last executing test programs: 2m38.510804323s ago: executing program 0 (id=1266): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x10000000, 0x6}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r3, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) mkdir(0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r6, &(0x7f0000000240)='./bus/file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r0, 0xa09, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80, 0x2) fcntl$getownex(r6, 0x10, &(0x7f0000000440)={0x0, 0x0}) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r10, r10, 0x0) statx(r5, &(0x7f00000028c0)='./file0\x00', 0x400, 0x8, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000000580)="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", 0x2000, &(0x7f0000002f80)={&(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x4d3eb836, {0x7, 0x29, 0x1, 0x11040020, 0xff, 0x7fff, 0xa, 0x9, 0x0, 0x0, 0x20, 0xfffffff2}}, &(0x7f0000000180)={0x18, 0x0, 0x8000000000000000, {0x4000000000000}}, &(0x7f0000000200)={0x18, 0x0, 0x5, {0xf}}, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x4, {0xe}}, &(0x7f0000000400)={0x18, 0x0, 0x3, {0x3ff}}, &(0x7f0000000480)={0x28, 0xfffffffffffffffe, 0x62, {{0xa, 0xa38b, 0x1, r8}}}, &(0x7f00000004c0)={0x60, 0x0, 0xd3, {{0xfffffffffffffe00, 0x200, 0x401, 0x7, 0x14f7, 0x2, 0x7}}}, &(0x7f0000002580)={0x18, 0x0, 0x4, {0xb}}, &(0x7f00000025c0)={0x11, 0x0, 0x0, {'\x00'}}, &(0x7f0000002600)={0x20, 0x0, 0xff, {0x0, 0xb}}, &(0x7f0000002640)={0x78, 0x0, 0x7fd, {0x3, 0x20000000, 0x0, {0x4, 0x3, 0x6, 0xbaf3, 0x2, 0x1, 0x5, 0x7, 0x3, 0x1000, 0xc1f, r10, r4, 0x10, 0x1}}}, &(0x7f00000026c0)={0x90, 0xffffffffffffffda, 0xfffffffffffffffc, {0x4, 0x0, 0x6, 0x0, 0x2, 0x5, {0x6, 0x0, 0x2, 0x5, 0x0, 0x7213, 0x2, 0x6, 0x4, 0x4000, 0x630, r3, r4, 0x0, 0x1}}}, &(0x7f0000002780)={0x110, 0xfffffffffffffffe, 0x1aa8a00, [{0x4, 0x32, 0x18, 0x1000, 'system.posix_acl_access\x00'}, {0x1, 0x414f8516, 0x2, 0x0, '-#'}, {0x4, 0x4, 0x1, 0x8, '*'}, {0x0, 0x6, 0x18, 0x5c4, 'system.posix_acl_access\x00'}, {0x1, 0x4, 0x0, 0x7}, {0x4, 0xee46, 0x1, 0x3, '+'}, {0x5, 0xfffffffffffffff7, 0xa, 0x1000, '-\'\'!\x9b[!\xb4)\''}]}, &(0x7f0000002a00)={0x328, 0x0, 0xfffffffffffffff4, [{{0x3, 0x2, 0x2, 0x8, 0x7, 0x5a3e, {0x1, 0xf2eb, 0x0, 0x8, 0x2, 0x7, 0x9, 0x9000, 0x67c, 0x6000, 0x2bb9bc00, r3, r4, 0xfffffff8, 0x8}}, {0x5, 0x4, 0x4, 0x0, '*$\\]'}}, {{0x3, 0x3, 0x1, 0x9, 0x2, 0x3, {0x4, 0x0, 0x200, 0x0, 0x3, 0x5, 0x9, 0x40000000, 0x6, 0xc000, 0x0, r3, r4, 0xfffffbff, 0xe}}, {0x3, 0xe, 0x4, 0x9, '\'[.+'}}, {{0x3, 0x3, 0x9, 0x7, 0x8, 0x9, {0x6, 0x800, 0xb5, 0x8000000000000001, 0x9, 0x0, 0xc, 0x3, 0x6, 0x8000, 0x5, r3, r4, 0x61ac, 0x7}}, {0x5, 0x3, 0x0, 0x10001}}, {{0x2, 0x0, 0x400000000000000, 0xe3b, 0x0, 0x4, {0x0, 0x7, 0x5, 0x0, 0x3, 0x7fffffff, 0x4, 0x3, 0x5, 0x4000, 0x1, r3, r4, 0x8, 0x7}}, {0x4, 0xffffffffffffff10, 0x1, 0x10000, '\\'}}, {{0x2, 0x3, 0xff, 0xfff, 0x3, 0x1526a026, {0x4, 0x100, 0x5, 0x5, 0x10, 0x10001, 0x7f, 0x3, 0xffff, 0xa000, 0x40, r11, r4, 0xe, 0x7}}, {0x4, 0x8000, 0x8, 0x101, 'ethtool\x00'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0xff, {{0x2, 0x0, 0xfffffffffffffffa, 0x2, 0x2, 0x5, {0x6, 0x200, 0x6, 0x1a4000000000, 0xe, 0x401, 0x1ff, 0x5, 0x8001, 0x1000, 0x5, r3, r4, 0x1, 0x9}}, {0x0, 0x4}}}, &(0x7f0000002e00)={0x20, 0x0, 0x1, {0x7, 0x4, 0x8000, 0x401}}, &(0x7f0000002e40)={0x130, 0x0, 0x9, {0x8, 0xde9, 0x0, '\x00', {0x40, 0x0, 0x8, 0x8, r3, r4, 0xc000, '\x00', 0x7ff, 0x1, 0x1, 0x7fffffffffffffff, {0xfffffffffffffffc, 0x9}, {0x6, 0x80}, {0x0, 0x9}, {0x5, 0x6}, 0x6, 0xfff, 0x2, 0x2}}}}) 2m38.456592576s ago: executing program 0 (id=1267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000166bc8ba296dbb5a11cda", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7b1, &(0x7f0000000080)={{@local, 0x200000}, @host, 0xa, 0x0, 0x0, 0x0, 0x3}) recvmmsg(r3, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x228200, 0x0) fgetxattr(r5, &(0x7f0000000240)=@random={'osx.', '[#\x00'}, &(0x7f00000003c0)=""/157, 0x9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000120018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) 2m36.846645099s ago: executing program 0 (id=1271): syz_open_dev$video4linux(&(0x7f0000000180), 0x10401, 0x189140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x6, &(0x7f00000000c0)={0x8000000000000001, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000003fc0)={{0x0, 0x0, 0x80}}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000040)='./file0\x00', 0x32e) 2m33.996318993s ago: executing program 0 (id=1283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0xeb5, 0x3, 0x0}) 2m33.182826603s ago: executing program 0 (id=1284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) write$eventfd(r1, &(0x7f0000000000), 0xfffffdef) r2 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) write$eventfd(r2, &(0x7f00000000c0), 0x8) 2m32.370676486s ago: executing program 0 (id=1291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000fd4000/0x3000)=nil, r4, 0xa, 0x11, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r8, 0x0, 0x12, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r8, 0x0, 0x13, r2, 0x0) mmap$KVM_VCPU(&(0x7f00004f0000/0x2000)=nil, 0x930, 0x0, 0x11, r2, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 2m32.369055507s ago: executing program 32 (id=1291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000fd4000/0x3000)=nil, r4, 0xa, 0x11, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r8, 0x0, 0x12, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r8, 0x0, 0x13, r2, 0x0) mmap$KVM_VCPU(&(0x7f00004f0000/0x2000)=nil, 0x930, 0x0, 0x11, r2, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 32.839760998s ago: executing program 4 (id=1619): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @raw_data="ed99b789a5c29f3c2df389a9314230196d5064616b9eaa45aa57ebc00eaea8292264ce1b5b6f63c9f4a83daf8925782bc662e139c1ef2babf074a4c41517100d8544dc498263d5289884f7b5eca9d79c843a47019a43770d63007cdad638dc5dbbd189e7bcd218085c7ce0d3cbeaf24944c0fdb384b4bcca5a976f5ff3be9e9abce33a737a1386eea0cbe0565bb53db31c5e6e16d03ebd5bcf0e40fb85811a2ce6f9dc736bcfa397b54ddf2b0b74872e938217dd366cd61a16c15d2bec63a99d2306629e8928b6f0"}) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_setup(0x81, &(0x7f0000000180)) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) unshare(0x8040100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x26e1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140), &(0x7f0000000500)={0x0, 0xfb, 0x7f, 0x2, 0x3, "72d078c76884c2c5e00197bdf87d25d2", "b37b438063e3cda5d8d2a5bb93568d8eb9e69d553a5e3681c50509c29d10ccbf4c30af74aab4da7734b73c48ea614d7728466f13895677645d3ca12c67ed21d1813b4dc82743aa167aef8510d0f65cb225d5f265b02214df2a084f1ed69b33d1206c3f58c719f4650767"}, 0x7f, 0x0) syz_fuse_handle_req(r2, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x441410}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {0x2}, {}, {}, {0x8, 0xfffffffe}}}}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file1/../file0/file0\x00', &(0x7f0000000580), &(0x7f00000005c0)='\x00', 0x1, 0x1) 31.446400881s ago: executing program 4 (id=1627): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x140d, 0x300, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e24, 0x2b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0202000310000000000000000000000005000500000000000a00000000000000fe8000000000030000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000700000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000"], 0x80}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0x0, @in6=@private2, 0x0, 0x0, 0x2}}, 0xe8) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, 0x0, 0x4000) 27.177915336s ago: executing program 4 (id=1636): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) set_mempolicy(0x3, &(0x7f0000000180)=0x10000000005, 0x80) r1 = syz_io_uring_setup(0xd3f, &(0x7f0000000500)={0x0, 0x6bfb, 0x0, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0xce3, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000"], 0x98}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000029000000040000010000000000000000180000000000000029000000040000003300000000000000"], 0x30}}], 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty}, 0x1c) listen(r8, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = accept(r8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000340)="80", 0x1, 0x0, 0x0, 0x0) recvfrom(r9, &(0x7f0000000100)=""/119, 0x77, 0x40000123, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.918904881s ago: executing program 4 (id=1640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000440)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r4, 0x0, &(0x7f0000000880)="910f88d6d6ba44d92cfa3cf95176156a3971f87e332bfad2bc4cefe940f58163b1a20de787ab2ad1f65c07f594a1b0ef9e16dfb1bf80a19abb5448137441954fc97dc74e6ad06b88038462039d49514e5e5d0e8738403db79dd2ddea039adfec64f4b0311bf9146689aa4510324d8c3041bac34b3b611bb7eda0d056bb37f0d111d941db22d65738c7edbf4f7a528989705ecf0d67661a2b7ffddc15472a725964f5119c1afaf658f5d7894d5e8e8a8813692aa177a0ddbe76", 0xb9, 0x24008090, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x28627, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r4, @void, @void, @value}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 25.143492793s ago: executing program 4 (id=1643): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x4c, r6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0x70, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000814}, 0x40480c0) 24.454446071s ago: executing program 4 (id=1645): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="ae8d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) ioctl$FICLONE(r5, 0x40049409, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x8f, 0x400, r3, 0x80000001, '\x00', 0x0, r5, 0x2, 0x2, 0x0, 0x5, @void, @value, @void, @value}, 0x50) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000500)=""/97, 0x4c}, {&(0x7f0000000780)=""/133, 0x95}, {&(0x7f0000000640)=""/52, 0x33}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000080)={0x4000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 11.346603807s ago: executing program 2 (id=1689): syz_open_dev$video4linux(&(0x7f0000000180), 0x10401, 0x189140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x6, &(0x7f00000000c0)={0x8000000000000001, 0x6}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000003fc0)={{0x0, 0x0, 0x80}}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000040)='./file0\x00', 0x32e) 8.919060315s ago: executing program 5 (id=1694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0xfefd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a99b456e37e1b5ed1edabafef4b5ad19179608dc711f4a5bdb452fdc342d051b4fbdaed8239a35ddcb8a1801", 0x6f}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000040)=0x10000) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.82271839s ago: executing program 2 (id=1695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000440)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)="910f88d6d6ba44d92cfa3cf95176156a3971f87e332bfad2bc4cefe940f58163b1a20de787ab2ad1f65c07f594a1b0ef9e16dfb1bf80a19abb5448137441954fc97dc74e6ad06b88038462039d49514e5e5d0e8738403db79dd2ddea039adfec64f4b0311bf9146689aa4510324d8c3041bac34b3b611bb7eda0d056bb37f0d111d941db22d65738c7edbf4f7a528989705ecf0d67661a2b7ffddc15472a725964f5119c1afaf658f5d7894d5e8e8a8813692aa177a0ddbe76", 0xb9, 0x24008090, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x28627, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.422835269s ago: executing program 33 (id=1645): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="ae8d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) ioctl$FICLONE(r5, 0x40049409, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x8f, 0x400, r3, 0x80000001, '\x00', 0x0, r5, 0x2, 0x2, 0x0, 0x5, @void, @value, @void, @value}, 0x50) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000500)=""/97, 0x4c}, {&(0x7f0000000780)=""/133, 0x95}, {&(0x7f0000000640)=""/52, 0x33}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000080)={0x4000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.412731378s ago: executing program 5 (id=1697): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000105e04f900000000000001090224020100000007090400000103000600092109000001220700090581030000030700"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x0, 0x2}, 0x20) r2 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x5676, &(0x7f0000000680)={0x0, 0x7de6, 0x800, 0x3, 0x3c8}, &(0x7f0000000700), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x1000) recvmsg$can_raw(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x120) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$vim2m(0x0, 0x0, 0x2) semtimedop(0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000840)=[{0x0}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xc8}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80105014, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x4, 0x0, "f700", '\x00\x00\a\x00', "03000800", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) socket$nl_generic(0x10, 0x3, 0x10) 7.146661864s ago: executing program 2 (id=1700): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="ae8d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x8f, 0x400, r3, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x5, @void, @value, @void, @value}, 0x50) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000500)=""/97, 0x4c}, {&(0x7f0000000780)=""/133, 0x95}, {&(0x7f0000000640)=""/52, 0x33}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000080)={0x4000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.107053095s ago: executing program 3 (id=1701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f52c10"]) 5.977346015s ago: executing program 2 (id=1702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) connect$ax25(r4, &(0x7f0000000180)={{0x3, @null, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000140)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 5.839693665s ago: executing program 3 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x7, &(0x7f0000000080)=[{0xf, 0x7, 0x4, 0x5}, {0x6, 0x8, 0xee, 0x101}, {0x100, 0x5, 0x1, 0x901}, {0x9, 0x7, 0x2, 0x80000000}, {0x100, 0xc, 0x40, 0x14f4}, {0xefd, 0x7, 0x5, 0x8000}, {0x2, 0x2, 0x5, 0x3}]}) r3 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008044) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="d2925bbb00"], 0x10) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x80082) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000"], 0x20}}, 0x0) shutdown(r4, 0x1) 5.498373388s ago: executing program 1 (id=1705): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="ae8d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x8f, 0x400, r3, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x5, @void, @value, @void, @value}, 0x50) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000500)=""/97, 0x4c}, {&(0x7f0000000780)=""/133, 0x95}, {&(0x7f0000000640)=""/52, 0x33}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.886317667s ago: executing program 2 (id=1706): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a30"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7f, 0x7f, 0x5, [@datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x7, 0x2}], "f3"}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x9}, @datasec={0x6, 0x4, 0x0, 0xf, 0x2, [{0x2, 0x4, 0xfffffffb}, {0x3, 0x0, 0x9}, {0x3, 0xfb, 0x4}, {0x3, 0xc, 0x4}], "a2f1"}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f00000004c0)=""/7, 0x9d, 0x7, 0x1, 0x1, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x9d, '\x00', r5, r6, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r3, 0x2) sendto$inet6(r3, &(0x7f0000000300)='|', 0x1, 0x24004894, &(0x7f0000000340)={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x1bc, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40483}, [@IFLA_VF_PORTS={0x19c, 0x18, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0xc0000}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "afefa57c0d004dbe37bf849d1b93ab9a"}, @IFLA_PORT_PROFILE={0x18, 0x2, '\\{-(],:/$\xa8,\x1a!