not read from device [ 728.020264][ T5185] bcm5974 1-1:0.0: could not read from device [ 728.062845][ T5185] bcm5974 1-1:0.0: could not read from device [ 728.082124][T11353] ip6t_srh: unknown srh invflags 7D00 [ 728.091340][ T5823] usb 1-1: USB disconnect, device number 16 [ 728.447186][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1398'. [ 729.650129][T11358] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 729.660160][T11367] FAULT_INJECTION: forcing a failure. [ 729.660160][T11367] name failslab, interval 1, probability 0, space 0, times 0 [ 729.726961][T11358] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1399'. [ 729.727328][T11367] CPU: 0 UID: 0 PID: 11367 Comm: syz.3.1400 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 729.727361][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 729.727377][T11367] Call Trace: [ 729.727388][T11367] [ 729.727453][T11367] dump_stack_lvl+0x241/0x360 [ 729.727494][T11367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.727526][T11367] ? __pfx__printk+0x10/0x10 [ 729.727554][T11367] ? __lock_acquire+0xad5/0xd80 [ 729.727589][T11367] should_fail_ex+0x424/0x570 [ 729.727620][T11367] should_failslab+0xac/0x100 [ 729.727645][T11367] kmem_cache_alloc_noprof+0x78/0x390 [ 729.727666][T11367] ? skb_clone+0x20c/0x390 [ 729.727698][T11367] skb_clone+0x20c/0x390 [ 729.727727][T11367] __netlink_deliver_tap+0x3c4/0x7f0 [ 729.727774][T11367] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.727803][T11367] netlink_deliver_tap+0x19d/0x1b0 [ 729.727835][T11367] netlink_unicast+0x7c6/0x9a0 [ 729.727875][T11367] ? __pfx_netlink_unicast+0x10/0x10 [ 729.727906][T11367] ? skb_put+0x114/0x1f0 [ 729.727932][T11367] netlink_sendmsg+0x8c3/0xcd0 [ 729.727980][T11367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.728027][T11367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.728055][T11367] __sock_sendmsg+0x221/0x270 [ 729.728089][T11367] ____sys_sendmsg+0x523/0x860 [ 729.728125][T11367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.728146][T11367] ? __fget_files+0x2a/0x420 [ 729.728176][T11367] ? __fget_files+0x2a/0x420 [ 729.728213][T11367] __sys_sendmsg+0x271/0x360 [ 729.728244][T11367] ? __pfx___sys_sendmsg+0x10/0x10 [ 729.728333][T11367] ? do_syscall_64+0xb6/0x230 [ 729.728363][T11367] do_syscall_64+0xf3/0x230 [ 729.728391][T11367] ? clear_bhb_loop+0x45/0xa0 [ 729.728443][T11367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.728466][T11367] RIP: 0033:0x7fda9058d169 [ 729.728487][T11367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.728507][T11367] RSP: 002b:00007fda914c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.728533][T11367] RAX: ffffffffffffffda RBX: 00007fda907a5fa0 RCX: 00007fda9058d169 [ 729.728558][T11367] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 729.728573][T11367] RBP: 00007fda914c5090 R08: 0000000000000000 R09: 0000000000000000 [ 729.728588][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.728602][T11367] R13: 0000000000000000 R14: 00007fda907a5fa0 R15: 00007ffc9dfc6ef8 [ 729.728637][T11367] [ 729.728820][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 731.216861][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 731.432954][T11385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 731.664830][T11388] bond1: (slave geneve2): Opening slave failed [ 731.707117][T11392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1408'. [ 733.527616][T11391] delete_channel: no stack [ 733.622841][ T5823] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 733.758330][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 734.413928][ T5823] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 734.422672][ T5823] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 734.443642][ T5823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 734.452852][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 734.505872][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 734.537756][ T5823] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 734.691881][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 734.814633][ T5823] usb 1-1: Product: syz [ 734.845380][ T5823] usb 1-1: Manufacturer: syz [ 735.004293][ T5823] cdc_wdm 1-1:1.0: skipping garbage [ 735.009563][ T5823] cdc_wdm 1-1:1.0: skipping garbage [ 735.024853][ T5823] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 735.030840][ T5823] cdc_wdm 1-1:1.0: Unknown control protocol [ 736.102026][ T30] audit: type=1400 audit(1744079092.283:97): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=11404 comm="syz.0.1412" path="pipe:[4116]" dev="pipefs" ino=4116 [ 736.109663][ T5919] usb 1-1: USB disconnect, device number 17 [ 736.121408][ T30] audit: type=1400 audit(1744079092.283:98): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=11404 comm="syz.0.1412" path="/proc/995/task/996/attr/current" dev="proc" ino=26962 [ 736.448089][T11421] FAULT_INJECTION: forcing a failure. [ 736.448089][T11421] name failslab, interval 1, probability 0, space 0, times 0 [ 736.494244][T11421] CPU: 1 UID: 0 PID: 11421 Comm: syz.1.1417 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 736.494274][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 736.494287][T11421] Call Trace: [ 736.494295][T11421] [ 736.494304][T11421] dump_stack_lvl+0x241/0x360 [ 736.494340][T11421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.494368][T11421] ? __pfx__printk+0x10/0x10 [ 736.494399][T11421] ? __pfx___might_resched+0x10/0x10 [ 736.494429][T11421] should_fail_ex+0x424/0x570 [ 736.494455][T11421] should_failslab+0xac/0x100 [ 736.494478][T11421] kmem_cache_alloc_noprof+0x78/0x390 [ 736.494498][T11421] ? __anon_vma_prepare+0x117/0x4a0 [ 736.494527][T11421] __anon_vma_prepare+0x117/0x4a0 [ 736.494569][T11421] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 736.494593][T11421] handle_pte_fault+0x518f/0x61c0 [ 736.494636][T11421] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 736.494671][T11421] ? __pfx_handle_pte_fault+0x10/0x10 [ 736.494697][T11421] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 736.494725][T11421] ? __lock_acquire+0xad5/0xd80 [ 736.494759][T11421] ? do_raw_spin_lock+0x151/0x370 [ 736.494796][T11421] ? do_raw_spin_unlock+0x13c/0x8b0 [ 736.494830][T11421] ? _raw_spin_unlock+0x28/0x50 [ 736.494849][T11421] ? __pmd_alloc+0x37f/0x440 [ 736.494874][T11421] ? __pfx___pmd_alloc+0x10/0x10 [ 736.494908][T11421] handle_mm_fault+0x1030/0x1aa0 [ 736.494959][T11421] ? __pfx_handle_mm_fault+0x10/0x10 [ 736.495009][T11421] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 736.495035][T11421] exc_page_fault+0x2bb/0x920 [ 736.495068][T11421] asm_exc_page_fault+0x26/0x30 [ 736.495088][T11421] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 736.495120][T11421] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 736.495139][T11421] RSP: 0018:ffffc90003d0fda8 EFLAGS: 00050206 [ 736.495159][T11421] RAX: ffffffff84fd032f RBX: 0000200000000005 RCX: 0000000000000005 [ 736.495174][T11421] RDX: 0000000000000000 RSI: ffff888028cb31fb RDI: 0000200000000000 [ 736.495188][T11421] RBP: ffffc90003d0ff00 R08: ffff888028cb31ff R09: 1ffff1100519663f [ 736.495204][T11421] R10: dffffc0000000000 R11: ffffed1005196640 R12: 0000000000000005 [ 736.495218][T11421] R13: 00007ffffffff000 R14: ffff888028cb31fb R15: 0000200000000000 [ 736.495242][T11421] ? _copy_from_user+0x5f/0xb0 [ 736.495293][T11421] _copy_to_user+0x8b/0xb0 [ 736.495325][T11421] __se_sys_getcwd+0x579/0x760 [ 736.495354][T11421] ? __se_sys_getcwd+0xca/0x760 [ 736.495385][T11421] ? __pfx___se_sys_getcwd+0x10/0x10 [ 736.495412][T11421] ? ksys_write+0x275/0x2d0 [ 736.495453][T11421] ? do_syscall_64+0xb6/0x230 [ 736.495498][T11421] do_syscall_64+0xf3/0x230 [ 736.495524][T11421] ? clear_bhb_loop+0x45/0xa0 [ 736.495549][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.495569][T11421] RIP: 0033:0x7fb537f8d169 [ 736.495587][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.495604][T11421] RSP: 002b:00007fb535df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 736.495624][T11421] RAX: ffffffffffffffda RBX: 00007fb5381a5fa0 RCX: 00007fb537f8d169 [ 736.495640][T11421] RDX: 0000000000000000 RSI: 00000000000000b3 RDI: 0000200000000000 [ 736.495653][T11421] RBP: 00007fb535df6090 R08: 0000000000000000 R09: 0000000000000000 [ 736.495667][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.495680][T11421] R13: 0000000000000001 R14: 00007fb5381a5fa0 R15: 00007ffda2f8c868 [ 736.495713][T11421] [ 737.387679][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 737.796298][T11429] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1420'. [ 738.692333][T11444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.035989][ T52] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 742.532288][ T52] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 742.557155][ T52] usb 3-1: config 0 has no interface number 0 [ 742.568500][ T52] usb 3-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 742.648189][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 742.681887][ T52] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6 [ 742.720290][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.729620][ T52] usb 3-1: Product: syz [ 742.747718][ T52] usb 3-1: Manufacturer: syz [ 742.758953][ T52] usb 3-1: SerialNumber: syz [ 742.806281][ T52] usb 3-1: config 0 descriptor?? [ 742.816470][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 742.826899][T11482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.839581][ T5882] usb 4-1: config 0 has no interfaces? [ 742.847983][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 742.872453][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 742.934738][ T5882] usb 4-1: Product: syz [ 742.955221][ T5882] usb 4-1: SerialNumber: syz [ 742.994282][ T5882] usb 4-1: config 0 descriptor?? [ 743.984126][ T5919] usb 3-1: USB disconnect, device number 23 [ 746.793018][ T52] usb 4-1: USB disconnect, device number 24 [ 747.910368][T11535] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 747.970128][T11535] overlayfs: missing 'lowerdir' [ 749.519407][ T52] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 749.722590][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 749.750180][ T52] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 749.768316][T11551] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 749.780088][ T52] usb 2-1: config 0 has no interface number 0 [ 749.816073][ T52] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.867755][T11551] syz_tun: entered promiscuous mode [ 749.879595][ T52] usb 2-1: config 0 interface 85 has no altsetting 0 [ 749.915138][T11551] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 749.924752][ T52] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 749.956213][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.004909][ T52] usb 2-1: Product: syz [ 750.032098][ T52] usb 2-1: Manufacturer: syz [ 750.055530][ T52] usb 2-1: SerialNumber: syz [ 750.092393][ T52] usb 2-1: config 0 descriptor?? [ 750.378971][T11558] FAULT_INJECTION: forcing a failure. [ 750.378971][T11558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.392344][T11558] CPU: 0 UID: 0 PID: 11558 Comm: syz.4.1457 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 750.392374][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 750.392388][T11558] Call Trace: [ 750.392404][T11558] [ 750.392412][T11558] dump_stack_lvl+0x241/0x360 [ 750.392449][T11558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.392478][T11558] ? __pfx__printk+0x10/0x10 [ 750.392519][T11558] should_fail_ex+0x424/0x570 [ 750.392548][T11558] strncpy_from_user+0x36/0x280 [ 750.392573][T11558] getname_flags+0xf0/0x530 [ 750.392602][T11558] do_sys_openat2+0xbf/0x1d0 [ 750.392628][T11558] ? __pfx_do_sys_openat2+0x10/0x10 [ 750.392650][T11558] ? __fget_files+0x2a/0x420 [ 750.392678][T11558] ? __fget_files+0x2a/0x420 [ 750.392708][T11558] __x64_sys_openat+0x249/0x2a0 [ 750.392735][T11558] ? __pfx___x64_sys_openat+0x10/0x10 [ 750.392770][T11558] ? do_syscall_64+0xb6/0x230 [ 750.392799][T11558] do_syscall_64+0xf3/0x230 [ 750.392825][T11558] ? clear_bhb_loop+0x45/0xa0 [ 750.392850][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.392870][T11558] RIP: 0033:0x7fdf9d58d169 [ 750.392889][T11558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.392908][T11558] RSP: 002b:00007fdf9e495038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 750.392930][T11558] RAX: ffffffffffffffda RBX: 00007fdf9d7a6080 RCX: 00007fdf9d58d169 [ 750.392946][T11558] RDX: 0000000000020000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 750.392961][T11558] RBP: 00007fdf9e495090 R08: 0000000000000000 R09: 0000000000000000 [ 750.392975][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.392988][T11558] R13: 0000000000000000 R14: 00007fdf9d7a6080 R15: 00007ffead8ddf48 [ 750.393020][T11558] [ 751.020289][ T52] appletouch 2-1:0.85: Geyser mode initialized. [ 751.077538][ T52] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input13 [ 751.099357][ C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 751.614432][ T52] usb 2-1: USB disconnect, device number 21 [ 752.239282][ T52] appletouch 2-1:0.85: input: appletouch disconnected [ 753.349266][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 753.499993][ T52] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 754.406247][T11598] FAULT_INJECTION: forcing a failure. [ 754.406247][T11598] name failslab, interval 1, probability 0, space 0, times 0 [ 754.502974][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.4.1469 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 754.503006][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 754.503019][T11598] Call Trace: [ 754.503028][T11598] [ 754.503037][T11598] dump_stack_lvl+0x241/0x360 [ 754.503074][T11598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.503103][T11598] ? __pfx__printk+0x10/0x10 [ 754.503135][T11598] ? __pfx___might_resched+0x10/0x10 [ 754.503165][T11598] should_fail_ex+0x424/0x570 [ 754.503193][T11598] should_failslab+0xac/0x100 [ 754.503216][T11598] __kmalloc_noprof+0xdf/0x4d0 [ 754.503237][T11598] ? tomoyo_encode+0x26f/0x540 [ 754.503263][T11598] tomoyo_encode+0x26f/0x540 [ 754.503291][T11598] tomoyo_realpath_from_path+0x59e/0x5e0 [ 754.503327][T11598] tomoyo_mount_permission+0x3cb/0xbd0 [ 754.503368][T11598] ? tomoyo_mount_permission+0x29d/0xbd0 [ 754.503404][T11598] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 754.503497][T11598] security_sb_mount+0xe0/0x2f0 [ 754.503525][T11598] path_mount+0xb9/0xfa0 [ 754.503545][T11598] ? kmem_cache_free+0x197/0x410 [ 754.503566][T11598] ? user_path_at+0x44/0x60 [ 754.503602][T11598] __se_sys_mount+0x38c/0x400 [ 754.503633][T11598] ? __pfx___se_sys_mount+0x10/0x10 [ 754.503664][T11598] ? __x64_sys_mount+0x20/0xc0 [ 754.503690][T11598] do_syscall_64+0xf3/0x230 [ 754.503717][T11598] ? clear_bhb_loop+0x45/0xa0 [ 754.503742][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.503762][T11598] RIP: 0033:0x7fdf9d58d169 [ 754.503781][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.503800][T11598] RSP: 002b:00007fdf9e4b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.503823][T11598] RAX: ffffffffffffffda RBX: 00007fdf9d7a5fa0 RCX: 00007fdf9d58d169 [ 754.503839][T11598] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 754.503853][T11598] RBP: 00007fdf9e4b6090 R08: 00002000000003c0 R09: 0000000000000000 [ 754.503867][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.503880][T11598] R13: 0000000000000000 R14: 00007fdf9d7a5fa0 R15: 00007ffead8ddf48 [ 754.503912][T11598] [ 754.508748][T11598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 754.844944][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 