last executing test programs: 1m12.709929172s ago: executing program 0 (id=693): syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000140)={0x1f, @fixed}, 0x8) r1 = dup2(r0, r0) getsockopt$rose(r1, 0x104, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00004e22a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0xf) read(r4, 0x0, 0x2006) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000046}, 0x40000c4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x24040084) 1m11.280264214s ago: executing program 0 (id=696): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x1000000}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040880) 1m9.964065696s ago: executing program 0 (id=699): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="8cd612d21374b8bb0c03e19030", 0xd}, {&(0x7f0000000600)="92d9bf", 0x3}], 0x2, 0x0, 0x0, 0x4000001}, 0x4008840) 1m9.802375335s ago: executing program 0 (id=703): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x446400, 0x6) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x164) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m8.469010925s ago: executing program 0 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000f9770200"]) 1m7.142683247s ago: executing program 0 (id=711): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) set_mempolicy(0x3, &(0x7f00000003c0)=0x2, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='\xd9\xbd2\xb5|K?\x97\xfb\xe9\xa8K\xd8\xbeGsou\xf2ce', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1414, 0x1}, 0x10}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 46.117527805s ago: executing program 32 (id=711): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) set_mempolicy(0x3, &(0x7f00000003c0)=0x2, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='\xd9\xbd2\xb5|K?\x97\xfb\xe9\xa8K\xd8\xbeGsou\xf2ce', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1414, 0x1}, 0x10}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 13.052170377s ago: executing program 3 (id=805): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@initr0]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) close(r3) 12.852050965s ago: executing program 1 (id=806): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 12.75356393s ago: executing program 3 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) setrlimit(0x8, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xfffffffffffffdcd) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x10) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r1, @ANYBLOB="0e0001006e657464657673b2ff12284d23328e05c7e188f35a1b8b4c696d0000000f0002006e657464657673696d30000008008a00aa5532d1ef1659270ac0bf1bef5c868cbbec8d858456b3cbb91901e1ca387a558799d8675e72f7229acb362d2581d30b3fb510492dc0fb7c83acde4d9b6276df0fcae426cc65ec2068dd2dce6720e82e634ed23cf22166d2759afda33ec9d95250485027", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB], 0xd4}}, 0x20040010) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 12.57107169s ago: executing program 1 (id=808): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xf4, 0x17, &(0x7f00000000c0)="db48e033fb96646ebb1ed7bf18f4415f09824e7190d0c79505c2c03cb296edbc6d06895ff1f4a67e27641b42a19d1adcf0891601ba76b505634198c613761696313a70adafcb3d99916995e155867d8f1e2fcae1f1e4d1e2cc84043669ee5a11db8fb804f8bf20a20f49e37d65e0280f02302332250d7f8e3a292e28b05a013d9a1df9911919bc61e9bc22d31eb95658bbde51a0b5ce078ed1f4f64986f5ba21421d7fc39fe5519dd945ae2865f57e1717261f12273ef354247feecebb22d43402ee15df6b8e6bba5ed4caae5f24693074e88c4d2a2b24760f6c6aba855c44bd134f837f85f8fecbd4220bffca5a54034d219212", &(0x7f0000000040)=""/23, 0x40, 0x0, 0x89, 0x9, &(0x7f00000001c0)="6551773296aabb573c6efe110b8b9f979aa51b1bc7f3c25e0e2d84bc3c893c4f93c56c78be158f5aa4b67b4010d0d69f030ec2084c444a0b5f31ddb4813e4162f63d7b33964d0012570739a758acd1f0eb6de7b0be17f47f85ca46c5755e61571fe651def8fe809a70b626f73e33350461b13bc1b2a9f5eff4b0c61e339747b690c0d397ba83dd4c36", &(0x7f0000000280)="961eda2794a7c28fb8", 0x6, 0x0, 0x1e41c104}, 0xffffffffffffffb8) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast1, @multicast1}, "200022ebffff0000"}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r6, @ANYBLOB="3b9600000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="4a003300400000000802110000010802110000015050505050500000000601010101010101002d1a02881b06000000000000000d00c0001c0000000004ce950000e972060303030303030000"], 0x68}}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a80)=@deltfilter={0x1d18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0xffe0}, {0x3, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1cdc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x50c, 0x2, [@m_gact={0x154, 0x3, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1cbb, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfe9d, 0x3, 0x20000000, 0x7, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x6a9, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x13b3, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e58, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0x5808, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3fb4, 0x133, 0x2, 0xff, 0x2}}]}, {0xae, 0x6, "a409ab4f691e19791ba5cde6a0b5160180854e5eb447ec8f5ce63570d637ff58543e64131ffebb2f14ddd0a3c3ae89bc4c6733c9c80e69f94c224af5e847290f03752d4a85126b1dbea01727888f21963609f3470a77c8d3e1febf79e001644bda5ad1073031d883173c8534d643147e8c8f63f5975efa018dcf32f5184cca2e6dd4b8c98fe225362164ce9076bb8682d3ebb7ce425e20a7def8e8f12a70fe1bc60800ba157b65606731"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x58, 0x1d, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x27, 0x6, "36249729eb36b86537e16e5c695bc3d23b64af1da49fc9168cc4ca700ad7fe16c3ff58"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x104, 0x1d, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="66cb67168aea"}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x53}]}, {0x8b, 0x6, "cb1e6840d7ef4dee6803dea14e082eed55de908dd1e3282508d9443a60bd1dcc536f040c50f843311f42956d6043ae52d1c3fdcbdc44148cb4a541ab0e7503ebc5c38e569edd8fdda4fc66fde8170f9c0ab4b6a395030366c309f229ad5c35614aa45fe96fc0fde65de945b313e113690b0e0d69e60a571923f389573f1b2a05f2ff16c1c5ed26"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x164, 0x1e, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x7, 0x8, 0xfffffbff, 0x33923962}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf0c3, 0x7, 0x3, 0xae79, 0x7}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2f74}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x596}]}, {0xed, 0x6, "5880f6c136dc4f07b2e58c71e233164291eff5506bac8941273c57b0abd2f962f7a1a9545f922fc1f590deba2179f9749e582822e6275ce61499155f78e71ecc2b762f43e9ad9e95bf7402818911f2e4c2d79ac1b1d6e3e3fde9773ead9587b9957989b35a2cd79cf5c0b9a171cbe521fb305ed072ae38f72ac96ca3c1d44fbae0ca4e1b1c58a5ccf1e926819a723d183df494dd8f537895037a44ee13e21ef6464693fc646cf274201b375907e742fa592d9fefc3df723661cf2cd4f191f8ee13249fe6c5a4a70e01bc39d6abc36aa819c6b1391df63159f516b0ce2b21fe58ded44f60794c045d28"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xf4, 0x3, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x70ea310c7a6d75c2, 0x758}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe, 0x7, 0x4, 0x3}, 0xc6e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x0, 0x2, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x2, 0xd, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xff, 0x7, 0x95b}, 0x3a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x1, 0x7411, 0x29f3}, 0x3}}]}, {0x19, 0x6, "f2a44e06450fc7430fd01c3607e8b314662dd41960"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x15dc, 0x2, [@m_skbmod={0x10a4, 0x1e, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x34b8, 0x20000000, 0x5, 0x11f}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="0603a0f7df97"}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="ad903c95d7dc"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x4c, 0x7, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '/dev/kvm\x00'}]}, {0xe, 0x6, "c0d5ae556f187275048d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x80, 0x16, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x12d}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x42, 0x6, "53adcd686e216e24faac47238fd2b98aeaef036941522d6d80229ca710b363936a5180f3f4658ad054e86c2b6263e56a05145c93fe9c5fb8e8366e91234c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xe0, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x3, 0x0, 0x5773, 0x10000}, 0x75}}]}, {0x97, 0x6, "acb28119a4100659b5ae92fbcc2f28cb54d458809cceb0ca2eabccbdefe182d385e96073049dec59de83e9f2886f9a08dd55e043fb73572a0b426f7d56b1666aff2fc4eff6855b893098923ef0abf0d5c68d53066b7b5669fcf92ccf07ba1f953b5a40408d4b5833cec5b62fb906aca2cfd13c3462ed3338545af975169e30de8d207c3b0571bb4b0ecd4529cf8cdc762c5163"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x244, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x1, 0x45bc, 0xfffffff7}, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4770, 0x125, 0xffffffffffffffff, 0x4, 0x3}, @private=0xa010101, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x1, 0x6, 0x3, 0x9}, @private=0xa010100, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x10000000, 0xfffffffe, 0x3}, @private=0xa010101, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x40, 0x20000000, 0xdbd3}, @local, @rand_addr=0x64010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9161, 0x3, 0x0, 0xa}, @empty, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0xffffffffffffffff, 0x3, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x1, 0x801e, 0xaa}, @remote, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x761, 0x3, 0x40, 0xfffffff9}, @remote, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x1, 0x1, 0x6}, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3b}, 0xffffff00}}]}, {0x8a, 0x6, "f06107d51d216e5da336551e226ad2a993b0e03caf26d22defd8bb45fe569d20065f04327e329eaea9f9fb61e14bfbe5129ff98b120d721c3706ae6682b11331902db3fc2851dfc5a87b671923cd55d0b7eba260afd8a30ae5efe1f724b5902ddd3f64e05c7fec243d2050131e4a0809b3e5d88a2b90c2fc53ecd540c85332595c03fb6937fb"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x144, 0xa, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x6, 0x5, 0x6}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0xb0, 0x4, 0x9, 0xa}, @multicast1, @broadcast, 0x0, 0x1}}]}, {0xca, 0x6, "f47a7ab996e62a8980411e221720921393a53c20d34970cbab8a97d0e697960586357e482fa53e0b8f9d4c5cc23969c6c4b431fff623b3a11b1256b909e95aa48343b27eb30ac1a4d2f3b6256fd5c70b5e795a99369d31cc39b0f8730b0b58fc3a057c62e6b68ac8b853f92b19f25ecc3dc72845150abe91a34d53b10b8990f9337da8599b9de13e7bb77b8c0ca117dbea7f1b560f17d41b052e8f494105d93113801109494fd9239270cebd994ef8729a429a0b909d03be6cb679d113e2445504f98a03dadc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xb}}, @TCA_MATCHALL_ACT={0x1d8, 0x2, [@m_ctinfo={0x8c, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x50, 0x6, "c0d9f717a201c5b926de818d0acab0fbe4c733c6bd82c228d4b1cb19f8da3177f06fa558a34464e26f7e685aff7b8bf255ee831c56a8011899cecaa2e0bbe0dfc640505a5cc4f3e9763023ee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x148, 0xa, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x816, 0xc, 0x10000000, 0x0, 0xa}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0xed, 0x6, "230ca93652e707d546e3905684edd952160820412b134139d6c7eb839ba0786a3ee7d67c2629c360d2b21baa28e18bf51e5eaef8e63475ad09832194ea652e743b6e0135e9904e657065e09750af671c7ef223ad2e1be8c2ada29d08320375525449e966ff9c29b6d0c8f1fb3c147ce13358f8fb4d58047c2509d77baea3c38f56ccbb8f262e08e196d67cf990aae97f6ef593148860890a456020e463677aeed8878eb250f638bae2856b8adbc480e2cbd78bd020552800f778a647b3c4dd8edb18f54837a35e98b0b1e3f4cf7274125e73565dc5624349f36bfd457febf9ce7f18b504d98670737f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x1d18}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x10000000000000, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="ffdfff0000000100000900"/20], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000006d00673c28bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a03020000080000180034801400350064756d6d79300000000000000000000000003480000035006970760000000000350076657468315f6d616376746170000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x8000, 0xe0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x0, 0x5, 0x40, 0x0, 0x400001}, {0x0, 0x0, 0xff, 0xfe, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ec}]}) 9.819596769s ago: executing program 2 (id=810): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfaf5, {{0xa, 0x4e21, 0x0, @remote}, {0xa, 0x2, 0x0, @remote, 0x2}, r1}}, 0x48) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x3, 0xa2, 0x2, 0xe0, 0x3, "2ab7c075d41351b3"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) syz_io_uring_setup(0x45bd, &(0x7f0000000140)={0x0, 0xaee5, 0x0, 0xff7fffff, 0xffdffffe}, &(0x7f00000001c0), 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000000)=0x2) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000280)={0x9, 0x8, 0x9d5, 0x8, 0x5}) 9.212046048s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x253}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@ll={0x11, 0x18, 0x0, 0x1, 0x8, 0x6, @broadcast}}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x220000, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$usbfs(&(0x7f0000000700), 0x847, 0x105702) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet6_int(r8, 0x29, 0x8, 0x0, 0x0) r9 = socket(0x28, 0x2, 0x34) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 8.3055275s ago: executing program 2 (id=814): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x3, r1, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0) 8.160244481s ago: executing program 1 (id=815): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0xb}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000040)='minix\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x8080) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000002c0)={0x0, 0x7, 0x2015, 0x1}) 8.159840435s ago: executing program 4 (id=816): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf254f00020008000300", @ANYRES32=r3, @ANYBLOB='P\x00z'], 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x27c, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x1fc, 0x228, 0x25a, 0x1fc, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'batadv0\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xa4, 0xec, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0xff, 0x0, 0xffffff00], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88, 0x0, 0x0, 0x48}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2061) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) 7.789614423s ago: executing program 2 (id=817): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={r1, r2/1000+10000}, 0x1) 6.987719921s ago: executing program 1 (id=818): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.776041778s ago: executing program 4 (id=819): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4b9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) r5 = socket$netlink(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.7757742s ago: executing program 2 (id=820): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) syz_open_dev$midi(&(0x7f0000000000), 0x71, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) syz_usb_disconnect(r0) 6.640982774s ago: executing program 1 (id=821): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/16, 0x10}, 0x20002}], 0x1, 0x0, 0x0) pipe(0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x261, 0x40000029, r4, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r9, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000024c0), 0x28}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r10, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 6.629079598s ago: executing program 5 (id=822): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) readv(r3, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1) 6.413090635s ago: executing program 3 (id=823): syz_usb_connect(0x1, 0xfffffffffffffe5c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc6, 0xed, 0x8c, 0x10, 0x1bbb, 0x203, 0x22ce, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x141e, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x41, 0xb, 0xa, 0xc7, 0xb8, 0x82, 0xc7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "1df4a1"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x61a, 0x36, 0x3}, {0x6, 0x24, 0x1a, 0xa6f1, 0x22}, [@country_functional={0x8, 0x24, 0x7, 0xff, 0xd8d, [0x8]}, @obex={0x5, 0x24, 0x15, 0x9}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "05b194fa"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x8, 0x88}, [@mdlm_detail={0x71, 0x24, 0x13, 0x8, "60b0ade49662f22f1ec8350a9fd10bb6cecfe2094b284db868488a7798c1e3f406f5c4153cb10ca24cacf21d7df3ffe65bd5c176e54e70cc1918eb4c79a8900e14632ebcc73d5a34dc7616c720e5acda748a5e20394fa2f5dafb2aa72b0183b29f1f48f0d01161310491782e56"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x4, 0x5, 0xf}, @ncm={0x6, 0x24, 0x1a, 0x8a0, 0x24}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7d, 0x2e, 0xfa}]}], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x10, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}, @generic={0x58, 0xb, "ec66940c18d3a272a317ff52c97406152aa5fc9cf141f323aebe48afae962e117c90988fff5ce37a2bffad01330280c6bda2303e489994d2b5d332e752e09adea7c65e8a353216e6a83e7e785dd49386ff7b92ff0351"}]}}, {{0x9, 0x5, 0xa, 0x6, 0x8, 0x40, 0x40, 0x7, [@generic={0x7b, 0x22, "e1d91b45096f761f3d418fe045d44a97de7df8473a06961fda534a7a34053b116e0ed1d6f8b7d028458167463cfd5f85d1c523f188702fd33d808257de3774755a2cb3275a5307be46a0fbde0c0daec1e4f138ffe88b2ea9ed2d4cf50a124ac599b4fe393aa8f8974c40b2d4fa60a2fffd2ff3bc13553f750e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x10}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xb, 0x3, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x9c, 0x0, 0xf}}, {{0x9, 0x5, 0x1, 0x10, 0x450, 0x0, 0x3, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x0, 0x81, 0x2}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x5, 0x9, 0x4, [@generic={0x6, 0xc, "dad90d70"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x8, 0x2, 0x7, [@generic={0xfd, 0xa, "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"}, @generic={0x58, 0x23, "212f4c7efccbf5881df760cba7e3cd4340c7af80a2f6b626dcf32cc41c175cd55ce1b87e63584e0c481f838e0bf65d42d2c6070c5a7bdbe91ddd21dceded944bf56cad2ea999978ec9dfc9556a158a7bbbfb90f32c25"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0x2, 0xa, [@generic={0x19, 0x5, "c3c7bc4125a657c8ec56e22756126210f3071622a20e72"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3bf, 0x6, 0x0, 0x8, [@generic={0x50, 0x11, "f067bd50a0fb40319c2633b3b76dad11fcf97c3ced063d5436001e53ef8b23103aad346a46a5cf9fd25ffe32d55e952eda8128652d157f2e81f306e013b2846493d1ecfad02ba5817b581a6155fe"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}]}}, {{0x9, 0x4, 0x27, 0xf9, 0xf, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b6cc06ad0c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5719, 0x3, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x9, 0x16}, [@acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x5, 0x8}]}], [{{0x9, 0x5, 0x4, 0x3, 0x40, 0x6, 0x0, 0x8, [@generic={0x9b, 0x10, "8dfa83e48f08ff02fad6f30f8ab93de145ef845462a4d4a5e1aa0244c1af1c46e197917b393fe22164f7e5f6f284066b0aae9dd4b3d0125b14c86a2e1182b2fdfc1cc53f89fc7a446a321a31c3ba720bc64427f0cee2aec272b2f53bed373eb589a99149097d043c036cd387e16ca5077ddce1eca7d7289df9da7449f43750870157913a872ea4d8bac83e3d137a683bda356cc7bbf532cc2b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x8, 0x1, 0x9, [@generic={0xe7, 0x6, "dcfc129abc1cb9daa926173e8dc6af7f9d4f66da0832dad6450a2ca73dd09214d79518c833fc265df23e92d9977f08e3b17c0d855edf1e34844603c2dda4d898543e0baa164993b186e6e2fcdfcdcafa08896c5e6b88ee59678f220a777759f5eaf99a290d192187cb0f3f3611e3a4205162bcbba92b08a112f6045ab76031a12077c38ab70258c03e2bc99661ac157be648412e1c47f9314449afa06336208af48e7ea201f919cef2e52c5f9e172e63d517488a3535c1d8e056cd7637b9fa149ca9a842bd039b9add3a24b4bf32c1bb9d3325307b8dea6ade413af1f612ccc3187fe7ed62"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x1, 0x5, 0x2, [@generic={0xac, 