++)]&\'\x00'}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c04fd11d54509cadb7090d4e72c99aa1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3e40b9d8aff4175e43353d7d8823a7f3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "17cd8e1873e70e32fb01ed089db270ca"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0xd}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa0}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ba0575269256c0b8a29cf4b293aa265a"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xd}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4f3bdac5221004da4fb275e631814a13"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ec1034e1449acfaa5b12239c5485eb08"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "21651ce2552e4dc2997eaf2bc3b5f332"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_PROFILE={0x8, 0x2, '.:\'\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d8ab3dd257908c221171e4d77f1a8a6"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "faff4b3ff9e728ba541af329094d4c2e"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'gretap\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6f3831c2a09b461e430a4ae22a66c8d8"}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x11}, 0x20000010) r7 = add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)="e551cea993cc0f48384b073d87255b1ad96815d8f372838cda5a40dad437259abf7ee59cdfe9bc3ac2e8a68e5fdee60a90343e86395eb01350e66088f1430715992a", 0x42, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000006c0), &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)="571d7b95f63c83aee54ce1de411ef4a81148625e899039b7867b367cb72dd0758a8fa9458d1d1ff53bc5b5a2c5579b51d7096667e8137204adc7b379cf48e78dc39b6ba3bbd19382e43e5e4f5479ee31a76d16b40d3dbe55b6a7f6d847c1722d097ec331b1f6caf2e1bd315fd0e4ca2e31f707384126ec6e9e52c0b8aacc2d1901481c", 0x83, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000008c0)={r7, r8}, &(0x7f0000000900)=""/234, 0xea, &(0x7f0000000a40)={&(0x7f0000000a00)={'crct10dif-pclmul\x00'}}) 4.051598548s ago: executing program 1 (id=1707): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, &(0x7f0000011080)) (fail_nth: 2) 3.991887365s ago: executing program 5 (id=1708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x8c9, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x43, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x1, 0x0, 0xc5ab6da2d654af4d}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40401) ioctl$BLKFRASET(r5, 0x1264, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = dup3(r6, r4, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r9 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f00000000c0)={0x1, 0xff, 0x1f, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 3.362567877s ago: executing program 1 (id=1709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000440)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)="910f88d6d6ba44d92cfa3cf95176156a3971f87e332bfad2bc4cefe940f58163b1a20de787ab2ad1f65c07f594a1b0ef9e16dfb1bf80a19abb5448137441954fc97dc74e6ad06b88038462039d49514e5e5d0e8738403db79dd2ddea039adfec64f4b0311bf9146689aa4510324d8c3041bac34b3b611bb7eda0d056bb37f0d111d941db22d65738c7edbf4f7a528989705ecf0d67661a2b7ffddc15472a725964f5119c1afaf658f5d7894d5e8e8a8813692aa177a0ddbe76", 0xb9, 0x24008090, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x28627, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.338565333s ago: executing program 2 (id=1710): syz_usb_connect(0x2, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000001c0007800c00040001000000000000000c000400ff01000000000000340009800800020001010000080001000200000008000200010000000800020051fe000008000100070000000800020006000000000000000000"], 0x64}}, 0x15acf9233ab8ee00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001700), 0x800, 0x0) r4 = syz_io_uring_setup(0x73fd, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000001080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x18ba, 0xf7c1, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) 2.73243698s ago: executing program 3 (id=1711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x52ba, &(0x7f0000000380), &(0x7f0000000340), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x13, 0x2000ac0a, r2) mount$binderfs(0x0, &(0x7f00000007c0)='./binderfs\x00', &(0x7f0000000800), 0x3, &(0x7f0000000dc0)={[{@max={'max', 0x3d, 0xfffffffffffffffb}}]}) 2.686119666s ago: executing program 1 (id=1712): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x5cf6, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x100, @private=0xa010100}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f0000000480)="1a00000082000000", 0x8) accept4(r1, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) mbind(&(0x7f0000460000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r6, 0x1000000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) listen(r4, 0x7) 2.550504315s ago: executing program 5 (id=1713): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000e00)=""/118, 0x76}, {&(0x7f00000024c0)=""/4084, 0xff4}, {&(0x7f0000000140)=""/117, 0x75}], 0x6}, 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioprio_get$uid(0x3, r2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.150770319s ago: executing program 1 (id=1714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf252d0000000c0005000203aaaaaaaaaaaa0a0001007770616e3000000008002f000300000008000200", @ANYRES32=0x0, @ANYBLOB="3d78e04d4a86918c3fead4a64bae2a25e77e78ae8b9263f78b293371"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x40084) 2.074029109s ago: executing program 5 (id=1715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) connect$ax25(r4, &(0x7f0000000180)={{0x3, @null, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000140)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 1.933170635s ago: executing program 1 (id=1716): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010ca1ff00000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) 1.801264005s ago: executing program 3 (id=1717): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x2000000, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x200000000000000, &(0x7f00000008c0)="b8"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) 342.649097ms ago: executing program 5 (id=1718): setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) timer_create(0xfffffffffffffffe, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x5c, 0xa, 0x0, "b75cbb1844038d2cd97c945462f31638b5394c00"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="84110000040000001c0012800b0001616373656300000c0002820003000e000000000000744e1eb352a4109e81cd0c3e69aad4ee74813f8a4d2c22218f0c3682e39c797b2439b1e5f923ed734fccdbc0cb047c3c7753b444021be8adb118362506c58d7e9be5331affd67708c95ee3f80f8a835e65651010195ee482ec989c896f5c51b801ff1fc65f10c8806da9b686aa593732e3a6744663fda7e14e85ce606b0ff474a85eac93caf818a71b406ddb3a4b9be16385512301812d3195a643fa80fc146d5d341738cf862a9aab480be22cf6f0fbb724682b72b5f13cd44fb41d942eae35742899f7e48a5746fd7d8db61843a881b3f1b4d917877d10a2e26d1ab001ae9d4f6ce146d154474af6391f112fa084e7d78b430bf3acf01da51f0948f3174acdcd9b995e905f6c36f78f3e232fe163d6961d7fe398777dcf699123d46607b3f2253c03a2f0199ddc26e08a80b721c703663af1d40e3d292e70001d490d388b8b4afac308ef9b17056e40dce04a75cd08c4c261fa22b56815b48b0a67688de5a95f61f7d6cb51a3ecaaabae579598c6eab90409ad27850725c587c6316de5c046c97682c66c855d0dd09dd1d92e2387410565c67f3875e8a9f68fbd70229f8edc8d70740480f920104cebdb39dc14b564"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare(0x40000000) 295.614593ms ago: executing program 3 (id=1719): r0 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x10000000, 0x10170, 0x2, 0x3de}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000600)=ANY=[@ANYBLOB='-rlimit -rdfa -devices -memory -hugetlb +blkio -pids -net_prio -io ', @ANYRES64=r1], 0x43) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT, @ANYBLOB="f7ff"]) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1300000065ffff0000a4a0b330303000"/29], 0x13) io_uring_enter(r0, 0x5b43, 0x0, 0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0x6) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0x801) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000008d269f6600020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003a305000100000000000c0002"], 0xc0}}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000440), &(0x7f0000000500)=0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESOCT=r5], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=1720): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) (async) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (async) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ink: 'syz.4.1002': attribute type 4 has an invalid length. [ 382.109717][ T9597] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1002'. [ 382.325142][ T5869] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 382.574824][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 382.599068][ T5869] usb 3-1: not running at top speed; connect to a high speed hub [ 382.704261][ T5869] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 382.712583][ T5869] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 382.721657][ T5869] usb 3-1: config 17 has no interface number 0 [ 382.727820][ T5869] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 382.748308][ T5869] usb 3-1: config 17 interface 8 has no altsetting 0 [ 382.760555][ T5869] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 382.770038][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.778218][ T5869] usb 3-1: Product: syz [ 382.782525][ T5869] usb 3-1: Manufacturer: syz [ 382.787363][ T5869] usb 3-1: SerialNumber: syz [ 383.923301][ T29] audit: type=1800 audit(1734661946.830:115): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1005" name="/" dev="fuse" ino=0 res=0 errno=0 [ 384.039359][ T9590] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 384.073050][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1000'. [ 384.156253][ T9590] team0: Port device geneve0 added [ 384.989557][ T9627] can0: slcan on ttyS3. [ 386.550406][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 386.668132][ T5869] usb 3-1: selecting invalid altsetting 0 [ 386.703884][ T5869] usb 3-1: USB disconnect, device number 27 [ 388.053772][ T9632] vlan2: entered allmulticast mode [ 388.234563][ T9632] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 388.357201][ T9654] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1015'. [ 388.921950][ T9627] can0 (unregistered): slcan off ttyS3. [ 389.120812][ T9656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1018'. [ 389.264744][ T9661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1018'. [ 390.428491][ T9680] »»»»»»: entered allmulticast mode [ 390.451233][ T9680] pimreg: entered allmulticast mode [ 390.773001][ T9685] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1027'. [ 391.437535][ T9698] lo: entered allmulticast mode [ 391.444085][ T9698] FAULT_INJECTION: forcing a failure. [ 391.444085][ T9698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.601348][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.4.1030 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 391.612076][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 391.622154][ T9698] Call Trace: [ 391.625444][ T9698] [ 391.628390][ T9698] dump_stack_lvl+0x241/0x360 [ 391.633091][ T9698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.638306][ T9698] ? __pfx__printk+0x10/0x10 [ 391.642916][ T9698] ? __pfx_lock_release+0x10/0x10 [ 391.647953][ T9698] ? __lock_acquire+0x1397/0x2100 [ 391.652995][ T9698] should_fail_ex+0x3b0/0x4e0 [ 391.657692][ T9698] _copy_from_user+0x2f/0xc0 [ 391.662304][ T9698] kstrtouint_from_user+0xc6/0x190 [ 391.667432][ T9698] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 391.673176][ T9698] ? __pfx_lock_acquire+0x10/0x10 [ 391.678234][ T9698] proc_fail_nth_write+0xaa/0x2d0 [ 391.683279][ T9698] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 391.689191][ T9698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 391.694850][ T9698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 391.700502][ T9698] vfs_write+0x2a3/0xd30 [ 391.704773][ T9698] ? __pfx_vfs_write+0x10/0x10 [ 391.709568][ T9698] ? __fget_files+0x2a/0x410 [ 391.714180][ T9698] ? __fget_files+0x395/0x410 [ 391.718871][ T9698] ? __fget_files+0x2a/0x410 [ 391.723484][ T9698] ksys_write+0x18f/0x2b0 [ 391.727835][ T9698] ? __pfx_ksys_write+0x10/0x10 [ 391.732710][ T9698] ? do_syscall_64+0x100/0x230 [ 391.737501][ T9698] ? do_syscall_64+0xb6/0x230 [ 391.742199][ T9698] do_syscall_64+0xf3/0x230 [ 391.746723][ T9698] ? clear_bhb_loop+0x35/0x90 [ 391.751413][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.757344][ T9698] RIP: 0033:0x7ffa2ad847df [ 391.761778][ T9698] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 391.781409][ T9698] RSP: 002b:00007ffa2bbba030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 391.789852][ T9698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa2ad847df [ 391.797837][ T9698] RDX: 0000000000000001 RSI: 00007ffa2bbba0a0 RDI: 0000000000000004 [ 391.805821][ T9698] RBP: 00007ffa2bbba090 R08: 0000000000000000 R09: 0000000000000000 [ 391.813810][ T9698] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 391.821800][ T9698] R13: 0000000000000000 R14: 00007ffa2af75fa0 R15: 00007ffd4b2ca4a8 [ 391.829810][ T9698] [ 391.832883][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.582651][ T29] audit: type=1326 audit(1734661954.931:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9711 comm="syz.4.1036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x0 [ 392.998543][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 393.573015][ T9733] team0 (unregistering): Port device team_slave_0 removed [ 393.670624][ T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 393.723277][ T9733] team0 (unregistering): Port device team_slave_1 removed [ 393.767517][ T9747] input: syz0 as /devices/virtual/input/input23 [ 393.869877][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 393.877673][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.909269][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.951686][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.987511][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.010071][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.504944][ T8] usb 1-1: config 0 descriptor?? [ 394.573532][ T5820] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 394.810747][ T5869] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 394.957421][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000B/input/input24 [ 395.128361][ T8] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 395.143632][ T5869] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 395.152895][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.163687][ T5869] usb 3-1: config 0 descriptor?? [ 395.194815][ T8] usb 1-1: USB disconnect, device number 37 [ 395.620912][ T5869] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 395.720970][ T9765] loop6: detected capacity change from 0 to 524287999 [ 395.835300][ T5869] playstation 0003:054C:0DF2.000C: Invalid reportID received, expected 9 got 0 [ 395.894186][ T5869] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 395.915160][ T5869] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 395.927295][ T5869] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 395.966676][ T5869] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 396.059182][ T5869] usb 3-1: USB disconnect, device number 28 [ 396.179182][ T5897] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 396.328745][ T5897] usb 1-1: device descriptor read/64, error -71 [ 396.596438][ T5897] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 396.789000][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 396.799156][ T5897] usb 1-1: device descriptor read/64, error -71 [ 396.916961][ T5897] usb usb1-port1: attempt power cycle [ 397.181829][ T9791] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 397.181829][ T9791] The task syz.3.1061 (9791) triggered the difference, watch for misbehavior. [ 397.932361][ T5897] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 397.954417][ T5897] usb 1-1: device descriptor read/8, error -71 [ 398.001850][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1064'. [ 398.011061][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 398.181491][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.204222][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.214093][ T5897] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 398.222105][ T8] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 398.231287][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.240731][ T8] usb 2-1: config 0 descriptor?? [ 398.246474][ T5897] usb 1-1: device descriptor read/8, error -71 [ 398.331542][ T9805] erofs (device erofs): cannot find valid erofs superblock [ 398.371042][ T5897] usb usb1-port1: unable to enumerate USB device [ 398.565325][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 398.697007][ T8] hid-rmi 0003:1532:011D.000D: unbalanced delimiter at end of report description [ 398.706624][ T8] hid-rmi 0003:1532:011D.000D: parse failed [ 398.712841][ T8] hid-rmi 0003:1532:011D.000D: probe with driver hid-rmi failed with error -22 [ 398.744740][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 398.751891][ T25] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 398.762567][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 398.774425][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 398.784480][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.794250][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 398.805671][ T25] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 398.815003][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.823012][ T25] usb 4-1: Product: syz [ 398.827162][ T25] usb 4-1: Manufacturer: syz [ 398.831781][ T25] usb 4-1: SerialNumber: syz [ 398.837748][ T25] usb 4-1: config 0 descriptor?? [ 398.843479][ T9791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 398.858551][ T25] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 398.865062][ T25] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 398.931061][ T5899] usb 2-1: USB disconnect, device number 26 [ 398.982055][ T25] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 399.265588][ T9819] loop6: detected capacity change from 0 to 524287999 [ 399.291880][ T9819] FAULT_INJECTION: forcing a failure. [ 399.291880][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 399.313832][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.2.1070 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 399.324544][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 399.334616][ T9819] Call Trace: [ 399.337906][ T9819] [ 399.340850][ T9819] dump_stack_lvl+0x241/0x360 [ 399.345554][ T9819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.350774][ T9819] ? __pfx__printk+0x10/0x10 [ 399.355385][ T9819] ? kmem_cache_alloc_noprof+0x48/0x380 [ 399.360959][ T9819] ? __pfx___might_resched+0x10/0x10 [ 399.366266][ T9819] ? 