last executing test programs: 13.125673786s ago: executing program 4 (id=833): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001500)={0x0, 0x5}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x6, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000580)={0x5, [[0xfffffff9, 0x0, 0x1, 0x9, 0x7fff0000, 0x4, 0x0, 0x15], [0x9, 0x5, 0x8, 0xfffff801, 0x7, 0x3, 0x7, 0x2], [0x3, 0x4, 0x400, 0x5, 0x6, 0x4, 0x5, 0x9]], '\x00', [{0x0, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x200, 0x4ae, 0x1}, {0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x9244, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, {0x5, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1}, {0x2, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x685, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x1, 0x1, 0x1}, {0x80000000, 0x100, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x5}) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40641, 0x0) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[], 0x1558) cachestat(r7, &(0x7f0000000040)={0x3eff, 0xffff}, &(0x7f0000000280), 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) pipe(&(0x7f0000000000)) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x2, 0x10}, 0xc) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000380)=0x50, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000078010000c90000000200000010040600", @ANYRES32=r8, @ANYBLOB="060c0000000000000000000000000000006092a3f917080f015ad8d526c313000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002000000000000000d00"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.309454289s ago: executing program 3 (id=835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 11.861574895s ago: executing program 3 (id=837): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) io_uring_setup(0x230e, &(0x7f0000001280)={0x0, 0x6b4c, 0x810, 0x2, 0x3ae}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r0 = io_uring_setup(0x410f, &(0x7f0000000200)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x0, 0x0, 0xfffff039}, {0x9c}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 10.949674822s ago: executing program 2 (id=842): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000), 0x4) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffd67, &(0x7f0000000100)='\x04\xab\xd4\x19\xbaZ\f\xd5u\xa4/\x89>\xa5\xa5t\xc8L&\"\xf0+\xeaO\xe6Ll\xa1\x92\x93P\x14\xe2\xec/(\x05\xd63\x058_.\xf4\x8e\x8e\xe1\xb3\xe2\xa3\x0e\f\x03\x9aB3\xf54\xe6\xe1\xcb\x8b)Q!8EG\xc6\x90,\xb1e\xf9Rx*$\xd5X{\xa1w{\xcdq\xe4\xff\xc4\xe1&\xc1\x87\xd4z\xc1\xf1\xda9\xf1\xa5R\xbc\xed\xfd\xd8cf\xef\xe6\x9d\x8ar\xaf\xe7\xd6`\'\xf4\xef\xaa5\x03\xbc\x01\x8b\xaa)\x00\xbd\xa3\xd0KN=Bkj-\xc6\xeb\xa7w~\xf5\x9f\xfd\xa8\xf0|\xb3\xc3\f_\x88,\xfb\xfd\xba\xad\x95\xf46,\xb07\xcdeo\xfa\xcd\x8dx\xb3}\\\xc2\x13>%,\v\xc8\xee\xad.\x00\x87 \x18\x03\xdb\x83V\xb7\xfb\x14\xf3C\x14{\'z\xf6}\x86\xf5\xf89\x11%\x85\x96jY\xefe>\xf3yw\xe5&\x99\x9b\xa2\xcc\xd8\xa8\xa4\xb0\x90UL\x06\x9b>q\xc1\x9d\xa9e\xf2\xea%\xcd\xeaZ\xbe\xc9\xfc\xa2l\x93\xb4\x8b') bind(r1, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r8, 0x4, r8}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r10}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="36ce7f9c08970bb846473a56e2e1884c37e03b2d1e463a33d7"], 0x46) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) r11 = eventfd2(0x401, 0x0) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x680840, 0x0) io_submit(0x0, 0x5, &(0x7f0000000880)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x100, r4, &(0x7f0000000500)="2c351aca3f57e7373fe9c03bfc17818ce2a928877d1d6ba89411351b07b5cc481433d56b8a242994c749cb9cb97c434fb1ad69dbc0f222998f36d6ae10022fe1502e570e3f2e3f053631e0c951fba4aff94f8afc9e3bcbafd8a88cf132bc73205f82c38e99776188320d2968e15007af942a089ae3fb4e385485acf1b9ddf9abcabe059811e5a7a27d95343e4c4039b76b86af8cd50ceddadd14802d738abc1c40e3ee263eaf41f198d3be84c9eacd515a", 0xb1, 0x5, 0x0, 0x6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x8001, r7, &(0x7f0000000600)="4fb514186e", 0x5, 0x7, 0x0, 0x3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000680)="f2a3428ec608e6dbda17be85a6d9d8fa628823dbef10d3de605b18fd27ba1334be9bf6b400d52a3e9916c3a5b0d538445ed9ff941c0872009df004b3783fdb", 0x3f, 0x8, 0x0, 0x2, r11}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x2648, r3, &(0x7f0000000700), 0x0, 0xffff, 0x0, 0x2, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f00000007c0)="ac1f3b7e07d3c1c2ee63f2af67279bdd6c1a291f7cc9286113e8a0ed12846076894955a881feb7059dde8e0057a0c2f9fccce9d7a3d047f167b6a7ae5f41e6bcf91a20478b1937eb0a4547de5a13c4ed9cf39d82243ca638ec779dea48013518f699821d6613be950a1347734a76", 0x6e, 0x8, 0x0, 0x2}]) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000004c0)={r10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000240)={r10}) 10.801922119s ago: executing program 4 (id=843): open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000800100000000000001000000760000000e000000160000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0x2, 0x0, &(0x7f0000000180)) 9.872022902s ago: executing program 2 (id=846): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="b5e346d365a7c7b0f78104bf1d7ece1d1c9619cf27870e0d27cf20950b0be2e026731ec9ba4b90e372d25ec696bcfa9aacfefd74024f77d93c69cd086bd8caf5c90c16ca990e11437ce10e713d38cef9460aa0ad025cf46a1300a685830ed86e3001f6b51019bb25bdcd0179cbf19f335395fa30c2413923af3be9104984502c68b80285bafe8d82acc1d88263671e459bc3002daf88fcc26418e9b00b720c2d1d4c5c345d2764d8880239a855ec846acc2a083a6b709ee3b86aeac0b0c96f8e1c0712496081ffba77ab87916d04251fc0efa5a84a0092e69bde2e53fcdec7fd51793e553de61e52e0005e09bd40fcca", 0xf0}, {&(0x7f00000001c0)="d0a7ffd8e3949cc8d70c545fa68b6b374e42a0381966343a246b1dee68f9bb12a798435c61e74cfbe8967a40f9c447700377c1701a97407fe1bed221b662d064a75c629e89e06d62baf282abb56fa88cba2376d92273ab6f3570315bd0732c8ada37c7a7701ca9542370bf04f3891e829b99cc5226df3dadcdb8bf904ca227a88139c496cf66420bed1fb31a9c", 0x8d}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x22840, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x2000) 9.739480143s ago: executing program 4 (id=847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 8.950699807s ago: executing program 3 (id=850): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='netlink_extack\x00', r1, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syslog(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r2, 0x0) connect$l2tp6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xca, &(0x7f00000000c0)={{0xa, 0x1000, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000000400ca38f6200000cd318e06d5eebd9a09411b4ef46a07be0bb012516caf39f4b2e6c94813aedca63b39a73f356ea1f4000fb086a915e3c4e543b29616e991f49952955495c4adf1bfc0c28faacde61bf395e5c27af3381c5b518c99fcfdf991daedd1a57b8af6e24f99ba50f6010ecc06d734beed2ac5a6bcb5afc7daf4ba7f68606bfe11060475502333ba0c3d25850d5e13bee11250f9d7e7aa897c38a6ef357ddf2a0730fee07cd4cff8e46f28a51244ccca541f96eadea74a130d70af38d073bc5595843b601a09f15c9bae9a6472d7b33ed8d98007404f6fd93401f0f0805ee37e79f40f9f9a4f", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0x7c, 0x0, &(0x7f00000002c0)) sendfile(r2, r4, &(0x7f0000000000)=0x3, 0x9) 8.390115559s ago: executing program 2 (id=851): r0 = socket$inet6(0xa, 0x80000, 0x5c159aa7) unshare(0x20000600) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240)=0x8002, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00"/18, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f0000"], 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r5, r3}) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000000)={0x3}) 8.249826822s ago: executing program 4 (id=852): set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) set_mempolicy(0x4000, &(0x7f0000000280)=0x7, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21089c, &(0x7f0000000080)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@nobarrier}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 7.285475092s ago: executing program 1 (id=853): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000003cc0)) (fail_nth: 2) 6.744282696s ago: executing program 0 (id=854): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x505, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x3, 0xb, 0x4}}, 0x30) 6.137418732s ago: executing program 3 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="700000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004000128008000100687372"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.772529932s ago: executing program 1 (id=856): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000012140100000000000000000008001000000000007137f6718de43b0bf41c007f10846509a4942cd4d22b907462a4"], 0x18}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xa89d88766f3802cc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.286745077s ago: executing program 4 (id=857): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) fadvise64(r0, 0x100000001, 0x2, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 5.286417745s ago: executing program 0 (id=858): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r0, 0x2000000, 0x8, 0x0, &(0x7f0000000080)="5cdd3086ddff0066", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.827084499s ago: executing program 3 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r0, 0x2000000, 0x8, 0x0, &(0x7f0000000080)="5cdd3086ddff0066", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 4.570564917s ago: executing program 0 (id=860): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) (async, rerun: 32) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000040)=0x1) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r2, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000000001}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000015c0)={0x28, 0x2, r2, r2, 0x1000000000000005, 0x4, 0x4000003fff}) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x36, "0a2475fdd349cc98c8270ac1a3597a5f555020a311bde2564d3582c56fde243fb1876a2b2394975b42e38d847ed856c632878eafc89763efc5b9cd2343dd46f5e1578557eca2dc6ef589d114bc7cdf7195d3d247bc3f1c2ad6054d49616902b382718b31b751b429bdd36262e374a6e3a3e11152100c9075eee6dfbcc03f2e52"}) r4 = socket(0x40000000015, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000180)=[{r4, 0x2000}], 0x1, 0x81) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) read$FUSE(r6, 0x0, 0x0) bind$rds(r6, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0xfffffffb}, &(0x7f00000003c0)=0x8) (async) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x81000000}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xa], 0x1, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x40) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r7, 0xcc34, 0x5}, &(0x7f0000000480)=0xc) (async) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) r11 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x20000) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="030000eb0229", 0x0, 0x0, 0x0, 0x0, 0x0}) listen(r5, 0xfffffffe) 4.496241244s ago: executing program 1 (id=861): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) accept4(r6, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000001400078008001300000000000800124000000000050005000200000005000400000000000500010007"], 0x60}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r9, &(0x7f0000001080)="fe065acf3795036e0100000009260f5838cf9fdf425d4862955655a863eb37e12e6f2b83ebd5c74acd07cb769d94251107b63f3962021365512e03eade17c8ea251b43fa215a2dbd93c94ddff4242b1fc3ad4b742c6208f646c7375c3e85d1be37869692c0bc1123a5dd05734500156cde069e95a7b030be22eb8a4090ecc972e964c1a8912ef31609b653482219a1", 0x1, 0x80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7f, @empty}, 0xfffffed9) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @random="442200001000"}) keyctl$update(0x2, r0, &(0x7f0000000080)="fd", 0x1) 3.670321505s ago: executing program 3 (id=862): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000a6ff0540cda9eecdb9050000000109022b0001000000000904000002010351000905031300000000000725010800000009050f"], 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000b, 0x0, 0x4000000000000000}) 3.566025808s ago: executing program 0 (id=863): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000004000)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRES8, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYBLOB="9651c56ad88578a214a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f200"/157, @ANYBLOB="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", @ANYRESDEC], 0x1, 0x1cd, &(0x7f0000002180)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 3.478084131s ago: executing program 4 (id=864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000140)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = gettid() syz_open_procfs$userns(r0, &(0x7f0000000400)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x4085) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000f80)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b3300000000fddbdf25150000", @ANYRES32=0x0], 0x24}}, 0x80) migrate_pages(r4, 0xffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = fcntl$dupfd(r7, 0x0, r7) read$snapshot(r8, 0x0, 0xffffffbf) 3.466180448s ago: executing program 2 (id=865): r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r2) open(&(0x7f00000002c0)='./file0\x00', 0x4002, 0x0) getsockopt$inet_int(r0, 0x10d, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.250725722s ago: executing program 0 (id=866): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0) unshare(0x20000400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x280400, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x1) read$msr(r2, &(0x7f00000000c0)=""/154, 0x9a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0) (async) unshare(0x20000400) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x280400, 0x0) (async) preadv(r3, 0x0, 0x0, 0x0, 0x1) (async) read$msr(r2, &(0x7f00000000c0)=""/154, 0x9a) (async) 2.217778989s ago: executing program 1 (id=867): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r0, 0x2000000, 0xc, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 2.186381733s ago: executing program 2 (id=868): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x73000000) 1.093827451s ago: executing program 1 (id=869): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000100)) 971.213996ms ago: executing program 0 (id=870): epoll_create1(0x0) (async) r0 = epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x808000, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x1, 0xb09, &(0x7f0000000f40)="$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") 494.730753ms ago: executing program 1 (id=871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000002000000140001800600010002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) (fail_nth: 3) 0s ago: executing program 2 (id=872): lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000200)="0acb1e84708fbb8290", 0x9}], 0x1, 0x2911, 0x1, 0x2) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000180), 0xe, 0x2, 0x0, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) kernel console output (not intermixed with test programs): 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 420.988540][ T7071] RSP: 002b:00007fe900434df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 420.997371][ T7071] RAX: ffffffffffffffda RBX: 0000000000008000 RCX: 00007fe8ff57c9df [ 421.005605][ T7071] RDX: 0000000000008000 RSI: 00007fe8f4c00000 RDI: 0000000000000004 [ 421.013837][ T7071] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000022f [ 421.022065][ T7071] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 421.030282][ T7071] R13: 00007fe900434ef0 R14: 00007fe900434eb0 R15: 00007fe8f4c00000 [ 421.038536][ T7071] [ 421.082820][ T7069] warning: `syz.2.541' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 421.202724][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 421.352036][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 421.362476][ T44] usb 5-1: too many configurations: 87, using maximum allowed: 8 [ 421.450366][ T44] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 421.460406][ T44] usb 5-1: New USB device strings: Mfr=83, Product=16, SerialNumber=219 [ 421.469422][ T44] usb 5-1: Product: syz [ 421.473877][ T44] usb 5-1: Manufacturer: syz [ 421.476369][ T1902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 421.478840][ T44] usb 5-1: SerialNumber: syz [ 421.519545][ T44] r8152-cfgselector 5-1: Unknown version 0x0000 [ 421.526709][ T44] r8152-cfgselector 5-1: config 0 descriptor?? [ 421.667577][ T1902] usb 3-1: device descriptor read/64, error -71 [ 421.668942][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 421.695261][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 421.903324][ T1902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 422.056137][ T1902] usb 3-1: device descriptor read/64, error -71 [ 422.181282][ T1902] usb usb3-port1: attempt power cycle [ 422.263356][ T7087] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 422.564104][ T1902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 422.614568][ T1902] usb 3-1: device descriptor read/8, error -71 [ 422.874839][ T1902] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 423.012238][ T1902] usb 3-1: device descriptor read/8, error -71 [ 423.131151][ T1902] usb usb3-port1: unable to enumerate USB device [ 424.075342][ T1902] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 426.248543][ T7107] loop3: detected capacity change from 0 to 764 [ 426.338966][ T7107] FAULT_INJECTION: forcing a failure. [ 426.338966][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 426.352521][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.3.555 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 426.363133][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.366977][ T5234] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 426.373361][ T7107] Call Trace: [ 426.373421][ T7107] [ 426.373480][ T7107] dump_stack_lvl+0x216/0x2d0 [ 426.392509][ T7107] dump_stack+0x1e/0x30 [ 426.396947][ T7107] should_fail_ex+0x748/0x7f0 [ 426.401954][ T7107] should_failslab+0x17f/0x210 [ 426.407060][ T7107] kmem_cache_alloc_lru_noprof+0xec/0xb30 [ 426.413111][ T7107] ? isofs_alloc_inode+0x5a/0xd0 [ 426.418362][ T7107] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 426.424523][ T7107] isofs_alloc_inode+0x5a/0xd0 [ 426.429603][ T7107] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 426.435365][ T7107] alloc_inode+0x86/0x460 [ 426.440012][ T7107] iget5_locked+0xa9/0x1d0 [ 426.444734][ T7107] ? __pfx_isofs_iget5_set+0x10/0x10 [ 426.450310][ T7107] ? __pfx_isofs_iget5_test+0x10/0x10 [ 426.455986][ T7107] __isofs_iget+0x167/0x33c0 [ 426.460906][ T7107] ? filter_irq_stacks+0x60/0x1a0 [ 426.466323][ T7107] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.471908][ T7107] ? folio_mark_accessed+0x345/0x750 [ 426.477561][ T7107] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.483095][ T7107] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 426.489746][ T7107] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.495270][ T7107] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.500810][ T7107] isofs_get_blocks+0x3f7/0x1070 [ 426.506078][ T7107] isofs_bread+0xcc/0x2f0 [ 426.510788][ T7107] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 426.517354][ T7107] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 426.523574][ T7107] isofs_lookup+0x352/0x1ba0 [ 426.528502][ T7107] ? __pfx_isofs_lookup+0x10/0x10 [ 426.533818][ T7107] path_openat+0x292f/0x6200 [ 426.538753][ T7107] do_filp_open+0x20e/0x590 [ 426.543581][ T7107] do_sys_openat2+0x1bf/0x2f0 [ 426.548605][ T7107] __x64_sys_openat+0x2a1/0x310 [ 426.553891][ T7107] x64_sys_call+0x120e/0x3ba0 [ 426.558903][ T7107] do_syscall_64+0xcd/0x1e0 [ 426.563705][ T7107] ? clear_bhb_loop+0x25/0x80 [ 426.568692][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.574902][ T7107] RIP: 0033:0x7fe8ff57def9 [ 426.579573][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.599581][ T7107] RSP: 002b:00007fe900435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 426.608316][ T7107] RAX: ffffffffffffffda RBX: 00007fe8ff735f80 RCX: 00007fe8ff57def9 [ 426.616556][ T7107] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: ffffffffffffff9c [ 426.624783][ T7107] RBP: 00007fe900435090 R08: 0000000000000000 R09: 0000000000000000 [ 426.633006][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.641220][ T7107] R13: 0000000000000000 R14: 00007fe8ff735f80 R15: 00007ffea06233e8 [ 426.649568][ T7107] [ 426.811223][ T7098] loop4: detected capacity change from 0 to 4096 [ 426.822449][ T7098] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 426.879348][ T7113] FAULT_INJECTION: forcing a failure. [ 426.879348][ T7113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.892935][ T7113] CPU: 0 UID: 0 PID: 7113 Comm: syz.1.557 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 426.903543][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.913885][ T7113] Call Trace: [ 426.917388][ T7113] [ 426.920570][ T7113] dump_stack_lvl+0x216/0x2d0 [ 426.925664][ T7113] dump_stack+0x1e/0x30 [ 426.930166][ T7113] should_fail_ex+0x748/0x7f0 [ 426.935214][ T7113] should_fail+0x2a/0x40 [ 426.939809][ T7113] should_fail_usercopy+0x2e/0x40 [ 426.945203][ T7113] _copy_from_user+0x33/0x160 [ 426.950243][ T7113] ___sys_sendmsg+0x120/0x3c0 [ 426.955318][ T7113] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.960906][ T7113] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 426.967110][ T7113] ? __rcu_read_unlock+0x7b/0xe0 [ 426.972405][ T7113] ? __fget_files+0x4f5/0x5c0 [ 426.977465][ T7113] ? kmsan_get_metadata+0x13e/0x1c0 [ 426.983059][ T7113] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 426.989263][ T7113] __x64_sys_sendmsg+0x301/0x490 [ 426.994618][ T7113] ? kmsan_get_metadata+0x13e/0x1c0 [ 427.000212][ T7113] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 427.006425][ T7113] x64_sys_call+0x2da0/0x3ba0 [ 427.011478][ T7113] do_syscall_64+0xcd/0x1e0 [ 427.016330][ T7113] ? clear_bhb_loop+0x25/0x80 [ 427.021460][ T7113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.027722][ T7113] RIP: 0033:0x7fd72bf7def9 [ 427.032422][ T7113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.052398][ T7113] RSP: 002b:00007fd72cdd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.061199][ T7113] RAX: ffffffffffffffda RBX: 00007fd72c135f80 RCX: 00007fd72bf7def9 [ 427.069445][ T7113] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 427.077671][ T7113] RBP: 00007fd72cdd2090 R08: 0000000000000000 R09: 0000000000000000 [ 427.085895][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.094111][ T7113] R13: 0000000000000000 R14: 00007fd72c135f80 R15: 00007ffd2a232328 [ 427.102378][ T7113] [ 427.272494][ T7098] ntfs3: loop4: Failed to read $UpCase (-4). [ 427.282804][ T5234] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 427.292533][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.300946][ T5234] usb 1-1: Product: syz [ 427.305812][ T5234] usb 1-1: Manufacturer: syz [ 427.310706][ T5234] usb 1-1: SerialNumber: syz [ 427.382521][ T5234] usb 1-1: config 0 descriptor?? [ 427.412468][ T5234] ch341 1-1:0.0: ch341-uart converter detected [ 427.531310][ T7118] 9pnet_fd: Insufficient options for proto=fd [ 427.542127][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 427.542213][ T29] audit: type=1326 audit(1727000302.895:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe374b7def9 code=0x7ffc0000 [ 427.542463][ T29] audit: type=1326 audit(1727000302.895:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe374b7def9 code=0x7ffc0000 [ 427.569708][ T29] audit: type=1326 audit(1727000302.927:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fe374b7def9 code=0x7ffc0000 [ 427.597755][ T29] audit: type=1326 audit(1727000302.927:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe374b7def9 code=0x7ffc0000 [ 427.876666][ T5234] usb 1-1: failed to send control message: -71 [ 427.883316][ T5234] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 427.957076][ T5234] usb 1-1: USB disconnect, device number 8 [ 427.965768][ T5234] ch341 1-1:0.0: device disconnected [ 428.143475][ T7126] FAULT_INJECTION: forcing a failure. [ 428.143475][ T7126] name failslab, interval 1, probability 0, space 0, times 0 [ 428.156781][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.3.563 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 428.167395][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 428.177745][ T7126] Call Trace: [ 428.181229][ T7126] [ 428.184595][ T7126] dump_stack_lvl+0x216/0x2d0 [ 428.189575][ T7126] dump_stack+0x1e/0x30 [ 428.194030][ T7126] should_fail_ex+0x748/0x7f0 [ 428.199052][ T7126] should_failslab+0x17f/0x210 [ 428.204165][ T7126] __kmalloc_noprof+0x175/0xf30 [ 428.209343][ T7126] ? tomoyo_encode+0x5f8/0xa40 [ 428.214385][ T7126] ? kmsan_get_metadata+0x13e/0x1c0 [ 428.219941][ T7126] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 428.226217][ T7126] tomoyo_encode+0x5f8/0xa40 [ 428.231116][ T7126] tomoyo_realpath_from_path+0x9dd/0xaa0 [ 428.237075][ T7126] tomoyo_path_number_perm+0x1d9/0x8f0 [ 428.242872][ T7126] ? kmsan_get_metadata+0x13e/0x1c0 [ 428.248421][ T7126] ? kmsan_get_metadata+0x13e/0x1c0 [ 428.253967][ T7126] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 428.260137][ T7126] tomoyo_file_ioctl+0x3f/0x50 [ 428.265198][ T7126] security_file_ioctl+0x145/0x590 [ 428.270642][ T7126] __se_sys_ioctl+0xd3/0x450 [ 428.275532][ T7126] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 428.281694][ T7126] __x64_sys_ioctl+0x96/0xe0 [ 428.286581][ T7126] x64_sys_call+0x18bf/0x3ba0 [ 428.291584][ T7126] do_syscall_64+0xcd/0x1e0 [ 428.296366][ T7126] ? clear_bhb_loop+0x25/0x80 [ 428.301356][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.307573][ T7126] RIP: 0033:0x7fe8ff57def9 [ 428.312239][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.332182][ T7126] RSP: 002b:00007fe900435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.341107][ T7126] RAX: ffffffffffffffda RBX: 00007fe8ff735f80 RCX: 00007fe8ff57def9 [ 428.349456][ T7126] RDX: 0000000020000140 RSI: 00000000c014563b RDI: 0000000000000003 [ 428.357698][ T7126] RBP: 00007fe900435090 R08: 0000000000000000 R09: 0000000000000000 [ 428.366005][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.374219][ T7126] R13: 0000000000000000 R14: 00007fe8ff735f80 R15: 00007ffea06233e8 [ 428.382513][ T7126] [ 428.391002][ T7126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.119968][ T7142] FAULT_INJECTION: forcing a failure. [ 429.119968][ T7142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.135177][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.4.569 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 429.145873][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 429.156191][ T7142] Call Trace: [ 429.159669][ T7142] [ 429.162791][ T7142] dump_stack_lvl+0x216/0x2d0 [ 429.167789][ T7142] dump_stack+0x1e/0x30 [ 429.172208][ T7142] should_fail_ex+0x748/0x7f0 [ 429.177205][ T7142] should_fail+0x2a/0x40 [ 429.181736][ T7142] should_fail_usercopy+0x2e/0x40 [ 429.187075][ T7142] _copy_from_user+0x33/0x160 [ 429.192080][ T7142] seccomp_notify_ioctl+0x83e/0x28f0 [ 429.197748][ T7142] ? kmsan_get_metadata+0x13e/0x1c0 [ 429.203293][ T7142] ? __pfx_seccomp_notify_ioctl+0x10/0x10 [ 429.209418][ T7142] __se_sys_ioctl+0x25e/0x450 [ 429.214401][ T7142] __x64_sys_ioctl+0x96/0xe0 [ 429.219313][ T7142] x64_sys_call+0x18bf/0x3ba0 [ 429.224402][ T7142] do_syscall_64+0xcd/0x1e0 [ 429.229185][ T7142] ? clear_bhb_loop+0x25/0x80 [ 429.234190][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.240397][ T7142] RIP: 0033:0x7f09a057def9 [ 429.245071][ T7142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.264984][ T7142] RSP: 002b:00007f09a1373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.273715][ T7142] RAX: ffffffffffffffda RBX: 00007f09a0736058 RCX: 00007f09a057def9 [ 429.282053][ T7142] RDX: 0000000020000000 RSI: 0000000040182103 RDI: 0000000000000003 [ 429.290276][ T7142] RBP: 00007f09a1373090 R08: 0000000000000000 R09: 0000000000000000 [ 429.298555][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.306772][ T7142] R13: 0000000000000001 R14: 00007f09a0736058 R15: 00007ffcc45f15f8 [ 429.315017][ T7142] [ 429.698190][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 429.707674][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 429.751822][ T7152] loop3: detected capacity change from 0 to 8 [ 429.801718][ T7152] SQUASHFS