0x11, "79853dcf72ad228449d971755298c6e16abd88bca8412078bb745c347d84b9a75bca0fac972261511de304ca221e2cb2bc6af8cdc1418df785f4a409ec4c604b5765335b0dc26f25b848180cd3af10cf26788232c46c78fd3500cf4ab62d0f98a911f8fe30aa6fbb5a5d59097a3b57bb6512d0aa4164f1d72b028e23c6adc23371276b1498482d120efbfa89519ecdcd9f0541402708463fe5881545a7fb754bd45a9b38a852eabece0e"}, @generic={0xcb, 0x3, "f3dbe8aed90cd7f4e8e27d3d5ec999ad30be8764ca44303895051e4b8426fcf8543d2e5aae6832f7029a0236d534135c1cb31a0a61038b4571c2cd3f968e3f021ff7a0c1830aa0186da8e93015eab5a2aef4d52add6d9af8e89bc33c68c43c6bd7498230a01f3d594bf72bc99c9ec8b515585354b74b0774e8017230a578b03e4e307dc1e7dcf9d5d9d3a8869370c12a46ebcfad3bc723a555840d702ba0d647bad1104c08f90d020eb85219b1cd50297a42852d29d46293deadd4d6a30943c4fa650870520eeddda2"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x9, 0x7, 0x2, [@generic={0x102, 0xf, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x3, 0x1d3fcf9b01185db5, 0x400, 0xf0, 0x1, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x9, 0xf8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xe}, @generic={0xd3, 0x21, "ad4fe6eda4863958433c4ce7c3fbf602d53046f74e7cfdd30a42920fd728c5a749999bfc89326b38efcfbb445ab9fd69a45ce7822228266feb60119923875b64f22b2e4eb85664bfd01effe4a944a99124bf170688549a7df021a841b3304ad0bdb2dc146ab255e39d671adf7c43d1c87071bef2c5b550046479c2cd10c643a11c9e16ce4f1326f36d117bef41cc8eb371ffed2294a63d5352156a70222eb4f3b77f0486bae2c942738c380d68ba9d0cad3fda254cc48f9164b22658ef4195139de5521ffa8cfeee223ca09280e4c3a857"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x7, 0x55, 0xf, [@generic={0x7e, 0x23, "55e97c27bd76d22fa31cbe036e57c6e0c1eca89d614623bd855ce38a0d06cfcfd1aea431a0313b2af17fb46ccdd5a56dea8474bda54b5a898207082701aca57d65bf282584cb2e09fe85f87657aced730cfef5d9371ba0e8dc436f154fcc617629a2f8bcb5781855126e7b97b375abfa15432e5767a4ba8f4ca01696"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x8, 0x3, 0x2}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x1, 0x8, 0x61, [@generic={0xd5, 0x30, "3134245f1ac2c2a5f68d6799d6eea36472c3214ed9060096d3d268402639c60839a827ce4d52436ccc6ef76c7560537c9da4acd08983ca94d8a2da17854aa201e2fc0660f202c39f59834342e922836e1b936f98179cb59f01217a19db40ce9a4ec636b41fff573a405d49a50282fcab138eab6f59502f2b1aa616ca2fad8b659460039b31f55536ffa5aee77e452c4702aa8e5aeb0aba58c1e0006c2633ea4d61b03637fec9efcfc9e8f64fa8109dc21166f3b2b84d489c0abdf7948780ed8d251a571c0fee542a482a48013fcdb9f261e021"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x98}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x80, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xc0, 0x52, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0xe9f71815643cf804, 0x4, 0x2, 0xb, [@generic={0x3f, 0x24, "a46ca0419dc4a647d2d44dd4a9c70bd504abb48208bffbae7807fe7d6f2dcfabf95d7724fd96a18f43071a5d6c0488c1a9e11c75190082e8b7c01465e5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x81}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x7, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xac7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x8, 0xa, [@generic={0x73, 0x22, "7f0916f510af2f57a2816d55c2421de9446559e09e729e040c27ea7d2d62c7ef1c5845c9dfa1acf7638bac080f33a9d1672f45382b2c3f1dc177b1476de959af0bac4b55da273cd4b1ce07b618549ef84ca0e3f16c8e0d05a35a96fb11b1584b2dacb14dbbdb996e01631548e2e1f2bcd1"}, @generic={0x76, 0x2, "eccfb6a933c37fa1e3baaff792de2a9801a1449d2cb3327cb2f68ea9fbf9f7801b23f5da12b260761e0e5a6e6741ba7bc55affd3067df198cccf7001e158a93ad4043522aae250f7ec68c9c0f037f797cb6ecdf8b7092d00fe39fc72add3012dae057d3b382d218b5526b4786ece52b617431a58"}]}}]}}, {{0x9, 0x4, 0x42, 0x6, 0x9, 0x86, 0xe, 0xe6, 0xf, [], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x6, 0x1, 0xff, [@generic={0x13, 0x21, "5af63128633f54c4f6e62da2ac434b047b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xf4, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0x7, 0xff}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x1, 0x8, 0x80, [@generic={0xcf, 0x3, "04cb1e762b043c0847218a46fd18384fcba529c5df63c55935a0f64216f2c3cd5fee2e207ed32939c7842f2264624dc18a784f0608577e6f3f05a912a773c444dc2c4cd735c1961a0fd74377085b159b06ef97510f324244dd35388cd700651e0bba25be42ee2585f5f165d72869e5cd53bca6d360a71758f1d652d2424f774f85107e70e5f085cff4b79745e683d42f75d2fa5a6f8d37e37f13e04e583c6aed8ea34bb3af69969f1d4eaf047f1b2e431b8079c6a2e77bbcb430cc8924b24172b18d921c1c3e3fe35ba8d89ad9"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x9, 0x2, 0x5, [@generic={0xd9, 0x23, "dfddf4e64a5f2b0e9b05d48073a2d43a12258dde6dbeb8cea1205d4c7a09d01c9a152ba7370cff2e39d619ecf943babac7b7ee11b6cac104355228da6e8f4ec0c374c1b4dc58ab1e4483e54bd594509a02e1c54603134c3253f19b0de08d4968985ecf21c1a9b1c203c5c662734f4c6d3b6d29849b953d6d978398eddb892b93a341a434bfa4b12dbf035c5979a2f9e0e60c75d0d64a68d62c05cf1508239db94032f5fced363e6e575296d6820ec7893e8040219446eec9fa3179fbcd65d4f4de31f1875857e4b9c430fd172fd2f8108300e49edf0b0c"}, @generic={0xa0, 0x3d, "b7ba18526c238277545045704c1133923e76dfa0ff611c5263f6de6fe688b690e652c76d0e2e254b710896c383713c061fbf722102e4fc6f8e9979d7b1fa21201a9196321593faf817d4170236a49c09ae607c4745fe5920c94ea6991f320ed3799c0aaec4295fced0bb18b24327aaf1991bb8790dc9830b5b6ebc99eeb3462f58ef925d3d33e61bde52b945dbb92541af3b9b5cecfdadd45dc19dbae8fb"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x8c, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x4, 0x3}}, {{0x9, 0x5, 0x80, 0xc, 0x0, 0x2, 0x91, 0x1, [@generic={0xfb, 0x9, "908b705a06cc02d5ba2295a30049f0683f77adbff0a543e7dcd80794c2679398c9284174e4e4894c6d08a61ae1309c595925464ef8650b79aa1cd573c206ee3455c8afe8d441d6e64be2a7f15faafe59aeedfcd4b43758b2383a8d6a20e52a9f6fbfea597aff950f898bdc6cc1ed32b7c97e2cab4146577a883bdafc8e19e569bd174bf305bd057440e5491828d231d4fce0fb77f38a6da2c86fd89314c594568b895dd618a45f26545d4d2839bb1e7f646e588108f304454ab222ad32b5b0efb7740cc2eb20b202d1f0f417386c459ee6870e55efd8805ec48387d364c7bf356c0c2f5cd23fe5513d50dd08be68efebef885f3e1604c4bc1f"}]}}]}}, {{0x9, 0x4, 0x99, 0x8, 0x6, 0xff, 0xff, 0xff, 0xbe, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa4, 0x4, 0x9d, 0xb, "6bc239", "83"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x2, 0x9, "", "1b"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x2, 0xf2, [@generic={0x20, 0x8, "16d453d440140789d7a8e2261a50ff6d57b9601a5e77cedeaa4078be3989"}, @generic={0x4b, 0x9, "a32904266885ddcebef5251966da7de3c871fd8a11fa15bd8851a521df462169f71f0f639e202854981daf42ad5d14256be095c3aab1dbd52e322245258d4cc2fbd37fb012071c3b97"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x0, 0xc, 0x0, [@generic={0xc0, 0x21, "17573e99d25b8d03a6b7165416b5b803c0ce18ed6cdf75bd17876789943d17207bf34332365114faa998ac5381b89b744d0c2ff3d36d9f370970caf7974fd49ac3001575a4cc9eb79404373604d8bcd570bf899759c27569cf39c07d23fc019ce11548190b18b725bbda7ff5b016ebc10050fbde6457d26763145da0671aec5749d291da530c35ac469da9cb57518f45c32ba2aff82c8a270e6a02685c259c947e67c86b808fe9214bdc0db6351e7d9e9d0ab55aeb22a34d843156c9b766"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x10, 0xcc, 0x9, [@generic={0xe1, 0x8, "764522d4b91c2a9039065121fd95a202e1cc7c16be369c8209fca078c8f57c60905e280e95ab7a10ab5c36c37b152c3643d082d433c9668319ad7b0fe20e14239d35ae54da35dfd7f3b352310bf942353ec01bb82c14c8195deb5456ec85d40681489d4da0ad86390615864f8c765301fbbf89555f3c1401aac5c64aa3131fb6f5a9488bf15d31bcd5e5d23701bd75c6242994d44652de45c11fb27cf395853c770f82a57a5b987e76f00c3314feb74d2983ac250aeb37c8e3c9f75dc7cc8c55cbf0bee4412f5b89e38ee3c6cd52aa99dba6852539b40f3523be53c0599a07"}, @generic={0x19, 0x9, "ae6e21bd77e755d06b48919b85dcb1852c676af1d63d81"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x7, 0x1, 0x0, [@generic={0x8d, 0x6, "2f003a07a7c338043b52e28b98392d73a39b4c8f7a9987c8da356a623a489befefe1e245b6858c547fe5490aa16969b21a601fb17aa063b07e392ac16074cfc50bed995fc3cf835262ecb97958fca39c281d3700a00d6fc573a6e68b446614dedc9639d6a9d053804738fbd9c1f43bc07337ae45bdd8fd8c25904384094172876c5e74fe2e98466753ea8e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x7, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x8}, @generic={0xf2, 0x34, "38c76e2e3003437af0adf6541322198e067344220ff83b135849dcdff1a16a9fac5251d70faf2423634e638adadccb5afab002d88d84935f058fd2abd1050555ddeb880a90bd18911ea7a1c64dc7dc10b88b0de0806ebeb8436007afd3d4f34d296083f36a96caf3e9848b4bbff516d1a7d76ab01ef96c065b5f8c31414d79032c864646964c877f71d0dca90759924a21ac180e097336d699f4b30bbccf095f5da9e50220f3b8d580d9e2758f0384a7c62d792c2a426160c53f3ee4a9efe5fe4e03de9d6c059c73ec455f88f1ec5650bbf4fa7be4851b21de169a4625313958412b4e6dccdd174e011fc07262089ea8"}]}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x8b, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x8, 0xc0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "c7b6bb"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x7fff, 0x8, 0xf}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xd5b5, 0x4, 0x8, 0x3, 0x5}, @country_functional={0xa, 0x24, 0x7, 0x9, 0x6, [0x79b, 0x1000]}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0xe1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0xc, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x4, 0xb}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xfe, 0x4, 0xff, 0xff, 0x4}, 0x101, &(0x7f0000001580)={0x5, 0xf, 0x101, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0xf, 0xf6, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xfd, 0x0, 0x434a}, @generic={0xe4, 0x10, 0xb, "3668b4f122d8b0f9e45a50b89561cb99cb335b3ce0f67cd8fc8150ece0ff02d417820e9f560de5ac2b44bf4f5676f291ffff9fea16c2ba33cd377c563880759d07c37f5ce07a7a7094a2ddb04b53a91a499283b05bd105f51727605e660a232542b67a2da378a061f3a6166e5bc3aa9f8f26456cad72a2aa816a36c90b9b3bbee3336d10b11e23fd37b80d7399335df84fc17dcacf9d3694160c8501caada1d6d24e341aed9742f98d498db815c0a3e34cb510e7ac93f10a38115737b7b901a5b2abc7ae4099e5f911acc0c7fae36081241848842a85747ce200e2630d8e3769e9"}]}, 0x5, [{0x82, &(0x7f00000016c0)=@string={0x82, 0x3, "a64ff6eae85e0ba2f550aa6fc18a1ae67aeee1f6ab696480ba0ab015d5197e860c84724502514611830234100d300dfd1b69a576f031aa22abb7e0951017130e6f7b45037cf0d2ce976adf39ca8355625ad1ae6880cdb1d69515a236af95b105a39297c612b5c5bc724c9d87ccda99125bbd20b0f8354fd354f514a29e832c74"}}, {0xfc, &(0x7f0000001780)=@string={0xfc, 0x3, "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"}}, {0xf3, &(0x7f0000001880)=@string={0xf3, 0x3, "455a01e99f8751508394000471764cce3b465505c7f26ce86fe1ec40ff208234a91d515ecef109e379e66b850a8dfc67afbd881c68625ed7b52420e95883b9494cd62861c0e68cc432c14dc9de2f0418e5a0cc31adf2a9507e8c158b4d56ce28d4c5a08701d81f24f135ba9e8d27cef5b4f9e35c521b2fcc06ca485371c8e13dfd3ca215a3fce27419cf2392cf4fe764dac812811798c8c2e0c6d992dcb353662a3805c265b951281c6900f247bd25e2fe9238a30619f01f0da67b292cfbb0d0a11f378dd7c1d23e61cdac96ab296e92510c4f1e3b60e10ed0423661e3e32916a41d59ca96b7597a756b7490166db9f0c4"}}, {0xb9, &(0x7f0000001980)=@string={0xb9, 0x3, "18614970cf9890b0e8c6597323487327eb0ebfb6a3a6fc9c2dfe0bf07cada1801c616897a26f7fb77ac8bf0e15ed6fa62b366bc5434711ae8802015af3e7737028b8782aec0e18a1530e1d7579fa6806e92ab24e377ca67834b17f9ba97c57d4892a485f3642c5c08a4b6b164f3c8ef50b7c571260f14d32a97587a09592f1fa3b43d54372101e9f9e0b08335a813acdf0d8727f8e292f0ac964bd44b3f61db7d4d1bced962b3789ce7d0ee5334eb03a73db360a20884a"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3401}}]}) 5.019921814s ago: executing program 5 (id=824): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@dev, 0x0}, &(0x7f0000000740)=0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0xf, 0x0, 0x0, 0x20, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) io_uring_setup(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x4000400) ppoll(&(0x7f0000000100)=[{r7, 0x40}], 0x1, &(0x7f0000000140), 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4040004, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) vmsplice(r8, &(0x7f00000006c0)=[{&(0x7f0000000100)="51c67643cc7a8cb25e7c5e8e88585d4da877ab3631e0487458f43801fe7262c5fc522367e37917552d2756704b804cbd5074615c7a067a3a1d7fcc87c05d6c44d3e05adf5c59de8db0b77586dd53d6f8a5bb36ff9641e0c04fde3eabd665a92611d164f5216941747e018d096f41205a3453a5a83cc9ae7e9a7d06dcbf1e713c53542daf13841e1abd0ff41b06fd79f62e3db4c96f5861043842ca1c0d4e3f40fb6834e6ca3bf1251d37e888caf8c2aa8c56896b84702004e2b60e38", 0xbc}, {&(0x7f00000001c0)="17eaef8d3e44dff0294caf98252897a9bfcba39ff0887f50aac229de7c6ce11891085552a8e60d50f72e0e69587970009dc11059a4b725c34c573f1e3eb9920f747c2e2d73dab3ea70c802f9852ee236e57f4d87bfafd33af3dc6e8f03ad4e8433b7e51f7f3003b1cae79a021f226a5b7381311f7142b1f9e068f00fd71b0e8b1b23972c6c5936e66938ed4309571f1ae7c04862c355a1d2738de17caa9b5fd06d09bc50df5635106161adb4bfb14ec1e3a3715e34eabb26491483", 0xbb}, {&(0x7f0000000280)="c5aec053371232490c637c2a0aee96fbab92d3cf86eaa4fcb687acbff6ebd1014265aeca3432a6bb75b5cf408346a0af768347f9019e9e7814b160730fa53dc6bfd6962e942620407cb644148d5c24463ff48d509b", 0x55}, {&(0x7f0000000440)="6541ecd8ed206111ae4ff1a10ce1d3c6bb5a9680e003d85c1f2800cb4cbb053147c50019dc5f34736e611dd1344ba70df19719a1ce1090d9e6f67c432e8027042fbcd502120108371a84a62244e2cfeb0427866e39545263da30281218d8858a870b7fa8e10b1e23a96f5b8894ca4997adadec31e2023e971e119c621e6c30f7c9fb6c7bfca3fe60b8db6bae368c2e3ee15431efeb6f0502f9ad79e4b4f381c09ea969569aaeb2321313bd36c6d942ae011054706bf4b903a282fe34b4938d39c34680fbf792aef468f065b42a6646fedb433864357cc924", 0xd8}, {&(0x7f0000000340)="6a0134c9e89b3505ad7f2e", 0xb}, {&(0x7f0000000540)="9d94185ef6bf07ba892f610018157ee6190bead33d62e9effb51c21b6a1c42b77b48e27e4b9db9f780fefccd08265f8aa47e2e56d5512b27bf92d84bfd11279b602468ff338640226de2380265292d3619ee745aa0d0172d", 0x58}, {&(0x7f00000005c0)="b00750be94fde06cd16dc406f45908859a38299fe0da4f4ac1346a4e3cafe9af4cb6c1337c6c397d65c0bf92da7e398d1139848e2446306ce239816f5bfa042b4f21bbd0a6938dca909147e4e139c36f7581d2e1969e5bb936f63c0178d5309f7fef1c53872c655f033424857169900358b9d11c8d8794ef56371bf3a7e1794580420fc78ebea6966121edc41f2c7f6d3f01e9ce0e4fb0ae16edbbe8d04ed019e1df1829f54543c8bae18afef8fd97b2623edf6ac73c40067792e07a2e039db3cf836eda2da66d42fc06866e4c6b25", 0xcf}], 0x7, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 4.977503352s ago: executing program 4 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ptrace(0x10, 0x0) process_mrelease(0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12b3, 0x4e73, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c2d94f90324fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000380), 0x8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x418402, 0x1) rmdir(&(0x7f00000001c0)='./file0\x00') 4.056358733s ago: executing program 5 (id=826): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000200)={0x1, 0x0, 0x9, 0x0, r2}) 3.839771872s ago: executing program 1 (id=827): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$msr(r5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x4, 0x3, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x71, 0x7, 0xfffff000, 0x103, 0x0, 0x5, 0x5c8d, 0x91, 0x1, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0xcb, 0x6, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x6000000, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x1, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x11fffe, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2e, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x5, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff7441, 0xfff]}, 0x45c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x19, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x1, 0xb, 0x1, 0xa, 0x0, 0x8}, @ldst={0x3, 0x2, 0x6, 0x2, 0xa, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xb, 0xe, 0xa, 0xffffffffffffffe0, 0x10}, @exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0xc, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r5, r4, r5, r4, r5, r5, r5, r5], &(0x7f0000000ac0)=[{0x4, 0x4, 0x8, 0xb}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000bc0)='bcache_btree_gc_coalesce\x00', r5, 0x0, 0x2000000003}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x3f000000, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x10, 0xd3, &(0x7f0000000140)="780c2973145bd22ab446f0bbe93599e4", &(0x7f0000000200)=""/211, 0x4, 0x0, 0x6c, 0x6, &(0x7f0000000380)="5c975b6481002578bc4cc743f9609e80786b22695b6af65a12547faf900a519b51a462652cc7f873acf2c22b6bdf9b9333287975e3a06ae05bd7fc1f99c4a6dbb4b081f5862b8c547ab5e97152ee617643cc03f8b3a99412e1527a1c1c4891477f969ff545932d263c389401", &(0x7f0000000180)="2241211738b5", 0x5, 0x0, 0xe}, 0x50) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.715212456s ago: executing program 5 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0057b88892a1c600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10200, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18001d0000000000181100001e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(r2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) unshare(0x22020400) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r8, 0x1, &(0x7f0000000300)=0x3) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000300)=""/205, 0xcd}], 0x1, 0x3, 0x1f) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000000)) 2.248863221s ago: executing program 4 (id=829): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x6, 0x0, 0x23}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x8, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x8) bind$can_raw(r1, &(0x7f0000000240), 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.876417231s ago: executing program 3 (id=830): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x1f, 0x3, 0x5}) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000003c0)=[{0x0, 0x0, 0x0}], 0x1, 0x4044002) recvmmsg(r6, 0x0, 0x0, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000000002010400000000c12690e65a4b20000000000a0000000400018004000380300002802c00018014000300fe8000000000000000000000000000bb14000400fc0100000000000000"], 0x4c}}, 0x2004085c) openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 1.611946383s ago: executing program 4 (id=831): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 603.564754ms ago: executing program 3 (id=832): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000001f0300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 398.804057ms ago: executing program 4 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) 326.603681ms ago: executing program 2 (id=834): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) readv(r3, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1) 323.479671ms ago: executing program 5 (id=835): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x56, 0xffffffff}) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x80000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="706eec1f", 0x4}, {&(0x7f0000000100)="d9f852cc3280ddd6e235830cd89290604fb8d8c5e06d97d56516a6b6413c57e6243d5d17ed423de220527619d1b16e365ab9ac3943d0c18dec52dd33aa8f8664e4ac57bc6a8268a41ae7eb0a3ab35faa716b", 0x52}, {&(0x7f0000000180)="fba29251b2f8c059117fde87a516d30a1d8bc6440d900e382de628848c56d2a968052b278b47041d5373a107717bf46cfa962d781eee4ea7f1c3eb4e594035351656a4b8b4cd2f688cd7fc5791d073d8422e2e361eca6d59767c9daf2789b9844909f2b1a0adadabb134b08e84b47a8e86a810ed0eb1400d665a6ecf61ca14ad6da3c0875b69000daf43b93912d46afb82c27610b5d734a82bbbdcaa05b7ebf000c56c69b72d25eba7f9e4", 0xab}, {&(0x7f0000000700)="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", 0x165}, {&(0x7f0000000040)="f4a583dfc363313c77e374ed68d278c282faf8fa56a151ef1038", 0x1a}, {&(0x7f0000000380)="62275fd136bf7da489c5c518ff09178f75299a1611361a48e1ca7d97b172d9eb6ca711c34af78c7852e009a3939529828601", 0x32}, {&(0x7f0000000400)="a5df2e3a2234aeac00000000817e47", 0xf}], 0x7}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='mountstats\x00') read$FUSE(r3, &(0x7f000000c1c0)={0x2020}, 0x2020) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 203.919897ms ago: executing program 3 (id=836): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x2000000, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$kcm(0x2, 0x3, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x9100}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x20}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x2a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5}, {"0f44"}}}}, 0x38) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) ptrace$setregset(0x4205, 0x0, 