0xffffffffa00038c0 [ 399.370442][ T9819] should_fail_ex+0x3b0/0x4e0 [ 399.375152][ T9819] should_failslab+0xac/0x100 [ 399.379856][ T9819] ? alloc_empty_file+0x9e/0x1d0 [ 399.384806][ T9819] kmem_cache_alloc_noprof+0x70/0x380 [ 399.390207][ T9819] alloc_empty_file+0x9e/0x1d0 [ 399.394991][ T9819] path_openat+0x107/0x3590 [ 399.399521][ T9819] ? mark_lock+0x9a/0x360 [ 399.403868][ T9819] ? __pfx_stack_trace_save+0x10/0x10 [ 399.409283][ T9819] ? __lock_acquire+0x1397/0x2100 [ 399.414332][ T9819] ? __pfx_path_openat+0x10/0x10 [ 399.419309][ T9819] do_filp_open+0x27f/0x4e0 [ 399.423832][ T9819] ? __pfx_do_filp_open+0x10/0x10 [ 399.428869][ T9819] ? do_raw_spin_lock+0x14f/0x370 [ 399.433949][ T9819] do_sys_openat2+0x13e/0x1d0 [ 399.438642][ T9819] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.443852][ T9819] ? __fget_files+0x2a/0x410 [ 399.448459][ T9819] ? __fget_files+0x2a/0x410 [ 399.453067][ T9819] __x64_sys_openat+0x247/0x2a0 [ 399.457933][ T9819] ? __pfx___x64_sys_openat+0x10/0x10 [ 399.463325][ T9819] ? do_syscall_64+0x100/0x230 [ 399.468116][ T9819] ? do_syscall_64+0xb6/0x230 [ 399.472817][ T9819] do_syscall_64+0xf3/0x230 [ 399.477345][ T9819] ? clear_bhb_loop+0x35/0x90 [ 399.482036][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.487952][ T9819] RIP: 0033:0x7f4183384690 [ 399.492388][ T9819] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 399.512011][ T9819] RSP: 002b:00007f41840f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 399.520445][ T9819] RAX: ffffffffffffffda RBX: 0000000000122c42 RCX: 00007f4183384690 [ 399.528435][ T9819] RDX: 0000000000122c42 RSI: 00007f41840f5c10 RDI: 00000000ffffff9c [ 399.536422][ T9819] RBP: 00007f41840f5c10 R08: 0000000000000000 R09: 0023706f6f6c2f76 [ 399.544411][ T9819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 399.552394][ T9819] R13: 0000000000000000 R14: 00007f4183575fa0 R15: 00007ffc04926a98 [ 399.560397][ T9819] [ 400.788076][ T5868] usb 4-1: USB disconnect, device number 22 [ 401.309843][ T9832] FAULT_INJECTION: forcing a failure. [ 401.309843][ T9832] name failslab, interval 1, probability 0, space 0, times 0 [ 401.341394][ T9832] CPU: 0 UID: 0 PID: 9832 Comm: syz.3.1076 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 401.352076][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 401.362129][ T9832] Call Trace: [ 401.365397][ T9832] [ 401.368314][ T9832] dump_stack_lvl+0x241/0x360 [ 401.372983][ T9832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.378174][ T9832] ? __pfx__printk+0x10/0x10 [ 401.382755][ T9832] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 401.388638][ T9832] ? __pfx___might_resched+0x10/0x10 [ 401.393910][ T9832] should_fail_ex+0x3b0/0x4e0 [ 401.398574][ T9832] should_failslab+0xac/0x100 [ 401.403237][ T9832] ? __d_alloc+0x31/0x700 [ 401.407546][ T9832] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 401.413250][ T9832] __d_alloc+0x31/0x700 [ 401.417389][ T9832] d_alloc_parallel+0xdf/0x1600 [ 401.422253][ T9832] ? __asan_memset+0x23/0x50 [ 401.426841][ T9832] ? __asan_memset+0x23/0x50 [ 401.431418][ T9832] ? lockdep_init_map_type+0xa1/0x910 [ 401.436778][ T9832] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 401.442571][ T9832] ? __pfx_d_alloc_parallel+0x10/0x10 [ 401.447941][ T9832] ? __init_waitqueue_head+0xae/0x150 [ 401.453311][ T9832] __lookup_slow+0x117/0x3f0 [ 401.457893][ T9832] ? __pfx___lookup_slow+0x10/0x10 [ 401.462996][ T9832] ? __d_lookup+0x64/0x7b0 [ 401.467428][ T9832] lookup_slow+0x53/0x70 [ 401.471666][ T9832] link_path_walk+0x99b/0xea0 [ 401.476339][ T9832] __filename_parentat+0x2a7/0x740 [ 401.481445][ T9832] ? __pfx___filename_parentat+0x10/0x10 [ 401.487079][ T9832] ? __might_fault+0xaa/0x120 [ 401.491750][ T9832] do_rmdir+0x12c/0x580 [ 401.495909][ T9832] ? __virt_addr_valid+0x183/0x530 [ 401.501009][ T9832] ? __pfx_do_rmdir+0x10/0x10 [ 401.505673][ T9832] ? getname_flags+0x1e3/0x540 [ 401.510422][ T9832] __x64_sys_rmdir+0x47/0x50 [ 401.515003][ T9832] do_syscall_64+0xf3/0x230 [ 401.519499][ T9832] ? clear_bhb_loop+0x35/0x90 [ 401.524165][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.530051][ T9832] RIP: 0033:0x7fd099385d29 [ 401.534454][ T9832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.554047][ T9832] RSP: 002b:00007fd09a159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 401.562450][ T9832] RAX: ffffffffffffffda RBX: 00007fd099575fa0 RCX: 00007fd099385d29 [ 401.570404][ T9832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 401.578359][ T9832] RBP: 00007fd09a159090 R08: 0000000000000000 R09: 0000000000000000 [ 401.586315][ T9832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.594276][ T9832] R13: 0000000000000000 R14: 00007fd099575fa0 R15: 00007ffd416c5ef8 [ 401.602243][ T9832] [ 401.605303][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.323634][ T9852] Bluetooth: MGMT ver 1.23 [ 404.701175][ T9877] tmpfs: Cannot retroactively limit inodes [ 405.180598][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 405.287407][ T5899] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 405.352649][ T5897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 405.364613][ T5897] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 405.375482][ T5897] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 405.394948][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.412575][ T9881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 405.426167][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.472739][ T5899] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 405.579016][ T5899] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.596747][ T5899] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 405.680311][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.004176][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 407.040919][ T5868] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 407.184249][ T9915] block nbd3: shutting down sockets [ 407.201937][ T5868] usb 5-1: device descriptor read/64, error -71 [ 407.489686][ T5868] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 407.746683][ T5868] usb 5-1: device descriptor read/64, error -71 [ 407.839880][ T9920] FAULT_INJECTION: forcing a failure. [ 407.839880][ T9920] name failslab, interval 1, probability 0, space 0, times 0 [ 407.855902][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.2.1103 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 407.866623][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 407.876697][ T9920] Call Trace: [ 407.879993][ T9920] [ 407.882943][ T9920] dump_stack_lvl+0x241/0x360 [ 407.887650][ T9920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.892874][ T9920] ? __pfx__printk+0x10/0x10 [ 407.897490][ T9920] ? kmem_cache_alloc_noprof+0x48/0x380 [ 407.903067][ T9920] ? __pfx___might_resched+0x10/0x10 [ 407.908390][ T9920] should_fail_ex+0x3b0/0x4e0 [ 407.913090][ T9920] should_failslab+0xac/0x100 [ 407.917797][ T9920] ? mas_alloc_nodes+0x25b/0x7e0 [ 407.922760][ T9920] kmem_cache_alloc_noprof+0x70/0x380 [ 407.928165][ T9920] mas_alloc_nodes+0x25b/0x7e0 [ 407.932965][ T9920] mas_preallocate+0x575/0x8d0 [ 407.937757][ T9920] ? __pfx_mas_preallocate+0x10/0x10 [ 407.943074][ T9920] ? __mas_set_range+0x133/0x3c0 [ 407.948037][ T9920] __split_vma+0x302/0xc50 [ 407.952479][ T9920] ? mark_lock+0x9a/0x360 [ 407.956834][ T9920] ? __pfx___split_vma+0x10/0x10 [ 407.961805][ T9920] vms_gather_munmap_vmas+0x2e6/0x1600 [ 407.967311][ T9920] ? __pfx_lock_acquire+0x10/0x10 [ 407.972362][ T9920] ? bpf_trace_run4+0x244/0x590 [ 407.977241][ T9920] ? __pfx_lock_release+0x10/0x10 [ 407.982286][ T9920] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 407.988201][ T9920] ? copy_from_kernel_nofault+0x215/0x2e0 [ 407.993964][ T9920] ? bpf_trace_run4+0x244/0x590 [ 407.998847][ T9920] do_vmi_align_munmap+0x3ff/0x6f0 [ 408.003982][ T9920] ? __pfx_bpf_trace_run4+0x10/0x10 [ 408.009211][ T9920] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 408.014904][ T9920] ? mas_find+0x8c0/0xbb0 [ 408.019241][ T9920] do_vmi_munmap+0x24e/0x2d0 [ 408.023853][ T9920] __vm_munmap+0x24c/0x480 [ 408.028292][ T9920] ? __pfx___vm_munmap+0x10/0x10 [ 408.033268][ T9920] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 408.039622][ T9920] ? do_syscall_64+0x100/0x230 [ 408.044421][ T9920] __x64_sys_munmap+0x60/0x70 [ 408.049207][ T9920] do_syscall_64+0xf3/0x230 [ 408.053736][ T9920] ? clear_bhb_loop+0x35/0x90 [ 408.058431][ T9920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.064348][ T9920] RIP: 0033:0x7f4183385d29 [ 408.068783][ T9920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.088412][ T9920] RSP: 002b:00007f41840d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 408.096847][ T9920] RAX: ffffffffffffffda RBX: 00007f4183576080 RCX: 00007f4183385d29 [ 408.104833][ T9920] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffb000 [ 408.112819][ T9920] RBP: 00007f41840d5090 R08: 0000000000000000 R09: 0000000000000000 [ 408.120814][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.128800][ T9920] R13: 0000000000000001 R14: 00007f4183576080 R15: 00007ffc04926a98 [ 408.136808][ T9920] [ 408.139889][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.155754][ T5868] usb usb5-port1: attempt power cycle [ 408.186555][ T9879] [U] Ù [ 408.191608][ T5899] usb 2-1: string descriptor 0 read error: -71 [ 408.199973][ T5899] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 408.248483][ T5899] usb 2-1: USB disconnect, device number 27 [ 408.922272][ T5868] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 408.937250][ T5899] usb 4-1: USB disconnect, device number 23 [ 408.963467][ T5868] usb 5-1: device descriptor read/8, error -71 [ 409.554607][ T9938] FAULT_INJECTION: forcing a failure. [ 409.554607][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 409.567616][ T9938] CPU: 1 UID: 0 PID: 9938 Comm: syz.2.1109 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 409.578280][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 409.588343][ T9938] Call Trace: [ 409.591608][ T9938] [ 409.594525][ T9938] dump_stack_lvl+0x241/0x360 [ 409.599198][ T9938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.604383][ T9938] ? __pfx__printk+0x10/0x10 [ 409.608961][ T9938] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 409.614844][ T9938] ? __pfx___might_resched+0x10/0x10 [ 409.620119][ T9938] ? look_up_lock_class+0x77/0x170 [ 409.625219][ T9938] should_fail_ex+0x3b0/0x4e0 [ 409.629882][ T9938] should_failslab+0xac/0x100 [ 409.634548][ T9938] ? sock_alloc_inode+0x28/0xc0 [ 409.639391][ T9938] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 409.645101][ T9938] sock_alloc_inode+0x28/0xc0 [ 409.649765][ T9938] ? __pfx_sock_alloc_inode+0x10/0x10 [ 409.655120][ T9938] alloc_inode+0x65/0x1a0 [ 409.659447][ T9938] __sock_create+0x127/0xa30 [ 409.664041][ T9938] mptcp_subflow_create_socket+0x132/0xdf0 [ 409.669842][ T9938] ? mark_lock+0x9a/0x360 [ 409.674174][ T9938] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 409.680491][ T9938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.686805][ T9938] __mptcp_nmpc_sk+0x178/0x800 [ 409.691568][ T9938] ? __local_bh_enable_ip+0x168/0x200 [ 409.696935][ T9938] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 409.702213][ T9938] mptcp_bind+0xa5/0x1c0 [ 409.706447][ T9938] __sys_bind+0x1e4/0x290 [ 409.710763][ T9938] ? __pfx___sys_bind+0x10/0x10 [ 409.715610][ T9938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.721921][ T9938] ? do_syscall_64+0x100/0x230 [ 409.726674][ T9938] __x64_sys_bind+0x7a/0x90 [ 409.731162][ T9938] do_syscall_64+0xf3/0x230 [ 409.735650][ T9938] ? clear_bhb_loop+0x35/0x90 [ 409.740310][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.746190][ T9938] RIP: 0033:0x7f4183385d29 [ 409.750594][ T9938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.770185][ T9938] RSP: 002b:00007f41840f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 409.778589][ T9938] RAX: ffffffffffffffda RBX: 00007f4183575fa0 RCX: 00007f4183385d29 [ 409.786549][ T9938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 409.794508][ T9938] RBP: 00007f41840f6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.802481][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.810449][ T9938] R13: 0000000000000000 R14: 00007f4183575fa0 R15: 00007ffc04926a98 [ 409.818420][ T9938] [ 409.821726][ T9938] socket: no more sockets [ 411.685573][ T9952] FAULT_INJECTION: forcing a failure. [ 411.685573][ T9952] name failslab, interval 1, probability 0, space 0, times 0 [ 411.698630][ T9952] CPU: 1 UID: 0 PID: 9952 Comm: syz.0.1113 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 411.709325][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 411.719394][ T9952] Call Trace: [ 411.722687][ T9952] [ 411.725630][ T9952] dump_stack_lvl+0x241/0x360 [ 411.730332][ T9952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.735551][ T9952] ? __pfx__printk+0x10/0x10 [ 411.740172][ T9952] should_fail_ex+0x3b0/0x4e0 [ 411.744868][ T9952] should_failslab+0xac/0x100 [ 411.749569][ T9952] __kmalloc_noprof+0xdd/0x4c0 [ 411.754345][ T9952] ? io_cqring_event_overflow+0xd2/0x660 [ 411.759998][ T9952] io_cqring_event_overflow+0xd2/0x660 [ 411.765481][ T9952] io_req_cqe_overflow+0xf2/0x150 [ 411.770528][ T9952] __io_submit_flush_completions+0x2b7/0xd70 [ 411.776526][ T9952] ? io_req_defer_failed+0x624/0x8f0 [ 411.781836][ T9952] ? __pfx___io_submit_flush_completions+0x10/0x10 [ 411.788356][ T9952] ? io_submit_fail_init+0x3c8/0x5b0 [ 411.793670][ T9952] io_submit_sqes+0x18cd/0x1d60 [ 411.798574][ T9952] __se_sys_io_uring_enter+0x2c8/0x33b0 [ 411.804159][ T9952] ? __pfx___schedule+0x10/0x10 [ 411.809026][ T9952] ? __schedule+0x1803/0x4be0 [ 411.813720][ T9952] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.819720][ T9952] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 411.825728][ T9952] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.831725][ T9952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.838071][ T9952] ? irqentry_exit+0x63/0x90 [ 411.842680][ T9952] ? lockdep_hardirqs_on+0x99/0x150 [ 411.847912][ T9952] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 411.853480][ T9952] do_syscall_64+0xf3/0x230 [ 411.858002][ T9952] ? clear_bhb_loop+0x35/0x90 [ 411.862694][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.868605][ T9952] RIP: 0033:0x7f1f8bf85d29 [ 411.873031][ T9952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.892653][ T9952] RSP: 002b:00007f1f8cdae038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 411.901085][ T9952] RAX: ffffffffffffffda RBX: 00007f1f8c175fa0 RCX: 00007f1f8bf85d29 [ 411.909077][ T9952] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000012 [ 411.917065][ T9952] RBP: 00007f1f8cdae090 R08: 0000000000000000 R09: 0000000000000000 [ 411.925050][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.933037][ T9952] R13: 0000000000000000 R14: 00007f1f8c175fa0 R15: 00007ffe781211b8 [ 411.933509][ T9960] nfs: Unknown parameter '–2' [ 411.941022][ T9952] [ 412.034591][ T9947] bond0: option arp_interval: invalid value (18446744073255972452) [ 412.051720][ T9947] bond0: option arp_interval: allowed values 0 - 2147483647 [ 413.302091][ T5899] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 413.310063][ T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 413.714795][ T5899] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 413.724481][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.732510][ T5899] usb 4-1: Product: syz [ 413.736843][ T25] usb 1-1: device descriptor read/64, error -71 [ 413.776636][ T5899] usb 4-1: Manufacturer: syz [ 413.803813][ T5899] usb 4-1: SerialNumber: syz [ 413.823548][ T5899] usb 4-1: config 0 descriptor?? [ 413.855806][ T5899] ch341 4-1:0.0: ch341-uart converter detected [ 414.021863][ T25] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 414.040088][ T9997] binder: 9994:9997 ioctl c018620c 20001180 returned -22 [ 414.171364][ T25] usb 1-1: device descriptor read/64, error -71 [ 414.289210][ T25] usb usb1-port1: attempt power cycle [ 414.294761][ T46] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 414.319285][T10000] nfs: Unknown parameter '–2' [ 414.536126][ T46] usb 2-1: device descriptor read/64, error -71 [ 414.770895][ T25] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 414.952057][ T46] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 414.980839][ T25] usb 1-1: device descriptor read/8, error -71 [ 415.123321][ T46] usb 2-1: device descriptor read/64, error -71 [ 415.242022][ T25] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 415.266408][ T46] usb usb2-port1: attempt power cycle [ 415.283916][ T25] usb 1-1: device descriptor read/8, error -71 [ 415.400954][ T25] usb usb1-port1: unable to enumerate USB device [ 415.604339][ T5899] usb 4-1: failed to send control message: -110 [ 415.610707][ T5899] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 415.646735][ T46] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 416.085805][ T46] usb 2-1: device descriptor read/8, error -71 [ 416.339743][ T8] usb 4-1: USB disconnect, device number 24 [ 416.346752][ T8] ch341 4-1:0.0: device disconnected [ 416.470233][ T46] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 416.499391][ T46] usb 2-1: device descriptor read/8, error -71 [ 416.518129][ T29] audit: type=1326 audit(1734661977.324:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10030 comm="syz.3.1138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x0 [ 416.539150][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.761399][ T46] usb usb2-port1: unable to enumerate USB device [ 417.572481][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 419.743852][T10088] overlayfs: failed to resolve './file1': -2 [ 419.881066][T10087] can: request_module (can-proto-3) failed. [ 420.403983][T10079] mkiss: ax0: crc mode is auto. [ 420.564292][ T5869] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 420.832054][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.872503][ T5869] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.922566][T10105] IPv6: syztnl0: Disabled Multicast RS [ 420.947067][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.970545][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.989520][ T5869] usb 4-1: Product: syz [ 421.000311][ T5869] usb 4-1: Manufacturer: syz [ 421.013524][ T5869] usb 4-1: SerialNumber: syz [ 421.040400][ T5869] usb 4-1: bad CDC descriptors [ 421.184522][ T5868] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 421.271388][ T5869] usb 4-1: USB disconnect, device number 25 [ 421.302067][T10112] tmpfs: Cannot retroactively limit