754.970094][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 765.798956][T11695] lo speed is unknown, defaulting to 1000 [ 768.934450][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 768.940813][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 770.797644][T11733] only policy match revision 0 supported [ 770.797744][T11733] unable to load match [ 770.820218][T11733] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1504'. [ 773.049447][ T5880] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 773.237182][ T5880] usb 2-1: too many configurations: 253, using maximum allowed: 8 [ 776.632289][ T5919] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 776.877032][ T5919] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 776.896121][ T5880] usb 2-1: string descriptor 0 read error: -71 [ 776.923088][ T5880] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 776.934816][ T5919] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 776.993819][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.012500][ T5880] usb 2-1: can't set config #1, error -71 [ 777.028929][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 777.048216][ T5880] usb 2-1: USB disconnect, device number 23 [ 777.159575][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.396546][T11796] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 777.426713][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 778.239214][ T5919] usb 4-1: USB disconnect, device number 25 [ 778.519866][T11810] lo speed is unknown, defaulting to 1000 [ 783.206028][T11859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1532'. [ 786.282153][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 787.684857][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 787.888314][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 787.927080][ T24] usb 4-1: config 0 has no interfaces? [ 787.948183][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 787.997088][ T24] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 788.032076][ T24] usb 4-1: Product: syz [ 788.036383][ T24] usb 4-1: SerialNumber: syz [ 788.092364][ T24] usb 4-1: config 0 descriptor?? [ 788.452024][T11921] FAULT_INJECTION: forcing a failure. [ 788.452024][T11921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.547723][T11923] siw: device registration error -23 [ 789.217195][T11921] CPU: 1 UID: 0 PID: 11921 Comm: syz.0.1543 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 789.217225][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 789.217239][T11921] Call Trace: [ 789.217248][T11921] [ 789.217257][T11921] dump_stack_lvl+0x241/0x360 [ 789.217294][T11921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 789.217324][T11921] ? __pfx__printk+0x10/0x10 [ 789.217365][T11921] should_fail_ex+0x424/0x570 [ 789.217393][T11921] _copy_to_user+0x31/0xb0 [ 789.217426][T11921] simple_read_from_buffer+0xc4/0x170 [ 789.217454][T11921] proc_fail_nth_read+0x1ef/0x260 [ 789.217485][T11921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.217516][T11921] ? rw_verify_area+0x246/0x630 [ 789.217551][T11921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.217580][T11921] vfs_read+0x21f/0xb90 [ 789.217614][T11921] ? __pfx___mutex_lock+0x10/0x10 [ 789.217641][T11921] ? __pfx_vfs_read+0x10/0x10 [ 789.217673][T11921] ? __fget_files+0x2a/0x420 [ 789.217698][T11921] ? __fget_files+0x39d/0x420 [ 789.217718][T11921] ? __fget_files+0x2a/0x420 [ 789.217752][T11921] ksys_read+0x19d/0x2d0 [ 789.217783][T11921] ? __pfx_ksys_read+0x10/0x10 [ 789.217812][T11921] ? rcu_is_watching+0x15/0xb0 [ 789.217838][T11921] ? trace_sys_enter+0x25/0x120 [ 789.217867][T11921] do_syscall_64+0xf3/0x230 [ 789.217892][T11921] ? clear_bhb_loop+0x45/0xa0 [ 789.217918][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.217939][T11921] RIP: 0033:0x7fe1bc78bb7c [ 789.217957][T11921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 789.217975][T11921] RSP: 002b:00007fe1bd6a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.217997][T11921] RAX: ffffffffffffffda RBX: 00007fe1bc9a5fa0 RCX: 00007fe1bc78bb7c [ 789.218014][T11921] RDX: 000000000000000f RSI: 00007fe1bd6a10a0 RDI: 0000000000000004 [ 789.218027][T11921] RBP: 00007fe1bd6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 789.218040][T11921] R10: 0000000040000032 R11: 0000000000000246 R12: 0000000000000001 [ 789.218053][T11921] R13: 0000000000000000 R14: 00007fe1bc9a5fa0 R15: 00007ffcf2146048 [ 789.218086][T11921] [ 790.996328][ T5883] usb 4-1: USB disconnect, device number 26 [ 791.050138][T11945] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1547'. [ 791.129120][T11945] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1547'. [ 791.677096][T11945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1547'. [ 795.621795][T11992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1560'. [ 798.610010][T12032] ip6t_srh: unknown srh invflags 7D00 [ 800.659474][ T30] audit: type=1326 audit(1744079152.672:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 800.685007][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 800.985941][ T30] audit: type=1326 audit(1744079152.672:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.007867][ T30] audit: type=1326 audit(1744079152.700:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.029907][ T30] audit: type=1326 audit(1744079152.700:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.059428][ T30] audit: type=1326 audit(1744079152.700:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.097732][ T30] audit: type=1326 audit(1744079152.700:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.121354][ T30] audit: type=1326 audit(1744079152.700:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.143975][ T30] audit: type=1326 audit(1744079152.700:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.168001][ T30] audit: type=1326 audit(1744079152.700:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.482289][ T30] audit: type=1326 audit(1744079152.700:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9058d169 code=0x7ffc0000 [ 801.977877][T12070] syz.3.1584: attempt to access beyond end of device [ 801.977877][T12070] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 802.154091][T12070] EXT4-fs (loop7): unable to read superblock [ 802.423790][T12080] ip6t_srh: unknown srh invflags 7D00 [ 802.445183][T12079] syz.2.1572: attempt to access beyond end of device [ 802.445183][T12079] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 802.502932][T12079] FAT-fs (loop5): unable to read boot sector [ 803.079883][T12083] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 803.099321][T12083] : entered promiscuous mode [ 805.217542][ T5919] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 805.283018][T12116] syz_tun: Device is already in use. [ 805.408141][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 805.458955][ T5919] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 805.542370][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.649329][ T5919] usb 4-1: Product: syz [ 806.068143][ T5919] usb 4-1: Manufacturer: syz [ 806.128482][ T5919] usb 4-1: SerialNumber: syz [ 806.389051][T12124] ip6t_srh: unknown srh invflags 7D00 [ 806.685721][ T5919] usb 4-1: config 0 descriptor?? [ 807.048661][ T5919] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 807.065036][ T5919] usb 4-1: setting power ON [ 807.070156][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 807.218013][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.273800][ T5919] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 807.321612][ T5919] usb 4-1: media controller created [ 807.468731][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.572790][ T5919] usb 4-1: selecting invalid altsetting 6 [ 807.593156][ T5919] usb 4-1: digital interface selection failed (-22) [ 807.617795][ T5919] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 807.648573][ T5919] usb 4-1: setting power OFF [ 807.665072][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 807.684740][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 807.745718][ T5919] (NULL device *): no alternate interface [ 808.940935][ T5919] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 809.157049][ T52] usb 4-1: USB disconnect, device number 27 [ 809.647315][T12167] x_tables: duplicate underflow at hook 3 [ 809.658457][T12164] x_tables: duplicate underflow at hook 3 [ 810.210293][ T52] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 810.446189][T12175] ip6t_srh: unknown srh invflags 7D00 [ 810.523339][ T52] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 810.546797][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.567448][ T52] usb 3-1: config 0 descriptor?? [ 811.234298][ T52] usbhid 3-1:0.0: can't add hid device: -71 [ 811.256067][ T52] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 811.404398][ T52] usb 3-1: USB disconnect, device number 24 [ 813.960273][ T68] kworker/u8:4 (68) used greatest stack depth: 17848 bytes left [ 815.757159][T12238] netlink: 'syz.3.1627': attribute type 12 has an invalid length. [ 815.995309][T12238] netlink: 'syz.3.1627': attribute type 29 has an invalid length. [ 816.421003][T12238] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1627'. [ 816.492461][T12238] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1627'. [ 817.001300][T12256] ip6t_srh: unknown srh invflags 7D00 [ 818.916985][T12277] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 818.969227][T12283] netlink: 'syz.3.1638': attribute type 10 has an invalid length. [ 819.001011][T12283] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 819.493213][T12283] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 819.561168][T12280] lo speed is unknown, defaulting to 1000 [ 819.626833][T12282] bridge_slave_0: left allmulticast mode [ 819.682322][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 819.704524][T12282] bridge_slave_0: left promiscuous mode [ 819.723347][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.859913][T12282] bridge_slave_1: left allmulticast mode [ 819.877690][T12282] bridge_slave_1: left promiscuous mode [ 819.883480][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.933028][T12282] bond0: (slave bond_slave_0): Releasing backup interface [ 819.962495][T12282] bond0: (slave bond_slave_1): Releasing backup interface [ 820.023074][T12282] team0: Port device team_slave_0 removed [ 820.067371][T12282] team0: Port device