0x202, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 5 (id=837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0x180000}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) fanotify_init(0x23, 0x101000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r6, 0x40047452, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r3) kernel console output (not intermixed with test programs): atadv-on-batadv check for ip6gretap1 [ 204.961791][ T7003] batman_adv: batadv0: Adding interface: ip6gretap1 [ 204.986101][ T5917] usb 2-1: 0:2 : does not exist [ 204.998575][ T7003] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.035268][ T5917] usb 2-1: unit 48 not found! [ 205.076979][ T7003] batman_adv: batadv0: Interface activated: ip6gretap1 [ 205.083800][ T5917] usb 2-1: USB disconnect, device number 13 [ 205.280756][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.337965][ T7052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.322'. [ 206.938863][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.167531][ T5903] usb 1-1: USB disconnect, device number 12 [ 207.240531][ T5917] kernel write not supported for file /amidi2 (pid: 5917 comm: kworker/0:6) [ 210.264046][ T7106] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 210.320182][ T7106] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.889550][ T7110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.897312][ T7110] IPv6: NLM_F_CREATE should be set when creating new route [ 210.904704][ T7110] IPv6: NLM_F_CREATE should be set when creating new route [ 211.809613][ T29] audit: type=1800 audit(1740403851.952:32): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.342" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 211.982048][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 212.032332][ T7109] overlayfs: disabling nfs_export due to verity=on [ 212.038985][ T7109] overlayfs: missing 'lowerdir' [ 212.300243][ T7138] netlink: 216 bytes leftover after parsing attributes in process `syz.2.348'. [ 212.338703][ T975] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.348547][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'. [ 212.358429][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 212.590665][ T5917] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 212.731658][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 213.068893][ T975] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 213.112659][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 213.134449][ T975] usb 4-1: config 8 has no interface number 0 [ 213.144173][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 213.166147][ T975] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 213.195482][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 213.220039][ T975] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.251364][ T5917] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 213.263689][ T975] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 213.279016][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.297772][ T975] usb 4-1: config 8 interface 39 has no altsetting 0 [ 213.304986][ T5917] usb 2-1: Product: syz [ 213.316601][ T5917] usb 2-1: Manufacturer: syz [ 213.324321][ T5917] usb 2-1: SerialNumber: syz [ 213.330734][ T975] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 213.351546][ T5917] usb 2-1: config 0 descriptor?? [ 213.356711][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.369908][ T7141] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 213.380237][ T975] usb 4-1: Product: syz [ 213.385543][ T975] usb 4-1: Manufacturer: syz [ 213.461362][ T5917] usb 2-1: ucan: probing device on interface #0 [ 213.579386][ T5917] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 213.585844][ T975] usb 4-1: SerialNumber: syz [ 213.615679][ T5917] usb 2-1: ucan: probe failed; try to update the device firmware [ 214.510711][ T5917] usb 2-1: USB disconnect, device number 14 [ 214.903223][ T975] ipheth 4-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 214.968598][ T975] ipheth 4-1:8.39: Apple iPhone USB Ethernet device attached [ 214.998560][ T5917] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 215.138176][ T5876] usb 4-1: USB disconnect, device number 9 [ 215.169157][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 215.197776][ T5917] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 215.227351][ T7177] overlay: Unknown parameter 'measure' [ 215.238563][ T5917] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.280529][ T5876] ipheth 4-1:8.39: Apple iPhone USB Ethernet now disconnected [ 215.296622][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 215.323289][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 215.368763][ T5917] usb 5-1: Product: syz [ 215.373009][ T5917] usb 5-1: Manufacturer: syz [ 215.377706][ T5917] usb 5-1: SerialNumber: syz [ 215.423405][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.603639][ T5917] appletouch 5-1:1.0: Could not find int-in endpoint [ 215.640708][ T8] usb 1-1: device descriptor read/64, error -71 [ 215.647426][ T5917] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 215.676375][ T5917] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 215.759165][ T5917] usb 5-1: USB disconnect, device number 12 [ 215.878563][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 216.078667][ T8] usb 1-1: device descriptor read/64, error -71 [ 216.266198][ T8] usb usb1-port1: attempt power cycle [ 216.329909][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.724617][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.734893][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 216.768485][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 216.781006][ T8] usb 1-1: device descriptor read/8, error -71 [ 216.828552][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.868110][ T9] usb 3-1: config 0 descriptor?? [ 217.018503][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 217.067430][ T8] usb 1-1: device descriptor read/8, error -71 [ 217.179305][ T8] usb usb1-port1: unable to enumerate USB device [ 217.311287][ T9] hid-steam 0003:28DE:1205.0009: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 217.572651][ T9] hid-steam 0003:28DE:1205.0009: Steam Controller 'XXXXXXXXXX' connected [ 217.586046][ T9] input: Steam Deck as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0009/input/input10 [ 217.608193][ T9] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0009/input/input11 [ 217.664632][ T9] hid-steam 0003:28DE:1205.000A: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 217.703280][ T9] usb 3-1: USB disconnect, device number 9 [ 217.801697][ T9] hid-steam 0003:28DE:1205.0009: Steam Controller 'XXXXXXXXXX' disconnected [ 218.338469][ T5876] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.399220][ T7240] netlink: 68 bytes leftover after parsing attributes in process `syz.0.377'. [ 218.758597][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 218.774021][ T5876] usb 2-1: config 0 has no interfaces? [ 218.857175][ T5876] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 218.874358][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.168925][ T5876] usb 2-1: config 0 descriptor?? [ 219.680555][ T9] usb 2-1: USB disconnect, device number 15 [ 219.758584][ T5876] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 219.811903][ T7264] netlink: 172 bytes leftover after parsing attributes in process `syz.0.385'. [ 219.938416][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 219.955385][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.971542][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.983437][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.006910][ T5876] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.021727][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.072555][ T5876] usb 4-1: config 0 descriptor?? [ 220.463868][ T7275] netlink: 76 bytes leftover after parsing attributes in process `syz.4.389'. [ 220.751431][ T5876] usbhid 4-1:0.0: can't add hid device: -71 [ 220.766620][ T5876] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 220.801957][ T5876] usb 4-1: USB disconnect, device number 10 [ 221.284072][ T7288] FAULT_INJECTION: forcing a failure. [ 221.284072][ T7288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.297680][ T7288] CPU: 1 UID: 0 PID: 7288 Comm: syz.2.393 Not tainted 6.14.0-rc4-syzkaller #0 [ 221.297706][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.297718][ T7288] Call Trace: [ 221.297726][ T7288] [ 221.297735][ T7288] dump_stack_lvl+0x241/0x360 [ 221.297764][ T7288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.297786][ T7288] ? __pfx__printk+0x10/0x10 [ 221.297825][ T7288] ? snprintf+0xda/0x120 [ 221.297858][ T7288] should_fail_ex+0x40a/0x550 [ 221.297893][ T7288] _copy_to_user+0x31/0xb0 [ 221.297922][ T7288] simple_read_from_buffer+0xca/0x150 [ 221.297959][ T7288] proc_fail_nth_read+0x1e9/0x250 [ 221.298006][ T7288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.298044][ T7288] ? rw_verify_area+0x243/0x630 [ 221.298069][ T7288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.298105][ T7288] vfs_read+0x1f8/0xb40 [ 221.298132][ T7288] ? fdget_pos+0x254/0x320 [ 221.298155][ T7288] ? __pfx___mutex_lock+0x10/0x10 [ 221.298184][ T7288] ? __pfx_vfs_read+0x10/0x10 [ 221.298213][ T7288] ? __fget_files+0x2a/0x410 [ 221.298237][ T7288] ? __fget_files+0x395/0x410 [ 221.298256][ T7288] ? __fget_files+0x2a/0x410 [ 221.298287][ T7288] ksys_read+0x18f/0x2b0 [ 221.298317][ T7288] ? __pfx_ksys_read+0x10/0x10 [ 221.298347][ T7288] ? do_syscall_64+0x100/0x230 [ 221.298377][ T7288] ? do_syscall_64+0xb6/0x230 [ 221.298407][ T7288] do_syscall_64+0xf3/0x230 [ 221.298435][ T7288] ? clear_bhb_loop+0x35/0x90 [ 221.298469][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.298497][ T7288] RIP: 0033:0x7f1cf1f8bb7c [ 221.298516][ T7288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 221.298533][ T7288] RSP: 002b:00007f1cefdf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.298555][ T7288] RAX: ffffffffffffffda RBX: 00007f1cf21a6160 RCX: 00007f1cf1f8bb7c [ 221.298570][ T7288] RDX: 000000000000000f RSI: 00007f1cefdf60a0 RDI: 0000000000000006 [ 221.298583][ T7288] RBP: 00007f1cefdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.298595][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.298607][ T7288] R13: 0000000000000000 R14: 00007f1cf21a6160 R15: 00007ffc961b91d8 [ 221.298638][ T7288] [ 223.546784][ T29] audit: type=1326 audit(1740403863.692:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.4.395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf60d8d169 code=0x0 [ 226.253486][ T7324] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 226.268598][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 226.428588][ T5876] usb 2-1: device descriptor read/64, error -71 [ 226.490016][ T7331] bond0: option miimon: invalid value (18446744073072017407) [ 226.537525][ T7331] bond0: option miimon: allowed values 0 - 2147483647 [ 226.726751][ T7338] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.411' resets device [ 226.908654][ T5876] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 227.066853][ T5876] usb 2-1: device descriptor read/64, error -71 [ 227.208876][ T5876] usb usb2-port1: attempt power cycle [ 227.558886][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 227.593780][ T5876] usb 2-1: device descriptor read/8, error -71 [ 227.868581][ T5876] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.699368][ T5876] usb 2-1: device descriptor read/8, error -71 [ 228.833687][ T5876] usb usb2-port1: unable to enumerate USB device [ 229.424688][ T5917] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.681908][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 229.697590][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 229.715133][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.724785][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.732926][ T5917] usb 5-1: Product: syz [ 229.742553][ T5917] usb 5-1: Manufacturer: syz [ 229.905184][ T5917] usb 5-1: SerialNumber: syz [ 230.081732][ T5917] usb 5-1: config 0 descriptor?? [ 230.092051][ T5917] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 230.150296][ T5917] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 230.951457][ T7369] (unnamed net_device) (uninitialized): down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 230.978589][ T7369] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 231.031530][ T7369] Cannot find map_set index 0 as target [ 231.155869][ T5917] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 231.315424][ T7400] x_tables: duplicate underflow at hook 1 [ 232.089345][ T7407] netlink: 165 bytes leftover after parsing attributes in process `syz.2.434'. [ 232.749154][ T7414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.202548][ T7425] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 233.202548][ T7425] The task syz.3.439 (7425) triggered the difference, watch for misbehavior. [ 233.348960][ T51] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 233.427440][ T5917] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 233.438742][ T5917] em28xx 5-1:0.0: board has no eeprom [ 233.508837][ T5917] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 233.520388][ T51] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 233.522497][ T5917] em28xx 5-1:0.0: dvb set to bulk mode. [ 233.529479][ T51] usb 1-1: config 0 has no interface number 0 [ 233.542607][ T51] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 233.549253][ T8] em28xx 5-1:0.0: Binding DVB extension [ 233.554624][ T51] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 233.574036][ T51] usb 1-1: config 0 interface 255 has no altsetting 0 [ 233.589222][ T51] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 233.599116][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.674198][ T51] usb 1-1: config 0 descriptor?? [ 233.712937][ T51] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 233.726584][ T5917] usb 5-1: USB disconnect, device number 13 [ 233.765006][ T5917] em28xx 5-1:0.0: Disconnecting em28xx [ 233.813214][ T8] em28xx 5-1:0.0: Registering input extension [ 233.852160][ T5917] em28xx 5-1:0.0: Closing input extension [ 234.299309][ T7435] bridge0: port 3(erspan0) entered blocking state [ 234.306376][ T7435] bridge0: port 3(erspan0) entered disabled state [ 234.314271][ T7435] erspan0: entered allmulticast mode [ 234.327010][ T7435] erspan0: entered promiscuous mode [ 234.343567][ T7435] bridge0: port 3(erspan0) entered blocking state [ 234.351610][ T7435] bridge0: port 3(erspan0) entered forwarding state [ 234.399129][ T51] usb 1-1: USB disconnect, device number 17 [ 234.456920][ T5917] em28xx 5-1:0.0: Freeing device [ 234.615703][ T7438] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 236.513179][ T7457] block device autoloading is deprecated and will be removed. [ 237.388795][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.538874][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 237.552536][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 237.574704][ T8] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 237.584460][ T7485] wg0: entered promiscuous mode [ 237.598793][ T7485] wg0: entered allmulticast mode [ 237.604019][ T8] usb 3-1: Product: syz [ 237.608252][ T8] usb 3-1: Manufacturer: syz [ 237.638511][ T8] usb 3-1: SerialNumber: syz [ 237.662537][ T8] usb 3-1: config 0 descriptor?? [ 237.846900][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 238.043004][ T5903] usb 3-1: USB disconnect, device number 10 [ 240.038570][ T5903] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 240.878858][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 240.895614][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.936443][ T5903] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 240.959732][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.991085][ T5903] usb 2-1: Product: syz [ 241.842435][ T5903] usb 2-1: Manufacturer: syz [ 241.847080][ T5903] usb 2-1: SerialNumber: syz [ 241.865908][ T5903] usb 2-1: config 0 descriptor?? [ 241.908605][ T7519] ======================================================= [ 241.908605][ T7519] WARNING: The mand mount option has been deprecated and [ 241.908605][ T7519] and is ignored by this kernel. Remove the mand [ 241.908605][ T7519] option from the mount to silence this warning. [ 241.908605][ T7519] ======================================================= [ 241.943480][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.025525][ T5903] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 243.049660][ T7519] 9pnet_fd: Insufficient options for proto=fd [ 243.068806][ T5903] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 243.180915][ T5903] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 243.470939][ T5903] usb 2-1: USB disconnect, device number 20 [ 243.858194][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 244.132990][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 244.192207][ T7545] vlan2: entered allmulticast mode [ 244.197409][ T7545] bridge0: entered allmulticast mode [ 244.208250][ T7545] bridge0: left allmulticast mode [ 245.818159][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.856041][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.890008][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.906389][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.926913][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.949661][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.973557][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.981840][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 245.991120][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.004517][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.022112][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.034680][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.215696][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.241570][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.248661][ T58] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.274352][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.291645][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.304906][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.313182][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.321095][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.329276][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.345327][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.360654][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.377975][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.386772][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.388671][ T58] usb 4-1: device descriptor read/64, error -71 [ 246.394715][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.429488][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.448158][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.465559][ T9] hid-generic 0006:0003:0003.000B: unknown main item tag 0x0 [ 246.495905][ T9] hid-generic 0006:0003:0003.000B: hidraw0: VIRTUAL HID v0.00 Device [syz1] on syz0 [ 246.669081][ T58] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 246.798462][ T58] usb 4-1: device descriptor read/64, error -71 [ 246.933950][ T58] usb usb4-port1: attempt power cycle [ 247.348820][ T58] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.473591][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 247.870889][ T58] usb 4-1: device descriptor read/8, error -71 [ 248.140482][ T9] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 248.148984][ T9] usb 5-1: config 0 has no interface number 0 [ 248.242395][ T58] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 248.960168][ T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 248.977212][ T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.987614][ T9] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.002815][ T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 249.011998][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.023042][ T9] usb 5-1: config 0 descriptor?? [ 249.033588][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 249.085815][ T58] usb 4-1: device descriptor read/8, error -71 [ 249.199498][ T58] usb usb4-port1: unable to enumerate USB device [ 249.221743][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 249.231092][ T5876] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 249.242948][ T9] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 249.292435][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.309593][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 249.398275][ T9] usb 5-1: USB disconnect, device number 14 [ 249.419760][ T5876] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.442741][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.507066][ T5876] usb 1-1: config 0 descriptor?? [ 249.551619][ T5876] cp210x 1-1:0.0: cp210x converter detected [ 249.752714][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.921458][ T5136] Bluetooth: hci5: sending frame failed (-49) [ 249.929086][ T5828] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 250.178493][ T51] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 250.448583][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 250.475338][ T51] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.528898][ T51] usb 3-1: too many configurations: 234, using maximum allowed: 8 [ 250.575854][ T51] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 250.607403][ T51] usb 3-1: can't read configurations, error -71 [ 251.195225][ T7633] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3013113693 (3013113693 ns) > initial count (230350673 ns). Using initial count to start timer. [ 251.488575][ T5876] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 251.496140][ T5876] cp210x 1-1:0.0: querying part number failed [ 251.571638][ T5876] usb 1-1: cp210x converter now attached to ttyUSB0 [ 251.647571][ T5876] usb 1-1: USB disconnect, device number 18 [ 251.683955][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 251.842914][ T5876] cp210x 1-1:0.0: device disconnected [ 251.959230][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 252.116341][ T7651] sctp: [Deprecated]: syz.1.504 (pid 7651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.116341][ T7651] Use struct sctp_sack_info instead [ 252.393650][ T5876] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 252.578489][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 252.913367][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.925587][ T5876] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 252.945149][ T5876] usb 1-1: can't read configurations, error -71 [ 253.071650][ T29] audit: type=1326 audit(1740403893.222:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.2.