inodes [ 421.346932][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 421.582745][ T5868] usb 2-1: not running at top speed; connect to a high speed hub [ 421.827441][ T5868] usb 2-1: config 127 has an invalid interface number: 224 but max is 0 [ 421.897758][ T5868] usb 2-1: config 127 has no interface number 0 [ 421.904603][ T5868] usb 2-1: config 127 interface 224 has no altsetting 0 [ 421.954190][ T5868] usb 2-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=d9.1b [ 421.963374][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.973862][ T5868] usb 2-1: Product: syz [ 421.983225][ T5868] usb 2-1: Manufacturer: syz [ 421.994902][ T5868] usb 2-1: SerialNumber: syz [ 422.545987][ T5868] imon 2-1:127.224: unable to register, err -19 [ 422.555697][ T5868] usb 2-1: USB disconnect, device number 32 [ 423.632432][ T5868] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 424.765841][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 424.787420][ T5868] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 424.797071][ T29] audit: type=1326 audit(1734661985.060:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10144 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec7585d29 code=0x7ffc0000 [ 424.851251][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.888589][ T5868] usb 1-1: config 0 descriptor?? [ 425.977337][ T5868] gspca_main: sq930x-2.14.0 probing 041e:403c [ 426.519725][ T5868] gspca_sq930x: reg_r 001f failed -110 [ 426.526590][ T5868] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 426.541196][ T29] audit: type=1326 audit(1734661985.060:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10144 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec7585d29 code=0x7ffc0000 [ 426.615277][ T29] audit: type=1326 audit(1734661985.060:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10144 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fbec7585d29 code=0x7ffc0000 [ 426.636805][ T5899] usb 1-1: USB disconnect, device number 46 [ 426.946071][ T29] audit: type=1326 audit(1734661985.060:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10144 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec7585d29 code=0x7ffc0000 [ 427.164709][ T29] audit: type=1326 audit(1734661985.060:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10144 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec7585d29 code=0x7ffc0000 [ 427.167274][ T5868] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 427.288451][T10163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.298407][ T29] audit: type=1326 audit(1734661986.660:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183385d29 code=0x7ffc0000 [ 427.320758][ T29] audit: type=1326 audit(1734661986.660:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183385d29 code=0x7ffc0000 [ 427.343063][ T29] audit: type=1326 audit(1734661986.660:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4183385d29 code=0x7ffc0000 [ 427.354377][T10163] bond1: entered promiscuous mode [ 427.365137][ T29] audit: type=1326 audit(1734661986.660:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4183385d29 code=0x7ffc0000 [ 427.381074][T10163] bond0: (slave bond1): Enslaving as an active interface with an up link [ 427.391952][ T29] audit: type=1326 audit(1734661986.660:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4183385d29 code=0x7ffc0000 [ 428.006333][ T5897] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 428.364819][ T5897] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 428.390433][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.398472][ T5897] usb 2-1: Product: syz [ 428.423395][ T5897] usb 2-1: Manufacturer: syz [ 428.428032][ T5897] usb 2-1: SerialNumber: syz [ 428.450803][ T5897] usb 2-1: config 0 descriptor?? [ 428.461042][ T5897] ch341 2-1:0.0: ch341-uart converter detected [ 428.503928][T10185] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 428.532562][T10185] geneve0: entered promiscuous mode [ 428.565318][T10185] team0: Port device geneve0 removed [ 428.610926][T10185] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 428.771674][T10182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.924856][T10193] loop5: detected capacity change from 0 to 7 [ 429.931738][T10193] buffer_io_error: 4 callbacks suppressed [ 429.931755][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.154025][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.196661][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.204724][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.226402][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.242618][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.255983][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.265521][T10193] ldm_validate_partition_table(): Disk read failed. [ 430.278071][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.289078][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.308370][T10193] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.321945][T10193] Dev loop5: unable to read RDB block 0 [ 430.330413][T10193] loop5: unable to read partition table [ 430.342135][T10193] loop5: partition table beyond EOD, truncated [ 430.349866][T10193] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 430.349866][T10193] ) failed (rc=-5) [ 430.894827][ T5899] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 431.097246][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.113472][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.123701][ T5899] usb 3-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 431.135651][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.153467][ T5899] usb 3-1: Product: syz [ 431.157726][ T5899] usb 3-1: Manufacturer: syz [ 431.163238][ T5899] usb 3-1: SerialNumber: syz [ 431.187183][ T5899] usb 3-1: config 0 descriptor?? [ 431.682830][ T5897] usb 2-1: failed to send control message: -110 [ 431.689239][ T5897] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 431.748287][ T5897] usb 2-1: USB disconnect, device number 33 [ 431.781169][ T5897] ch341 2-1:0.0: device disconnected [ 431.859321][ T5899] snd_usb_podhd 3-1:0.0: Line 6 POD HDDESKTOP found [ 432.084601][ T5899] snd_usb_podhd 3-1:0.0: set_interface failed [ 432.091104][ T5899] snd_usb_podhd 3-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 432.098798][ T5899] snd_usb_podhd 3-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 432.153078][ T5899] usb 3-1: USB disconnect, device number 29 [ 432.174370][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 432.324004][ T8] usb 5-1: device descriptor read/64, error -71 [ 433.664422][T10235] x_tables: duplicate underflow at hook 1 [ 433.820643][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 433.971103][ T8] usb 5-1: device descriptor read/64, error -71 [ 434.131486][ T8] usb usb5-port1: attempt power cycle [ 435.231857][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 435.268594][ T8] usb 5-1: device descriptor read/8, error -71 [ 436.589878][ T5870] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 438.353532][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 438.363464][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.705017][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.717779][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.727892][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.737957][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.963001][ T5870] usb 3-1: string descriptor 0 read error: -71 [ 438.969662][ T5870] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.979094][ T5870] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 439.155965][ T5870] usb 3-1: config 0 descriptor?? [ 439.181032][ T5870] usb 3-1: can't set config #0, error -71 [ 439.545903][ T5870] usb 3-1: USB disconnect, device number 30 [ 441.279932][T10306] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 441.290821][T10306] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 442.127811][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 442.641694][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 442.673330][ T8] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 442.681446][ T8] usb 5-1: config 0 has no interface number 0 [ 442.898718][ T8] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 442.908062][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.916086][ T8] usb 5-1: Product: syz [ 442.920446][ T8] usb 5-1: Manufacturer: syz [ 442.925311][ T8] usb 5-1: SerialNumber: syz [ 442.933218][ T8] usb 5-1: config 0 descriptor?? [ 442.941199][ T8] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 443.265863][ T8] usb 5-1: qt2_attach - failed to power on unit: -71 [ 443.275586][ T8] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 443.286719][ T8] usb 5-1: USB disconnect, device number 25 [ 443.402119][ T5897] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 443.549207][ T5897] usb 4-1: device descriptor read/64, error -71 [ 444.323008][ T5897] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 444.468650][ T5897] usb 4-1: device descriptor read/64, error -71 [ 444.525632][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.532137][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.597213][ T5897] usb usb4-port1: attempt power cycle [ 444.992477][ T5897] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 445.025338][ T5897] usb 4-1: device descriptor read/8, error -71 [ 445.440229][ T5897] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 446.557751][ T5897] usb 4-1: device descriptor read/8, error -71 [ 446.673739][T10365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1239'. [ 446.757549][ T5897] usb usb4-port1: unable to enumerate USB device [ 447.046924][T10375] Invalid logical block size (63) [ 447.234599][T10380] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 447.503571][T10389] FAULT_INJECTION: forcing a failure. [ 447.503571][T10389] name failslab, interval 1, probability 0, space 0, times 0 [ 447.518263][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.0.1248 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 447.529066][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 447.539138][T10389] Call Trace: [ 447.542435][T10389] [ 447.545380][T10389] dump_stack_lvl+0x241/0x360 [ 447.550084][T10389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.555308][T10389] ? __pfx__printk+0x10/0x10 [ 447.559923][T10389] ? kmem_cache_alloc_noprof+0x48/0x380 [ 447.565496][T10389] ? __pfx___might_resched+0x10/0x10 [ 447.570813][T10389] should_fail_ex+0x3b0/0x4e0 [ 447.575514][T10389] should_failslab+0xac/0x100 [ 447.580215][T10389] ? alloc_empty_file+0x9e/0x1d0 [ 447.585167][T10389] kmem_cache_alloc_noprof+0x70/0x380 [ 447.590570][T10389] alloc_empty_file+0x9e/0x1d0 [ 447.595350][T10389] alloc_file_pseudo+0x1da/0x290 [ 447.600304][T10389] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 447.605779][T10389] ? __local_bh_enable_ip+0x168/0x200 [ 447.611177][T10389] ? bpf_link_prime+0x7a/0x240 [ 447.615964][T10389] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.621711][T10389] anon_inode_getfile+0xc8/0x180 [ 447.626675][T10389] bpf_link_prime+0xff/0x240 [ 447.631289][T10389] bpf_xdp_link_attach+0x220/0x6f0 [ 447.636426][T10389] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 447.642080][T10389] ? __pfx_lock_release+0x10/0x10 [ 447.647135][T10389] ? __fget_files+0x395/0x410 [ 447.651844][T10389] ? __fget_files+0x2a/0x410 [ 447.656453][T10389] ? attach_type_to_prog_type+0x316/0x460 [ 447.662193][T10389] ? bpf_prog_attach_check_attach_type+0x2cb/0x4f0 [ 447.668714][T10389] link_create+0x440/0x870 [ 447.673151][T10389] __sys_bpf+0x4bc/0x810 [ 447.677417][T10389] ? __pfx___sys_bpf+0x10/0x10 [ 447.681671][ T25] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 447.682203][T10389] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.695724][T10389] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.702075][T10389] ? do_syscall_64+0x100/0x230 [ 447.706861][T10389] __x64_sys_bpf+0x7c/0x90 [ 447.711287][T10389] do_syscall_64+0xf3/0x230 [ 447.715791][T10389] ? clear_bhb_loop+0x35/0x90 [ 447.720465][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.726355][T10389] RIP: 0033:0x7f1f8bf85d29 [ 447.730766][T10389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.750372][T10389] RSP: 002b:00007f1f8cdae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.758790][T10389] RAX: ffffffffffffffda RBX: 00007f1f8c175fa0 RCX: 00007f1f8bf85d29 [ 447.766757][T10389] RDX: 0000000000000040 RSI: 0000000020000240 RDI: 000000000000001c [ 447.774725][T10389] RBP: 00007f1f8cdae090 R08: 0000000000000000 R09: 0000000000000000 [ 447.782689][T10389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.790659][T10389] R13: 0000000000000000 R14: 00007f1f8c175fa0 R15: 00007ffe781211b8 [ 447.798640][T10389] [ 447.801722][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.939125][ T25] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 448.274440][ T25] usb 3-1: config 0 has no interface number 0 [ 448.306555][ T25] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 448.367630][ T25] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.463604][ T25] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 448.494985][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.560315][ T25] usb 3-1: Product: syz [ 448.592700][ T25] usb 3-1: Manufacturer: syz [ 448.620840][ T25] usb 3-1: SerialNumber: syz [ 448.661958][ T25] usb 3-1: config 0 descriptor?? [ 448.670312][ T25] ums-karma 3-1:0.46: USB Mass Storage device detected [ 448.852749][ T25] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 448.901062][ T5869] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 448.944351][ T5897] usb 3-1: USB disconnect, device number 31 [ 449.129691][ T5869] usb 4-1: device descriptor read/64, error -71 [ 449.482422][ T5869] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 449.622943][ T5869] usb 4-1: device descriptor read/64, error -71 [ 449.739321][ T5869] usb usb4-port1: attempt power cycle [ 449.824516][ T5870] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 450.000557][ T5870] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 450.009008][ T5870] usb 1-1: config 0 has no interface number 0 [ 450.015129][ T5870] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 450.024859][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.038884][ T5897] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 450.047551][ T5870] usb 1-1: config 0 descriptor?? [ 450.061205][ T5870] cp210x 1-1:0.255: cp210x converter detected [ 450.113641][ T5869] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 450.147953][ T5869] usb 4-1: device descriptor read/8, error -71 [ 450.170391][T10440] FAULT_INJECTION: forcing a failure. [ 450.170391][T10440] name failslab, interval 1, probability 0, space 0, times 0 [ 450.178010][ T5897] usb 3-1: device descriptor read/64, error -71 [ 450.183574][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 450.195915][T10440] CPU: 0 UID: 0 PID: 10440 Comm: syz.4.1264 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 450.207583][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 450.217653][T10440] Call Trace: [ 450.220946][T10440] [ 450.223871][T10440] dump_stack_lvl+0x241/0x360 [ 450.228593][T10440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.233812][T10440] ? __pfx__printk+0x10/0x10 [ 450.238418][T10440] ? fs_reclaim_acquire+0x93/0x130 [ 450.243527][T10440] ? __pfx___might_resched+0x10/0x10 [ 450.248822][T10440] should_fail_ex+0x3b0/0x4e0 [ 450.253506][T10440] should_failslab+0xac/0x100 [ 450.258207][T10440] __kmalloc_noprof+0xdd/0x4c0 [ 450.262977][T10440] ? tomoyo_encode+0x26f/0x540 [ 450.267750][T10440] tomoyo_encode+0x26f/0x540 [ 450.272348][T10440] tomoyo_realpath_from_path+0x59e/0x5e0 [ 450.277994][T10440] tomoyo_path_number_perm+0x236/0x860 [ 450.283459][T10440] ? __lock_acquire+0x1397/0x2100 [ 450.288490][T10440] ? tomoyo_path_number_perm+0x206/0x860 [ 450.294121][T10440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.300133][T10440] ? __fget_files+0x2a/0x410 [ 450.304732][T10440] ? __fget_files+0x2a/0x410 [ 450.309327][T10440] security_file_ioctl+0xc6/0x2a0 [ 450.314356][T10440] __se_sys_ioctl+0x46/0x170 [ 450.318949][T10440] do_syscall_64+0xf3/0x230 [ 450.323467][T10440] ? clear_bhb_loop+0x35/0x90 [ 450.328151][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.334052][T10440] RIP: 0033:0x7ffa2ad85d29 [ 450.338467][T10440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.358069][T10440] RSP: 002b:00007ffa2bbba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.366482][T10440] RAX: ffffffffffffffda RBX: 00007ffa2af75fa0 RCX: 00007ffa2ad85d29 [ 450.374452][T10440] RDX: 0000000020000380 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 450.382420][T10440] RBP: 00007ffa2bbba090 R08: 0000000000000000 R09: 0000000000000000 [ 450.390389][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.398360][T10440] R13: 0000000000000000 R14: 00007ffa2af75fa0 R15: 00007ffd4b2ca4a8 [ 450.406339][T10440] [ 450.409430][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.422881][T10440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.488125][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 450.494950][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.506608][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 450.515788][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.524139][ T25] usb 2-1: Product: syz [ 450.528322][ T25] usb 2-1: Manufacturer: syz [ 450.537304][ T25] usb 2-1: SerialNumber: syz [ 450.546054][T10443] netlink: 'syz.4.1265': attribute type 2 has an invalid length. [ 450.547149][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 450.554293][ T5869] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 450.595030][ T5869] usb 4-1: device descriptor read/8, error -71 [ 450.669518][ T5897] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 450.708781][ T5870] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 