team_slave_1 removed [ 820.078555][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.088460][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 820.088873][T12282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.119910][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.139944][T12282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.223374][T12282] bond0: (slave wlan1): Releasing backup interface [ 820.273940][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.312137][ T5883] lo speed is unknown, defaulting to 1000 [ 820.319109][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.396092][ T24] usb 4-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 820.419787][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.473405][ T24] usb 4-1: config 0 descriptor?? [ 822.637204][T12310] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1642'. [ 822.746692][ T24] ntrig 0003:1B96:000D.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000d] on usb-dummy_hcd.3-1/input0 [ 822.807955][T12310] syz_tun: left promiscuous mode [ 822.827210][ T24] usb 4-1: USB disconnect, device number 28 [ 822.991861][ T5880] kernel write not supported for file /1106/attr/fscreate (pid: 5880 comm: kworker/1:4) [ 823.027442][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.093054][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.306694][ T5880] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 825.716977][T12351] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 826.882544][T12365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.057124][ T24] sched: DL replenish lagged too much [ 940.186326][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 940.193318][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12229/1:b..l [ 940.201820][ C1] rcu: (detected by 1, t=10503 jiffies, g=46173, q=74 ncpus=2) [ 940.209480][ C1] task:syz.4.1624 state:R running task stack:22528 pid:12229 tgid:12229 ppid:5841 task_flags:0x400640 flags:0x00004002 [ 940.223795][ C1] Call Trace: [ 940.227103][ C1] [ 940.230055][ C1] __schedule+0x1b33/0x51f0 [ 940.234628][ C1] ? preempt_schedule_irq+0xfe/0x1c0 [ 940.239965][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 940.245189][ C1] ? __pfx___schedule+0x10/0x10 [ 940.250162][ C1] ? preempt_schedule_irq+0xf3/0x1c0 [ 940.255471][ C1] preempt_schedule_irq+0xfe/0x1c0 [ 940.260604][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 940.266374][ C1] irqentry_exit+0x5e/0x90 [ 940.270807][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 940.276319][ C1] RIP: 0010:lock_acquire+0x167/0x2f0 [ 940.281621][ C1] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 940.301241][ C1] RSP: 0018:ffffc900038ce1a8 EFLAGS: 00000206 [ 940.307333][ C1] RAX: bd5a98662bc4ea00 RBX: ffffffff8ed3dfe0 RCX: bd5a98662bc4ea00 [ 940.315349][ C1] RDX: 0000000000000000 RSI: ffffffff8e4ea087 RDI: ffffffff8ca0e1e0 [ 940.323421][ C1] RBP: ffffffff93657020 R08: 0000000000000000 R09: 0000000000000000 [ 940.331493][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 940.339478][ C1] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 940.347487][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 940.352626][ C1] ? shmem_file_write_iter+0xf9/0x120 [ 940.358020][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 940.363150][ C1] unwind_next_frame+0xd5/0x23b0 [ 940.368106][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 940.373242][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 940.378381][ C1] ? shmem_file_write_iter+0xf9/0x120 [ 940.383773][ C1] ? shmem_file_write_iter+0xf9/0x120 [ 940.389216][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 940.395397][ C1] arch_stack_walk+0x11e/0x150 [ 940.400191][ C1] ? shmem_file_write_iter+0xf9/0x120 [ 940.405613][ C1] stack_trace_save+0x11a/0x1d0 [ 940.410494][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 940.415905][ C1] save_stack+0xfc/0x1f0 [ 940.420179][ C1] ? __pfx_save_stack+0x10/0x10 [ 940.425055][ C1] ? post_alloc_hook+0x1f4/0x240 [ 940.430012][ C1] ? get_page_from_freelist+0x351d/0x36b0 [ 940.435753][ C1] ? __alloc_frozen_pages_noprof+0x211/0x5b0 [ 940.441763][ C1] ? alloc_pages_mpol+0x339/0x690 [ 940.446821][ C1] ? folio_alloc_mpol_noprof+0x36/0x70 [ 940.452297][ C1] ? shmem_alloc_and_add_folio+0x490/0x1070 [ 940.458206][ C1] ? shmem_get_folio_gfp+0x655/0x1800 [ 940.463595][ C1] ? shmem_write_begin+0x17e/0x3a0 [ 940.468722][ C1] ? generic_perform_write+0x329/0xa10 [ 940.474203][ C1] ? shmem_file_write_iter+0xf9/0x120 [ 940.479615][ C1] __set_page_owner+0x93/0x530 [ 940.484413][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 940.491033][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 940.496438][ C1] post_alloc_hook+0x1f4/0x240 [ 940.501242][ C1] get_page_from_freelist+0x351d/0x36b0 [ 940.506838][ C1] ? filemap_map_pages+0x230/0x1900 [ 940.512122][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 940.518052][ C1] ? prepare_alloc_pages+0x220/0x610 [ 940.523376][ C1] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 940.529212][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 940.535618][ C1] alloc_pages_mpol+0x339/0x690 [ 940.540545][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 940.545967][ C1] folio_alloc_mpol_noprof+0x36/0x70 [ 940.551284][ C1] shmem_alloc_and_add_folio+0x490/0x1070 [ 940.557043][ C1] ? shmem_huge_global_enabled+0x175/0x3b0 [ 940.562894][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 940.569085][ C1] ? shmem_allowable_huge_orders+0x200/0x430 [ 940.575093][ C1] shmem_get_folio_gfp+0x655/0x1800 [ 940.580350][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 940.586007][ C1] ? ktime_get_coarse_real_ts64_mg+0x57/0x220 [ 940.592099][ C1] shmem_write_begin+0x17e/0x3a0 [ 940.597064][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 940.602559][ C1] generic_perform_write+0x329/0xa10 [ 940.607876][ C1] ? ktime_get_coarse_real_ts64_mg+0x1c0/0x220 [ 940.614082][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 940.619911][ C1] ? __pfx_generic_write_checks+0x10/0x10 [ 940.625654][ C1] ? file_update_time+0x2ab/0x450 [ 940.630708][ C1] shmem_file_write_iter+0xf9/0x120 [ 940.635930][ C1] __kernel_write_iter+0x439/0x990 [ 940.641069][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 940.646897][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 940.652554][ C1] ? cgroup_freezing+0x20/0x350 [ 940.657432][ C1] ? cgroup_freezing+0x2a8/0x350 [ 940.662394][ C1] ? iov_iter_bvec+0x4e/0x180 [ 940.667121][ C1] dump_user_range+0x940/0xef0 [ 940.671933][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 940.677272][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 940.683888][ C1] ? __kmalloc_cache_noprof+0x236/0x370 [ 940.689455][ C1] ? dump_emit+0x99/0xd0 [ 940.693735][ C1] elf_core_dump+0x4098/0x4af0 [ 940.698560][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 940.703725][ C1] ? dump_vma_snapshot+0xc60/0x1180 [ 940.708950][ C1] ? up_write+0x1ab/0x590 [ 940.713351][ C1] ? rcu_read_lock_any_held+0xbb/0x160 [ 940.718833][ C1] ? 0xffffffffff600000 [ 940.723050][ C1] ? cgroup_freezing+0x20/0x350 [ 940.727938][ C1] do_coredump+0x22c3/0x3260 [ 940.732583][ C1] ? __pfx_do_coredump+0x10/0x10 [ 940.737668][ C1] ? proc_coredump_connector+0x1fe/0x6a0 [ 940.743320][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 940.749324][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 940.754536][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 940.759764][ C1] get_signal+0x13ed/0x1730 [ 940.764395][ C1] ? __pfx_get_signal+0x10/0x10 [ 940.769281][ C1] arch_do_signal_or_restart+0x98/0x840 [ 940.774849][ C1] ? rcu_is_watching+0x15/0xb0 [ 940.779629][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 940.785816][ C1] ? __bad_area_nosemaphore+0x451/0x770 [ 940.791388][ C1] ? irqentry_exit_to_user_mode+0x53/0x250 [ 940.797216][ C1] irqentry_exit_to_user_mode+0x7e/0x250 [ 940.802872][ C1] exc_page_fault+0x5f8/0x920 [ 940.807586][ C1] asm_exc_page_fault+0x26/0x30 [ 940.812451][ C1] RIP: 0033:0x7fdf9d58d171 [ 940.816881][ C1] RSP: 002b:000000000000a420 EFLAGS: 00010217 [ 940.822971][ C1] RAX: 0000000000000000 RBX: 00007fdf9d7a5fa0 RCX: 00007fdf9d58d169 [ 940.831134][ C1] RDX: 0000000000000000 RSI: 000000000000a420 RDI: 0000000000022080 [ 940.839116][ C1] RBP: 00007fdf9d60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 940.847185][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 940.855164][ C1] R13: 0000000000000000 R14: 00007fdf9d7a5fa0 R15: 00007ffead8ddf48 [ 940.863162][ C1] [ 940.866188][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g46173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 940.878530][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=62300 [ 940.886426][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g46173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 940.897796][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 940.907795][ C1] rcu: RCU grace-period kthread stack dump: [ 940.913689][ C1] task:rcu_preempt state:I stack:26952 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 940.925634][ C1] Call Trace: [ 940.928925][ C1] [ 940.931873][ C1] __schedule+0x1b33/0x51f0 [ 940.936422][ C1] ? schedule+0x163/0x360 [ 940.940783][ C1] ? __pfx___schedule+0x10/0x10 [ 940.945669][ C1] ? schedule+0x90/0x360 [ 940.949937][ C1] ? schedule+0x90/0x360 [ 940.954198][ C1] schedule+0x163/0x360 [ 940.958369][ C1] schedule_timeout+0x15b/0x2b0 [ 940.963242][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 940.968730][ C1] ? __pfx_process_timeout+0x10/0x10 [ 940.974045][ C1] ? prepare_to_swait_event+0x1e5/0x340 [ 940.979698][ C1] ? prepare_to_swait_event+0x308/0x340 [ 940.985278][ C1] rcu_gp_fqs_loop+0x2e1/0x1340 [ 940.990153][ C1] ? rcu_gp_init+0x1279/0x1690 [ 940.994937][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 940.999887][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 941.005806][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 941.011111][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 941.017038][ C1] ? finish_swait+0xdb/0x200 [ 941.021652][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 941.026867][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 941.031497][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 941.036994][ C1] ? __kthread_parkme+0x1a8/0x200 [ 941.042040][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 941.047254][ C1] kthread+0x7b7/0x940 [ 941.051347][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 