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x0 [ 253.289006][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 254.016345][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.043620][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 254.085284][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.133195][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 254.184025][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 254.198485][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 254.222732][ T9] usb 5-1: Manufacturer: syz [ 254.251734][ T9] usb 5-1: config 0 descriptor?? [ 254.411719][ T7687] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 254.438575][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 254.558714][ T5843] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 254.614442][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 255.608549][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.638674][ T8] usb 2-1: Product: syz [ 255.643485][ T5843] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 255.728489][ T8] usb 2-1: Manufacturer: syz [ 255.733243][ T8] usb 2-1: SerialNumber: syz [ 255.743529][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.765237][ T5843] usb 3-1: Product: syz [ 255.772449][ T5843] usb 3-1: Manufacturer: syz [ 255.777953][ T8] usb 2-1: config 0 descriptor?? [ 255.784216][ T5843] usb 3-1: SerialNumber: syz [ 255.810684][ T5843] usb 3-1: config 0 descriptor?? [ 255.858837][ T9] rc_core: IR keymap rc-hauppauge not found [ 255.922182][ T9] Registered IR keymap rc-empty [ 255.943529][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.018006][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.084904][ T7681] FAULT_INJECTION: forcing a failure. [ 256.084904][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 256.260071][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 256.265915][ T5877] usb 2-1: USB disconnect, device number 21 [ 256.327067][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.2.514 Not tainted 6.14.0-rc4-syzkaller #0 [ 256.327099][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.327111][ T7681] Call Trace: [ 256.327118][ T7681] [ 256.327127][ T7681] dump_stack_lvl+0x241/0x360 [ 256.327159][ T7681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.327174][ T7681] ? __pfx__printk+0x10/0x10 [ 256.327199][ T7681] ? fs_reclaim_acquire+0x93/0x130 [ 256.327219][ T7681] ? __pfx___might_resched+0x10/0x10 [ 256.327243][ T7681] should_fail_ex+0x40a/0x550 [ 256.327268][ T7681] should_failslab+0xac/0x100 [ 256.327292][ T7681] __kmalloc_noprof+0xdd/0x4c0 [ 256.327307][ T7681] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 256.327326][ T7681] tomoyo_realpath_from_path+0xcf/0x5e0 [ 256.327351][ T7681] tomoyo_path_number_perm+0x239/0x770 [ 256.327376][ T7681] ? tomoyo_path_number_perm+0x209/0x770 [ 256.327398][ T7681] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.327421][ T7681] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 256.327454][ T7681] ? rcu_read_unlock_special+0x497/0x570 [ 256.327489][ T7681] ? __rcu_read_unlock+0xa1/0x110 [ 256.327508][ T7681] ? __fget_files+0x2a/0x410 [ 256.327526][ T7681] ? __fget_files+0x2a/0x410 [ 256.327544][ T7681] security_file_ioctl+0xc6/0x2a0 [ 256.327570][ T7681] __se_sys_ioctl+0x46/0x170 [ 256.327591][ T7681] do_syscall_64+0xf3/0x230 [ 256.327617][ T7681] ? clear_bhb_loop+0x35/0x90 [ 256.327641][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.327662][ T7681] RIP: 0033:0x7f1cf1f8d169 [ 256.327675][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.327688][ T7681] RSP: 002b:00007f1cf2d3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.327705][ T7681] RAX: ffffffffffffffda RBX: 00007f1cf21a5fa0 RCX: 00007f1cf1f8d169 [ 256.327716][ T7681] RDX: 0000400000000040 RSI: 00000000c0045520 RDI: 0000000000000006 [ 256.327726][ T7681] RBP: 00007f1cf2d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 256.327736][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.327744][ T7681] R13: 0000000000000000 R14: 00007f1cf21a5fa0 R15: 00007ffc961b91d8 [ 256.327766][ T7681] [ 256.547290][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.686449][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 256.808729][ T7681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.816514][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.837884][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.877185][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.906024][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.929844][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.948489][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.968479][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.988461][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 257.008513][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 257.037406][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 257.068529][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 257.118175][ T58] usb 3-1: USB disconnect, device number 13 [ 257.128560][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 257.196223][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 257.336087][ T29] audit: type=1326 audit(1740403897.482:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7708 comm="syz.3.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb778d169 code=0x0 [ 257.357312][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 257.445497][ T9] usb 5-1: USB disconnect, device number 15 [ 259.558723][ T5876] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 259.560833][ T7733] netlink: 104 bytes leftover after parsing attributes in process `syz.0.529'. [ 259.896878][ T7735] UBIFS error (pid: 7735): cannot open "/dev/loop3", error -22 [ 260.009156][ T29] audit: type=1326 audit(1740403900.162:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.3.528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb778d169 code=0x0 [ 260.048426][ T5876] usb 2-1: device descriptor read/64, error -71 [ 260.241367][ T5828] block nbd3: Receive control failed (result -104) [ 260.254315][ T7729] block nbd3: shutting down sockets [ 260.308535][ T5876] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 260.398638][ T5877] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 260.641445][ T5876] usb 2-1: device descriptor read/64, error -71 [ 260.758921][ T5876] usb usb2-port1: attempt power cycle [ 260.908497][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 260.923130][ T5877] usb 3-1: config index 0 descriptor too short (expected 548, got 36) [ 260.947926][ T5877] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 260.986584][ T5877] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 261.008634][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 261.034882][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.057267][ T5877] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 261.088176][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.114354][ T5877] usb 3-1: config 0 descriptor?? [ 261.119529][ T5876] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 261.142094][ T5877] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 261.162504][ T5876] usb 2-1: device descriptor read/8, error -71 [ 261.458622][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 261.499714][ T5876] usb 2-1: device descriptor read/8, error -71 [ 261.618883][ T5876] usb usb2-port1: unable to enumerate USB device [ 262.152277][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.174685][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.194430][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.215747][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.366636][ T29] audit: type=1326 audit(1740403902.512:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.4.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf60d8d169 code=0x0 [ 262.387505][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.799156][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.241672][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.273634][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.316098][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.346010][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.364662][ T9] usb 4-1: SerialNumber: syz [ 263.520230][ T5917] usb 3-1: USB disconnect, device number 14 [ 263.529742][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.838525][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 263.852290][ T8] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 263.869109][ T8] usb 2-1: config 0 has no interface number 0 [ 263.875517][ T8] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.887569][ T8] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 263.929409][ T8] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 263.953189][ T8] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 264.393821][ T8] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 264.485925][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 264.642116][ T8] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.692315][ T8] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 264.820078][ T8] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29797, setting to 1024 [ 264.845232][ T8] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 264.856313][ T8] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.889007][ T5917] usb 3-1: device descriptor read/64, error -71 [ 264.916241][ T8] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 264.952108][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.966847][ T8] usb 2-1: Product: syz [ 265.012003][ T8] usb 2-1: Manufacturer: syz [ 265.036600][ T8] usb 2-1: SerialNumber: syz [ 265.069511][ T8] usb 2-1: config 0 descriptor?? [ 265.089708][ T7796] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 265.129763][ T7796] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 265.162115][ T8] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 265.178798][ T5917] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 265.204756][ T8] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 265.298761][ T8] scsi host1: microtekX6 [ 265.347341][ T8] usb 2-1: USB disconnect, device number 26 [ 265.360951][ T12] microtek usb (rev 0.4.3): error -19 submitting URB [ 265.378677][ T5917] usb 3-1: device descriptor read/64, error -71 [ 265.398667][ T59] microtek usb (rev 0.4.3): error -19 submitting URB [ 265.448799][ T59] microtek usb (rev 0.4.3): error -19 submitting URB [ 265.499018][ T5917] usb usb3-port1: attempt power cycle [ 265.878572][ T5917] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.919599][ T5917] usb 3-1: device descriptor read/8, error -71 [ 265.994272][ T7822] Cannot find del_set index 0 as target [ 266.155685][ T9] usb 4-1: 0:2 : does not exist [ 266.179176][ T5917] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 266.207420][ T9] usb 4-1: unit 5 not found! [ 266.254269][ T5917] usb 3-1: device descriptor read/8, error -71 [ 266.295794][ T9] usb 4-1: USB disconnect, device number 16 [ 266.324366][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 266.399993][ T5917] usb usb3-port1: unable to enumerate USB device [ 267.549614][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 267.656061][ T7835] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 267.713731][ T7840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.555'. [ 267.728641][ T7835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.774138][ T9] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 267.897085][ T29] audit: type=1326 audit(1740403908.042:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.2.555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x0 [ 267.931018][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.955257][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.972831][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.994260][ T9] usb 4-1: SerialNumber: syz [ 268.226798][ T9] usb 4-1: 0:2 : does not exist [ 268.348520][ T9] usb 4-1: unit 5: unexpected type 0x0e [ 268.535292][ T9] usb 4-1: USB disconnect, device number 17 [ 269.469676][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.494245][ T5917] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 269.639335][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 269.710090][ T5917] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 269.738652][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.837258][ T5917] usb 2-1: config 0 descriptor?? [ 269.911901][ T8] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 269.971922][ T5917] cp210x 2-1:0.0: cp210x converter detected [ 270.080543][ T8] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 270.281844][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.333641][ T7858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.348292][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.389181][ T8] usb 5-1: config 0 has no interface number 0 [ 270.441054][ T8] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 270.482680][ T8] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 270.548518][ T8] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.586539][ T8] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.618104][ T29] audit: type=1326 audit(1740403910.762:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7861 comm="syz.0.564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f38f8d169 code=0x0 [ 270.643560][ T8] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 270.653151][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.665389][ T8] usb 5-1: config 0 descriptor?? [ 270.678547][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 270.772173][ T5876] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 271.721922][ T8] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 271.757371][ T5917] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 271.928540][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 272.083913][ T5876] usb 3-1: config 0 has no interfaces? [ 272.087336][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.108470][ T5876] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 272.142693][ T5917] cp210x 2-1:0.0: querying part number failed [ 272.173855][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.469449][ T5876] usb 3-1: config 0 descriptor?? [ 272.489036][ T5917] usb 2-1: cp210x converter now attached to ttyUSB0 [ 272.514206][ T8] usb 5-1: MIDIStreaming interface descriptor not found [ 272.549258][ T5917] usb 2-1: USB disconnect, device number 27 [ 272.590512][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 272.635860][ T5917] cp210x 2-1:0.0: device disconnected [ 272.682879][ T7884] FAULT_INJECTION: forcing a failure. [ 272.682879][ T7884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.751708][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.3.569 Not tainted 6.14.0-rc4-syzkaller #0 [ 272.751738][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.751753][ T7884] Call Trace: [ 272.751759][ T7884] [ 272.751766][ T7884] dump_stack_lvl+0x241/0x360 [ 272.751789][ T7884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.751804][ T7884] ? __pfx__printk+0x10/0x10 [ 272.751835][ T7884] should_fail_ex+0x40a/0x550 [ 272.751860][ T7884] prepare_alloc_pages+0x1da/0x5b0 [ 272.751887][ T7884] __alloc_frozen_pages_noprof+0x16f/0x710 [ 272.751910][ T7884] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.751940][ T7884] ? __pfx_lock_acquire+0x10/0x10 [ 272.751964][ T7884] alloc_pages_mpol+0x311/0x660 [ 272.751992][ T7884] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 272.752023][ T7884] vma_alloc_folio_noprof+0x12b/0x260 [ 272.752049][ T7884] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 272.752080][ T7884] folio_prealloc+0x2e/0x170 [ 272.752100][ T7884] __handle_mm_fault+0x3e4b/0x70f0 [ 272.752137][ T7884] ? __pfx___handle_mm_fault+0x10/0x10 [ 272.752163][ T7884] ? mt_find+0x2a9/0x920 [ 272.752185][ T7884] ? __pfx_lock_release+0x10/0x10 [ 272.752215][ T7884] ? mt_find+0x2a9/0x920 [ 272.752235][ T7884] ? mt_find+0x6c8/0x920 [ 272.752261][ T7884] ? __pfx_mt_find+0x10/0x10 [ 272.752293][ T7884] ? find_vma+0xf9/0x170 [ 272.752310][ T7884] ? __pfx_find_vma+0x10/0x10 [ 272.752329][ T7884] handle_mm_fault+0x2c1/0x7e0 [ 272.752353][ T7884] exc_page_fault+0x2b9/0x8b0 [ 272.752371][ T7884] ? __might_fault+0xaa/0x120 [ 272.752391][ T7884] asm_exc_page_fault+0x26/0x30 [ 272.752411][ T7884] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 272.752426][ T7884] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 272.752450][ T7884] RSP: 0018:ffffc90002eafb68 EFLAGS: 00050246 [ 272.752465][ T7884] RAX: ffffffff84ed6601 RBX: 0000400000003f80 RCX: 0000000000000040 [ 272.752476][ T7884] RDX: 0000000000000000 RSI: ffffc90002eafc00 RDI: 0000400000003f40 [ 272.752486][ T7884] RBP: ffffc90002eafcb0 R08: ffffc90002eafc3f R09: 1ffff920005d5f87 [ 272.752497][ T7884] R10: dffffc0000000000 R11: fffff520005d5f88 R12: 0000000000000040 [ 272.752507][ T7884] R13: 00007ffffffff000 R14: ffffc90002eafc00 R15: 0000400000003f40 [ 272.752524][ T7884] ? _copy_from_user+0x41/0xb0 [ 272.752548][ T7884] _copy_to_user+0x8b/0xb0 [ 272.752568][ T7884] rng_dev_read+0x3ed/0x720 [ 272.752589][ T7884] ? __pfx_rng_dev_read+0x10/0x10 [ 272.752609][ T7884] ? bpf_lsm_file_permission+0x9/0x10 [ 272.752630][ T7884] ? rw_verify_area+0x243/0x630 [ 272.752648][ T7884] ? __pfx_rng_dev_read+0x10/0x10 [ 272.752666][ T7884] vfs_read+0x1f8/0xb40 [ 272.752695][ T7884] ? __pfx_vfs_read+0x10/0x10 [ 272.752712][ T7884] ? do_sys_openat2+0x17a/0x1d0 [ 272.752729][ T7884] ? __fget_files+0x2a/0x410 [ 272.752745][ T7884] ? __fget_files+0x395/0x410 [ 272.752759][ T7884] ? __fget_files+0x2a/0x410 [ 272.752780][ T7884] ksys_read+0x18f/0x2b0 [ 272.752800][ T7884] ? __pfx_ksys_read+0x10/0x10 [ 272.752820][ T7884] ? do_syscall_64+0x100/0x230 [ 272.752841][ T7884] ? do_syscall_64+0xb6/0x230 [ 272.752863][ T7884] do_syscall_64+0xf3/0x230 [ 272.752882][ T7884] ? clear_bhb_loop+0x35/0x90 [ 272.752906][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.752926][ T7884] RIP: 0033:0x7f6fb778d169 [ 272.752939][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.752951][ T7884] RSP: 002b:00007f6fb864d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.752965][ T7884] RAX: ffffffffffffffda RBX: 00007f6fb79a5fa0 RCX: 00007f6fb778d169 [ 272.752976][ T7884] RDX: 0000000000019000 RSI: 0000400000003f40 RDI: 0000000000000003 [ 272.752985][ T7884] RBP: 00007f6fb864d090 R08: 0000000000000000 R09: 0000000000000000 [ 272.752995][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.753003][ T7884] R13: 0000000000000000 R14: 00007f6fb79a5fa0 R15: 00007ffdec98cb48 [ 272.753024][ T7884] [ 272.773513][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 272.811624][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 273.133355][ T7890] FAULT_INJECTION: forcing a failure. [ 273.133355][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.770570][ T5903] usb 3-1: USB disconnect, device number 19 [ 273.776740][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.0.570 Not tainted 6.14.0-rc4-syzkaller #0 [ 273.776767][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.776780][ T7890] Call Trace: [ 273.776788][ T7890] [ 273.776797][ T7890] dump_stack_lvl+0x241/0x360 [ 273.776827][ T7890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.776848][ T7890] ? __pfx__printk+0x10/0x10 [ 273.776883][ T7890] ? __pfx_lock_release+0x10/0x10 [ 273.776921][ T7890] should_fail_ex+0x40a/0x550 [ 273.776956][ T7890] _copy_from_user+0x2d/0xb0 [ 273.776983][ T7890] ucma_join_multicast+0xac/0x160 [ 273.777021][ T7890] ? __pfx_ucma_join_multicast+0x10/0x10 [ 273.777071][ T7890] ? __lock_acquire+0x1397/0x2100 [ 273.777100][ T7890] ? __might_fault+0xaa/0x120 [ 273.777130][ T7890] ? __pfx_ucma_join_multicast+0x10/0x10 [ 273.777163][ T7890] ucma_write+0x2d9/0x420 [ 273.777203][ T7890] ? __pfx_ucma_write+0x10/0x10 [ 273.777232][ T7890] ? bpf_lsm_file_permission+0x9/0x10 [ 273.777260][ T7890] ? rw_verify_area+0x243/0x630 [ 273.777285][ T7890] ? __pfx_ucma_write+0x10/0x10 [ 273.777316][ T7890] vfs_write+0x29f/0xd10 [ 273.777344][ T7890] ? __mutex_unlock_slowpath+0x227/0x800 [ 273.777385][ T7890] ? __pfx_vfs_write+0x10/0x10 [ 273.777409][ T7890] ? do_sys_openat2+0x17a/0x1d0 [ 273.777432][ T7890] ? __fget_files+0x2a/0x410 [ 273.777456][ T7890] ? __fget_files+0x395/0x410 [ 273.777475][ T7890] ? __fget_files+0x2a/0x410 [ 273.777503][ T7890] ksys_write+0x18f/0x2b0 [ 273.777531][ T7890] ? __pfx_ksys_write+0x10/0x10 [ 273.777557][ T7890] ? do_syscall_64+0x100/0x230 [ 273.777586][ T7890] ? do_syscall_64+0xb6/0x230 [ 273.777615][ T7890] do_syscall_64+0xf3/0x230 [ 273.777641][ T7890] ? clear_bhb_loop+0x35/0x90 [ 273.777674][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.777703][ T7890] RIP: 0033:0x7f9f38f8d169 [ 273.777721][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.777740][ T7890] RSP: 002b:00007f9f39d49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.777762][ T7890] RAX: ffffffffffffffda RBX: 00007f9f391a5fa0 RCX: 00007f9f38f8d169 [ 273.777777][ T7890] RDX: 00000000000000a0 RSI: 0000400000000100 RDI: 0000000000000003 [ 273.777789][ T7890] RBP: 00007f9f39d49090 R08: 0000000000000000 R09: 0000000000000000 [ 273.777802][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.777814][ T7890] R13: 0000000000000000 R14: 00007f9f391a5fa0 R15: 00007ffd51d26838 [ 273.777844][ T7890] [ 274.034309][ T9] usb 5-1: USB disconnect, device number 16 [ 274.591677][ T29] audit: type=1326 audit(1740403914.742:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7899 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf60d8d169 code=0x7ffc0000 [ 274.663012][ T29] audit: type=1326 audit(1740403914.742:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7899 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7faf60d8d169 code=0x7ffc0000 [ 274.707545][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 274.767751][ T29] audit: type=1326 audit(1740403914.742:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7899 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf60d8d169 code=0x7ffc0000 [ 275.666645][ T5877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 276.011006][ T5877] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.039256][ T5877] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.040849][ T7936] FAULT_INJECTION: forcing a failure. [ 276.040849][ T7936] name failslab, interval 1, probability 0, space 0, times 0 [ 276.068938][ T5877] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.083687][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.093447][ T7936] CPU: 1 UID: 0 PID: 7936 Comm: syz.3.584 Not tainted 6.14.0-rc4-syzkaller #0 [ 276.093475][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.093489][ T7936] Call Trace: [ 276.093496][ T7936] [ 276.093505][ T7936] dump_stack_lvl+0x241/0x360 [ 276.093534][ T7936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.093555][ T7936] ? __pfx__printk+0x10/0x10 [ 276.093590][ T7936] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 276.093627][ T7936] ? __pfx___might_resched+0x10/0x10 [ 276.093658][ T7936] should_fail_ex+0x40a/0x550 [ 276.093693][ T7936] should_failslab+0xac/0x100 [ 276.093728][ T7936] kmem_cache_alloc_node_noprof+0x77/0x380 [ 276.093761][ T7936] ? __alloc_skb+0x1c3/0x440 [ 276.093795][ T7936] __alloc_skb+0x1c3/0x440 [ 276.093829][ T7936] ? __pfx___alloc_skb+0x10/0x10 [ 276.093861][ T7936] ? netlink_autobind+0xd6/0x2f0 [ 276.093893][ T7936] ? netlink_autobind+0x2b0/0x2f0 [ 276.093920][ T7936] netlink_sendmsg+0x634/0xcb0 [ 276.093960][ T7936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.093994][ T7936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.094014][ T7936] __sock_sendmsg+0x221/0x270 [ 276.094042][ T7936] ____sys_sendmsg+0x53a/0x860 [ 276.094082][ T7936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.094112][ T7936] ? __fget_files+0x2a/0x410 [ 276.094137][ T7936] ? __fget_files+0x2a/0x410 [ 276.094168][ T7936] __sys_sendmsg+0x269/0x350 [ 276.094205][ T7936] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.094250][ T7936] ? do_sys_openat2+0x17a/0x1d0 [ 276.094300][ T7936] ? __secure_computing+0x125/0x370 [ 276.094332][ T7936] do_syscall_64+0xf3/0x230 [ 276.094361][ T7936] ? clear_bhb_loop+0x35/0x90 [ 276.094394][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.094424][ T7936] RIP: 0033:0x7f6fb778d169 [ 276.094442][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.094461][ T7936] RSP: 002b:00007f6fb864d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.094484][ T7936] RAX: ffffffffffffffda RBX: 00007f6fb79a5fa0 RCX: 00007f6fb778d169 [ 276.094500][ T7936] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000003 [ 276.094514][ T7936] RBP: 00007f6fb864d090 R08: 0000000000000000 R09: 0000000000000000 [ 276.094527][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.094540][ T7936] R13: 0000000000000000 R14: 00007f6fb79a5fa0 R15: 00007ffdec98cb48 [ 276.094570][ T7936] [ 276.398851][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 276.432213][ T7907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.433656][ T7938] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 276.443928][ T5877] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.580326][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 276.638725][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.658489][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 276.673212][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.732111][ T8] usb 1-1: config 0 descriptor?? [ 276.752913][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 277.051435][ T8] gspca_vc032x: reg_r err -71 [ 277.055210][ T58] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 277.057224][ T8] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 277.140407][ T8] usb 1-1: USB disconnect, device number 21 [ 277.818424][ T58] usb 4-1: device descriptor read/64, error -71 [ 278.100355][ T9] usb 2-1: USB disconnect, device number 28 [ 278.198474][ T58] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 278.368752][ T7960] capability: warning: `syz.0.590' uses deprecated v2 capabilities in a way that may be insecure [ 278.398574][ T58] usb 4-1: device descriptor read/64, error -71 [ 278.508873][ T58] usb usb4-port1: attempt power cycle [ 279.028544][ T58] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.059101][ T58] usb 4-1: device descriptor read/8, error -71 [ 279.510350][ T58] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 279.562848][ T58] usb 4-1: device descriptor read/8, error -71 [ 279.711395][ T58] usb usb4-port1: unable to enumerate USB device [ 280.893965][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 284.947301][ T8011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.605'. [ 286.681155][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 287.119881][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.280603][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.308675][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 287.317891][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.355242][ T8045] netlink: 47 bytes leftover after parsing attributes in process `syz.3.615'. [ 287.371163][ T8] usb 5-1: config 0 descriptor?? [ 287.393440][ T8045] netlink: 100 bytes leftover after parsing attributes in process `syz.3.615'. [ 287.687377][ T8057] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 287.868176][ T8] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.03 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 288.736108][ T8] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 288.751063][ T8] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 288.764266][ T8] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 288.828087][ T8] usb 5-1: USB disconnect, device number 17 [ 290.528734][ T5877] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 290.718053][ T8089] fuse: Bad value for 'user_id' [ 290.736457][ T8089] fuse: Bad value for 'user_id' [ 290.800040][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.838993][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 290.894089][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 290.941545][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 290.981438][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.111127][ T5877] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 291.194630][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.241660][ T5877] usb 3-1: Product: syz [ 291.266022][ T5877] usb 3-1: Manufacturer: syz [ 291.299138][ T5877] usb 3-1: SerialNumber: syz [ 291.408587][ T5877] usb 3-1: config 0 descriptor?? [ 291.446185][ T8083] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.658115][ T5877] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 292.730281][ T8] usb 3-1: USB disconnect, device number 20 [ 292.798551][ T5843] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 293.030007][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 293.092905][ T5843] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 293.120119][ T5843] usb 1-1: config 179 has no interface number 0 [ 293.136438][ T5843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 293.384353][ T5843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 293.650884][ T5843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 293.664343][ T5843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 293.677918][ T5843] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 293.693752][ T5843] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 293.756130][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.828514][ T8116] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 294.004627][ T8132] FAULT_INJECTION: forcing a failure. [ 294.004627][ T8132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.028803][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.4.640 Not tainted 6.14.0-rc4-syzkaller #0 [ 294.028836][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.028853][ T8132] Call Trace: [ 294.028861][ T8132] [ 294.028870][ T8132] dump_stack_lvl+0x241/0x360 [ 294.028900][ T8132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.028921][ T8132] ? __pfx__printk+0x10/0x10 [ 294.028955][ T8132] ? __pfx_lock_release+0x10/0x10 [ 294.028986][ T8132] ? validate_chain+0x11e/0x5920 [ 294.029012][ T8132] should_fail_ex+0x40a/0x550 [ 294.029047][ T8132] _copy_from_iter+0x1df/0x1c40 [ 294.029072][ T8132] ? __pfx_validate_chain+0x10/0x10 [ 294.029092][ T8132] ? mark_lock+0x9a/0x360 [ 294.029128][ T8132] ? __lock_acquire+0x1397/0x2100 [ 294.029159][ T8132] ? __pfx__copy_from_iter+0x10/0x10 [ 294.029199][ T8132] tun_get_user+0x25f/0x48a0 [ 294.029235][ T8132] ? __lock_acquire+0x1397/0x2100 [ 294.029271][ T8132] ? __pfx_tun_get_user+0x10/0x10 [ 294.029311][ T8132] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 294.029344][ T8132] ? tun_get+0x1e/0x2f0 [ 294.029363][ T8132] ? __pfx_lock_release+0x10/0x10 [ 294.029408][ T8132] ? tun_get+0x1e/0x2f0 [ 294.029427][ T8132] ? tun_get+0x27d/0x2f0 [ 294.029449][ T8132] tun_chr_write_iter+0x10d/0x1f0 [ 294.029486][ T8132] vfs_write+0xacf/0xd10 [ 294.029525][ T8132] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 294.029565][ T8132] ? __pfx_vfs_write+0x10/0x10 [ 294.029596][ T8132] ? __fget_files+0x2a/0x410 [ 294.029635][ T8132] ? __fget_files+0x2a/0x410 [ 294.029670][ T8132] ksys_write+0x18f/0x2b0 [ 294.029708][ T8132] ? __pfx_ksys_write+0x10/0x10 [ 294.029742][ T8132] ? do_syscall_64+0x100/0x230 [ 294.029774][ T8132] ? do_syscall_64+0xb6/0x230 [ 294.029804][ T8132] do_syscall_64+0xf3/0x230 [ 294.029831][ T8132] ? clear_bhb_loop+0x35/0x90 [ 294.029864][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.029892][ T8132] RIP: 0033:0x7faf60d8d169 [ 294.029910][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.029928][ T8132] RSP: 002b:00007faf61bd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.029951][ T8132] RAX: ffffffffffffffda RBX: 00007faf60fa5fa0 RCX: 00007faf60d8d169 [ 294.029967][ T8132] RDX: 0000000000000079 RSI: 0000400000001500 RDI: 0000000000000003 [ 294.029980][ T8132] RBP: 00007faf61bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 294.029992][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.030004][ T8132] R13: 0000000000000000 R14: 00007faf60fa5fa0 R15: 00007ffc7669cda8 [ 294.030035][ T8132] [ 294.339207][ T5843] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 295.713690][ T9] usb 1-1: USB disconnect, device number 22 [ 295.713773][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 295.713825][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 296.909151][ T9] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 297.784565][ T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 299.492271][ T8174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.498646][ T8174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.505657][ T8174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.511849][ T8174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.722767][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.786345][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.882854][ T9] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 299.887777][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 299.894166][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 299.913436][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.921024][ T9] usb 1-1: Manufacturer: syz [ 300.738891][ T9] usb 1-1: config 0 descriptor?? [ 300.771299][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.778983][ T5917] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 300.794623][ T9] usb 1-1: can't set config #0, error -71 [ 300.817046][ T9] usb 1-1: USB disconnect, device number 23 [ 300.830613][ T5903] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 300.951532][ T5917] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 301.009138][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.073919][ T5917] usb 2-1: config 0 descriptor?? [ 301.105725][ T5917] cp210x 2-1:0.0: cp210x converter detected [ 301.120058][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 301.136372][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 301.155434][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.218943][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.258537][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.359165][ T5903] usb 5-1: Product: syz [ 301.365293][ T5903] usb 5-1: Manufacturer: syz [ 301.589316][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.595724][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.603327][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.609614][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.656398][ T5903] usb 5-1: SerialNumber: syz [ 301.827121][ T5903] usb 5-1: config 0 descriptor?? [ 301.850493][ T5903] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.878450][ T5903] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 302.514079][ T8216] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 302.530541][ T8216] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 303.519379][ T5903] em28xx 5-1:0.0: unknown em28xx chip ID (250) [ 303.540294][ T5917] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 304.052765][ T5903] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 304.080147][ T5903] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 304.140081][ T5903] em28xx 5-1:0.0: No AC97 audio processor [ 304.280746][ T5917] cp210x 2-1:0.0: querying part number failed [ 304.290156][ T5917] usb 2-1: cp210x converter now attached to ttyUSB0 [ 304.299613][ T5917] usb 2-1: USB disconnect, device number 29 [ 304.373814][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.416557][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 304.429787][ T5903] usb 5-1: USB disconnect, device number 18 [ 304.456986][ T5903] em28xx 5-1:0.0: Disconnecting em28xx [ 304.617759][ T5917] cp210x 2-1:0.0: device disconnected [ 305.328440][ T5903] em28xx 5-1:0.0: Freeing device [ 306.021865][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 306.036638][ T8241] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 306.131603][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 306.147046][ T8243] vlan2: entered allmulticast mode [ 306.152805][ T8243] bridge0: entered allmulticast mode [ 306.162760][ T8243] bridge0: left allmulticast mode [ 306.289926][ T8247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.303081][ T5828] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 309.968541][ T58] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 310.125900][ T8275] loop6: detected capacity change from 0 to 524287999 [ 310.136011][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.145508][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.155924][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.165217][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.178430][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.187970][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.198780][ T58] usb 3-1: too many configurations: 231, using maximum allowed: 8 [ 310.237780][ T58] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 179 [ 310.264746][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.266548][ T58] usb 3-1: can't read configurations, error -22 [ 310.274042][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.300705][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.309931][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.334012][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.343497][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.358897][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.368243][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.381506][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.390762][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.398701][ T8275] ldm_validate_partition_table(): Disk read failed. [ 310.428375][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.437628][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.453460][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.462790][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.484960][ T8275] Dev loop6: unable to read RDB block 0 [ 310.490568][ T8281] FAULT_INJECTION: forcing a failure. [ 310.490568][ T8281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.552343][ T8281] CPU: 1 UID: 0 PID: 8281 Comm: syz.0.678 Not tainted 6.14.0-rc4-syzkaller #0 [ 310.552373][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.552398][ T8281] Call Trace: [ 310.552408][ T8281] [ 310.552417][ T8281] dump_stack_lvl+0x241/0x360 [ 310.552446][ T8281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.552466][ T8281] ? __pfx__printk+0x10/0x10 [ 310.552499][ T8281] ? __pfx_lock_release+0x10/0x10 [ 310.552535][ T8281] should_fail_ex+0x40a/0x550 [ 310.552568][ T8281] strncpy_from_user+0x36/0x270 [ 310.552599][ T8281] bpf_raw_tp_link_attach+0x1ef/0x700 [ 310.552635][ T8281] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 310.552683][ T8281] ? __fget_files+0x2a/0x410 [ 310.552708][ T8281] ? fput+0x21b/0x290 [ 310.552731][ T8281] bpf_raw_tracepoint_open+0x177/0x1f0 [ 310.552762][ T8281] __sys_bpf+0x3b9/0x820 [ 310.552791][ T8281] ? __pfx___sys_bpf+0x10/0x10 [ 310.552830][ T8281] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 310.552861][ T8281] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 310.552891][ T8281] ? do_syscall_64+0x100/0x230 [ 310.552924][ T8281] __x64_sys_bpf+0x7c/0x90 [ 310.552948][ T8281] do_syscall_64+0xf3/0x230 [ 310.552975][ T8281] ? clear_bhb_loop+0x35/0x90 [ 310.553007][ T8281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.553034][ T8281] RIP: 0033:0x7f9f38f8d169 [ 310.553052][ T8281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.553069][ T8281] RSP: 002b:00007f9f39d49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.553091][ T8281] RAX: ffffffffffffffda RBX: 00007f9f391a5fa0 RCX: 00007f9f38f8d169 [ 310.553113][ T8281] RDX: 0000000000000010 RSI: 0000400000000080 RDI: 0000000000000011 [ 310.553127][ T8281] RBP: 00007f9f39d49090 R08: 0000000000000000 R09: 0000000000000000 [ 310.553140][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.553152][ T8281] R13: 0000000000000000 R14: 00007f9f391a5fa0 R15: 00007ffd51d26838 [ 310.553182][ T8281] [ 310.962888][ T8275] loop6: unable to read partition table [ 310.975263][ T8275] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 310.983803][ T58] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 311.431880][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 311.518051][ T8290] vlan2: entered allmulticast mode [ 311.658088][ T8290] bridge0: entered allmulticast mode [ 311.670666][ T8290] bridge0: left allmulticast mode [ 311.847421][ T8303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.503212][ T29] audit: type=1326 audit(1740403952.542:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 312.691102][ T29] audit: type=1326 audit(1740403952.542:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 312.793321][ T29] audit: type=1326 audit(1740403952.542:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 312.841283][ T29] audit: type=1326 audit(1740403952.542:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 312.894943][ T29] audit: type=1326 audit(1740403952.542:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 312.973268][ T29] audit: type=1326 audit(1740403952.542:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 313.061793][ T29] audit: type=1326 audit(1740403952.542:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 313.128489][ T29] audit: type=1326 audit(1740403952.542:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 313.195282][ T29] audit: type=1326 audit(1740403952.542:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1cf1f8d169 code=0x7ffc0000 [ 313.260316][ T29] audit: type=1326 audit(1740403952.542:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8289 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 314.388787][ T58] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 314.573408][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.599413][ T58] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 314.637687][ T58] usb 2-1: config 1 has no interface number 0 [ 314.663625][ T58] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.695596][ T58] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 314.737933][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.747730][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.777620][ T58] usb 2-1: Product: syz [ 314.803202][ T58] usb 2-1: Manufacturer: syz [ 314.807886][ T58] usb 2-1: SerialNumber: syz [ 314.838894][ T5877] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 314.998501][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 315.022564][ T5877] usb 4-1: config 64 has an invalid interface number: 35 but max is 0 [ 315.064479][ T5877] usb 4-1: config 64 has no interface number 0 [ 315.106992][ T5877] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 315.152011][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.171839][ T5877] usb 4-1: Product: syz [ 315.176252][ T5877] usb 4-1: Manufacturer: syz [ 315.188380][ T5877] usb 4-1: SerialNumber: syz [ 315.741447][ T5877] radio-si470x 4-1:64.35: this is not a si470x device. [ 316.089469][ T58] cdc_ncm 2-1:1.1: bind() failure [ 316.279380][ T5877] radio-raremono 4-1:64.35: this is not Thanko's Raremono. [ 316.299700][ T5877] usb 4-1: USB disconnect, device number 22 [ 317.351807][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 317.365939][ T8345] vlan0: entered promiscuous mode [ 317.374387][ T8345] vlan0: entered allmulticast mode [ 317.422770][ T5876] usb 2-1: USB disconnect, device number 30 [ 317.918703][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.925015][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.968710][ T8371] netlink: 'syz.4.705': attribute type 2 has an invalid length. [ 318.976474][ T8371] netlink: 'syz.4.705': attribute type 9 has an invalid length. [ 319.042041][ T8371] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.705'. [ 323.745566][ T8402] syz.0.711: vmalloc error: size 70778880, failed to allocated page array size 138240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.764775][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.0.711 Not tainted 6.14.0-rc4-syzkaller #0 [ 323.764804][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.764818][ T8402] Call Trace: [ 323.764826][ T8402] [ 323.764835][ T8402] dump_stack_lvl+0x241/0x360 [ 323.764867][ T8402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.764890][ T8402] ? __pfx__printk+0x10/0x10 [ 323.764938][ T8402] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 323.764967][ T8402] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 323.764998][ T8402] warn_alloc+0x278/0x410 [ 323.765049][ T8402] ? __pfx_warn_alloc+0x10/0x10 [ 323.765085][ T8402] ? vb2_vmalloc_alloc+0xf2/0x340 [ 323.765112][ T8402] ? __get_vm_area_node+0x1c8/0x2d0 [ 323.765136][ T8402] ? __get_vm_area_node+0x25c/0x2d0 [ 323.765168][ T8402] __vmalloc_node_range_noprof+0x62f/0x1380 [ 323.765230][ T8402] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.765263][ T8402] ? __kasan_kmalloc+0x98/0xb0 [ 323.765300][ T8402] vmalloc_user_noprof+0x74/0x80 [ 323.765328][ T8402] ? vb2_vmalloc_alloc+0xf2/0x340 [ 323.765353][ T8402] vb2_vmalloc_alloc+0xf2/0x340 [ 323.765383][ T8402] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 323.765409][ T8402] __vb2_queue_alloc+0xa0b/0x16f0 [ 323.765461][ T8402] vb2_core_reqbufs+0xd2e/0x17c0 [ 323.765505][ T8402] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 323.765540][ T8402] ? __kasan_kmalloc+0x98/0xb0 [ 323.765572][ T8402] ? __kmalloc_cache_noprof+0x243/0x390 [ 323.765594][ T8402] ? __vb2_init_fileio+0x1e9/0xf90 [ 323.765626][ T8402] __vb2_init_fileio+0x319/0xf90 [ 323.765653][ T8402] ? __pfx___mutex_lock+0x10/0x10 [ 323.765698][ T8402] vb2_core_poll+0x45a/0x7a0 [ 323.765730][ T8402] vb2_fop_poll+0x170/0x360 [ 323.765762][ T8402] ? __pfx_vb2_fop_poll+0x10/0x10 [ 323.765786][ T8402] v4l2_poll+0x140/0x2b0 [ 323.765823][ T8402] __io_read+0x375/0x12a0 [ 323.765858][ T8402] ? io_import_iovec+0x362/0x730 [ 323.765894][ T8402] ? __pfx___io_read+0x10/0x10 [ 323.765918][ T8402] ? __fget_files+0x2a/0x410 [ 323.765942][ T8402] ? rcu_is_watching+0x15/0xb0 [ 323.765970][ T8402] io_read+0x1e/0x60 [ 323.765992][ T8402] io_issue_sqe+0x37f/0x12b0 [ 323.766031][ T8402] ? __pfx_io_issue_sqe+0x10/0x10 [ 323.766066][ T8402] io_submit_sqes+0xa88/0x1d20 [ 323.766126][ T8402] __se_sys_io_uring_enter+0x2c8/0x3390 [ 323.766161][ T8402] ? futex_wait+0x285/0x360 [ 323.766197][ T8402] ? __pfx_futex_wait+0x10/0x10 [ 323.766237][ T8402] ? __mm_populate+0x39a/0x460 [ 323.766274][ T8402] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 323.766298][ T8402] ? do_futex+0x33b/0x560 [ 323.766330][ T8402] ? __pfx_do_futex+0x10/0x10 [ 323.766355][ T8402] ? vm_mmap_pgoff+0x303/0x430 [ 323.766400][ T8402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 323.766436][ T8402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.766471][ T8402] ? do_syscall_64+0x100/0x230 [ 323.766504][ T8402] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 323.766533][ T8402] do_syscall_64+0xf3/0x230 [ 323.766563][ T8402] ? clear_bhb_loop+0x35/0x90 [ 323.766600][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.766630][ T8402] RIP: 0033:0x7f9f38f8d169 [ 323.766651][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.766670][ T8402] RSP: 002b:00007f9f39d07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 323.766694][ T8402] RAX: ffffffffffffffda RBX: 00007f9f391a6160 RCX: 00007f9f38f8d169 [ 323.766711][ T8402] RDX: 0000000000000000 RSI: 0000000000002def RDI: 0000000000000009 [ 323.766725][ T8402] RBP: 00007f9f3900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 323.766739][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.766752][ T8402] R13: 0000000000000000 R14: 00007f9f391a6160 R15: 00007ffd51d26838 [ 323.766785][ T8402] [ 323.766794][ T8402] Mem-Info: [ 324.147905][ T8402] active_anon:349 inactive_anon:10734 isolated_anon:0 [ 324.147905][ T8402] active_file:5340 inactive_file:47578 isolated_file:0 [ 324.147905][ T8402] unevictable:768 dirty:241 writeback:0 [ 324.147905][ T8402] slab_reclaimable:10095 slab_unreclaimable:99616 [ 324.147905][ T8402] mapped:38738 shmem:7181 pagetables:1014 [ 324.147905][ T8402] sec_pagetables:0 bounce:0 [ 324.147905][ T8402] kernel_misc_reclaimable:0 [ 324.147905][ T8402] free:1288017 free_pcp:4627 free_cma:0 [ 324.194409][ T8402] Node 0 active_anon:1396kB inactive_anon:42936kB active_file:21288kB inactive_file:190312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154852kB dirty:964kB writeback:0kB shmem:27188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11152kB pagetables:4056kB sec_pagetables:0kB all_unreclaimable? no [ 324.227224][ T8402] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 324.258041][ T8402] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.288929][ T8402] lowmem_reserve[]: 0 2490 2490 0 0 [ 324.294213][ T8402] Node 0 DMA32 free:1313592kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:1392kB inactive_anon:42884kB active_file:21012kB inactive_file:190260kB unevictable:1536kB writepending:988kB present:3129332kB managed:2550360kB mlocked:0kB bounce:0kB free_pcp:14612kB local_pcp:13460kB free_cma:0kB [ 324.328778][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 324.340363][ T8402] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:276kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 324.368679][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 324.373636][ T8402] Node 1 Normal free:3823072kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:3928kB local_pcp:3928kB free_cma:0kB [ 324.403362][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 324.408346][ T8402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 324.421414][ T8402] Node 0 DMA32: 276*4kB (UME) 344*8kB (UME) 276*16kB (UM) 226*32kB (UME) 154*64kB (UME) 78*128kB (UME) 32*256kB (UME) 14*512kB (UM) 13*1024kB (UME) 3*2048kB (UM) 307*4096kB (M) = 1327632kB [ 324.433089][ T8398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.440616][ T8402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 324.440803][ T8402] Node 1 Normal: 2*4kB (UM) 3*8kB (ME) 6*16kB (UME) 7*32kB (ME) 6*64kB (ME) 6*128kB (UME) 4*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (ME) 931*4096kB (M) = 3823072kB [ 324.441044][ T8402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.441066][ T8402] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 324.441086][ T8402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.441108][ T8402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 324.441128][ T8402] 60098 total pagecache pages [ 324.441140][ T8402] 0 pages in swap cache [ 324.441150][ T8402] Free swap = 124884kB [ 324.441160][ T8402] Total swap = 124996kB [ 324.441172][ T8402] 2097051 pages RAM [ 324.441182][ T8402] 0 pages HighMem/MovableOnly [ 324.441193][ T8402] 427737 pages reserved [ 324.441203][ T8402] 0 pages cma reserved [ 324.550481][ T8398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.556574][ T8398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.562752][ T8398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.599134][ T8414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 325.606318][ T8414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 325.642155][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 325.688863][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 326.684884][ T5136] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.829651][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.835779][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.842433][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout [ 328.060459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.391170][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 331.104217][ T8451] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.110614][ T8451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.116807][ T8451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.124478][ T8451] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.793499][ T8402] warn_alloc: 107 callbacks suppressed [ 333.793523][ T8402] syz.0.711: vmalloc error: size 70778880, failed to allocated page array size 138240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 333.816893][ T8402] CPU: 1 UID: 0 PID: 8402 Comm: syz.0.711 Not tainted 6.14.0-rc4-syzkaller #0 [ 333.816928][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.816942][ T8402] Call Trace: [ 333.816950][ T8402] [ 333.816960][ T8402] dump_stack_lvl+0x241/0x360 [ 333.816993][ T8402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.817017][ T8402] ? __pfx__printk+0x10/0x10 [ 333.817057][ T8402] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 333.817084][ T8402] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 333.817114][ T8402] warn_alloc+0x278/0x410 [ 333.817149][ T8402] ? __pfx_warn_alloc+0x10/0x10 [ 333.817186][ T8402] ? vb2_vmalloc_alloc+0xf2/0x340 [ 333.817212][ T8402] ? __get_vm_area_node+0x1c8/0x2d0 [ 333.817236][ T8402] ? __get_vm_area_node+0x25c/0x2d0 [ 333.817269][ T8402] __vmalloc_node_range_noprof+0x62f/0x1380 [ 333.817328][ T8402] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.817360][ T8402] ? __kasan_kmalloc+0x98/0xb0 [ 333.817398][ T8402] vmalloc_user_noprof+0x74/0x80 [ 333.817426][ T8402] ? vb2_vmalloc_alloc+0xf2/0x340 [ 333.817451][ T8402] vb2_vmalloc_alloc+0xf2/0x340 [ 333.817480][ T8402] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 333.817505][ T8402] __vb2_queue_alloc+0xa0b/0x16f0 [ 333.817558][ T8402] vb2_core_reqbufs+0xd2e/0x17c0 [ 333.817602][ T8402] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 333.817636][ T8402] ? __kasan_kmalloc+0x98/0xb0 [ 333.817669][ T8402] ? __kmalloc_cache_noprof+0x243/0x390 [ 333.817690][ T8402] ? __vb2_init_fileio+0x1e9/0xf90 [ 333.817721][ T8402] __vb2_init_fileio+0x319/0xf90 [ 333.817744][ T8402] ? __pfx_stack_trace_save+0x10/0x10 [ 333.817772][ T8402] ? __pfx___mutex_lock+0x10/0x10 [ 333.817816][ T8402] vb2_core_poll+0x45a/0x7a0 [ 333.817848][ T8402] vb2_fop_poll+0x170/0x360 [ 333.817881][ T8402] ? __pfx_vb2_fop_poll+0x10/0x10 [ 333.817911][ T8402] v4l2_poll+0x140/0x2b0 [ 333.817948][ T8402] __io_read+0x375/0x12a0 [ 333.817974][ T8402] ? __lock_acquire+0x1397/0x2100 [ 333.818025][ T8402] ? __pfx___io_read+0x10/0x10 [ 333.818060][ T8402] io_read+0x1e/0x60 [ 333.818082][ T8402] io_issue_sqe+0x37f/0x12b0 [ 333.818115][ T8402] ? __pfx_io_issue_sqe+0x10/0x10 [ 333.818149][ T8402] io_req_task_submit+0x10a/0x1c0 [ 333.818170][ T8402] ? __pfx_io_req_task_submit+0x10/0x10 [ 333.818193][ T8402] io_handle_tw_list+0x380/0x500 [ 333.818238][ T8402] tctx_task_work_run+0x9a/0x370 [ 333.818280][ T8402] tctx_task_work+0x9a/0x100 [ 333.818313][ T8402] ? __pfx_tctx_task_work+0x10/0x10 [ 333.818351][ T8402] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.818373][ T8402] ? lockdep_hardirqs_on+0x99/0x150 [ 333.818401][ T8402] task_work_run+0x24f/0x310 [ 333.818443][ T8402] ? __pfx_task_work_run+0x10/0x10 [ 333.818474][ T8402] ? futex_wait+0x285/0x360 [ 333.818502][ T8402] ? __pfx_futex_wait+0x10/0x10 [ 333.818530][ T8402] get_signal+0x15d1/0x1720 [ 333.818549][ T8402] ? __mm_populate+0x39a/0x460 [ 333.818578][ T8402] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 333.818598][ T8402] ? __pfx_get_signal+0x10/0x10 [ 333.818625][ T8402] arch_do_signal_or_restart+0x96/0x860 [ 333.818649][ T8402] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 333.818668][ T8402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.818704][ T8402] ? syscall_exit_to_user_mode+0xa3/0x340 [ 333.818729][ T8402] syscall_exit_to_user_mode+0xce/0x340 [ 333.818756][ T8402] do_syscall_64+0x100/0x230 [ 333.818778][ T8402] ? clear_bhb_loop+0x35/0x90 [ 333.818807][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.818831][ T8402] RIP: 0033:0x7f9f38f8d169 [ 333.818850][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.818865][ T8402] RSP: 002b:00007f9f39d07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 333.818884][ T8402] RAX: 0000000000000001 RBX: 00007f9f391a6160 RCX: 00007f9f38f8d169 [ 333.818896][ T8402] RDX: 0000000000000000 RSI: 0000000000002def RDI: 0000000000000009 [ 333.818917][ T8402] RBP: 00007f9f3900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.818928][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.818938][ T8402] R13: 0000000000000000 R14: 00007f9f391a6160 R15: 00007ffd51d26838 [ 333.818964][ T8402] [ 334.229641][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout [ 334.235753][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 334.242218][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout [ 334.248272][ T5136] Bluetooth: hci1: command 0x0c1a tx timeout [ 334.594918][ T8402] Mem-Info: [ 334.598233][ T8402] active_anon:353 inactive_anon:7794 isolated_anon:0 [ 334.598233][ T8402] active_file:5344 inactive_file:47578 isolated_file:0 [ 334.598233][ T8402] unevictable:768 dirty:274 writeback:0 [ 334.598233][ T8402] slab_reclaimable:10137 slab_unreclaimable:99550 [ 334.598233][ T8402] mapped:34043 shmem:4312 pagetables:1046 [ 334.598233][ T8402] sec_pagetables:0 bounce:0 [ 334.598233][ T8402] kernel_misc_reclaimable:0 [ 334.598233][ T8402] free:1120237 free_pcp:22341 free_cma:0 [ 334.644861][ T8402] Node 0 active_anon:1412kB inactive_anon:31176kB active_file:21304kB inactive_file:190312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136072kB dirty:1096kB writeback:0kB shmem:15712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11056kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no [ 334.677710][ T8402] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no [ 334.708949][ T8402] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.736063][ T8402] lowmem_reserve[]: 0 2490 2490 0 0 [ 334.741494][ T8402] Node 0 DMA32 