450.714329][ T5869] usb usb4-port1: unable to enumerate USB device [ 450.722879][ T5870] usb 1-1: cp210x converter now attached to ttyUSB0 [ 450.732501][ T5870] usb 1-1: USB disconnect, device number 47 [ 450.742352][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 450.750415][ T5870] cp210x 1-1:0.255: device disconnected [ 450.784967][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.796712][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.808108][ T5897] usb 3-1: device descriptor read/64, error -71 [ 450.824610][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 450.831240][ T25] r8152-cfgselector 2-1: bad CDC descriptors [ 450.839805][ T25] r8152-cfgselector 2-1: USB disconnect, device number 34 [ 450.927204][ T5897] usb usb3-port1: attempt power cycle [ 451.289303][ T5897] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 451.317132][ T5897] usb 3-1: device descriptor read/8, error -71 [ 452.625574][ T5897] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 452.718807][ T5897] usb 3-1: device descriptor read/8, error -71 [ 452.860965][ T5897] usb usb3-port1: unable to enumerate USB device [ 454.096872][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 454.132835][T10480] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 454.156875][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 454.689312][ T5211] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 454.763597][ T5897] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 454.827809][ T5211] usb 3-1: device descriptor read/64, error -71 [ 454.923938][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 454.930605][ T5897] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 454.941235][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.961666][ T5897] usb 4-1: config 0 has no interface number 0 [ 454.977182][ T5897] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.004960][ T5897] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 455.035913][ T5897] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 455.062682][ T5897] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.084348][ T5211] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 455.131749][ T5897] usb 4-1: config 0 interface 52 has no altsetting 0 [ 455.152032][ T5897] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 455.176085][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.186552][ T5897] usb 4-1: config 0 descriptor?? [ 455.255368][ T5211] usb 3-1: device descriptor read/64, error -71 [ 455.374231][ T5211] usb usb3-port1: attempt power cycle [ 455.412992][ T5897] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input26 [ 455.449522][ T5869] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 455.754895][ T5869] usb 5-1: device descriptor read/64, error -71 [ 455.785763][ T25] usb 4-1: USB disconnect, device number 34 [ 455.821971][ T5211] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 456.252493][ T5869] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 456.341152][ T5211] usb 3-1: device descriptor read/8, error -71 [ 456.452727][ T5869] usb 5-1: device descriptor read/64, error -71 [ 456.621729][ T5869] usb usb5-port1: attempt power cycle [ 456.677359][ T5211] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 456.720502][ T5211] usb 3-1: device descriptor read/8, error -71 [ 456.838838][ T5211] usb usb3-port1: unable to enumerate USB device [ 456.987265][ T5869] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 457.020133][ T5869] usb 5-1: device descriptor read/8, error -71 [ 457.275855][ T5869] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 457.337499][ T5869] usb 5-1: device descriptor read/8, error -71 [ 457.362748][T10536] KVM: debugfs: duplicate directory 10536-4 [ 457.471564][ T5869] usb usb5-port1: unable to enumerate USB device [ 458.719611][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.772319][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.783256][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.792751][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.800983][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.808597][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.405963][ T7641] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.744069][ T7641] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.884936][T10581] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 459.894210][T10581] VFS: Can't find a romfs filesystem on dev nullb0. [ 459.894210][T10581] [ 459.931916][ T7641] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.956175][T10548] chnl_net:caif_netlink_parms(): no params data found [ 459.983770][T10584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.029304][ T7641] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 460.053188][ T7641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.122366][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.130285][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.137627][T10548] bridge_slave_0: entered allmulticast mode [ 460.144979][T10548] bridge_slave_0: entered promiscuous mode [ 460.154632][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.162705][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.169994][T10548] bridge_slave_1: entered allmulticast mode [ 460.177799][T10548] bridge_slave_1: entered promiscuous mode [ 460.223824][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.237148][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 460.245051][ T7641] bridge_slave_1: left allmulticast mode [ 460.253036][ T7641] bridge_slave_1: left promiscuous mode [ 460.262549][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.275050][ T7641] bridge_slave_0: left allmulticast mode [ 460.280928][ T7641] bridge_slave_0: left promiscuous mode [ 460.286788][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.376114][ T8] usb 5-1: device descriptor read/64, error -71 [ 460.686232][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 460.733618][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.747554][T10600] netlink: 'syz.2.1306': attribute type 10 has an invalid length. [ 460.756737][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 460.766260][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.778018][ T7641] bond0 (unregistering): Released all slaves [ 460.790185][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.818600][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.825816][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.841339][ T8] usb 5-1: device descriptor read/64, error -71 [ 460.901732][T10600] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.908889][T10600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.916337][T10600] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.923489][T10600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.937105][T10600] bridge0: entered promiscuous mode [ 460.942985][T10600] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 460.987277][ T8] usb usb5-port1: attempt power cycle [ 461.016211][ T7641] tipc: Disabling bearer [ 461.022196][ T5834] Bluetooth: hci1: command tx timeout [ 461.039289][ T7641] tipc: Left network mode [ 461.054615][T10548] team0: Port device team_slave_0 added [ 461.073966][T10548] team0: Port device team_slave_1 added [ 461.385453][T10609] sctp: [Deprecated]: syz.1.1308 (pid 10609) Use of int in maxseg socket option. [ 461.385453][T10609] Use struct sctp_assoc_value instead [ 462.140102][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 462.164399][ T8] usb 5-1: device descriptor read/8, error -71 [ 462.501416][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 462.526831][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.534354][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.582202][ T8] usb 5-1: device descriptor read/8, error -71 [ 462.618707][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.668268][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.693157][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.744275][ T8] usb usb5-port1: unable to enumerate USB device [ 462.751080][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.897435][ T7641] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 463.090170][ T7641] hsr_slave_0: left promiscuous mode [ 463.120998][ T7641] hsr_slave_1: left promiscuous mode [ 463.138274][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.171544][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.183767][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.194032][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.252619][ T5834] Bluetooth: hci1: command tx timeout [ 463.427388][ T7641] veth1_macvtap: left promiscuous mode [ 463.626501][ T7641] veth0_macvtap: left promiscuous mode [ 463.733260][ T7641] veth1_vlan: left promiscuous mode [ 463.791747][ T7641] veth0_vlan: left promiscuous mode [ 463.962623][T10635] vivid-004: disconnect [ 464.584679][ T7641] team0 (unregistering): Port device team_slave_1 removed [ 464.636048][ T7641] team0 (unregistering): Port device team_slave_0 removed [ 464.730180][T10634] vivid-004: reconnect [ 465.123809][T10626] gretap0: entered promiscuous mode [ 465.129792][T10626] vlan2: entered promiscuous mode [ 465.272191][T10548] hsr_slave_0: entered promiscuous mode [ 465.364488][T10548] hsr_slave_1: entered promiscuous mode [ 465.406446][T10548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.416594][T10548] Cannot create hsr debugfs directory [ 465.465135][ T5834] Bluetooth: hci1: command tx timeout [ 466.006181][T10655] syz.1.1322: attempt to access beyond end of device [ 466.006181][T10655] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 466.093882][T10655] (syz.1.1322,10655,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 466.901658][T10655] (syz.1.1322,10655,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 466.937376][T10655] (syz.1.1322,10655,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 466.965473][T10655] (syz.1.1322,10655,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 467.159201][ T7641] IPVS: stop unused estimator thread 0... [ 467.236391][T10548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 467.541253][T10548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 467.603034][ T25] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 468.460218][T10548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 468.460447][ T5834] Bluetooth: hci1: command tx timeout [ 468.510267][T10548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 468.543925][ T25] usb 3-1: device descriptor read/64, error -71 [ 468.821927][ T25] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 468.951264][T10674] tmpfs: Unknown parameter '' [ 468.982704][ T25] usb 3-1: device descriptor read/64, error -71 [ 469.118628][T10548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.231290][ T25] usb usb3-port1: attempt power cycle [ 469.704452][T10548] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.800457][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.807636][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.815140][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 469.849970][ T25] usb 3-1: device descriptor read/8, error -71 [ 469.898965][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.906132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.243733][ T25] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 470.838628][ T25] usb 3-1: device descriptor read/8, error -71 [ 470.999950][ T25] usb usb3-port1: unable to enumerate USB device [ 471.067492][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.111474][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 471.138828][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 471.157956][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.199369][T10689] netlink: 'syz.1.1330': attribute type 2 has an invalid length. [ 471.524929][T10712] netlink: 'syz.3.1336': attribute type 39 has an invalid length. [ 471.670845][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1336'. [ 471.711898][T10715] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1336'. [ 472.111477][T10548] veth0_vlan: entered promiscuous mode [ 472.164796][T10548] veth1_vlan: entered promiscuous mode [ 472.671913][T10548] veth0_macvtap: entered promiscuous mode [ 472.704107][T10548] veth1_macvtap: entered promiscuous mode [ 472.731262][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.791034][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.809369][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.819874][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.830217][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.847962][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.874578][T10548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.938597][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.949490][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.960106][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.972459][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.976571][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 472.982482][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.002919][T10722] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 473.010737][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.022994][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.040025][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.055847][ T5899] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 473.058165][T10548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.090189][T10548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.099310][T10548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.108088][T10548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.117054][T10548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.215909][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 473.228215][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.244130][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.289748][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.314481][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.351164][ T5899] usb 5-1: config 0 descriptor?? [ 473.377325][ T5899] hub 5-1:0.0: USB hub found [ 473.423702][ T7641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.431838][ T7641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.645524][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.666751][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.852742][ T5899] hub 5-1:0.0: 1 port detected [ 474.107369][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.127158][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.245441][ T5899] usb 5-1: USB disconnect, device number 34 [ 474.274023][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 474.463135][ T46] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 474.808208][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.931027][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.943423][ T46] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 474.953822][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.974902][ T46] usb 3-1: config 0 descriptor?? [ 475.001303][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 475.008062][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.039504][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.065178][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 475.074244][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.101753][ T8] usb 4-1: config 0 descriptor?? [ 475.116930][ T8] hub 4-1:0.0: USB hub found [ 475.350547][ T8] hub 4-1:0.0: 1 port detected [ 475.355908][ T5869] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 475.455659][ T46] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 475.463373][ T46] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 475.490536][ T46] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000E/input/input27 [ 475.540931][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.557843][ T46] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 475.576999][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.602480][ T8] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 475.621041][ T8] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 475.631111][ T5869] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 475.648398][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.657845][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 475.664192][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 475.679066][ T5869] usb 5-1: config 0 descriptor?? [ 475.691500][T10509] usb 3-1: USB disconnect, device number 44 [ 475.704980][ T8] usb 4-1: USB disconnect, device number 35 [ 476.079247][T10781] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 476.849620][ T5869] usbhid 5-1:0.0: can't add hid device: -71 [ 476.857732][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 476.869058][ T5869] usb 5-1: USB disconnect, device number 35 [ 484.184125][ T46] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 484.346241][ T46] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 484.392344][ T46] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x23, changing to 0x3 [ 484.431732][ T46] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 484.467607][ T46] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 484.537019][ T46] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 484.546090][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.916322][T10838] macsec1: entered allmulticast mode [ 485.086867][ T46] ath6kl: Failed to submit usb control message: -71 [ 485.106934][ T46] ath6kl: unable to send the bmi data to the device: -71 [ 485.114198][ T46] ath6kl: Unable to send get target info: -71 [ 485.143355][ T46] ath6kl: Failed to init ath6kl core: -71 [ 485.185954][ T46] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 485.243478][ T46] usb 2-1: USB disconnect, device number 35 [ 