error: Failed to read block 0x2d7: -5 [ 429.808874][ T7152] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 429.833929][ T7152] input: syz0 as /devices/virtual/input/input6 [ 429.872783][ T29] audit: type=1326 audit(1727000305.321:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a057def9 code=0x7fc00000 [ 430.231880][ T29] audit: type=1326 audit(1727000305.720:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe374b7def9 code=0x7fc00000 [ 430.716029][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.2.578'. [ 430.725617][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.2.578'. [ 431.210379][ T7180] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 431.237926][ T7181] FAULT_INJECTION: forcing a failure. [ 431.237926][ T7181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.257381][ T7181] CPU: 1 UID: 0 PID: 7181 Comm: syz.1.585 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 431.262472][ T7174] loop3: detected capacity change from 0 to 64 [ 431.268222][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 431.268322][ T7181] Call Trace: [ 431.268381][ T7181] [ 431.268440][ T7181] dump_stack_lvl+0x216/0x2d0 [ 431.296375][ T7181] dump_stack+0x1e/0x30 [ 431.300853][ T7181] should_fail_ex+0x748/0x7f0 [ 431.305903][ T7181] should_fail+0x2a/0x40 [ 431.310511][ T7181] should_fail_usercopy+0x2e/0x40 [ 431.315985][ T7181] _copy_to_user+0x33/0x110 [ 431.320840][ T7181] simple_read_from_buffer+0x199/0x340 [ 431.326715][ T7181] proc_fail_nth_read+0x1e5/0x2c0 [ 431.332102][ T7181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.338009][ T7181] vfs_read+0x29b/0xf60 [ 431.342500][ T7181] ? kmsan_get_metadata+0x13e/0x1c0 [ 431.348077][ T7181] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 431.354873][ T7181] ksys_read+0x20f/0x4c0 [ 431.359462][ T7181] __x64_sys_read+0x93/0xe0 [ 431.364276][ T7181] x64_sys_call+0x3055/0x3ba0 [ 431.369305][ T7181] do_syscall_64+0xcd/0x1e0 [ 431.374091][ T7181] ? clear_bhb_loop+0x25/0x80 [ 431.379083][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.385296][ T7181] RIP: 0033:0x7fd72bf7c93c [ 431.389965][ T7181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 431.409977][ T7181] RSP: 002b:00007fd72cdd2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.418716][ T7181] RAX: ffffffffffffffda RBX: 00007fd72c135f80 RCX: 00007fd72bf7c93c [ 431.426953][ T7181] RDX: 000000000000000f RSI: 00007fd72cdd20a0 RDI: 0000000000000004 [ 431.435212][ T7181] RBP: 00007fd72cdd2090 R08: 0000000000000000 R09: 0000000000000000 [ 431.443460][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.451680][ T7181] R13: 0000000000000000 R14: 00007fd72c135f80 R15: 00007ffd2a232328 [ 431.459931][ T7181] [ 431.691609][ T7188] loop2: detected capacity change from 0 to 64 [ 431.812864][ T29] audit: type=1804 audit(1727000307.368:22): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.584" name="/newroot/80/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 432.571144][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 432.690132][ T7200] loop4: detected capacity change from 0 to 2048 [ 432.751650][ T7200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.818147][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 432.829757][ T7200] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 432.841308][ T7200] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 432.909517][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 432.917638][ T44] usb 4-1: can't read configurations, error -61 [ 433.091026][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 433.181470][ T7199] loop4: detected capacity change from 0 to 764 [ 433.214011][ T7205] FAULT_INJECTION: forcing a failure. [ 433.214011][ T7205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.227725][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.1.592 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 433.238340][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 433.248688][ T7205] Call Trace: [ 433.252178][ T7205] [ 433.255309][ T7205] dump_stack_lvl+0x216/0x2d0 [ 433.260287][ T7205] dump_stack+0x1e/0x30 [ 433.264720][ T7205] should_fail_ex+0x748/0x7f0 [ 433.269725][ T7205] should_fail+0x2a/0x40 [ 433.274280][ T7205] should_fail_usercopy+0x2e/0x40 [ 433.279628][ T7205] _copy_from_user+0x33/0x160 [ 433.284633][ T7205] ___sys_sendmsg+0x120/0x3c0 [ 433.289659][ T7205] ? kmsan_get_metadata+0x13e/0x1c0 [ 433.295240][ T7205] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 433.301514][ T7205] ? __rcu_read_unlock+0x7b/0xe0 [ 433.306765][ T7205] ? __fget_files+0x4f5/0x5c0 [ 433.311755][ T7205] ? kmsan_get_metadata+0x13e/0x1c0 [ 433.317304][ T7205] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 433.323460][ T7205] __x64_sys_sendmsg+0x301/0x490 [ 433.328748][ T7205] ? kmsan_get_metadata+0x13e/0x1c0 [ 433.334294][ T7205] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 433.340449][ T7205] x64_sys_call+0x2da0/0x3ba0 [ 433.345445][ T7205] do_syscall_64+0xcd/0x1e0 [ 433.350226][ T7205] ? clear_bhb_loop+0x25/0x80 [ 433.355227][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.361442][ T7205] RIP: 0033:0x7fd72bf7def9 [ 433.366116][ T7205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.386061][ T7205] RSP: 002b:00007fd72cdd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.394842][ T7205] RAX: ffffffffffffffda RBX: 00007fd72c135f80 RCX: 00007fd72bf7def9 [ 433.403085][ T7205] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 433.411308][ T7205] RBP: 00007fd72cdd2090 R08: 0000000000000000 R09: 0000000000000000 [ 433.419626][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.427871][ T7205] R13: 0000000000000000 R14: 00007fd72c135f80 R15: 00007ffd2a232328 [ 433.436141][ T7205] [ 433.493457][ T7199] Symlink component flag not implemented [ 433.524298][ T7199] Symlink component flag not implemented (129) [ 433.533739][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 433.554388][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 433.562715][ T44] usb 4-1: can't read configurations, error -61 [ 433.588883][ T44] usb usb4-port1: attempt power cycle [ 433.597178][ T7199] rock: directory entry would overflow storage [ 433.603828][ T7199] rock: sig=0x4f50, size=4, remaining=3 [ 433.609981][ T7199] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 433.742484][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 433.856783][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.594'. [ 433.866625][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.594'. [ 433.924998][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 433.963084][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 433.988081][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.999867][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 434.010214][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.059156][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 434.123696][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 434.131824][ T44] usb 4-1: can't read configurations, error -61 [ 434.144809][ T25] usb 3-1: config 0 descriptor?? [ 434.188636][ T7213] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 434.342395][ T7213] team0: entered promiscuous mode [ 434.347893][ T7213] team_slave_0: entered promiscuous mode [ 434.355071][ T7213] team_slave_1: entered promiscuous mode [ 434.368259][ T7213] bond0: entered promiscuous mode [ 434.373718][ T7213] bond_slave_0: entered promiscuous mode [ 434.380706][ T7213] bond_slave_1: entered promiscuous mode [ 434.428823][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 434.475733][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 434.511658][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 434.520280][ T44] usb 4-1: can't read configurations, error -61 [ 434.528529][ T44] usb usb4-port1: unable to enumerate USB device [ 434.575316][ T7212] team0: left promiscuous mode [ 434.581019][ T7212] team_slave_0: left promiscuous mode [ 434.588260][ T7212] team_slave_1: left promiscuous mode [ 434.598981][ T7212] bond0: left promiscuous mode [ 434.604479][ T7212] bond_slave_0: left promiscuous mode [ 434.612031][ T7212] bond_slave_1: left promiscuous mode [ 434.627861][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.636115][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.644034][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.647836][ T7207] loop2: detected capacity change from 0 to 128 [ 434.651832][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.672255][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.681171][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.689913][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.697927][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.705776][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.713538][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.721491][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.729354][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.735045][ T7207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.737200][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.766968][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.774862][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.782739][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.793198][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.801624][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.809720][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.817476][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.825337][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.833217][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.841136][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.854018][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.863091][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.871083][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.878937][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.886932][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.895080][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.902988][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.911085][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.918953][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.927005][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.934868][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.942788][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.955408][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.965026][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.973047][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.980876][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.988647][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 434.996697][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 435.004572][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 435.012439][ T5234] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 435.085979][ T5234] hid-generic 0000:0000:0003.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 435.129660][ T25] wacom 0003:056A:0333.0004: hidraw1: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 435.220149][ T7221] loop4: detected capacity change from 0 to 64 [ 435.270035][ T44] usb 3-1: USB disconnect, device number 11 [ 435.320476][ T1902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 435.546099][ T1902] usb 2-1: config 0 has no interfaces? [ 435.553670][ T1902] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 435.564355][ T1902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.618913][ T1902] usb 2-1: config 0 descriptor?? [ 435.909958][ T1902] usb 2-1: USB disconnect, device number 7 [ 435.990179][ T44] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 436.200744][ T44] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 436.210669][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.224303][ T44] usb 5-1: Product: syz [ 436.230636][ T44] usb 5-1: Manufacturer: syz [ 436.235529][ T44] usb 5-1: SerialNumber: syz [ 436.299389][ T44] usb 5-1: config 0 descriptor?? [ 436.352548][ T44] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 436.533923][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.586535][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.654631][ T7239] FAULT_INJECTION: forcing a failure. [ 436.654631][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.668754][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.0.604 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 436.679343][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 436.689652][ T7239] Call Trace: [ 436.693129][ T7239] [ 436.696268][ T7239] dump_stack_lvl+0x216/0x2d0 [ 436.701266][ T7239] dump_stack+0x1e/0x30 [ 436.705717][ T7239] should_fail_ex+0x748/0x7f0 [ 436.710840][ T7239] should_fail+0x2a/0x40 [ 436.715445][ T7239] should_fail_usercopy+0x2e/0x40 [ 436.720804][ T7239] _copy_to_user+0x33/0x110 [ 436.725622][ T7239] simple_read_from_buffer+0x199/0x340 [ 436.731444][ T7239] proc_fail_nth_read+0x1e5/0x2c0 [ 436.736796][ T7239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.742660][ T7239] vfs_read+0x29b/0xf60 [ 436.747108][ T7239] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.752683][ T7239] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 436.759384][ T7239] ksys_read+0x20f/0x4c0 [ 436.763952][ T7239] __x64_sys_read+0x93/0xe0 [ 436.768773][ T7239] x64_sys_call+0x3055/0x3ba0 [ 436.773783][ T7239] do_syscall_64+0xcd/0x1e0 [ 436.778582][ T7239] ? clear_bhb_loop+0x25/0x80 [ 436.783590][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.789993][ T7239] RIP: 0033:0x7fc9ccf7c93c [ 436.794672][ T7239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 436.814827][ T7239] RSP: 002b:00007fc9cdd7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.823576][ T7239] RAX: ffffffffffffffda RBX: 00007fc9cd135f80 RCX: 00007fc9ccf7c93c [ 436.831824][ T7239] RDX: 000000000000000f RSI: 00007fc9cdd7e0a0 RDI: 0000000000000006 [ 436.840049][ T7239] RBP: 00007fc9cdd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 436.848273][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.856767][ T7239] R13: 0000000000000000 R14: 00007fc9cd135f80 R15: 00007ffe4e213048 [ 436.865032][ T7239] [ 