941.056568][ C1] ? __pfx_kthread+0x10/0x10 [ 941.061179][ C1] ? __pfx_kthread+0x10/0x10 [ 941.065793][ C1] ? __pfx_kthread+0x10/0x10 [ 941.070406][ C1] ? __pfx_kthread+0x10/0x10 [ 941.075019][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 941.080231][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 941.085447][ C1] ? __pfx_kthread+0x10/0x10 [ 941.090057][ C1] ret_from_fork+0x4b/0x80 [ 941.094485][ C1] ? __pfx_kthread+0x10/0x10 [ 941.099114][ C1] ret_from_fork_asm+0x1a/0x30 [ 941.103916][ C1] [ 941.106954][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 941.113298][ C1] Sending NMI from CPU 1 to CPUs 0: [ 941.118543][ C0] NMI backtrace for cpu 0 [ 941.118562][ C0] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 941.118593][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 941.118604][ C0] RIP: 0010:__hrtimer_run_queues+0x48c/0xd40 [ 941.118627][ C0] Code: 7c 24 40 74 08 48 89 df e8 a1 53 7a 00 4c 8b 2b 4c 89 ff 48 8b b4 24 b0 00 00 00 e8 ee c7 7a 0a 0f 1f 44 00 00 e8 14 bb 12 00 <65> 8b 1d e1 e6 b4 11 bf 07 00 00 00 89 de e8 41 bf 12 00 83 fb 07 [ 941.118642][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00000006 [ 941.118658][ C0] RAX: ffffffff81b0894c RBX: ffff888022353368 RCX: ffff8880265bbc00 [ 941.118671][ C0] RDX: 0000000000010000 RSI: 0000000000000004 RDI: 0000000000000001 [ 941.118682][ C0] RBP: ffffc90000007ea0 R08: ffff8880b86276c3 R09: 1ffff110170c4ed8 [ 941.118695][ C0] R10: dffffc0000000000 R11: ffffed10170c4ed9 R12: 1ffff110170c4f03 [ 941.118708][ C0] R13: ffffffff8a1ecc60 R14: ffff888022353340 R15: ffff8880b86276c0 [ 941.118721][ C0] FS: 000055557cc38500(0000) GS:ffff888124fc9000(0000) knlGS:0000000000000000 [ 941.118736][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.118748][ C0] CR2: 00007ffc9dfc5fb8 CR3: 0000000065eb8000 CR4: 00000000003526f0 [ 941.118762][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 941.118772][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 941.118803][ C0] Call Trace: [ 941.118810][ C0] [ 941.118819][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 941.118878][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 941.118896][ C0] ? sched_clock_cpu+0x77/0x4d0 [ 941.118914][ C0] ? read_tsc+0x9/0x20 [ 941.118936][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 941.118965][ C0] hrtimer_interrupt+0x403/0xa40 [ 941.118997][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 941.119020][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 941.119039][ C0] [ 941.119044][ C0] [ 941.119051][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 941.119068][ C0] RIP: 0010:__kasan_check_byte+0x0/0x40 [ 941.119094][ C0] Code: e6 fe ff ff 48 ff c8 48 89 c3 e9 db fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 57 41 56 53 49 89 f6 49 89 ff e8 9c 17 00 00 89 c3 [ 941.119108][ C0] RSP: 0018:ffffc9000408f920 EFLAGS: 00000202 [ 941.119121][ C0] RAX: 0000000000000001 RBX: ffffffff8ed3dfe0 RCX: 0000000000000002 [ 941.119132][ C0] RDX: 0000000000000000 RSI: ffffffff823417c6 RDI: ffffffff8ed3dfe0 [ 941.119143][ C0] RBP: ffffffff93657020 R08: 0000000000000000 R09: 0000000000000000 [ 941.119154][ C0] R10: dffffc0000000000 R11: fffffbfff20bd6cf R12: 0000000000000000 [ 941.119165][ C0] R13: 0000000000000002 R14: ffffffff823417a9 R15: 0000000000000000 [ 941.119176][ C0] ? percpu_ref_put+0x19/0x180 [ 941.119196][ C0] ? percpu_ref_put+0x36/0x180 [ 941.119214][ C0] lock_acquire+0x89/0x2f0 [ 941.119233][ C0] ? percpu_ref_put+0x19/0x180 [ 941.119248][ C0] percpu_ref_put+0x36/0x180 [ 941.119263][ C0] ? percpu_ref_put+0x19/0x180 [ 941.119279][ C0] __memcg_slab_free_hook+0xa7/0x310 [ 941.119308][ C0] kfree+0x237/0x430 [ 941.119322][ C0] ? simple_xattrs_free+0x122/0x160 [ 941.119347][ C0] simple_xattrs_free+0x122/0x160 [ 941.119372][ C0] shmem_evict_inode+0x87f/0xa80 [ 941.119399][ C0] ? inode_wait_for_writeback+0x115/0x2c0 [ 941.119420][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 941.119447][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 941.119471][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 941.119494][ C0] evict+0x4f9/0x9b0 [ 941.119522][ C0] ? __pfx_evict+0x10/0x10 [ 941.119549][ C0] ? iput+0x713/0xa50 [ 941.119571][ C0] do_unlinkat+0x4a6/0x7b0 [ 941.119600][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 941.119627][ C0] ? strncpy_from_user+0x143/0x280 [ 941.119645][ C0] ? getname_flags+0x1e2/0x530 [ 941.119665][ C0] __x64_sys_unlink+0x47/0x50 [ 941.119707][ C0] do_syscall_64+0xf3/0x230 [ 941.119728][ C0] ? clear_bhb_loop+0x45/0xa0 [ 941.119746][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.119763][ C0] RIP: 0033:0x7fda9058c717 [ 941.119784][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.119799][ C0] RSP: 002b:00007ffc9dfc6188 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 941.119815][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda9058c717 [ 941.119827][ C0] RDX: 00007ffc9dfc61b0 RSI: 00007ffc9dfc6240 RDI: 00007ffc9dfc6240 [ 941.119839][ C0] RBP: 00007ffc9dfc6240 R08: 0000000000000000 R09: 0000000000000000 [ 941.119850][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc9dfc72d0 [ 941.119860][ C0] R13: 00007fda9060e08c R14: 00000000000c3d09 R15: 00007ffc9dfc7310 [ 941.119882][ C0]