free:1344088kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:1408kB inactive_anon:31144kB active_file:21028kB inactive_file:190260kB unevictable:1536kB writepending:1096kB present:3129332kB managed:2550360kB mlocked:0kB bounce:0kB free_pcp:1744kB local_pcp:696kB free_cma:0kB [ 334.772329][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 334.777067][ T8402] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:276kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 334.803905][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 334.809275][ T8402] Node 1 Normal free:3120860kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:87544kB local_pcp:1236kB free_cma:0kB [ 334.838647][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 334.843403][ T8402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 334.856123][ T8402] Node 0 DMA32: 274*4kB (UME) 406*8kB (UME) 241*16kB (UME) 224*32kB (UME) 345*64kB (UME) 78*128kB (UME) 32*256kB (UME) 14*512kB (UM) 13*1024kB (UME) 3*2048kB (UM) 308*4096kB (UM) = 1343816kB [ 334.875109][ T8402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 334.886866][ T8402] Node 1 Normal: 8*4kB (UM) 9*8kB (UME) 10*16kB (UME) 13*32kB (UME) 12*64kB (UME) 11*128kB (UME) 10*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 3*2048kB (UME) 757*4096kB (M) = 3120936kB [ 334.905102][ T8402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.915308][ T8402] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 334.924652][ T8402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.934313][ T8402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.943630][ T8402] 57234 total pagecache pages [ 334.948369][ T8402] 0 pages in swap cache [ 334.952526][ T8402] Free swap = 124884kB [ 334.956680][ T8402] Total swap = 124996kB [ 334.960873][ T8402] 2097051 pages RAM [ 334.964684][ T8402] 0 pages HighMem/MovableOnly [ 334.969420][ T8402] 427737 pages reserved [ 334.973574][ T8402] 0 pages cma reserved [ 341.188777][ T8468] sched: DL replenish lagged too much [ 341.852984][ T35] smc: removing ib device syz0 [ 342.080084][ T51] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 342.279871][ T8486] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 342.291040][ T51] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 342.317410][ T51] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.361630][ T8487] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 342.402009][ T51] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 342.421653][ T8486] team0: Port device netdevsim0 added [ 342.432616][ T51] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 342.456185][ T51] usb 5-1: Product: syz [ 342.467531][ T51] usb 5-1: Manufacturer: syz [ 342.473075][ T51] usb 5-1: SerialNumber: syz [ 342.571925][ T51] usb 5-1: config 0 descriptor?? [ 342.637645][ T51] usb 5-1: selecting invalid altsetting 0 [ 342.719543][ T8487] team0: Port device netdevsim0 removed [ 342.783678][ T8487] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 342.994382][ T51] usb 5-1: USB disconnect, device number 19 [ 344.013979][ T8487] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 345.029076][ T8497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.035210][ T8497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.041287][ T8497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.236990][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.465662][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.479365][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.489031][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.497151][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.506810][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.514496][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.014819][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 346.146623][ T8511] vlan2: entered allmulticast mode [ 346.198402][ T8511] ip6gretap0: entered allmulticast mode [ 346.271775][ T8511] ip6gretap0: left allmulticast mode [ 346.327051][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 346.327073][ T29] audit: type=1400 audit(1740403986.472:55): lsm=SMACK fn=smack_unix_may_send action=denied subject="hash" object="_" requested=w pid=8516 comm="syz.3.745" [ 346.510276][ T8528] netlink: 'syz.1.746': attribute type 2 has an invalid length. [ 346.648493][ T5917] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 346.791510][ T8534] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 346.828412][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 346.850306][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 346.919870][ T5917] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 346.988484][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.052355][ T5917] usb 3-1: config 0 descriptor?? [ 347.088152][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.100513][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.100540][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 347.106662][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 347.144188][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 347.228680][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.400708][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.564377][ T5917] mcp2200 0003:04D8:00DF.000D: item fetching failed at offset 2/5 [ 347.565131][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.581921][ T5917] mcp2200 0003:04D8:00DF.000D: can't parse reports [ 347.598563][ T8547] FAULT_INJECTION: forcing a failure. [ 347.598563][ T8547] name failslab, interval 1, probability 0, space 0, times 0 [ 347.612572][ T5917] mcp2200 0003:04D8:00DF.000D: probe with driver mcp2200 failed with error -22 [ 347.622689][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.638861][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.648139][ T8547] CPU: 0 UID: 0 PID: 8547 Comm: syz.4.751 Not tainted 6.14.0-rc4-syzkaller #0 [ 347.648166][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.648179][ T8547] Call Trace: [ 347.648187][ T8547] [ 347.648195][ T8547] dump_stack_lvl+0x241/0x360 [ 347.648224][ T8547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.648246][ T8547] ? __pfx__printk+0x10/0x10 [ 347.648284][ T8547] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 347.648320][ T8547] ? __pfx___might_resched+0x10/0x10 [ 347.648350][ T8547] should_fail_ex+0x40a/0x550 [ 347.648384][ T8547] should_failslab+0xac/0x100 [ 347.648418][ T8547] kmem_cache_alloc_node_noprof+0x77/0x380 [ 347.648451][ T8547] ? __alloc_skb+0x1c3/0x440 [ 347.648485][ T8547] __alloc_skb+0x1c3/0x440 [ 347.648520][ T8547] ? __pfx___alloc_skb+0x10/0x10 [ 347.648551][ T8547] ? netlink_autobind+0xd6/0x2f0 [ 347.648572][ T8547] ? netlink_autobind+0x2b0/0x2f0 [ 347.648599][ T8547] netlink_sendmsg+0x634/0xcb0 [ 347.648632][ T8547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.648667][ T8547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.648688][ T8547] __sock_sendmsg+0x221/0x270 [ 347.648723][ T8547] ____sys_sendmsg+0x53a/0x860 [ 347.648764][ T8547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.648793][ T8547] ? __fget_files+0x2a/0x410 [ 347.648818][ T8547] ? __fget_files+0x2a/0x410 [ 347.648848][ T8547] __sys_sendmmsg+0x36a/0x720 [ 347.648892][ T8547] ? __pfx___sys_sendmmsg+0x10/0x10 [ 347.648937][ T8547] ? __pfx_lock_release+0x10/0x10 [ 347.648965][ T8547] ? kstrtouint_from_user+0x128/0x190 [ 347.649009][ T8547] ? ksys_write+0x22a/0x2b0 [ 347.649035][ T8547] ? __pfx_lock_release+0x10/0x10 [ 347.649071][ T8547] ? sb_end_write+0xe9/0x1c0 [ 347.649092][ T8547] ? vfs_write+0x7fa/0xd10 [ 347.649121][ T8547] ? __mutex_unlock_slowpath+0x227/0x800 [ 347.649178][ T8547] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 347.649212][ T8547] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.649243][ T8547] ? do_syscall_64+0x100/0x230 [ 347.649275][ T8547] __x64_sys_sendmmsg+0xa0/0xb0 [ 347.649310][ T8547] do_syscall_64+0xf3/0x230 [ 347.649337][ T8547] ? clear_bhb_loop+0x35/0x90 [ 347.649371][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.649398][ T8547] RIP: 0033:0x7faf60d8d169 [ 347.649417][ T8547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.649435][ T8547] RSP: 002b:00007faf61bd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.649457][ T8547] RAX: ffffffffffffffda RBX: 00007faf60fa5fa0 RCX: 00007faf60d8d169 [ 347.649472][ T8547] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000003 [ 347.649487][ T8547] RBP: 00007faf61bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 347.649500][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.649512][ T8547] R13: 0000000000000000 R14: 00007faf60fa5fa0 R15: 00007ffc7669cda8 [ 347.649543][ T8547] [ 347.654439][ T8506] bridge_slave_0: entered allmulticast mode [ 347.780008][ T5917] usb 3-1: USB disconnect, device number 23 [ 347.809536][ T8506] bridge_slave_0: entered promiscuous mode [ 347.989807][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.997128][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.004495][ T8506] bridge_slave_1: entered allmulticast mode [ 348.011555][ T8506] bridge_slave_1: entered promiscuous mode [ 348.050877][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.064072][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.066882][ T54] Bluetooth: hci2: command tx timeout [ 348.188123][ T8506] team0: Port device team_slave_0 added [ 348.227504][ T8506] team0: Port device team_slave_1 added [ 348.331960][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.357021][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.607984][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.638714][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.650121][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.676359][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.887173][ T35] bridge_slave_1: left allmulticast mode [ 348.898146][ T35] bridge_slave_1: left promiscuous mode [ 348.918740][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.928844][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 348.952318][ T35] bridge_slave_0: left allmulticast mode [ 348.958112][ T35] bridge_slave_0: left promiscuous mode [ 348.971655][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.153686][ T54] Bluetooth: hci2: command tx timeout [ 352.224493][ T54] Bluetooth: hci2: command tx timeout [ 352.504532][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.546993][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.580366][ T35] bond0 (unregistering): Released all slaves [ 352.674271][ T8506] hsr_slave_0: entered promiscuous mode [ 352.713194][ T8506] hsr_slave_1: entered promiscuous mode [ 352.742175][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.782846][ T35] IPVS: stopping backup sync thread 6494 ... [ 352.798141][ T8506] Cannot create hsr debugfs directory [ 352.834977][ T8566] vlan2: entered allmulticast mode [ 352.848138][ T8566] ip6gretap0: entered allmulticast mode [ 352.880792][ T8566] ip6gretap0: left allmulticast mode [ 353.002795][ T8572] netlink: 'syz.2.759': attribute type 29 has an invalid length. [ 353.030602][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 353.814536][ T8594] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.766'. [ 353.896546][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.516392][ T54] Bluetooth: hci2: command tx timeout [ 354.709151][ T51] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 355.413232][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 355.486223][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 355.575253][ T51] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 355.575336][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.580376][ T51] usb 3-1: config 0 descriptor?? [ 356.322901][ T35] hsr_slave_0: left promiscuous mode [ 356.334013][ T51] mcp2200 0003:04D8:00DF.000E: item fetching failed at offset 2/5 [ 356.409441][ T51] mcp2200 0003:04D8:00DF.000E: can't parse reports [ 356.458104][ T51] mcp2200 0003:04D8:00DF.000E: probe with driver mcp2200 failed with error -22 [ 356.482506][ T35] hsr_slave_1: left promiscuous mode [ 356.498961][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.506519][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.537364][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.554123][ T51] usb 3-1: USB disconnect, device number 24 [ 356.563447][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.642290][ T35] veth1_macvtap: left promiscuous mode [ 356.764220][ T35] veth0_macvtap: left promiscuous mode [ 356.984795][ T35] veth1_vlan: left promiscuous mode [ 357.176024][ T35] veth0_vlan: left promiscuous mode [ 357.618747][ T51] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 357.886854][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.023180][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.099948][ T51] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 358.281760][ T51] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 358.326834][ T51] usb 2-1: Manufacturer: syz [ 358.426655][ T51] usb 2-1: config 0 descriptor?? [ 358.644109][ T58] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 358.938780][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 358.955499][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 359.061595][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.111729][ T58] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.129948][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.146010][ T58] usb 4-1: Product: syz [ 359.158394][ T58] usb 4-1: Manufacturer: syz [ 359.163355][ T58] usb 4-1: SerialNumber: syz [ 359.179435][ T58] usb 4-1: config 0 descriptor?? [ 359.206732][ T58] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 359.238927][ T58] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 359.247785][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.278122][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.814257][ T58] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 359.833906][ T58] em28xx 4-1:0.0: Config register raw data: 0x41 [ 360.755819][ T8660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.764817][ T8660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.455098][ T35] team0 (unregistering): Port device team_slave_1 removed [ 361.659448][ T35] team0 (unregistering): Port device team_slave_0 removed [ 361.919982][ T5917] usb 4-1: USB disconnect, device number 23 [ 361.926678][ T5917] em28xx 4-1:0.0: Disconnecting em28xx [ 361.949654][ T5917] em28xx 4-1:0.0: Freeing device [ 362.150343][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 362.824804][ T8642] netlink: 'syz.2.774': attribute type 21 has an invalid length. [ 362.840061][ T8635] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 362.903282][ T8662] vlan2: entered allmulticast mode [ 362.968666][ T8662] bridge0: entered allmulticast mode [ 363.006039][ T51] usbhid 2-1:0.0: can't add hid device: -71 [ 363.028851][ T51] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 363.034811][ T8662] bridge0: left allmulticast mode [ 363.067675][ T51] usb 2-1: USB disconnect, device number 31 [ 363.434795][ T8668] sctp: [Deprecated]: syz.1.779 (pid 8668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.434795][ T8668] Use struct sctp_sack_info instead [ 363.622868][ T8506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.665277][ T8506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.732673][ T8506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.806929][ T8506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.258412][ T5917] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 364.498447][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 364.551349][ T5917] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 364.584633][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.625173][ T5917] usb 4-1: Product: syz [ 364.642437][ T5917] usb 4-1: Manufacturer: syz [ 364.647124][ T5917] usb 4-1: SerialNumber: syz [ 364.660626][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.719657][ T58] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 364.869698][ T5917] usb 4-1: config 0 descriptor?? [ 365.075941][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.083489][ T5917] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 365.108469][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 365.195386][ T58] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 365.219151][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.226413][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.294063][ T58] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 365.399366][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.406538][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.417846][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 365.437634][ T58] usb 3-1: config 1 has no interface number 0 [ 365.453470][ T58] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.533739][ T58] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 365.583163][ T58] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 365.615816][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.695857][ T58] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 366.588516][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 367.378438][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 367.399505][ T8] usb 5-1: config 254 has an invalid interface number: 167 but max is 0 [ 367.407960][ T8] usb 5-1: config 254 has no interface number 0 [ 367.430746][ T8] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 367.448372][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.478391][ T8] usb 5-1: Product: syz [ 367.489953][ T5918] usb 4-1: USB disconnect, device number 24 [ 367.500109][ T8] usb 5-1: Manufacturer: syz [ 367.528679][ T8] usb 5-1: SerialNumber: syz [ 367.733589][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.759484][ T8] mxuport 5-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 367.798616][ T8] mxuport 5-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 367.807885][ T8] mxuport 5-1:254.167: probe with driver mxuport failed with error -71 [ 367.901571][ T8] usb 5-1: USB disconnect, device number 20 [ 368.509392][ T8730] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 369.239259][ T58] snd_usb_pod 3-1:1.1: set_interface failed [ 370.043467][ T58] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 370.244873][ T58] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 370.588716][ T58] usb 3-1: USB disconnect, device number 25 [ 370.736466][ T8753] netlink: 76 bytes leftover after parsing attributes in process `syz.3.789'. [ 370.759333][ T8753] netlink: 84 bytes leftover after parsing attributes in process `syz.3.789'. [ 370.788001][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 370.813809][ T8754] vlan2: entered allmulticast mode [ 370.843252][ T8754] bridge0: entered allmulticast mode [ 370.872793][ T8754] bridge0: left allmulticast mode [ 371.132898][ T8506] veth0_vlan: entered promiscuous mode [ 371.191579][ T8506] veth1_vlan: entered promiscuous mode [ 371.353583][ T8773] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 371.360984][ T8773] PKCS7: Only support pkcs7_signedData type [ 372.065825][ T8506] veth0_macvtap: entered promiscuous mode [ 372.226869][ T8780] netlink: 76 bytes leftover after parsing attributes in process `syz.1.796'. [ 372.571090][ T8506] veth1_macvtap: entered promiscuous mode [ 372.626964][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.724987][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.787637][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.822258][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.844174][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.868382][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.898415][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.927528][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.964135][ T8793] netlink: 'syz.4.800': attribute type 3 has an invalid length. [ 373.031719][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.036305][ T8794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.371993][ T8783] batman_adv: batadv0: Adding interface: macvlan2 [ 373.405293][ T8783] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.677321][ T8783] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 373.769013][ T8789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.830833][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.844572][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.858219][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.898357][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.915457][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.936793][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.961351][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.011317][ T8506] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.068376][ T8506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.077157][ T8506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.098356][ T8506] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.265491][ T8804] gtp1: entered promiscuous mode [ 374.271999][ T8804] gtp1: entered allmulticast mode [ 374.332534][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.370145][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.425606][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.439189][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.448444][ T5877] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 374.529950][ T51] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 374.608905][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 374.638913][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.669628][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.713380][ T5877] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 374.738782][ T51] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.768452][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.781905][ T51] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.815861][ T5877] usb 5-1: config 0 descriptor?? [ 374.834055][ T51] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.853145][ T5877] usb 5-1: bad CDC descriptors [ 374.881440][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.907181][ T8813] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 374.922964][ T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.335560][ T8844] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 375.441684][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 375.506992][ T8844] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 375.680646][ T8] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 375.852850][ T5877] usb 3-1: USB disconnect, device number 26 [ 375.965519][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.241017][ T8] usb 2-1: config 0 has no interface number 0 [ 377.318396][ T8] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 377.339048][ T8] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.369241][ T8] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 377.385132][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.402451][ T8] usb 2-1: Product: syz [ 377.413151][ T8] usb 2-1: Manufacturer: syz [ 377.426147][ T8] usb 2-1: SerialNumber: syz [ 377.447793][ T8] usb 2-1: config 0 descriptor?? [ 377.749103][ T8838] warning: `syz.1.808' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 378.031487][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.808'. [ 378.071879][ T5876] usb 5-1: USB disconnect, device number 21 [ 378.340343][ T8] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 378.390104][ T8] usb 2-1: USB disconnect, device number 32 [ 379.279005][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.289196][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.325361][ T8892] netlink: 76 bytes leftover after parsing attributes in process `syz.4.816'. [ 382.045630][ T5876] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 382.359426][ T5876] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.414776][ T5876] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.473625][ T5876] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.511617][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.412290][ T8904] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.420840][ T51] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 383.433225][ T5876] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.586420][ T51] usb 4-1: Invalid ep0 maxpacket: 16 [ 383.759638][ T51] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 384.029386][ T5843] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 384.237300][ T5876] usb 3-1: USB disconnect, device number 27 [ 384.246988][ T51] usb 4-1: Invalid ep0 maxpacket: 16 [ 384.405173][ T51] usb usb4-port1: attempt power cycle [ 385.176619][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.217265][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.258900][ T5843] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 385.300952][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.352614][ T8951] input: syz0 as /devices/virtual/input/input18 [ 385.362518][ T5843] usb 2-1: config 0 descriptor?? [ 385.943991][ T8958] netlink: 56 bytes leftover after parsing attributes in process `syz.3.830'. [ 386.825587][ T5843] sony 0003:054C:024B.000F: unexpected long global item [ 386.826105][ T5843] sony 0003:054C:024B.000F: parse failed [ 386.826177][ T5843] sony 0003:054C:024B.000F: probe with driver sony failed with error -22 [ 387.070143][ T5843] usb 2-1: USB disconnect, device number 33 [ 493.248257][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 493.255313][ C1] rcu: 0-...!: (1 GPs behind) idle=affc/1/0x4000000000000000 softirq=31788/31789 fqs=0 [ 493.266545][ C1] rcu: (detected by 1, t=10505 jiffies, g=32129, q=384 ncpus=2) [ 493.274311][ C1] Sending NMI from CPU 1 to CPUs 0: [ 493.274357][ C0] NMI backtrace for cpu 0 [ 493.274372][ C0] CPU: 0 UID: 0 PID: 8979 Comm: syz.4.833 Not tainted 6.14.0-rc4-syzkaller #0 [ 493.274391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.274402][ C0] RIP: 0010:check_preemption_disabled+0x7/0x120 [ 493.274435][ C0] Code: c6 60 1a 80 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 <48> 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d 8c [ 493.274450][ C0] RSP: 0018:ffffc90000007c28 EFLAGS: 00000082 [ 493.274466][ C0] RAX: 0000000000010000 RBX: ffffffff89fc9572 RCX: ffff888025548000 [ 493.274479][ C0] RDX: ffff888025548000 RSI: ffffffff8c801a60 RDI: ffffffff8c801a20 [ 493.274492][ C0] RBP: 0000000000000001 R08: ffffffff89fc9629 R09: 1ffff11003d7902b [ 493.274504][ C0] R10: dffffc0000000000 R11: ffffed1003d7902c R12: dffffc0000000000 [ 493.274517][ C0] R13: ffff888035a1fc08 R14: ffff888035a1fc00 R15: ffff88801ebc8360 [ 493.274530][ C0] FS: 00007faf61bb16c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 493.274545][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.274557][ C0] CR2: 000000110c3aba1d CR3: 0000000024bc0000 CR4: 00000000003526f0 [ 493.274573][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.274583][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 493.274594][ C0] Call Trace: [ 493.274601][ C0] [ 493.274611][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 493.274636][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 493.274672][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 493.274697][ C0] ? nmi_handle+0x2a/0x5a0 [ 493.274743][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 493.274772][ C0] ? nmi_handle+0x14f/0x5a0 [ 493.274804][ C0] ? nmi_handle+0x2a/0x5a0 [ 493.274838][ C0] ? check_preemption_disabled+0x7/0x120 [ 493.274870][ C0] ? default_do_nmi+0x63/0x160 [ 493.274894][ C0] ? exc_nmi+0x123/0x1f0 [ 493.274916][ C0] ? end_repeat_nmi+0xf/0x53 [ 493.274952][ C0] ? advance_sched+0xa02/0xca0 [ 493.274978][ C0] ? advance_sched+0xab9/0xca0 [ 493.275006][ C0] ? check_preemption_disabled+0x7/0x120 [ 493.275039][ C0] ? check_preemption_disabled+0x7/0x120 [ 493.275074][ C0] ? check_preemption_disabled+0x7/0x120 [ 493.275098][ C0] [ 493.275103][ C0] [ 493.275109][ C0] ? advance_sched+0xa02/0xca0 [ 493.275126][ C0] rcu_is_watching+0x15/0xb0 [ 493.275143][ C0] ? advance_sched+0xa02/0xca0 [ 493.275160][ C0] advance_sched+0xac2/0xca0 [ 493.275185][ C0] ? __pfx_advance_sched+0x10/0x10 [ 493.275204][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 493.275230][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 493.275246][ C0] ? sched_clock+0x4a/0x70 [ 493.275264][ C0] ? read_tsc+0x9/0x20 [ 493.275282][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 493.275310][ C0] hrtimer_interrupt+0x403/0xa40 [ 493.275339][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 493.275367][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 493.275389][ C0] [ 493.275394][ C0] [ 493.275400][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.275426][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 493.275446][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 3e 2c 23 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 d3 1c 8c f5 65 8b 05 54 90 00 74 85 c0 74 43 48 c7 04 24 0e 36 [ 493.275460][ C0] RSP: 0018:ffffc90004627620 EFLAGS: 00000206 [ 493.275475][ C0] RAX: bd5bd836a6c55400 RBX: 1ffff920008c4ec8 RCX: ffffffff819d296a [ 493.275488][ C0] RDX: dffffc0000000000 RSI: ffffffff8c2aa420 RDI: 0000000000000001 [ 493.275500][ C0] RBP: ffffc900046276b0 R08: ffffffff945118ff R09: 1ffffffff28a231f [ 493.275513][ C0] R10: dffffc0000000000 R11: fffffbfff28a2320 R12: dffffc0000000000 [ 493.275525][ C0] R13: 1ffff920008c4ec4 R14: ffffc90004627640 R15: 0000000000000246 [ 493.275542][ C0] ? mark_lock+0x9a/0x360 [ 493.275571][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 493.275593][ C0] ? autoremove_wake_function+0x37/0x110 [ 493.275618][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 493.275645][ C0] __unix_dgram_recvmsg+0x61a/0x1320 [ 493.275675][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 493.275702][ C0] ? iovec_from_user+0x61/0x240 [ 493.275722][ C0] ? __pfx___might_resched+0x10/0x10 [ 493.275744][ C0] ? __import_iovec+0x3bf/0x830 [ 493.275764][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 493.275789][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 493.275816][ C0] sock_recvmsg_nosec+0x18e/0x1d0 [ 493.275839][ C0] ____sys_recvmsg+0x3cd/0x480 [ 493.275871][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 493.275903][ C0] ? do_recvmmsg+0x44e/0xab0 [ 493.275930][ C0] ? __might_fault+0xaa/0x120 [ 493.275952][ C0] do_recvmmsg+0x426/0xab0 [ 493.275985][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 493.276041][ C0] ? sched_clock_cpu+0x76/0x490 [ 493.276067][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 493.276089][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 493.276117][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 493.276145][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.276168][ C0] ? __irq_exit_rcu+0x105/0x220 [ 493.276187][ C0] ? do_syscall_64+0xb6/0x230 [ 493.276210][ C0] do_syscall_64+0xf3/0x230 [ 493.276232][ C0] ? clear_bhb_loop+0x35/0x90 [ 493.276257][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.276280][ C0] RIP: 0033:0x7faf60d8d169 [ 493.276296][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.276311][ C0] RSP: 002b:00007faf61bb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 493.276328][ C0] RAX: ffffffffffffffda RBX: 00007faf60fa6080 RCX: 00007faf60d8d169 [ 493.276340][ C0] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 493.276352][ C0] RBP: 00007faf60e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 493.276362][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 493.276372][ C0] R13: 0000000000000000 R14: 00007faf60fa6080 R15: 00007ffc7669cda8 [ 493.276393][ C0] [ 493.277348][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g32129 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 493.889707][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 493.899705][ C1] rcu: RCU grace-period kthread stack dump: [ 493.905616][ C1] task:rcu_preempt state:R running task stack:25784 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 493.919189][ C1] Call Trace: [ 493.922582][ C1] [ 493.925543][ C1] __schedule+0x18bc/0x4c40 [ 493.930087][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 493.936036][ C1] ? __pfx___schedule+0x10/0x10 [ 493.940923][ C1] ? __pfx_lock_release+0x10/0x10 [ 493.945992][ C1] ? __pfx___mod_timer+0x10/0x10 [ 493.950960][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.957328][ C1] ? schedule+0x90/0x320 [ 493.961601][ C1] schedule+0x14b/0x320 [ 493.965792][ C1] schedule_timeout+0x15a/0x290 [ 493.970674][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 493.976081][ C1] ? __pfx_process_timeout+0x10/0x10 [ 493.981408][ C1] ? prepare_to_swait_event+0x330/0x350 [ 493.986993][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 493.992234][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 493.997128][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 494.002367][ C1] ? rcu_gp_init+0x1256/0x1630 [ 494.007176][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 494.012155][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 494.018477][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 494.023828][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 494.029783][ C1] ? finish_swait+0xd4/0x1e0 [ 494.034413][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 494.039655][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 494.044298][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 494.049535][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 494.055462][ C1] ? __kthread_parkme+0x169/0x1d0 [ 494.060523][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 494.065758][ C1] kthread+0x7a9/0x920 [ 494.069866][ C1] ? __pfx_kthread+0x10/0x10 [ 494.074497][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 494.079740][ C1] ? __pfx_kthread+0x10/0x10 [ 494.084363][ C1] ? __pfx_kthread+0x10/0x10 [ 494.088993][ C1] ? __pfx_kthread+0x10/0x10 [ 494.093615][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.098850][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 494.104096][ C1] ? __pfx_kthread+0x10/0x10 [ 494.108753][ C1] ret_from_fork+0x4b/0x80 [ 494.113201][ C1] ? __pfx_kthread+0x10/0x10 [ 494.117827][ C1] ret_from_fork_asm+0x1a/0x30 [ 494.122656][ C1] [ 494.125705][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 494.132054][ C1] CPU: 1 UID: 0 PID: 8939 Comm: syz.1.827 Not tainted 6.14.0-rc4-syzkaller #0 [ 494.140935][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 494.151015][ C1] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 494.157812][ C1] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 30 f5 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 e0 f0 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 494.177446][ C1] RSP: 0018:ffffc9000af4ef40 EFLAGS: 00000293 [ 494.183545][ C1] RAX: ffffffff81b5cce5 RBX: 1ffff110170c8c75 RCX: ffff88802a8fda00 [ 494.191545][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 494.199537][ C1] RBP: ffffc9000af4f140 R08: ffffffff81b5ccb0 R09: 1ffff920015e9dd8 [ 494.207533][ C1] R10: dffffc0000000000 R11: fffff520015e9dd9 R12: ffff8880b873f9c8 [ 494.215532][ C1] R13: ffff8880b86463a8 R14: ffff8880b873f9c0 R15: 0000000000000000 [ 494.223528][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 494.232482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.239086][ C1] CR2: 00007f78930d56c0 CR3: 000000007ac86000 CR4: 00000000003526f0 [ 494.247136][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.255158][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 494.263173][ C1] Call Trace: [ 494.266484][ C1] [ 494.269354][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 494.275748][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 494.281462][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 494.287320][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 494.292731][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 494.299003][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 494.304414][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 494.310126][ C1] ? update_process_times+0x242/0x2f0 [ 494.315539][ C1] ? tick_nohz_handler+0x37c/0x500 [ 494.320687][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 494.326176][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 494.331601][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 494.337347][ C1] ? sched_clock+0x4a/0x70 [ 494.341794][ C1] ? read_tsc+0x9/0x20 [ 494.345889][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 494.352001][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 494.357163][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 494.363364][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 494.369205][ C1] [ 494.372161][ C1] [ 494.375112][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.381307][ C1] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 494.387488][ C1] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 494.393709][ C1] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 494.399901][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 494.405333][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 494.411698][ C1] ? rcu_is_watching+0x15/0xb0 [ 494.416487][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 494.421718][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 494.427159][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 494.432312][ C1] flush_tlb_mm_range+0x42d/0x710 [ 494.437379][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 494.442965][ C1] ? rcu_is_watching+0x15/0xb0 [ 494.447765][ C1] unmap_page_range+0x386a/0x4510 [ 494.452846][ C1] ? validate_chain+0x11e/0x5920 [ 494.457822][ C1] ? __lock_acquire+0x1397/0x2100 [ 494.462887][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 494.468314][ C1] ? mas_next_slot+0xdc6/0xea0 [ 494.473127][ C1] ? uprobe_munmap+0x183/0x460 [ 494.477933][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 494.483006][ C1] unmap_vmas+0x3cc/0x5f0 [ 494.487387][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 494.492299][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 494.497822][ C1] exit_mmap+0x283/0xd40 [ 494.502107][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 494.506919][ C1] ? __pfx_exit_aio+0x10/0x10 [ 494.511638][ C1] ? uprobe_clear_state+0x271/0x290 [ 494.516871][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 494.522192][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 494.527520][ C1] __mmput+0x115/0x410 [ 494.531620][ C1] exit_mm+0x220/0x310 [ 494.535725][ C1] ? __pfx_exit_mm+0x10/0x10 [ 494.540353][ C1] ? taskstats_exit+0x326/0xa60 [ 494.545246][ C1] do_exit+0x9ad/0x28e0 [ 494.549446][ C1] ? __pfx_do_exit+0x10/0x10 [ 494.554071][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 494.559480][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 494.565498][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 494.571857][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 494.577001][ C1] do_group_exit+0x207/0x2c0 [ 494.581625][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.586846][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 494.592078][ C1] get_signal+0x168c/0x1720 [ 494.596620][ C1] ? __pfx_get_signal+0x10/0x10 [ 494.601503][ C1] arch_do_signal_or_restart+0x96/0x860 [ 494.607083][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.613264][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 494.619296][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 494.625074][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 494.630661][ C1] do_syscall_64+0x100/0x230 [ 494.635288][ C1] ? clear_bhb_loop+0x35/0x90 [ 494.640005][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.645967][ C1] RIP: 0033:0x7f76a258d169 [ 494.650449][ C1] Code: Unable to access opcode bytes at 0x7f76a258d13f. [ 494.657491][ C1] RSP: 002b:00007f76a34950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 494.665940][ C1] RAX: fffffffffffffe00 RBX: 00007f76a27a5fa8 RCX: 00007f76a258d169 [ 494.673939][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f76a27a5fa8 [ 494.681938][ C1] RBP: 00007f76a27a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 494.689943][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76a27a5fac [ 494.697960][ C1] R13: 0000000000000000 R14: 00007ffc81e34f40 R15: 00007ffc81e35028 [ 494.705995][ C1]