436.938640][ T7232] loop4: detected capacity change from 0 to 512 [ 436.980973][ T44] gspca_sunplus: reg_r err -110 [ 437.030211][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.057453][ T7232] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 437.067575][ T7232] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 437.078596][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.244037][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.268973][ T1902] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 437.277708][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.591132][ T7252] loop3: detected capacity change from 0 to 512 [ 437.602159][ T7251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.607'. [ 437.611853][ T7251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.607'. [ 437.634317][ T7252] ext4: Unknown parameter 'func' [ 437.814345][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 437.823763][ T7254] netlink: 'syz.3.608': attribute type 13 has an invalid length. [ 437.831998][ T7254] netlink: 'syz.3.608': attribute type 11 has an invalid length. [ 438.120328][ T7257] loop3: detected capacity change from 0 to 512 [ 438.182447][ T7257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 438.281585][ T7257] EXT4-fs (loop3): 1 truncate cleaned up [ 438.289861][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.787811][ T44] usb 5-1: USB disconnect, device number 9 [ 438.882835][ T5182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.218252][ T7235] coredump: 232(syz.2.602): interrupted: fatal signal pending [ 439.226226][ T7235] coredump: 232(syz.2.602): written to core: VMAs: 35, size 97419264; core: 11352815 bytes, pos 11804672 [ 439.302686][ T7273] FAULT_INJECTION: forcing a failure. [ 439.302686][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 439.316506][ T7273] CPU: 1 UID: 0 PID: 7273 Comm: syz.4.613 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 439.327127][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 439.337513][ T7273] Call Trace: [ 439.341035][ T7273] [ 439.344191][ T7273] dump_stack_lvl+0x216/0x2d0 [ 439.349290][ T7273] dump_stack+0x1e/0x30 [ 439.353750][ T7273] should_fail_ex+0x748/0x7f0 [ 439.358793][ T7273] should_failslab+0x17f/0x210 [ 439.364035][ T7273] kmem_cache_alloc_noprof+0xe2/0xb20 [ 439.369772][ T7273] ? vm_area_dup+0xe1/0x620 [ 439.374652][ T7273] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 439.380874][ T7273] vm_area_dup+0xe1/0x620 [ 439.385564][ T7273] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 439.391768][ T7273] __split_vma+0x27c/0x1390 [ 439.396624][ T7273] ? stack_depot_save+0x12/0x20 [ 439.401811][ T7273] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 439.407960][ T7273] ? kmsan_slab_alloc+0xdf/0x160 [ 439.413250][ T7273] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 439.419411][ T7273] vma_modify+0x262e/0x2db0 [ 439.424272][ T7273] vma_modify_policy+0x302/0x410 [ 439.429557][ T7273] mbind_range+0x5ed/0xd30 [ 439.434465][ T7273] __se_sys_set_mempolicy_home_node+0x925/0xe70 [ 439.441166][ T7273] __x64_sys_set_mempolicy_home_node+0xbd/0x110 [ 439.447875][ T7273] x64_sys_call+0x1ac7/0x3ba0 [ 439.452874][ T7273] do_syscall_64+0xcd/0x1e0 [ 439.457660][ T7273] ? clear_bhb_loop+0x25/0x80 [ 439.462649][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.468858][ T7273] RIP: 0033:0x7f09a057def9 [ 439.473528][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.493797][ T7273] RSP: 002b:00007f09a1394038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 439.502538][ T7273] RAX: ffffffffffffffda RBX: 00007f09a0735f80 RCX: 00007f09a057def9 [ 439.510772][ T7273] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ff8000 [ 439.519172][ T7273] RBP: 00007f09a1394090 R08: 0000000000000000 R09: 0000000000000000 [ 439.527397][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.535633][ T7273] R13: 0000000000000000 R14: 00007f09a0735f80 R15: 00007ffcc45f15f8 [ 439.543987][ T7273] [ 440.189184][ T7284] FAULT_INJECTION: forcing a failure. [ 440.189184][ T7284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.203487][ T7284] CPU: 0 UID: 0 PID: 7284 Comm: syz.1.617 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 440.214276][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 440.224711][ T7284] Call Trace: [ 440.228261][ T7284] [ 440.231435][ T7284] dump_stack_lvl+0x216/0x2d0 [ 440.236446][ T7284] dump_stack+0x1e/0x30 [ 440.241026][ T7284] should_fail_ex+0x748/0x7f0 [ 440.246078][ T7284] should_fail+0x2a/0x40 [ 440.250671][ T7284] should_fail_usercopy+0x2e/0x40 [ 440.256062][ T7284] _copy_from_user+0x33/0x160 [ 440.261153][ T7284] __sys_bpf+0x2dc/0xd90 [ 440.265823][ T7284] __x64_sys_bpf+0xa0/0xe0 [ 440.270605][ T7284] x64_sys_call+0x2cce/0x3ba0 [ 440.275708][ T7284] do_syscall_64+0xcd/0x1e0 [ 440.280526][ T7284] ? clear_bhb_loop+0x25/0x80 [ 440.285562][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.291823][ T7284] RIP: 0033:0x7fd72bf7def9 [ 440.296539][ T7284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.316544][ T7284] RSP: 002b:00007fd72cdd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.325342][ T7284] RAX: ffffffffffffffda RBX: 00007fd72c135f80 RCX: 00007fd72bf7def9 [ 440.333674][ T7284] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000001c [ 440.341949][ T7284] RBP: 00007fd72cdd2090 R08: 0000000000000000 R09: 0000000000000000 [ 440.350226][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.358480][ T7284] R13: 0000000000000000 R14: 00007fd72c135f80 R15: 00007ffd2a232328 [ 440.366740][ T7284] [ 440.935413][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 440.945303][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 441.209541][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 441.281950][ T7301] loop4: detected capacity change from 0 to 512 [ 441.314773][ T7301] ext4: Unknown parameter 'func' [ 441.352849][ T7303] netlink: 45 bytes leftover after parsing attributes in process `syz.1.624'. [ 441.381136][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 441.422619][ T44] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 191, changing to 11 [ 441.434737][ T44] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.448357][ T44] usb 3-1: config 1 interface 0 has no altsetting 0 [ 441.465699][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 441.477764][ T7304] netlink: 'syz.4.623': attribute type 13 has an invalid length. [ 441.492340][ T7304] netlink: 'syz.4.623': attribute type 11 has an invalid length. [ 441.512933][ T1902] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 441.530278][ T44] usb 3-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.40 [ 441.540229][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.548791][ T44] usb 3-1: Product: 《 [ 441.553380][ T44] usb 3-1: Manufacturer: щ [ 441.558188][ T44] usb 3-1: SerialNumber: ᴆ⨝豵 [ 441.653340][ T7305] loop4: detected capacity change from 0 to 512 [ 441.694632][ T7305] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 441.724145][ T1902] usb 1-1: Using ep0 maxpacket: 32 [ 441.735358][ T7305] EXT4-fs (loop4): 1 truncate cleaned up [ 441.743807][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.787368][ T1902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.799071][ T1902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.809579][ T1902] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 441.819174][ T1902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.833970][ T1902] usb 1-1: config 0 descriptor?? [ 441.849549][ T1902] hub 1-1:0.0: USB hub found [ 441.924421][ T44] usbhid 3-1:1.0: can't add hid device: -71 [ 441.931675][ T44] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 442.064423][ T44] usb 3-1: USB disconnect, device number 12 [ 442.111677][ T1902] hub 1-1:0.0: 1 port detected [ 442.321822][ T5180] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.501416][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 442.516561][ T7317] loop3: detected capacity change from 0 to 512 [ 442.565435][ T7317] ext4: Unknown parameter 'func' [ 442.770586][ T1902] hub 1-1:0.0: activate --> -90 [ 442.897001][ T7321] loop4: detected capacity change from 0 to 64 [ 442.972036][ T1902] usb 1-1-port1: config error [ 443.507044][ T7332] FAULT_INJECTION: forcing a failure. [ 443.507044][ T7332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.520738][ T7332] CPU: 1 UID: 0 PID: 7332 Comm: syz.2.630 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 443.531360][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 443.541706][ T7332] Call Trace: [ 443.545226][ T7332] [ 443.548384][ T7332] dump_stack_lvl+0x216/0x2d0 [ 443.553403][ T7332] dump_stack+0x1e/0x30 [ 443.557876][ T7332] should_fail_ex+0x748/0x7f0 [ 443.562933][ T7332] should_fail+0x2a/0x40 [ 443.567525][ T7332] should_fail_usercopy+0x2e/0x40 [ 443.572969][ T7332] _copy_from_user+0x33/0x160 [ 443.578017][ T7332] vmci_host_unlocked_ioctl+0x2117/0x5060 [ 443.584340][ T7332] ? kmsan_get_metadata+0x13e/0x1c0 [ 443.589939][ T7332] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 443.596405][ T7332] __se_sys_ioctl+0x25e/0x450 [ 443.601515][ T7332] __x64_sys_ioctl+0x96/0xe0 [ 443.606532][ T7332] x64_sys_call+0x18bf/0x3ba0 [ 443.611847][ T7332] do_syscall_64+0xcd/0x1e0 [ 443.616757][ T7332] ? clear_bhb_loop+0x25/0x80 [ 443.621799][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.628064][ T7332] RIP: 0033:0x7fe374b7def9 [ 443.632773][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.652755][ T7332] RSP: 002b:00007fe375949038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.661558][ T7332] RAX: ffffffffffffffda RBX: 00007fe374d35f80 RCX: 00007fe374b7def9 [ 443.669871][ T7332] RDX: 0000000020000080 RSI: 00000000000007a9 RDI: 0000000000000003 [ 443.678157][ T7332] RBP: 00007fe375949090 R08: 0000000000000000 R09: 0000000000000000 [ 443.686692][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.694971][ T7332] R13: 0000000000000000 R14: 00007fe374d35f80 R15: 00007fff1e11c5b8 [ 443.703273][ T7332] [ 443.948447][ T1902] usb 1-1-port1: cannot disable (err = -32) [ 443.992792][ T44] usb 1-1: USB disconnect, device number 9 [ 444.228800][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.634'. [ 444.238088][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.634'. [ 444.579932][ T7353] loop4: detected capacity change from 0 to 512 [ 444.594864][ T7353] ext4: Unknown parameter 'func' [ 444.721588][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 444.731625][ T7359] netlink: 'syz.4.637': attribute type 13 has an invalid length. [ 444.740604][ T7359] netlink: 'syz.4.637': attribute type 11 has an invalid length. [ 444.902529][ T7359] loop4: detected capacity change from 0 to 512 [ 444.954097][ T7359] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.110955][ T7359] EXT4-fs (loop4): 1 truncate cleaned up [ 445.119181][ T7359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.203925][ T7369] dccp_invalid_packet: P.Data Offset(100) too large [ 445.261802][ T7369] loop3: detected capacity change from 0 to 512 [ 445.336209][ T7369] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.642: corrupted in-inode xattr: invalid ea_ino [ 445.366188][ T7369] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.642: couldn't read orphan inode 15 (err -117) [ 445.440641][ T7369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.461934][ T7369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.537830][ T7372] loop2: detected capacity change from 0 to 64 [ 445.603688][ T7372] hfs: get root inode failed [ 445.631043][ T5180] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.780772][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 447.145329][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 447.154760][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 447.896078][ T7410] loop2: detected capacity change from 0 to 64 [ 448.342094][ T7415] loop4: detected capacity change from 0 to 512 [ 448.360381][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 448.370022][ T7416] netlink: 'syz.1.655': attribute type 13 has an invalid length. [ 448.372502][ T7415] EXT4-fs: Ignoring removed bh option [ 448.378008][ T7416] netlink: 'syz.1.655': attribute type 11 has an invalid length. [ 448.525555][ T7415] EXT4-fs (loop4): 1 truncate cleaned up [ 448.532378][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 448.533857][ T7415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.621281][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.2.658'. [ 448.705237][ T7415] loop4: detected capacity change from 512 to 64 [ 449.054619][ T5180] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 14: comm syz-executor: path /122/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 449.111543][ T7429] openvswitch: netlink: Message has 15 unknown bytes. [ 449.158827][ T5180] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 449.169851][ T5180] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 449.536537][ T2917] kworker/u8:10: attempt to access beyond end of device [ 449.536537][ T2917] loop4: rw=1, sector=72, nr_sectors = 2 limit=64 [ 449.550564][ T2917] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 449.562543][ T2917] Buffer I/O error on device loop4, logical block 36 [ 449.616222][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.617589][ T5180] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.626979][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.687806][ T7438] FAULT_INJECTION: forcing a failure. [ 449.687806][ T7438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.692453][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 449.701493][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: syz.0.665 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 449.710546][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 449.720611][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 449.720708][ T7438] Call Trace: [ 449.720766][ T7438] [ 449.720827][ T7438] dump_stack_lvl+0x216/0x2d0 [ 449.751783][ T7438] dump_stack+0x1e/0x30 [ 449.756227][ T7438] should_fail_ex+0x748/0x7f0 [ 449.761242][ T7438] should_fail+0x2a/0x40 [ 449.765831][ T7438] should_fail_usercopy+0x2e/0x40 [ 449.771209][ T7438] _copy_from_user+0x33/0x160 [ 449.776239][ T7438] drm_ioctl+0xb3a/0x15a0 [ 449.780880][ T7438] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 449.787017][ T7438] ? kmsan_get_metadata+0x13e/0x1c0 [ 449.792583][ T7438] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 449.798736][ T7438] ? __pfx_drm_ioctl+0x10/0x10 [ 449.803815][ T7438] ? __pfx_drm_ioctl+0x10/0x10 [ 449.808868][ T7438] __se_sys_ioctl+0x25e/0x450 [ 449.813959][ T7438] __x64_sys_ioctl+0x96/0xe0 [ 449.818854][ T7438] x64_sys_call+0x18bf/0x3ba0 [ 449.823873][ T7438] do_syscall_64+0xcd/0x1e0 [ 449.828669][ T7438] ? clear_bhb_loop+0x25/0x80 [ 449.833698][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.839915][ T7438] RIP: 0033:0x7fc9ccf7def9 [ 449.844591][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.864610][ T7438] RSP: 002b:00007fc9cdd7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.873380][ T7438] RAX: ffffffffffffffda RBX: 00007fc9cd135f80 RCX: 00007fc9ccf7def9 [ 449.881648][ T7438] RDX: 0000000020000100 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 449.889888][ T7438] RBP: 00007fc9cdd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 449.898117][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.906382][ T7438] R13: 0000000000000000 R14: 00007fc9cd135f80 R15: 00007ffe4e213048 [ 449.914697][ T7438] [ 450.121531][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.132453][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.366149][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.378792][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.548509][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.566458][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.595887][ T7449] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.603457][ T7449] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 450.615206][ T29] audit: type=1326 audit(1727000327.107:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72bf7def9 code=0x0 [ 450.643015][ T7448] netlink: 36 bytes leftover after parsing attributes in process `syz.3.667'. [ 450.656790][ T7448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.667'. [ 450.667550][ T7448] netlink: 36 bytes leftover after parsing attributes in process `syz.3.667'. [ 450.676863][ T7448] netlink: 36 bytes leftover after parsing attributes in process `syz.3.667'. [ 450.704970][ T7449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.711860][ T7449] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 450.773822][ T7449] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.780581][ T7449] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 451.100250][ T34] bridge_slave_1: left allmulticast mode [ 451.106927][ T34] bridge_slave_1: left promiscuous mode [ 451.113719][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.145022][ T34] bridge_slave_0: left allmulticast mode [ 451.150980][ T34] bridge_slave_0: left promiscuous mode [ 451.158516][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.136323][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.231001][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.283110][ T34] bond0 (unregistering): Released all slaves [ 452.472982][ T5189] Bluetooth: hci0: command 0x0406 tx timeout [ 452.546803][ T7462] openvswitch: netlink: Message has 15 unknown bytes. [ 452.714403][ T5189] Bluetooth: hci5: command 0x0406 tx timeout [ 452.714661][ T5177] Bluetooth: hci2: command 0x0406 tx timeout [ 452.815803][ T7467] FAULT_INJECTION: forcing a failure. [ 452.815803][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 452.829346][ T7467] CPU: 1 UID: 0 PID: 7467 Comm: syz.2.676 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 452.839944][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 452.850291][ T7467] Call Trace: [ 452.853829][ T7467] [ 452.857076][ T7467] dump_stack_lvl+0x216/0x2d0 [ 452.862103][ T7467] dump_stack+0x1e/0x30 [ 452.866573][ T7467] should_fail_ex+0x748/0x7f0 [ 452.871621][ T7467] should_failslab+0x17f/0x210 [ 452.876792][ T7467] __kmalloc_noprof+0x175/0xf30 [ 452.882057][ T7467] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 452.888359][ T7467] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 452.894521][ T7467] ? kmsan_get_metadata+0x13e/0x1c0 [ 452.900117][ T7467] tomoyo_realpath_from_path+0x104/0xaa0 [ 452.902696][ T5189] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.906011][ T7467] ? __srcu_read_lock+0x76/0xd0 [ 452.918407][ T7467] tomoyo_path_perm+0x246/0xa50 [ 452.923680][ T7467] ? kmsan_report+0x230/0x2d0 [ 452.926573][ T5189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.928651][ T7467] tomoyo_sb_umount+0x95/0xf0 [ 452.940674][ T7467] security_sb_umount+0x135/0x540 [ 452.945606][ T5189] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.945947][ T7467] path_umount+0x40e/0x1e60 [ 452.957834][ T7467] __x64_sys_umount+0x1f8/0x240 [ 452.963045][ T7467] x64_sys_call+0x2bbd/0x3ba0 [ 452.965839][ T5189] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.967988][ T7467] do_syscall_64+0xcd/0x1e0 [ 452.980009][ T7467] ? clear_bhb_loop+0x25/0x80 [ 452.981051][ T5189] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 452.984951][ T7467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.998361][ T7467] RIP: 0033:0x7fe374b7def9 [ 453.002102][ T5189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.002975][ T7467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.030000][ T7467] RSP: 002b:00007fe375949038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 453.038798][ T7467] RAX: ffffffffffffffda RBX: 00007fe374d35f80 RCX: 00007fe374b7def9 [ 453.047090][ T7467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 453.055358][ T7467] RBP: 00007fe375949090 R08: 0000000000000000 R09: 0000000000000000 [ 453.063604][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.071828][ T7467] R13: 0000000000000000 R14: 00007fe374d35f80 R15: 00007fff1e11c5b8 [ 453.080139][ T7467] [ 453.083519][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.095151][ T7467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.629401][ T34] hsr_slave_0: left promiscuous mode [ 453.689150][ T34] hsr_slave_1: left promiscuous mode [ 453.720590][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.728768][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.794531][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.802648][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.889986][ T34] veth1_macvtap: left promiscuous mode [ 453.896129][ T34] veth0_macvtap: left promiscuous mode [ 453.902184][ T34] veth1_vlan: left promiscuous mode [ 453.908077][ T34] veth0_vlan: left promiscuous mode [ 453.923759][ T7477] FAULT_INJECTION: forcing a failure. [ 453.923759][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 453.937198][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.2.678 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 453.947800][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 453.958153][ T7477] Call Trace: [ 453.961660][ T7477] [ 453.964813][ T7477] dump_stack_lvl+0x216/0x2d0 [ 453.969832][ T7477] dump_stack+0x1e/0x30 [ 453.974304][ T7477] should_fail_ex+0x748/0x7f0 [ 453.979451][ T7477] should_failslab+0x17f/0x210 [ 453.984606][ T7477] kmem_cache_alloc_node_noprof+0xeb/0xb80 [ 453.990799][ T7477] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 453.997548][ T7477] ? __alloc_skb+0x1e9/0x7b0 [ 454.002505][ T7477] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 454.008726][ T7477] __alloc_skb+0x1e9/0x7b0 [ 454.013604][ T7477] tcp_stream_alloc_skb+0x4d/0x5c0 [ 454.019043][ T7477] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 454.025271][ T7477] tcp_sendmsg_locked+0x1917/0x6eb0 [ 454.030851][ T7477] ? filter_irq_stacks+0x60/0x1a0 [ 454.036273][ T7477] ? tcp_sendmsg_locked+0x261/0x6eb0 [ 454.041989][ T7477] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 454.048724][ T7477] ? kmsan_get_metadata+0x13e/0x1c0 [ 454.054341][ T7477] ? __pfx_tcp_sendmsg+0x10/0x10 [ 454.059620][ T7477] tcp_sendmsg+0x49/0x90 [ 454.064196][ T7477] ? __pfx_tcp_sendmsg+0x10/0x10 [ 454.069458][ T7477] ? __pfx_tcp_sendmsg+0x10/0x10 [ 454.074722][ T7477] inet_sendmsg+0x142/0x280 [ 454.079659][ T7477] ? __pfx_inet_sendmsg+0x10/0x10 [ 454.085038][ T7477] __sock_sendmsg+0x267/0x380 [ 454.090067][ T7477] __sys_sendto+0x67f/0x830 [ 454.094931][ T7477] ? vfs_write+0xf3e/0x1540 [ 454.099734][ T7477] ? kmsan_get_metadata+0x13e/0x1c0 [ 454.105272][ T7477] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 454.111942][ T7477] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 454.118351][ T7477] ? ksys_write+0x404/0x4c0 [ 454.123167][ T7477] __x64_sys_sendto+0x125/0x1d0 [ 454.128360][ T7477] x64_sys_call+0x3373/0x3ba0 [ 454.133357][ T7477] do_syscall_64+0xcd/0x1e0 [ 454.138142][ T7477] ? clear_bhb_loop+0x25/0x80 [ 454.143131][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.149350][ T7477] RIP: 0033:0x7fe374b7def9 [ 454.154017][ T7477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.173958][ T7477] RSP: 002b:00007fe375949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 454.182705][ T7477] RAX: ffffffffffffffda RBX: 00007fe374d35f80 RCX: 00007fe374b7def9 [ 454.190945][ T7477] RDX: 0000000000000003 RSI: 00000000200012c0 RDI: 0000000000000003 [ 454.199172][ T7477] RBP: 00007fe375949090 R08: 0000000000000000 R09: 0000000000000000 [ 454.207387][ T7477] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 454.215604][ T7477] R13: 0000000000000000 R14: 00007fe374d35f80 R15: 00007fff1e11c5b8 [ 454.223856][ T7477] [ 454.227320][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.449092][ T5189] Bluetooth: hci0: command 0x0406 tx timeout [ 454.669210][ T1902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 454.679824][ T5189] Bluetooth: hci5: command 0x0406 tx timeout [ 454.686236][ T5189] Bluetooth: hci2: command 0x0406 tx timeout [ 454.816419][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 454.826115][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 454.860851][ T1902] usb 2-1: Using ep0 maxpacket: 32 [ 454.902801][ T1902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.914775][ T1902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.925352][ T1902] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.934948][ T1902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.978076][ T7486] loop3: detected capacity change from 0 to 64 [ 454.985904][ T5189] Bluetooth: hci3: command tx timeout [ 455.032019][ T1902] usb 2-1: config 0 descriptor?? [ 455.060951][ T1902] hub 2-1:0.0: USB hub found [ 455.122793][ T7488] loop2: detected capacity change from 0 to 256 [ 455.277215][ T7488] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 455.281165][ T1902] hub 2-1:0.0: 1 port detected [ 455.449178][ T29] audit: type=1800 audit(1727000332.178:24): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.683" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 455.774811][ T44] usb 2-1: USB disconnect, device number 8 [ 455.869825][ T1902] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 455.951860][ T34] team0 (unregistering): Port device team_slave_1 removed [ 455.982656][ T34] team0 (unregistering): Port device team_slave_0 removed [ 456.847351][ T34] IPVS: stop unused estimator thread 0... [ 456.973551][ T5189] Bluetooth: hci3: command tx timeout [ 457.787806][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 457.838082][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.3.693'. [ 457.844536][ T7521] loop2: detected capacity change from 0 to 256 [ 457.996820][ T7520] loop3: detected capacity change from 0 to 1024 [ 458.033826][ T7521] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc2236643, utbl_chksum : 0xe619d30d) [ 458.086582][ T7520] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 458.151831][ T7520] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 458.211802][ T7520] EXT4-fs (loop3): orphan cleanup on readonly fs [ 458.219725][ T7520] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.693: Freeing blocks not in datazone - block = 0, count = 4096 [ 458.234872][ T7520] EXT4-fs (loop3): Remounting filesystem read-only [ 458.242156][ T7520] EXT4-fs (loop3): 1 truncate cleaned up [ 458.250249][ T7520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.380570][ T5182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.469282][ T7521] loop2: detected capacity change from 256 to 0 [ 458.486912][ T7531] syz.2.692: attempt to access beyond end of device [ 458.486912][ T7531] loop2: rw=0, sector=128, nr_sectors = 1 limit=0 [ 458.501550][ T7531] exFAT-fs (loop2): error, failed to access to FAT (entry 0x00000005, err:-5) [ 458.511188][ T7531] exFAT-fs (loop2): Filesystem has been set read-only [ 458.518478][ T7531] syz.2.692: attempt to access beyond end of device [ 458.518478][ T7531] loop2: rw=0, sector=128, nr_sectors = 1 limit=0 [ 458.531857][ T7531] exFAT-fs (loop2): error, failed to access to FAT (entry 0x00000005, err:-5) [ 458.545551][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 458.769230][ T44] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 458.779173][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.823354][ T5544] syz-executor: attempt to access beyond end of device [ 458.823354][ T5544] loop2: rw=0, sector=128, nr_sectors = 1 limit=0 [ 458.838457][ T5544] exFAT-fs (loop2): error, failed to access to FAT (entry 0x00000005, err:-5) [ 458.853529][ T5544] syz-executor: attempt to access beyond end of device [ 458.853529][ T5544] loop2: rw=0, sector=128, nr_sectors = 1 limit=0 [ 458.859758][ T44] usb 1-1: config 0 descriptor?? [ 458.868938][ T5544] exFAT-fs (loop2): error, failed to access to FAT (entry 0x00000005, err:-5) [ 458.923160][ T44] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 458.963781][ T5189] Bluetooth: hci3: command tx timeout [ 459.043999][ T1902] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 459.069751][ T5544] syz-executor: attempt to access beyond end of device [ 459.069751][ T5544] loop2: rw=524288, sector=208, nr_sectors = 1 limit=0 [ 459.084306][ T5544] syz-executor: attempt to access beyond end of device [ 459.084306][ T5544] loop2: rw=524288, sector=209, nr_sectors = 1 limit=0 [ 459.098826][ T5544] syz-executor: attempt to access beyond end of device [ 459.098826][ T5544] loop2: rw=524288, sector=210, nr_sectors = 1 limit=0 [ 459.112994][ T5544] syz-executor: attempt to access beyond end of device [ 459.112994][ T5544] loop2: rw=524288, sector=211, nr_sectors = 1 limit=0 [ 459.127134][ T5544] syz-executor: attempt to access beyond end of device [ 459.127134][ T5544] loop2: rw=524288, sector=212, nr_sectors = 1 limit=0 [ 459.145390][ T5544] syz-executor: attempt to access beyond end of device [ 459.145390][ T5544] loop2: rw=524288, sector=213, nr_sectors = 1 limit=0 [ 459.164828][ T5544] exFAT-fs (loop2): error, failed to access to FAT (entry 0x00000005, err:-5) [ 459.181539][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.190150][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.199440][ T7470] bridge_slave_0: entered allmulticast mode [ 459.211324][ T7470] bridge_slave_0: entered promiscuous mode [ 459.239540][ T1902] usb 4-1: Using ep0 maxpacket: 8 [ 459.245168][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.253805][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.254478][ T1902] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 459.262239][ T7470] bridge_slave_1: entered allmulticast mode [ 459.271744][ T1902] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 459.282299][ T7470] bridge_slave_1: entered promiscuous mode [ 459.286307][ T1902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 459.446731][ T44] gspca_sonixj: reg_r err -71 [ 459.452760][ T44] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 459.468946][ T44] usb 1-1: USB disconnect, device number 10 [ 459.497819][ T1902] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 459.514217][ T1902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.522829][ T1902] usb 4-1: Product: syz [ 459.530850][ T1902] usb 4-1: Manufacturer: syz [ 459.537037][ T1902] usb 4-1: SerialNumber: syz [ 459.591834][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.613778][ T1902] usb 4-1: config 0 descriptor?? [ 459.640195][ T1902] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 459.716040][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.980865][ T7536] 9pnet_fd: Insufficient options for proto=fd [ 460.004862][ T7470] team0: Port device team_slave_0 added [ 460.122737][ T7470] team0: Port device team_slave_1 added [ 460.202735][ T44] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 460.375423][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.383279][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.392589][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 460.417817][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.518268][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.525880][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.539032][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.558780][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.564050][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.746227][ T44] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 460.756121][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.764686][ T44] usb 3-1: Product: syz [ 460.769164][ T44] usb 3-1: Manufacturer: syz [ 460.774291][ T44] usb 3-1: SerialNumber: syz [ 460.930510][ T5189] Bluetooth: hci3: command tx timeout [ 461.219093][ T44] usbhid 3-1:1.0: can't add hid device: -22 [ 461.225989][ T44] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 461.313787][ T7470] hsr_slave_0: entered promiscuous mode [ 461.336924][ T7470] hsr_slave_1: entered promiscuous mode [ 461.361184][ T7470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.369703][ T7470] Cannot create hsr debugfs directory [ 461.385161][ T7536] loop3: detected capacity change from 0 to 4096 [ 461.438019][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.519009][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.528954][ T7536] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 461.538164][ T7536] UDF-fs: Scanning with blocksize 512 failed [ 461.603757][ T7546] input: syz0 as /devices/virtual/input/input10 [ 461.646644][ T7536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.674559][ T44] usb 3-1: USB disconnect, device number 13 [ 461.988946][ T1902] pwc: Failed to set LED on/off time (-71) [ 462.019254][ T1902] pwc: send_video_command error -71 [ 462.025124][ T1902] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 462.034420][ T1902] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 462.102635][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 462.201048][ T1902] usb 4-1: USB disconnect, device number 10 [ 463.560610][ T7470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 463.661406][ T7470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 463.708734][ T7470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.794294][ T7470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.948364][ T7593] loop2: detected capacity change from 0 to 64 [ 463.986056][ T7593] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 464.240877][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 464.346148][ T1902] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 464.428927][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.440583][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.451037][ T44] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 464.460607][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.472747][ T7603] Bluetooth: MGMT ver 1.23 [ 464.475107][ T44] usb 1-1: config 0 descriptor?? [ 464.540405][ T29] audit: type=1326 audit(1727000341.742:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.564583][ T1902] usb 2-1: Using ep0 maxpacket: 8 [ 464.564738][ T29] audit: type=1326 audit(1727000341.742:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.601638][ T29] audit: type=1326 audit(1727000341.742:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.604765][ T1902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.624795][ T29] audit: type=1326 audit(1727000341.742:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.635528][ T1902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.659124][ T29] audit: type=1326 audit(1727000341.774:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.823320][ T29] audit: type=1326 audit(1727000341.921:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.846466][ T29] audit: type=1326 audit(1727000341.921:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.869327][ T29] audit: type=1326 audit(1727000341.921:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.895545][ T29] audit: type=1326 audit(1727000341.973:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 464.919532][ T29] audit: type=1326 audit(1727000341.973:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 465.029062][ T1902] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 465.038825][ T1902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.047337][ T1902] usb 2-1: Product: syz [ 465.052035][ T1902] usb 2-1: Manufacturer: syz [ 465.056920][ T1902] usb 2-1: SerialNumber: syz [ 465.204192][ T7607] FAULT_INJECTION: forcing a failure. [ 465.204192][ T7607] name failslab, interval 1, probability 0, space 0, times 0 [ 465.217667][ T7607] CPU: 1 UID: 0 PID: 7607 Comm: syz.2.723 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 465.228289][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.238641][ T7607] Call Trace: [ 465.242148][ T7607] [ 465.245302][ T7607] dump_stack_lvl+0x216/0x2d0 [ 465.250332][ T7607] dump_stack+0x1e/0x30 [ 465.254888][ T7607] should_fail_ex+0x748/0x7f0 [ 465.259961][ T7607] should_failslab+0x17f/0x210 [ 465.265116][ T7607] kmem_cache_alloc_lru_noprof+0xec/0xb30 [ 465.271215][ T7607] ? kmsan_internal_poison_memory+0x49/0x90 [ 465.277487][ T7607] ? shmem_alloc_inode+0x5a/0xd0 [ 465.282798][ T7607] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 465.289110][ T7607] shmem_alloc_inode+0x5a/0xd0 [ 465.294246][ T7607] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 465.300062][ T7607] alloc_inode+0x86/0x460 [ 465.304758][ T7607] new_inode+0x38/0x480 [ 465.309272][ T7607] ? kmsan_get_metadata+0x13e/0x1c0 [ 465.314863][ T7607] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 465.321088][ T7607] shmem_get_inode+0x6f2/0x1940 [ 465.326331][ T7607] __shmem_file_setup+0x249/0x4d0 [ 465.331718][ T7607] shmem_file_setup+0x61/0x80 [ 465.332434][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.336648][ T7607] __se_sys_memfd_create+0x8a3/0x1260 [ 465.336823][ T7607] ? kmsan_get_metadata+0x13e/0x1c0 [ 465.354555][ T7607] __x64_sys_memfd_create+0x6c/0xa0 [ 465.360097][ T7607] x64_sys_call+0x31cf/0x3ba0 [ 465.365152][ T7607] do_syscall_64+0xcd/0x1e0 [ 465.369984][ T7607] ? clear_bhb_loop+0x25/0x80 [ 465.375033][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.381307][ T7607] RIP: 0033:0x7fe374b7def9 [ 465.386020][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.405998][ T7607] RSP: 002b:00007fe375948e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 465.414796][ T7607] RAX: ffffffffffffffda RBX: 000000000000063d RCX: 00007fe374b7def9 [ 465.423078][ T7607] RDX: 00007fe375948ef0 RSI: 0000000000000000 RDI: 00007fe374bf1369 [ 465.431356][ T7607] RBP: 0000000020001280 R08: 00007fe375948bb7 R09: 00007fe375948e40 [ 465.439633][ T7607] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200005c0 [ 465.447908][ T7607] R13: 00007fe375948ef0 R14: 00007fe375948eb0 R15: 0000000020000000 [ 465.456212][ T7607] [ 465.583473][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 465.590327][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 465.594299][ T1902] usbhid 2-1:1.0: can't add hid device: -22 [ 465.605041][ T1902] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 465.621579][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.648464][ T44] usb 1-1: USB disconnect, device number 11 [ 465.700495][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.708482][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.790690][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.798594][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.805229][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.824032][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.884105][ T7600] input: syz0 as /devices/virtual/input/input11 [ 465.936852][ T5236] usb 2-1: USB disconnect, device number 9 [ 467.074212][ T7624] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 467.182289][ T7624] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 467.194395][ T7624] overlayfs: overlapping lowerdir path [ 467.527404][ T44] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 467.758978][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 467.769420][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 467.780905][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 467.929446][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 468.017902][ T44] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 468.028942][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.037682][ T44] usb 2-1: Product: syz [ 468.042271][ T44] usb 2-1: Manufacturer: syz [ 468.047146][ T44] usb 2-1: SerialNumber: syz [ 468.225404][ T44] usb 2-1: config 0 descriptor?? [ 468.310304][ T44] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 468.318725][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 468.327180][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 468.337176][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 468.345725][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 468.353877][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 468.362199][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 468.372078][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 468.386964][ T44] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 468.405104][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 468.415320][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 468.423705][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 468.432115][ T44] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 468.457033][ T44] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 468.583615][ T44] usb 2-1: USB disconnect, device number 10 [ 468.684269][ T44] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 468.783270][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.823768][ T44] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 468.835408][ T44] keyspan 2-1:0.0: device disconnected [ 469.943385][ T7652] mmap: syz.1.739 (7652): VmData 37625856 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 471.303499][ T5236] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 471.535830][ T5236] usb 3-1: Using ep0 maxpacket: 32 [ 471.584280][ T5236] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.596740][ T5236] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.806231][ T5236] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 471.820696][ T5236] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 471.830882][ T5236] usb 3-1: Product: syz [ 471.835357][ T5236] usb 3-1: Manufacturer: syz [ 472.006573][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.021917][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.128204][ T5236] hub 3-1:4.0: USB hub found [ 472.379638][ T5236] hub 3-1:4.0: 2 ports detected [ 473.705143][ T7470] veth0_vlan: entered promiscuous mode [ 473.942835][ T7695] netlink: 'syz.0.752': attribute type 2 has an invalid length. [ 474.036343][ T7470] veth1_vlan: entered promiscuous mode [ 474.179275][ T44] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 474.187231][ T5236] usb 3-1: USB disconnect, device number 14 [ 474.595417][ T7470] veth0_macvtap: entered promiscuous mode [ 474.690567][ T7470] veth1_macvtap: entered promiscuous mode [ 474.946114][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.957221][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.967931][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.978803][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.989136][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.000216][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.016045][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.376155][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.387205][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.397651][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.408578][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.418858][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.434450][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.445973][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.456897][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.472377][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.733243][ T7470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.745115][ T7470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.756546][ T7470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.767817][ T7470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.046098][ T44] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 476.132218][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.197461][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.756'. [ 476.215608][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.756'. [ 476.223970][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.796236][ T7716] loop2: detected capacity change from 0 to 4096 [ 480.169201][ T7716] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 480.221536][ T7716] ntfs3: loop2: Failed to load $Extend (-22). [ 480.228396][ T7716] ntfs3: loop2: Failed to initialize $Extend. [ 480.423550][ T44] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 480.670138][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 480.720247][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.731136][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 480.743461][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 480.754867][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 480.765246][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 481.088960][ T44] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 481.098692][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 481.107100][ T44] usb 4-1: Product: syz [ 481.111812][ T44] usb 4-1: Manufacturer: syz [ 481.116713][ T44] usb 4-1: SerialNumber: syz [ 481.249447][ T44] usb 4-1: config 0 descriptor?? [ 481.499214][ T44] radio-si470x 4-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 481.689621][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.781689][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.898909][ T44] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 481.907592][ T44] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 481.917916][ T44] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 482.077695][ T44] usb 4-1: USB disconnect, device number 11 [ 483.164462][ T5234] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 483.486230][ T5234] usb 1-1: config 10 has an invalid interface number: 52 but max is 3 [ 483.496879][ T5234] usb 1-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 483.508356][ T5234] usb 1-1: config 10 has an invalid descriptor of length 104, skipping remainder of the config [ 483.530925][ T5234] usb 1-1: config 10 has 2 interfaces, different from the descriptor's value: 4 [ 483.542812][ T5234] usb 1-1: config 10 has no interface number 0 [ 483.550960][ T5234] usb 1-1: config 10 interface 52 altsetting 9 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 483.566024][ T5234] usb 1-1: config 10 interface 52 altsetting 9 endpoint 0x8B has invalid maxpacket 13183, setting to 1024 [ 483.580432][ T5234] usb 1-1: config 10 interface 52 altsetting 9 bulk endpoint 0x8B has invalid maxpacket 1024 [ 483.593616][ T5234] usb 1-1: config 10 interface 52 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 483.610219][ T5234] usb 1-1: too many endpoints for config 10 interface 1 altsetting 2: 109, using maximum allowed: 30 [ 483.632542][ T5234] usb 1-1: config 10 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 483.649385][ T5234] usb 1-1: config 10 interface 52 has no altsetting 0 [ 483.658424][ T5234] usb 1-1: config 10 interface 1 has no altsetting 0 [ 483.824307][ T5189] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 484.211181][ T5234] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=69.bd [ 484.223316][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.233822][ T5234] usb 1-1: Product: 䐊 [ 484.239636][ T5234] usb 1-1: Manufacturer: ဉ [ 484.246065][ T5234] usb 1-1: SerialNumber: ఉ [ 484.454809][ T7754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 484.834386][ T5234] usb-storage 1-1:10.52: USB Mass Storage device detected [ 484.901785][ T5234] usb-storage 1-1:10.52: Quirks match for vid 152d pid 0539: 4000000 [ 485.200790][ T5234] usb-storage 1-1:10.1: USB Mass Storage device detected [ 485.261335][ T5234] usb-storage 1-1:10.1: Quirks match for vid 152d pid 0539: 4000000 [ 485.577056][ T5234] usb 1-1: USB disconnect, device number 12 [ 485.587137][ T7786] evm: overlay not supported [ 485.737674][ T7786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 486.371161][ T7792] netlink: 45 bytes leftover after parsing attributes in process `syz.0.785'. [ 486.388374][ T7791] loop2: detected capacity change from 0 to 1024 [ 486.752640][ T7798] FAULT_INJECTION: forcing a failure. [ 486.752640][ T7798] name failslab, interval 1, probability 0, space 0, times 0 [ 486.766787][ T7798] CPU: 1 UID: 0 PID: 7798 Comm: syz.3.787 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 486.777397][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 486.787738][ T7798] Call Trace: [ 486.791236][ T7798] [ 486.794396][ T7798] dump_stack_lvl+0x216/0x2d0 [ 486.799416][ T7798] dump_stack+0x1e/0x30 [ 486.803881][ T7798] should_fail_ex+0x748/0x7f0 [ 486.808922][ T7798] should_failslab+0x17f/0x210 [ 486.814073][ T7798] __kmalloc_noprof+0x175/0xf30 [ 486.819286][ T7798] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 486.825494][ T7798] ? kmsan_get_metadata+0x13e/0x1c0 [ 486.831110][ T7798] tomoyo_realpath_from_path+0x104/0xaa0 [ 486.837183][ T7798] ? __srcu_read_lock+0x76/0xd0 [ 486.842419][ T7798] tomoyo_path_number_perm+0x1d9/0x8f0 [ 486.848264][ T7798] ? kmsan_get_metadata+0x13e/0x1c0 [ 486.853880][ T7798] ? kmsan_get_metadata+0x13e/0x1c0 [ 486.859478][ T7798] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 486.865748][ T7798] tomoyo_file_ioctl+0x3f/0x50 [ 486.870877][ T7798] security_file_ioctl+0x145/0x590 [ 486.876459][ T7798] __se_sys_ioctl+0xd3/0x450 [ 486.881405][ T7798] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 486.887884][ T7798] __x64_sys_ioctl+0x96/0xe0 [ 486.892824][ T7798] x64_sys_call+0x18bf/0x3ba0 [ 486.897910][ T7798] do_syscall_64+0xcd/0x1e0 [ 486.902741][ T7798] ? clear_bhb_loop+0x25/0x80 [ 486.907807][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.914088][ T7798] RIP: 0033:0x7fe8ff57def9 [ 486.918831][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.938918][ T7798] RSP: 002b:00007fe900435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.947715][ T7798] RAX: ffffffffffffffda RBX: 00007fe8ff735f80 RCX: 00007fe8ff57def9 [ 486.956020][ T7798] RDX: 0000000020000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 486.964286][ T7798] RBP: 00007fe900435090 R08: 0000000000000000 R09: 0000000000000000 [ 486.972553][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.980845][ T7798] R13: 0000000000000000 R14: 00007fe8ff735f80 R15: 00007ffea06233e8 [ 486.989147][ T7798] [ 486.992413][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.003019][ T7798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 488.125800][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 488.125968][ T29] audit: type=1326 audit(1727000366.500:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.3.791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x0 [ 488.389840][ T7812] loop2: detected capacity change from 0 to 1024 [ 488.457336][ T7812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.644164][ T7812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.085572][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.094022][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.110831][ T1902] IPVS: starting estimator thread 0... [ 489.223508][ T7824] IPVS: using max 192 ests per chain, 9600 per kthread [ 489.267410][ T29] audit: type=1800 audit(1727000367.686:68): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.792" name="bus" dev="loop2" ino=20 res=0 errno=0 [ 489.313629][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.321841][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.329829][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.337775][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.345582][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.353544][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.361500][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.375523][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.383303][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.392527][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.400701][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.408667][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.416618][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.424609][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.432553][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.440359][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.448274][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.456194][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.464141][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.477180][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.486435][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.494306][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.502266][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.510139][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.518040][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.525908][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.533871][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.542074][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.549978][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.557837][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.572186][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.581404][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.589269][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.597357][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.605321][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.613358][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.621104][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.629105][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.637032][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.644944][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.655814][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.669784][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.678956][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.687206][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.695214][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.703178][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.711560][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.715002][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.719369][ T5236] hid-generic 0000:0000:0003.0005: unknown main item tag 0x0 [ 489.740426][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.029308][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 490.137101][ T5283] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 490.197288][ T5236] hid-generic 0000:0000:0003.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 490.223595][ T5544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.241213][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.256614][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.267751][ T25] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 490.277442][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.301653][ T25] usb 4-1: config 0 descriptor?? [ 490.381866][ T5283] usb 1-1: config 0 has no interfaces? [ 490.388345][ T5283] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 490.398514][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.457400][ T7832] netlink: 45 bytes leftover after parsing attributes in process `syz.1.797'. [ 490.503271][ T5283] usb 1-1: config 0 descriptor?? [ 490.513821][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.552910][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.587772][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.633425][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.664710][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.679247][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.727876][ T7829] FAULT_INJECTION: forcing a failure. [ 490.727876][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 490.746268][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.0.794 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 490.756896][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 490.762343][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.767641][ T7829] Call Trace: [ 490.767700][ T7829] [ 490.767762][ T7829] dump_stack_lvl+0x216/0x2d0 [ 490.767941][ T7829] dump_stack+0x1e/0x30 [ 490.768085][ T7829] should_fail_ex+0x748/0x7f0 [ 490.768292][ T7829] should_failslab+0x17f/0x210 [ 490.768525][ T7829] __kmalloc_noprof+0x175/0xf30 [ 490.768719][ T7829] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 490.768927][ T7829] ? hidraw_get_report+0x1d1/0x600 [ 490.769123][ T7829] ? kmsan_get_metadata+0x13e/0x1c0 [ 490.825005][ T7829] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 490.831315][ T7829] ? __pfx_uhid_hid_raw_request+0x10/0x10 [ 490.837516][ T7829] ? __pfx_uhid_hid_raw_request+0x10/0x10 [ 490.843612][ T7829] hidraw_get_report+0x1d1/0x600 [ 490.848950][ T7829] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 490.855170][ T7829] hidraw_ioctl+0x92d/0xdb0 [ 490.860039][ T7829] ? __pfx_hidraw_ioctl+0x10/0x10 [ 490.865511][ T7829] __se_sys_ioctl+0x25e/0x450 [ 490.870557][ T7829] __x64_sys_ioctl+0x96/0xe0 [ 490.875488][ T7829] x64_sys_call+0x18bf/0x3ba0 [ 490.880535][ T7829] do_syscall_64+0xcd/0x1e0 [ 490.885366][ T7829] ? clear_bhb_loop+0x25/0x80 [ 490.890445][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.896725][ T7829] RIP: 