487.368708][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1374'. [ 488.310997][T10867] input: syz0 as /devices/virtual/input/input28 [ 489.199892][T10871] 9p: Unknown access argument 0x0000000000000007: -22 [ 489.251753][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 489.264771][T10871] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 489.429075][ T25] usb 2-1: New USB device found, idVendor=0d81, idProduct=1910, bcdDevice=eb.c6 [ 489.438318][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.454752][ T25] usb 2-1: Product: syz [ 489.466023][ T25] usb 2-1: Manufacturer: syz [ 489.470651][ T25] usb 2-1: SerialNumber: syz [ 490.371540][ T25] pwc: Visionite VCS-UM100 USB webcam detected. [ 490.396410][ T25] pwc: Failed to set LED on/off time (-71) [ 490.406459][ T25] pwc: send_video_command error -71 [ 490.427410][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 490.582145][ T25] Philips webcam 2-1:5.0: probe with driver Philips webcam failed with error -71 [ 491.484451][ T25] usb 2-1: USB disconnect, device number 36 [ 491.838593][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 494.024633][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.036277][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.046343][ T46] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 494.056095][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.074356][ T46] usb 6-1: config 0 descriptor?? [ 494.219734][T10914] netlink: 'syz.3.1387': attribute type 298 has an invalid length. [ 494.520371][ T46] cypress 0003:04B4:DE61.000F: unknown main item tag 0x0 [ 494.527589][ T46] cypress 0003:04B4:DE61.000F: unknown main item tag 0x0 [ 494.534916][ T46] cypress 0003:04B4:DE61.000F: unknown main item tag 0x0 [ 494.542063][ T46] cypress 0003:04B4:DE61.000F: unknown main item tag 0x0 [ 494.550194][ T46] cypress 0003:04B4:DE61.000F: unknown main item tag 0x0 [ 494.579203][ T46] cypress 0003:04B4:DE61.000F: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.5-1/input0 [ 494.686540][T10914] tipc: Enabling of bearer rejected, failed to enable media [ 496.115101][ T25] usb 6-1: USB disconnect, device number 2 [ 496.192755][T10939] syz.3.1392[10939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.192858][T10939] syz.3.1392[10939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.216764][T10939] syz.3.1392[10939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.622320][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 497.879665][T10956] ax25_connect(): syz.3.1396 uses autobind, please contact jreuter@yaina.de [ 499.402882][T10961] netlink: 'syz.3.1399': attribute type 2 has an invalid length. [ 499.493195][T10961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1399'. [ 499.647453][ T25] usb 6-1: device descriptor read/all, error -71 [ 500.872295][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 505.947820][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 505.947875][ T29] audit: type=1326 audit(1734662060.912:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 506.160780][T11000] Smack: duplicate mount options [ 506.423207][ T29] audit: type=1326 audit(1734662060.912:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 506.691922][ T29] audit: type=1326 audit(1734662060.921:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 506.713582][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.762744][ T29] audit: type=1326 audit(1734662060.921:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 506.890969][ T29] audit: type=1326 audit(1734662060.930:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 506.912549][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.956331][ T29] audit: type=1326 audit(1734662060.940:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 507.008661][ T29] audit: type=1326 audit(1734662060.940:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 507.233330][ T29] audit: type=1326 audit(1734662060.949:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 507.432216][ T29] audit: type=1326 audit(1734662060.968:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 507.751935][ T29] audit: type=1326 audit(1734662060.968:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2ad85d29 code=0x7ffc0000 [ 507.837278][T10509] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 508.008638][T10509] usb 5-1: Using ep0 maxpacket: 16 [ 508.015501][T10509] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.022768][T10509] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 508.032779][T10509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.068833][T10509] usb 5-1: config 0 descriptor?? [ 508.366629][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 508.462734][ T5869] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 508.556246][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.657268][ T5869] usb 2-1: no configurations [ 508.663156][ T5869] usb 2-1: can't read configurations, error -22 [ 508.706701][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.948151][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 509.010238][T10509] hid (null): unknown global tag 0xc [ 509.018427][T10509] hid (null): global environment stack underflow [ 509.025256][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.272142][T10509] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0010/input/input29 [ 509.287164][ T8] usb 4-1: config 0 descriptor?? [ 509.345412][ T5869] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 509.385814][T10509] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0010/input/input30 [ 509.477407][T10509] kye 0003:0458:5013.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 509.496222][T10509] usb 5-1: USB disconnect, device number 36 [ 510.154994][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.235875][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.248466][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.255941][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.260374][ T5869] usb 2-1: no configurations [ 510.273502][ T5869] usb 2-1: can't read configurations, error -22 [ 510.281217][ T5869] usb usb2-port1: attempt power cycle [ 511.448121][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 511.454149][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 511.463773][ T8] usb 4-1: USB disconnect, device number 36 [ 511.845212][ T5869] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 512.013885][ T5869] usb 2-1: device descriptor read/8, error -71 [ 512.292486][ T5869] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 512.311258][ T3075] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 512.324175][ T5869] usb 2-1: device descriptor read/8, error -71 [ 512.444648][ T5869] usb usb2-port1: unable to enumerate USB device [ 512.518410][ T3075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.569189][ T3075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.713019][ T3075] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 512.836652][ T3075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.964708][ T3075] usb 6-1: config 0 descriptor?? [ 513.009858][T11046] veth1_to_team: entered promiscuous mode [ 513.024786][T11046] batadv0: entered promiscuous mode [ 513.440353][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 515.169341][ T3075] usbhid 6-1:0.0: can't add hid device: -71 [ 515.175558][ T3075] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 515.185124][ T3075] usb 6-1: USB disconnect, device number 5 [ 515.436122][T11078] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1428'. [ 515.482411][T11078] No control pipe specified [ 515.493263][T11077] FAULT_INJECTION: forcing a failure. [ 515.493263][T11077] name failslab, interval 1, probability 0, space 0, times 0 [ 515.537951][T11077] CPU: 1 UID: 0 PID: 11077 Comm: syz.3.1429 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 515.548759][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 515.558830][T11077] Call Trace: [ 515.562126][T11077] [ 515.565074][T11077] dump_stack_lvl+0x241/0x360 [ 515.569782][T11077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.575007][T11077] ? __pfx__printk+0x10/0x10 [ 515.579624][T11077] ? kmem_cache_alloc_noprof+0x48/0x380 [ 515.585204][T11077] ? __pfx___might_resched+0x10/0x10 [ 515.590520][T11077] should_fail_ex+0x3b0/0x4e0 [ 515.595194][T11077] should_failslab+0xac/0x100 [ 515.599870][T11077] ? flock_lock_inode+0x2ee/0x1450 [ 515.604972][T11077] kmem_cache_alloc_noprof+0x70/0x380 [ 515.610342][T11077] flock_lock_inode+0x2ee/0x1450 [ 515.615275][T11077] ? __pfx_smack_log+0x10/0x10 [ 515.620030][T11077] ? __pfx___might_resched+0x10/0x10 [ 515.625307][T11077] ? __pfx_flock_lock_inode+0x10/0x10 [ 515.630672][T11077] locks_lock_inode_wait+0x108/0x460 [ 515.635948][T11077] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 515.641754][T11077] __se_sys_flock+0x526/0x6e0 [ 515.646435][T11077] ? __pfx___se_sys_flock+0x10/0x10 [ 515.651646][T11077] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.657977][T11077] ? do_syscall_64+0x100/0x230 [ 515.662764][T11077] ? do_syscall_64+0xb6/0x230 [ 515.667453][T11077] do_syscall_64+0xf3/0x230 [ 515.671971][T11077] ? clear_bhb_loop+0x35/0x90 [ 515.676656][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.682551][T11077] RIP: 0033:0x7fd099385d29 [ 515.686958][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.706558][T11077] RSP: 002b:00007fd09a159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 515.714969][T11077] RAX: ffffffffffffffda RBX: 00007fd099575fa0 RCX: 00007fd099385d29 [ 515.722934][T11077] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 515.730902][T11077] RBP: 00007fd09a159090 R08: 0000000000000000 R09: 0000000000000000 [ 515.738874][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.746836][T11077] R13: 0000000000000000 R14: 00007fd099575fa0 R15: 00007ffd416c5ef8 [ 515.754812][T11077] [ 515.757927][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.242487][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 518.242505][ T29] audit: type=1326 audit(1734662072.473:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.287822][ T29] audit: type=1326 audit(1734662072.501:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.337760][ T29] audit: type=1326 audit(1734662072.501:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.434560][ T29] audit: type=1326 audit(1734662072.501:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.527353][ T29] audit: type=1326 audit(1734662072.501:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.612799][ T29] audit: type=1326 audit(1734662072.501:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.640261][ T29] audit: type=1326 audit(1734662072.501:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.663785][ T29] audit: type=1326 audit(1734662072.501:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.685806][ T29] audit: type=1326 audit(1734662072.501:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.707803][ T29] audit: type=1326 audit(1734662072.501:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11097 comm="syz.3.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099385d29 code=0x7ffc0000 [ 518.785333][T11108] fuse: Bad value for 'user_id' [ 518.800314][T11108] fuse: Bad value for 'user_id' [ 519.166269][T11118] netlink: 6233 bytes leftover after parsing attributes in process `syz.1.1439'. [ 520.188596][T11106] syzkaller1: entered promiscuous mode [ 520.194191][T11106] syzkaller1: entered allmulticast mode [ 520.203303][T11106] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 52 [ 520.933514][T11122] binder_alloc: 11121: binder_alloc_buf, no vma [ 521.010811][T11130] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1443'. [ 522.963611][T11122] syz.1.1441 (11122): drop_caches: 2 [ 523.176848][T11163] usb usb1: usbfs: process 11163 (syz.1.1452) did not claim interface 3 before use [ 524.680488][T11182] x_tables: duplicate underflow at hook 2 [ 528.292312][T11232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.086204][ T3075] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 529.245398][ T3075] usb 6-1: device descriptor read/64, error -71 [ 529.545049][ T3075] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 529.982736][ T3075] usb 6-1: device descriptor read/64, error -71 [ 530.102726][ T3075] usb usb6-port1: attempt power cycle [ 530.234093][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1477'. [ 530.271584][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 530.498505][ T3075] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 530.720832][ T3075] usb 6-1: device descriptor read/8, error -71 [ 531.205940][ T3075] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 531.266535][ T3075] usb 6-1: device descriptor read/8, error -71 [ 531.395054][ T3075] usb usb6-port1: unable to enumerate USB device [ 531.682566][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 531.715971][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 531.888910][ T8] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 531.908274][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.937090][ T8] usb 2-1: Product: syz [ 531.942553][ T8] usb 2-1: Manufacturer: syz [ 531.947804][ T8] usb 2-1: SerialNumber: syz [ 531.958993][ T8] usb 2-1: config 0 descriptor?? [ 531.972465][ T8] ch341 2-1:0.0: ch341-uart converter detected [ 532.192112][ T8] usb 2-1: failed to receive control message: -121 [ 532.200553][ T8] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 533.380540][T11308] xt_hashlimit: size too large, truncated to 1048576 [ 533.389374][T11308] xt_hashlimit: overflow, rate too high: 0 [ 534.483681][T11317] ax25_connect(): syz.3.1494 uses autobind, please contact jreuter@yaina.de [ 535.149594][ T3075] usb 2-1: USB disconnect, device number 41 [ 535.156401][ T3075] ch341 2-1:0.0: device disconnected [ 535.252868][T11324] netlink: 'syz.2.1499': attribute type 6 has an invalid length. [ 539.889353][T11365] ax25_connect(): syz.5.1508 uses autobind, please contact jreuter@yaina.de [ 543.120829][T11392] veth1_to_team: entered promiscuous mode [ 543.135086][T11392] batadv0: entered promiscuous mode [ 543.143185][T11392] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 543.164376][T11392] Cannot create hsr debugfs directory [ 543.171176][T11392] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 544.175918][T11403] zonefs (nullb0) ERROR: Not a zoned block device [ 547.321007][T11444] sg_write: data in/out 246879826/56 bytes for SCSI command 0xeb-- guessing data in; [ 547.321007][T11444] program syz.1.1527 not setting count and/or reply_len properly [ 549.148681][T11451] ieee802154 phy0 wpan0: encryption failed: -22 [ 549.353107][T11456] veth1_to_team: entered promiscuous mode [ 549.540078][T11456] batadv0: entered promiscuous mode [ 549.573443][T11456] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 549.584440][T11456] Cannot create hsr debugfs directory [ 549.608142][T11468] vivid-001: ================= START STATUS ================= [ 549.662784][T11468] vivid-001: Radio HW Seek Mode: Bounded [ 549.670447][T11468] vivid-001: Radio Programmable HW Seek: false [ 549.679025][T11468] vivid-001: RDS Rx I/O Mode: Block I/O [ 549.684733][T11468] vivid-001: Generate RBDS Instead of RDS: false [ 549.695632][T11468] vivid-001: RDS Reception: true [ 549.701279][T11468] vivid-001: RDS Program Type: 0 inactive [ 549.709109][T11468] vivid-001: RDS PS Name: inactive [ 549.719625][T11468] vivid-001: RDS Radio Text: inactive [ 549.883787][T11473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1536'. [ 549.894192][T11468] vivid-001: RDS Traffic Announcement: false inactive [ 549.901252][T11468] vivid-001: RDS Traffic Program: false inactive [ 549.907870][T11468] vivid-001: RDS Music: false inactive [ 549.922041][T11468] vivid-001: ================== END STATUS ================== [ 550.425148][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1537'. [ 550.593900][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1537'. [ 551.239084][T11496] bridge0: entered allmulticast mode [ 551.367072][T11497] pim6reg: entered allmulticast mode [ 551.663083][T11471] kAFS: No cell specified [ 552.920372][T11504] FAULT_INJECTION: forcing a failure. [ 552.920372][T11504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.934199][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.4.1542 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 552.944985][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 552.955037][T11504] Call Trace: [ 552.958312][T11504] [ 552.961242][T11504] dump_stack_lvl+0x241/0x360 [ 552.965927][T11504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.971125][T11504] ? __pfx__printk+0x10/0x10 [ 552.975718][T11504] ? snprintf+0xda/0x120 [ 552.979974][T11504] should_fail_ex+0x3b0/0x4e0 [ 552.984659][T11504] _copy_to_user+0x31/0xb0 [ 552.989078][T11504] simple_read_from_buffer+0xca/0x150 [ 552.994454][T11504] proc_fail_nth_read+0x1e9/0x250 [ 552.999492][T11504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.005046][T11504] ? rw_verify_area+0x55e/0x6f0 [ 553.009891][T11504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.015441][T11504] vfs_read+0x1fc/0xb70 [ 553.019599][T11504] ? __pfx___mutex_lock+0x10/0x10 [ 553.024625][T11504] ? __pfx_vfs_read+0x10/0x10 [ 553.029319][T11504] ? __fget_files+0x2a/0x410 [ 553.033920][T11504] ? __fget_files+0x395/0x410 [ 553.038591][T11504] ? __fget_files+0x2a/0x410 [ 553.043186][T11504] ksys_read+0x18f/0x2b0 [ 553.047428][T11504] ? __pfx_ksys_read+0x10/0x10 [ 553.052190][T11504] ? do_syscall_64+0x100/0x230 [ 553.056963][T11504] ? do_syscall_64+0xb6/0x230 [ 553.061646][T11504] do_syscall_64+0xf3/0x230 [ 553.066154][T11504] ? clear_bhb_loop+0x35/0x90 [ 553.070836][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.076735][T11504] RIP: 0033:0x7ffa2ad8473c [ 553.081148][T11504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 553.100758][T11504] RSP: 002b:00007ffa2bbba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.109173][T11504] RAX: ffffffffffffffda RBX: 00007ffa2af75fa0 RCX: 00007ffa2ad8473c [ 553.117141][T11504] RDX: 000000000000000f RSI: 00007ffa2bbba0a0 RDI: 0000000000000005 [ 553.125110][T11504] RBP: 00007ffa2bbba090 R08: 0000000000000000 R09: 0000000000000000 [ 553.133075][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.141041][T11504] R13: 0000000000000000 R14: 00007ffa2af75fa0 R15: 00007ffd4b2ca4a8 [ 553.149024][T11504] [ 553.652027][ T46] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 554.076611][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 554.092884][ T46] usb 5-1: no configurations [ 554.097576][ T46] usb 5-1: can't read configurations, error -22 [ 554.376497][T11514] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1546'. [ 554.447861][T11516] veth1_to_team: entered promiscuous mode [ 554.468460][T11516] batadv0: entered promiscuous mode [ 554.548977][T11516] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 554.576872][T11516] Cannot create hsr debugfs directory [ 554.838475][ T5869] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 554.977737][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1551'. [ 555.054731][ T5869] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.077496][T11531] tmpfs: Bad value for 'mpol' [ 555.082490][ T5869] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 555.098850][ T5869] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.113003][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.142826][T11519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.159466][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.711645][ T46] usb 2-1: USB disconnect, device number 42 [ 559.359109][T11576] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 335 [ 560.568533][ T46] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 560.928443][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 560.935699][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 560.944320][ T46] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 560.953656][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.961659][ T46] usb 4-1: Product: syz [ 560.983544][ T46] usb 4-1: Manufacturer: syz [ 560.988242][ T46] usb 4-1: SerialNumber: syz [ 560.999367][ T46] usb 4-1: config 0 descriptor?? [ 561.724672][ T46] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 561.738060][ T46] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 561.753298][ T46] usb 4-1: USB disconnect, device number 37 [ 562.291859][T11622] ax25_connect(): syz.1.1576 uses autobind, please contact jreuter@yaina.de [ 564.043069][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 564.043424][ T25] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 564.063088][T11639] FAULT_INJECTION: forcing a failure. [ 564.063088][T11639] name failslab, interval 1, probability 0, space 0, times 0 [ 564.076102][T11639] CPU: 1 UID: 0 PID: 11639 Comm: syz.5.1584 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 564.086892][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 564.096959][T11639] Call Trace: [ 564.100246][T11639] [ 564.103175][T11639] dump_stack_lvl+0x241/0x360 [ 564.107860][T11639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.113069][T11639] ? __pfx__printk+0x10/0x10 [ 564.117662][T11639] ? fs_reclaim_acquire+0x93/0x130 [ 564.122780][T11639] ? __pfx___might_resched+0x10/0x10 [ 564.128068][T11639] ? __lock_acquire+0x1397/0x2100 [ 564.133092][T11639] should_fail_ex+0x3b0/0x4e0 [ 564.137771][T11639] should_failslab+0xac/0x100 [ 564.142453][T11639] __kmalloc_cache_noprof+0x70/0x390 [ 564.147733][T11639] ? tomoyo_find_next_domain+0x11a/0x1d40 [ 564.153458][T11639] tomoyo_find_next_domain+0x11a/0x1d40 [ 564.159016][T11639] ? __pfx_lock_acquire+0x10/0x10 [ 564.164048][T11639] ? __pfx___kernel_read+0x10/0x10 [ 564.169160][T11639] ? __pfx_lock_release+0x10/0x10 [ 564.174179][T11639] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 564.180169][T11639] ? tomoyo_bprm_check_security+0xeb/0x180 [ 564.185975][T11639] tomoyo_bprm_check_security+0x117/0x180 [ 564.191695][T11639] security_bprm_check+0x86/0x250 [ 564.196717][T11639] bprm_execve+0xa53/0x17a0 [ 564.201238][T11639] ? __pfx_bprm_execve+0x10/0x10 [ 564.206178][T11639] ? copy_string_kernel+0x1c9/0x1f0 [ 564.211375][T11639] do_execveat_common+0x55f/0x6f0 [ 564.216402][T11639] __x64_sys_execveat+0xc4/0xe0 [ 564.221252][T11639] do_syscall_64+0xf3/0x230 [ 564.225757][T11639] ? clear_bhb_loop+0x35/0x90 [ 564.230431][T11639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.236326][T11639] RIP: 0033:0x7f3397f85d29 [ 564.240735][T11639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.260335][T11639] RSP: 002b:00007f3398d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 564.268755][T11639] RAX: ffffffffffffffda RBX: 00007f3398175fa0 RCX: 00007f3397f85d29 [ 564.276719][T11639] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 564.284684][T11639] RBP: 00007f3398d31090 R08: 0000000000000000 R09: 0000000000000000 [ 564.292651][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.300614][T11639] R13: 0000000000000000 R14: 00007f3398175fa0 R15: 00007fffd6c0a928 [ 564.308592][T11639] [ 564.457854][ T3075] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 564.459954][T11649] ip6t_srh: unknown srh invflags 7D00 [ 564.513848][ T25] usb 5-1: device descriptor read/64, error -71 [ 565.220700][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 565.234907][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.278361][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.288501][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 565.298104][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.308056][ T8] usb 2-1: config 0 descriptor?? [ 565.336668][ T25] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 565.344648][ T3075] usb 3-1: device descriptor read/64, error -71 [ 565.770513][ T25] usb 5-1: device descriptor read/64, error -71 [ 565.839089][ T3075] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 565.962007][ T25] usb usb5-port1: attempt power cycle [ 566.030879][ T8] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 566.031464][ T3075] usb 3-1: device descriptor read/64, error -71 [ 566.081100][T11666] ax25_connect(): syz.4.1591 uses autobind, please contact jreuter@yaina.de [ 566.171292][ T3075] usb usb3-port1: attempt power cycle [ 567.459070][ T3075] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 567.539074][ T3075] usb 3-1: device descriptor read/8, error -71 [ 567.688656][ T5899] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 567.789645][T11682] @: renamed from vlan0 (while UP) [ 570.435335][ T25] usb 2-1: USB disconnect, device number 43 [ 570.496827][T11721] ax25_connect(): syz.1.1604 uses autobind, please contact jreuter@yaina.de [ 571.105284][T11727] autofs: Unknown parameter 'v;u-U¨Ešî‘»|Xû¿è‰ìå' [ 573.220215][T11746] ip6gretap0: entered promiscuous mode [ 573.226622][T11746] macvtap1: entered promiscuous mode [ 573.234702][T11746] ip6gretap0: left promiscuous mode [ 575.329049][T11775] ax25_connect(): syz.1.1617 uses autobind, please contact jreuter@yaina.de [ 576.117386][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.123915][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.427780][ T5897] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 577.652538][ T5897] usb 4-1: device descriptor read/64, error -71 [ 577.972976][ T5897] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 578.135380][ T5897] usb 4-1: device descriptor read/64, error -71 [ 578.337203][ T5897] usb usb4-port1: attempt power cycle [ 578.803611][ T5897] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 579.279802][ T5897] usb 4-1: device descriptor read/8, error -71 [ 579.673663][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 579.703347][ T5897] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 579.727668][ T5897] usb 4-1: device descriptor read/8, error -71 [ 579.844004][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 579.851145][ T5897] usb usb4-port1: unable to enumerate USB device [ 579.861827][ T25] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 579.911038][ T25] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 579.929794][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 579.950774][ T25] usb 2-1: Product: syz [ 579.954977][ T25] usb 2-1: Manufacturer: syz [ 579.959585][ T25] usb 2-1: SerialNumber: syz [ 579.994138][ T25] usb 2-1: config 0 descriptor?? [ 582.484294][ T5897] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 582.688141][ T25] usb 2-1: USB disconnect, device number 44 [ 583.115308][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 583.123145][T11897] veth1_to_team: entered promiscuous mode [ 583.132079][ T5897] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 583.142090][T11897] batadv0: entered promiscuous mode [ 583.147487][ T5897] usb 4-1: config 0 has no interface number 0 [ 583.154452][ T5897] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 583.172177][ T5897] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 583.181799][T11897] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 583.182547][T11897] Cannot create hsr debugfs directory [ 583.182689][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.182715][ T5897] usb 4-1: Product: syz [ 583.182730][ T5897] usb 4-1: Manufacturer: syz [ 583.182745][ T5897] usb 4-1: SerialNumber: syz [ 583.184692][ T5897] usb 4-1: config 0 descriptor?? [ 583.871348][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 585.084191][ T5897] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 585.178085][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 585.189939][ T5897] usb 4-1: USB disconnect, device number 42 [ 585.979390][T11927] netlink: 'syz.1.1646': attribute type 10 has an invalid length. [ 586.158478][T11927] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.202267][T11927] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.209462][T11927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.230277][T11927] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 587.474891][T11934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.506732][ T25] IPVS: starting estimator thread 0... [ 587.797972][T11942] IPVS: using max 23 ests per chain, 55200 per kthread [ 588.808229][T11930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.760702][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1657'. [ 589.785475][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1657'. [ 590.099104][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 590.299266][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 590.313322][ T25] usb 4-1: config index 0 descriptor too short (expected 548, got 36) [ 590.340794][ T5869] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 590.342059][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.434491][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 590.500139][T11978] autofs: Unknown parameter 'v;u-U¨Ešî‘»|Xû¿è‰ìå' [ 590.506236][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.639406][ T25] usb 4-1: config 0 descriptor?? [ 591.476155][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 591.533390][ T5869] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 591.550003][ T5869] usb 6-1: config 0 has no interface number 0 [ 591.566459][ T5869] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 591.600009][T11985] FAULT_INJECTION: forcing a failure. [ 591.600009][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 591.612806][T11985] CPU: 1 UID: 0 PID: 11985 Comm: syz.3.1658 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 591.619336][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.623569][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 591.623586][T11985] Call Trace: [ 591.623594][T11985] [ 591.623603][T11985] dump_stack_lvl+0x241/0x360 [ 591.652530][T11985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.654542][ T5869] usb 6-1: Product: syz [ 591.657732][T11985] ? __pfx__printk+0x10/0x10 [ 591.657763][T11985] ? fs_reclaim_acquire+0x93/0x130 [ 591.657787][T11985] ? __pfx___might_resched+0x10/0x10 [ 591.657818][T11985] should_fail_ex+0x3b0/0x4e0 [ 591.657843][T11985] should_failslab+0xac/0x100 [ 591.657870][T11985] __kmalloc_noprof+0xdd/0x4c0 [ 591.657889][T11985] ? tomoyo_encode+0x26f/0x540 [ 591.695748][T11985] tomoyo_encode+0x26f/0x540 [ 591.700340][T11985] tomoyo_realpath_from_path+0x59e/0x5e0 [ 591.705970][T11985] tomoyo_path_number_perm+0x236/0x860 [ 591.711437][T11985] ? __lock_acquire+0x1397/0x2100 [ 591.716473][T11985] ? tomoyo_path_number_perm+0x206/0x860 [ 591.722097][T11985] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.728091][T11985] ? __fget_files+0x2a/0x410 [ 591.732680][T11985] ? __fget_files+0x2a/0x410 [ 591.737263][T11985] security_file_ioctl+0xc6/0x2a0 [ 591.742294][T11985] __se_sys_ioctl+0x46/0x170 [ 591.746900][T11985] do_syscall_64+0xf3/0x230 [ 591.751398][T11985] ? clear_bhb_loop+0x35/0x90 [ 591.756080][T11985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.761970][T11985] RIP: 0033:0x7fd099385d29 [ 591.766386][T11985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.785988][T11985] RSP: 002b:00007fd09a138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.794405][T11985] RAX: ffffffffffffffda RBX: 00007fd099576080 RCX: 00007fd099385d29 [ 591.802369][T11985] RDX: 0000000020000040 RSI: 00000000c0386105 RDI: 0000000000000009 [ 591.810333][T11985] RBP: 00007fd09a138090 R08: 0000000000000000 R09: 0000000000000000 [ 591.818304][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.826278][T11985] R13: 0000000000000000 R14: 00007fd099576080 R15: 00007ffd416c5ef8 [ 591.834282][T11985] [ 591.916251][T11985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 591.991578][ T5869] usb 6-1: Manufacturer: syz [ 592.039978][ T5869] usb 6-1: SerialNumber: syz [ 592.123088][ T5869] usb 6-1: config 0 descriptor?? [ 592.152092][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 592.156960][ T5869] smsc95xx v2.0.0 [ 592.158160][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 592.182234][ T25] usb 4-1: USB disconnect, device number 43 [ 592.503767][T11990] 9pnet_fd: Insufficient options for proto=fd [ 592.586568][ T5869] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 592.604211][ T5869] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 592.787442][T12000] syz.3.1668[12000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.787561][T12000] syz.3.1668[12000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.832874][T12000] syz.3.1668[12000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.526084][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 594.650230][ T5897] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 595.822565][ T5869] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 595.833547][ T5869] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 595.852239][ T5869] usb 6-1: USB disconnect, device number 10 [ 595.872225][ T5897] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 595.881383][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.889679][ T5897] usb 2-1: Product: syz [ 595.902077][ T5897] usb 2-1: Manufacturer: syz [ 595.955757][ T5897] usb 2-1: SerialNumber: syz [ 595.962928][ T5897] usb 2-1: config 0 descriptor?? [ 595.990973][T12018] netlink: 'syz.5.1672': attribute type 29 has an invalid length. [ 596.007720][T12018] netlink: 'syz.5.1672': attribute type 29 has an invalid length. [ 596.058754][T12018] netlink: 'syz.5.1672': attribute type 29 has an invalid length. [ 596.224491][ T5897] usb 2-1: USB disconnect, device number 45 [ 596.302512][T12025] mmap: syz.1.1676 (12025) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 596.307743][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1675'. [ 596.529718][T12025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.652369][ T25] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 596.906141][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 596.917740][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 596.925764][ T25] usb 4-1: config 0 has no interface number 0 [ 596.950422][ T25] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 596.959667][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.967681][ T25] usb 4-1: Product: syz [ 597.012794][ T25] usb 4-1: Manufacturer: syz [ 597.017433][ T25] usb 4-1: SerialNumber: syz [ 597.143286][ T25] usb 4-1: config 0 descriptor?? [ 597.177585][ T25] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 597.205394][ T25] usb 4-1: selecting invalid altsetting 1 [ 597.217922][ T25] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 597.789998][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.801069][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 597.809812][ T25] usb 4-1: media controller created [ 597.828370][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.149157][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.189325][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.228601][ T25] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 598.291306][ T25] usb 4-1: USB disconnect, device number 44 [ 598.306045][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 598.361169][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 602.764639][ T5897] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 603.470710][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 603.482648][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 603.501272][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 603.503520][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 603.509410][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 603.522631][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 603.530262][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 603.531340][ T5897] usb 6-1: config index 0 descriptor too short (expected 548, got 36) [ 603.555492][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.580070][ T5897] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 603.608883][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.663282][ T5897] usb 6-1: config 0 descriptor?? [ 604.136387][T12125] ax25_connect(): syz.2.1702 uses autobind, please contact jreuter@yaina.de [ 604.194913][T12114] chnl_net:caif_netlink_parms(): no params data found [ 604.255131][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.430352][ T5897] usbhid 6-1:0.0: can't add hid device: -71 [ 604.436443][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 604.451124][ T5897] usb 6-1: USB disconnect, device number 11 [ 604.493983][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 604.893416][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.726075][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 605.935561][ T5834] Bluetooth: hci2: command tx timeout [ 605.959153][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.041247][T12147] FAULT_INJECTION: forcing a failure. [ 606.041247][T12147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.054438][T12147] CPU: 1 UID: 0 PID: 12147 Comm: syz.1.1707 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 606.065217][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 606.075291][T12147] Call Trace: [ 606.078580][T12147] [ 606.081521][T12147] dump_stack_lvl+0x241/0x360 [ 606.086228][T12147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.091449][T12147] ? __pfx__printk+0x10/0x10 [ 606.096065][T12147] ? snprintf+0xda/0x120 [ 606.100330][T12147] should_fail_ex+0x3b0/0x4e0 [ 606.105025][T12147] _copy_to_user+0x31/0xb0 [ 606.109464][T12147] simple_read_from_buffer+0xca/0x150 [ 606.114860][T12147] proc_fail_nth_read+0x1e9/0x250 [ 606.119904][T12147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.125479][T12147] ? rw_verify_area+0x568/0x6f0 [ 606.130350][T12147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.135916][T12147] vfs_read+0x1fc/0xb70 [ 606.140104][T12147] ? __pfx___mutex_lock+0x10/0x10 [ 606.145148][T12147] ? __pfx_vfs_read+0x10/0x10 [ 606.149845][T12147] ? __fget_files+0x2a/0x410 [ 606.154451][T12147] ? __fget_files+0x395/0x410 [ 606.159139][T12147] ? __fget_files+0x2a/0x410 [ 606.163750][T12147] ksys_read+0x18f/0x2b0 [ 606.168014][T12147] ? __pfx_ksys_read+0x10/0x10 [ 606.172794][T12147] ? do_syscall_64+0x100/0x230 [ 606.177583][T12147] ? do_syscall_64+0xb6/0x230 [ 606.182282][T12147] do_syscall_64+0xf3/0x230 [ 606.186805][T12147] ? clear_bhb_loop+0x35/0x90 [ 606.191502][T12147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.197421][T12147] RIP: 0033:0x7fbec758473c [ 606.201850][T12147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 606.221481][T12147] RSP: 002b:00007fbec83d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.229919][T12147] RAX: ffffffffffffffda RBX: 00007fbec7776160 RCX: 00007fbec758473c [ 606.237913][T12147] RDX: 000000000000000f RSI: 00007fbec83d30a0 RDI: 0000000000000007 [ 606.245899][T12147] RBP: 00007fbec83d3090 R08: 0000000000000000 R09: 0000000000000000 [ 606.253885][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.261871][T12147] R13: 0000000000000000 R14: 00007fbec7776160 R15: 00007ffd680dc4f8 [ 606.269875][T12147] [ 606.272967][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.412777][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.441452][T12149] netlink: 'syz.5.1708': attribute type 10 has an invalid length. [ 606.443576][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.906310][T12114] bridge_slave_0: entered allmulticast mode [ 606.917795][T12114] bridge_slave_0: entered promiscuous mode [ 606.926391][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.933554][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.940759][T12114] bridge_slave_1: entered allmulticast mode [ 606.948039][T12114] bridge_slave_1: entered promiscuous mode [ 607.025488][ T52] team0: Port device netdevsim0 removed [ 607.057435][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.113731][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 607.113750][ T29] audit: type=1326 audit(1734662155.602:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12157 comm="syz.3.1711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd099385d29 code=0x0 [ 607.130100][T12149] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 607.194428][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.205519][T12159] binder: Bad value for 'max' [ 607.226316][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.290178][ T8] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 607.524377][ T8] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 607.532816][ T8] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 607.543615][T12114] team0: Port device team_slave_0 added [ 607.549894][T12165] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1713'. [ 607.551854][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.563255][T12164] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1713'. [ 607.569573][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 607.605301][T12114] team0: Port device team_slave_1 added [ 607.649311][ T8] usb 3-1: config 0 has no interface number 0 [ 607.665409][ T8] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 607.682618][ T8] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 607.704228][ T8] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 607.714347][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.723003][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.731406][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.761222][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.790303][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.808191][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.847593][ T8] usb 3-1: config 0 descriptor?? [ 607.855812][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 607.874669][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.021989][T12171] ax25_connect(): syz.5.1715 uses autobind, please contact jreuter@yaina.de [ 608.123197][ T5834] Bluetooth: hci2: command tx timeout [ 608.525915][ T8] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 608.682246][T12181] binder: 12175:12181 ioctl 4018620d 0 returned -22 [ 608.689917][T12181] binder: 12175:12181 ioctl c0306201 0 returned -14 [ 608.697288][T12181] binder: 12175:12181 ioctl c0306201 0 returned -14 [ 608.704574][T12181] binder: 12175:12181 ioctl c0306201 20000940 returned -14 [ 609.258080][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.265211][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 609.422456][ T3075] usb 3-1: USB disconnect, device number 49 [ 609.484979][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1718'. [ 609.577405][ T52] bridge0 (unregistering): left allmulticast mode [ 609.601167][T12186] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1719'. [ 609.613778][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 609.624189][T12186] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1719'. [ 609.636903][T12186] netlink: 'syz.3.1719': attribute type 2 has an invalid length. [ 609.647542][T12186] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1719'. [ 609.805446][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.082160][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 722.089165][ C0] rcu: 1-...!: (1 GPs behind) idle=b94c/0/0x1 softirq=48075/48076 fqs=4 [ 722.099075][ C0] rcu: (detected by 0, t=10502 jiffies, g=44285, q=156 ncpus=2) [ 722.106821][ C0] Sending NMI from CPU 0 to CPUs 1: [ 722.106855][ C1] NMI backtrace for cpu 1 [ 722.106870][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 722.106889][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 722.106899][ C1] RIP: 0010:__asan_memset+0x5/0x50 [ 722.106926][ C1] Code: 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 [ 722.106940][ C1] RSP: 0018:ffffc90000a18c90 EFLAGS: 00000046 [ 722.106956][ C1] RAX: ffffffff8bbc4a01 RBX: 1ffff110170e593a RCX: ffff88801d2f0000 [ 722.106974][ C1] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff888028829340 [ 722.106985][ C1] RBP: 1ffff11005105268 R08: ffffffff8bbc485b R09: 1ffffffff2030a26 [ 722.106997][ C1] R10: dffffc0000000000 R11: fffffbfff2030a27 R12: ffff8880b872c9d0 [ 722.107010][ C1] R13: ffff8880b872c9d0 R14: 0000000000000000 R15: ffff888028829340 [ 722.107021][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 722.107035][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.107047][ C1] CR2: 00000000200bd000 CR3: 0000000034eec000 CR4: 00000000003526f0 [ 722.107062][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.107072][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.107082][ C1] Call Trace: [ 722.107088][ C1] [ 722.107098][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 722.107121][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 722.107140][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 722.107158][ C1] ? nmi_handle+0x2a/0x5a0 [ 722.107183][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 722.107206][ C1] ? nmi_handle+0x14f/0x5a0 [ 722.107223][ C1] ? nmi_handle+0x2a/0x5a0 [ 722.107254][ C1] ? __asan_memset+0x5/0x50 [ 722.107271][ C1] ? default_do_nmi+0x63/0x160 [ 722.107290][ C1] ? exc_nmi+0x123/0x1f0 [ 722.107306][ C1] ? end_repeat_nmi+0xf/0x53 [ 722.107323][ C1] ? timerqueue_add+0x4b/0x290 [ 722.107339][ C1] ? timerqueue_add+0x1f1/0x290 [ 722.107356][ C1] ? __asan_memset+0x5/0x50 [ 722.107374][ C1] ? __asan_memset+0x5/0x50 [ 722.107393][ C1] ? __asan_memset+0x5/0x50 [ 722.107410][ C1] [ 722.107416][ C1] [ 722.107422][ C1] timerqueue_add+0x200/0x290 [ 722.107438][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 722.107460][ C1] enqueue_hrtimer+0x1b2/0x3c0 [ 722.107484][ C1] __hrtimer_run_queues+0x6cb/0xd30 [ 722.107512][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 722.107532][ C1] ? sched_clock+0x4a/0x70 [ 722.107553][ C1] ? read_tsc+0x9/0x20 [ 722.107573][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 722.107594][ C1] hrtimer_interrupt+0x403/0xa40 [ 722.107624][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 722.107644][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 722.107665][ C1] [ 722.107670][ C1] [ 722.107675][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 722.107700][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 722.107717][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 15 de a7 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 722.107731][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 722.107745][ C1] RAX: ffff88801d2f0000 RBX: ffff888020ad9864 RCX: 0000000000bcb949 [ 722.107757][ C1] RDX: 0000000000000001 RSI: ffff888020ad9800 RDI: ffff888020ad9864 [ 722.107769][ C1] RBP: 000000000003a878 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b [ 722.107781][ C1] R10: dffffc0000000000 R11: ffffffff8bc0cc80 R12: ffff88801cfad800 [ 722.107793][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f10f420 [ 722.107806][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 722.107827][ C1] acpi_idle_enter+0xe4/0x140 [ 722.107844][ C1] cpuidle_enter_state+0x109/0x470 [ 722.107867][ C1] ? __pfx_menu_select+0x10/0x10 [ 722.107891][ C1] cpuidle_enter+0x5d/0xa0 [ 722.107911][ C1] do_idle+0x372/0x5c0 [ 722.107933][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 722.107954][ C1] ? __pfx_do_idle+0x10/0x10 [ 722.107978][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 722.108007][ C1] cpu_startup_entry+0x42/0x60 [ 722.108029][ C1] start_secondary+0x102/0x110 [ 722.108051][ C1] common_startup_64+0x13e/0x147 [ 722.108078][ C1] [ 722.108849][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g44285 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 722.548340][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 722.558316][ C0] rcu: RCU grace-period kthread stack dump: [ 722.564214][ C0] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 722.575981][ C0] Call Trace: [ 722.579264][ C0] [ 722.582212][ C0] __schedule+0x17fb/0x4be0 [ 722.586756][ C0] ? __pfx___schedule+0x10/0x10 [ 722.591628][ C0] ? __pfx_lock_release+0x10/0x10 [ 722.596674][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 722.603018][ C0] ? schedule+0x90/0x320 [ 722.607276][ C0] schedule+0x14b/0x320 [ 722.611449][ C0] schedule_timeout+0x15a/0x290 [ 722.616396][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 722.621780][ C0] ? __pfx_process_timeout+0x10/0x10 [ 722.627084][ C0] ? prepare_to_swait_event+0x330/0x350 [ 722.632648][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 722.637513][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 722.642737][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 722.648905][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 722.654203][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 722.660115][ C0] ? finish_swait+0xd4/0x1e0 [ 722.664715][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 722.669320][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 722.674525][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 722.680432][ C0] ? __kthread_parkme+0x169/0x1d0 [ 722.685467][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 722.690676][ C0] kthread+0x2f0/0x390 [ 722.694758][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 722.699965][ C0] ? __pfx_kthread+0x10/0x10 [ 722.704567][ C0] ret_from_fork+0x4b/0x80 [ 722.708990][ C0] ? __pfx_kthread+0x10/0x10 [ 722.713589][ C0] ret_from_fork_asm+0x1a/0x30 [ 722.718384][ C0] [ 722.721411][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 722.727735][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 722.738412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 722.748472][ C0] Workqueue: events_unbound toggle_allocation_gate [ 722.754999][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 722.761793][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 722.781416][ C0] RSP: 0018:ffffc900001176e0 EFLAGS: 00000293 [ 722.787504][ C0] RAX: ffffffff81938ebb RBX: 1ffff110170e88b9 RCX: ffff88801d2c5a00 [ 722.795491][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 722.803470][ C0] RBP: ffffc900001178e0 R08: ffffffff81938e8a R09: 1ffffffff284e110 [ 722.811464][ C0] R10: dffffc0000000000 R11: fffffbfff284e111 R12: dffffc0000000000 [ 722.819463][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 722.827447][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 722.836387][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.842980][ C0] CR2: 00000000200bd038 CR3: 000000000e736000 CR4: 00000000003526f0 [ 722.850980][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.858975][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.866972][ C0] Call Trace: [ 722.870259][ C0] [ 722.873114][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 722.879464][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 722.885124][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 722.890951][ C0] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 722.897214][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 722.903835][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 722.910094][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 722.915485][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 722.921139][ C0] ? acct_account_cputime+0x207/0x210 [ 722.926524][ C0] ? update_process_times+0x242/0x2f0 [ 722.931910][ C0] ? tick_nohz_handler+0x37c/0x500 [ 722.937046][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 722.942521][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 722.947928][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 722.953679][ C0] ? sched_clock+0x4a/0x70 [ 722.958134][ C0] ? read_tsc+0x9/0x20 [ 722.962227][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 722.968326][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 722.973481][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 722.979651][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 722.985483][ C0] [ 722.988425][ C0] [ 722.991363][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 722.997545][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 723.003716][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 723.009888][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 723.016089][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 723.021145][ C0] ? __pfx___text_poke+0x10/0x10 [ 723.026096][ C0] ? process_scheduled_works+0x976/0x1840 [ 723.031840][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 723.038184][ C0] ? __pfx___might_resched+0x10/0x10 [ 723.043489][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 723.049402][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 723.054444][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 723.059576][ C0] text_poke_bp_batch+0x352/0xb30 [ 723.064622][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 723.070631][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 723.076812][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 723.082377][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 723.088642][ C0] ? process_scheduled_works+0x976/0x1840 [ 723.094396][ C0] text_poke_finish+0x30/0x50 [ 723.099098][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 723.105096][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 723.111008][ C0] static_key_enable+0x1a/0x20 [ 723.115793][ C0] toggle_allocation_gate+0xbc/0x260 [ 723.121099][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 723.127011][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 723.133373][ C0] process_scheduled_works+0xa66/0x1840 [ 723.138967][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 723.144975][ C0] ? assign_work+0x364/0x3d0 [ 723.149589][ C0] worker_thread+0x870/0xd30 [ 723.154203][ C0] ? __kthread_parkme+0x169/0x1d0 [ 723.159261][ C0] ? __pfx_worker_thread+0x10/0x10 [ 723.164388][ C0] kthread+0x2f0/0x390 [ 723.168469][ C0] ? __pfx_worker_thread+0x10/0x10 [ 723.173596][ C0] ? __pfx_kthread+0x10/0x10 [ 723.178215][ C0] ret_from_fork+0x4b/0x80 [ 723.182644][ C0] ? __pfx_kthread+0x10/0x10 [ 723.187246][ C0] ret_from_fork_asm+0x1a/0x30 [ 723.192043][ C0]