0033:0x7fc9ccf7def9 [ 490.901447][ T7829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.921431][ T7829] RSP: 002b:00007fc9cdd7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.930244][ T7829] RAX: ffffffffffffffda RBX: 00007fc9cd135f80 RCX: 00007fc9ccf7def9 [ 490.938530][ T7829] RDX: 00000000200001c0 RSI: 00000000c0404807 RDI: 0000000000000005 [ 490.946814][ T7829] RBP: 00007fc9cdd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 490.955093][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.963363][ T7829] R13: 0000000000000000 R14: 00007fc9cd135f80 R15: 00007ffe4e213048 [ 490.971672][ T7829] [ 490.975170][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.061263][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.100399][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.148067][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.327317][ T5236] usb 1-1: USB disconnect, device number 13 [ 491.434984][ T7838] syzkaller0: entered allmulticast mode [ 491.577964][ T25] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 491.799454][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.815752][ T25] usb 5-1: config 0 has no interfaces? [ 491.823333][ T25] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 491.832945][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.987623][ T25] usb 5-1: config 0 descriptor?? [ 492.015923][ T5234] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 492.028568][ T25] usb 4-1: USB disconnect, device number 12 [ 492.248812][ T5234] usb 3-1: Using ep0 maxpacket: 8 [ 492.271715][ T7834] RDS: rds_bind could not find a transport for ::1:902:1200:0, load rds_tcp or rds_rdma? [ 492.315596][ T5234] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 492.327149][ T5234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.340856][ T5234] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 492.352606][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.413669][ T5234] usb 3-1: config 0 descriptor?? [ 492.447432][ T1902] usb 5-1: USB disconnect, device number 10 [ 492.631923][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.709355][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.894057][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.927065][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.050589][ T44] usb 3-1: USB disconnect, device number 15 [ 493.743310][ T7855] netlink: 'syz.0.805': attribute type 3 has an invalid length. [ 493.751760][ T7855] netlink: 666 bytes leftover after parsing attributes in process `syz.0.805'. [ 494.178724][ T7860] loop3: detected capacity change from 0 to 1024 [ 494.242189][ T7860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.421096][ T7860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.901752][ T7868] netlink: 45 bytes leftover after parsing attributes in process `syz.4.809'. [ 495.154896][ T7873] loop4: detected capacity change from 0 to 512 [ 495.187339][ T5182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.267293][ T7873] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 495.895635][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.920917][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.930798][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.940464][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.950523][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.960249][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.969897][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.979493][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.989179][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 495.998785][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.022221][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.032096][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.041771][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.051485][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.061273][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.070937][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.080541][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.090376][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.119612][ T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 496.137936][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.147600][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.157094][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.166812][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.176427][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.186528][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.210359][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.239133][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.248849][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.258501][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.268019][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.268117][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 496.277666][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.287065][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 496.308991][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.318731][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.328313][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.338274][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.347977][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.354716][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 496.357564][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.372276][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 496.372453][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 496.372637][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 496.411535][ T44] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 496.411733][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.411889][ T44] usb 2-1: Product: syz [ 496.412011][ T44] usb 2-1: Manufacturer: syz [ 496.412136][ T44] usb 2-1: SerialNumber: syz [ 496.425798][ T44] usb 2-1: config 0 descriptor?? [ 496.436415][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.470189][ T44] redrat3 2-1:0.0: Couldn't find all endpoints [ 496.480183][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.509461][ T25] usb 4-1: device descriptor read/64, error -71 [ 496.551910][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.561618][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.571200][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.581188][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.607032][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.617276][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.626873][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.637013][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.646789][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.656326][ T1902] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 496.757393][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 496.863090][ T1902] hid-generic 0000:0000:0003.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 496.956875][ T25] usb 4-1: device descriptor read/64, error -71 [ 497.063317][ T25] usb usb4-port1: attempt power cycle [ 497.114086][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 497.164357][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.816'. [ 497.179584][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.816'. [ 497.480665][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 497.549659][ T25] usb 4-1: device descriptor read/8, error -71 [ 497.814355][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 497.893828][ T25] usb 4-1: device descriptor read/8, error -71 [ 497.999810][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.820'. [ 498.009500][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.820'. [ 498.041153][ T25] usb usb4-port1: unable to enumerate USB device [ 498.481380][ T5234] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 499.286584][ T25] usb 2-1: USB disconnect, device number 12 [ 499.700435][ T7918] netlink: 45 bytes leftover after parsing attributes in process `syz.3.826'. [ 499.873891][ T7922] loop3: detected capacity change from 0 to 512 [ 499.976093][ T7922] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 500.268288][ T7925] bond0: (slave erspan0): Opening slave failed [ 500.963328][ C1] sd 0:0:1:0: [sda] tag#5033 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 500.974599][ C1] sd 0:0:1:0: [sda] tag#5033 CDB: Read(6) 08 00 00 00 00 49 [ 501.001775][ C1] sd 0:0:1:0: [sda] tag#5034 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 501.013008][ C1] sd 0:0:1:0: [sda] tag#5034 CDB: Read(6) 08 00 00 00 00 49 [ 501.154509][ T7940] FAULT_INJECTION: forcing a failure. [ 501.154509][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.174998][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.2.834 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 501.185712][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 501.186102][ T7938] netlink: 'syz.4.833': attribute type 10 has an invalid length. [ 501.195939][ T7940] Call Trace: [ 501.195999][ T7940] [ 501.196064][ T7940] dump_stack_lvl+0x216/0x2d0 [ 501.196245][ T7940] dump_stack+0x1e/0x30 [ 501.196392][ T7940] should_fail_ex+0x748/0x7f0 [ 501.196596][ T7940] should_fail+0x2a/0x40 [ 501.196775][ T7940] should_fail_usercopy+0x2e/0x40 [ 501.196974][ T7940] _copy_to_user+0x33/0x110 [ 501.197160][ T7940] simple_read_from_buffer+0x199/0x340 [ 501.197417][ T7940] proc_fail_nth_read+0x1e5/0x2c0 [ 501.197617][ T7940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.197806][ T7940] vfs_read+0x29b/0xf60 [ 501.197975][ T7940] ? kmsan_get_metadata+0x13e/0x1c0 [ 501.198199][ T7940] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 501.273547][ T7940] ksys_read+0x20f/0x4c0 [ 501.278151][ T7940] __x64_sys_read+0x93/0xe0 [ 501.283018][ T7940] x64_sys_call+0x3055/0x3ba0 [ 501.288079][ T7940] do_syscall_64+0xcd/0x1e0 [ 501.292908][ T7940] ? clear_bhb_loop+0x25/0x80 [ 501.297954][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.304212][ T7940] RIP: 0033:0x7fe374b7c93c [ 501.308899][ T7940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 501.328868][ T7940] RSP: 002b:00007fe375949030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.337669][ T7940] RAX: ffffffffffffffda RBX: 00007fe374d35f80 RCX: 00007fe374b7c93c [ 501.345958][ T7940] RDX: 000000000000000f RSI: 00007fe3759490a0 RDI: 0000000000000004 [ 501.354234][ T7940] RBP: 00007fe375949090 R08: 0000000000000000 R09: 0000000000000000 [ 501.362501][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.370757][ T7940] R13: 0000000000000000 R14: 00007fe374d35f80 R15: 00007fff1e11c5b8 [ 501.379165][ T7940] [ 501.408194][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.421677][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.565783][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.573912][ T7938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.582999][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.590980][ T7938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.613053][ T7938] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 502.213015][ T7947] mmap: syz.0.836 (7947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 506.779307][ T29] audit: type=1326 audit(1727000386.039:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 506.784624][ T7983] loop4: detected capacity change from 0 to 512 [ 506.802519][ T29] audit: type=1326 audit(1727000386.039:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 506.802792][ T29] audit: type=1326 audit(1727000386.039:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 506.803045][ T29] audit: type=1326 audit(1727000386.049:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 506.803282][ T29] audit: type=1326 audit(1727000386.049:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 506.836135][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.868530][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.898631][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.926768][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.003530][ T29] audit: type=1326 audit(1727000386.312:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 507.026405][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.061206][ T29] audit: type=1326 audit(1727000386.312:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 507.089115][ T29] audit: type=1326 audit(1727000386.322:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ff57def9 code=0x7ffc0000 [ 507.103111][ T7989] FAULT_INJECTION: forcing a failure. [ 507.103111][ T7989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.132568][ T7989] CPU: 1 UID: 0 PID: 7989 Comm: syz.1.853 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 507.143179][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 507.153498][ T7989] Call Trace: [ 507.156994][ T7989] [ 507.160143][ T7989] dump_stack_lvl+0x216/0x2d0 [ 507.165140][ T7989] dump_stack+0x1e/0x30 [ 507.169577][ T7989] should_fail_ex+0x748/0x7f0 [ 507.174617][ T7989] should_fail_alloc_page+0x235/0x2b0 [ 507.180496][ T7989] __alloc_pages_noprof+0x33b/0xe70 [ 507.186136][ T7989] alloc_pages_mpol_noprof+0x299/0x990 [ 507.191973][ T7989] ? kmsan_get_metadata+0x13e/0x1c0 [ 507.197560][ T7989] alloc_pages_noprof+0x1bf/0x1e0 [ 507.202967][ T7989] __pmd_alloc+0x57/0x950 [ 507.207633][ T7989] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 507.213836][ T7989] handle_mm_fault+0x1736/0xdc30 [ 507.219121][ T7989] ? mt_find+0x1663/0x1910 [ 507.223921][ T7989] exc_page_fault+0x29f/0x700 [ 507.229068][ T7989] asm_exc_page_fault+0x2b/0x30 [ 507.234364][ T7989] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 507.240526][ T7989] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 507.260485][ T7989] RSP: 0018:ffff888122893d88 EFLAGS: 00050206 [ 507.266928][ T7989] RAX: 0000000000000050 RBX: ffff8880160b2bf8 RCX: 0000000000000006 [ 507.275188][ T7989] RDX: 0000000122893e00 RSI: ffff888122893e00 RDI: 0000000020003cc0 [ 507.283461][ T7989] RBP: ffff888122893db8 R08: ffffea000000000f R09: 0000000000000006 [ 507.291722][ T7989] R10: ffff888122093e00 R11: ffff888233a2cc80 R12: ffff888122893e00 [ 507.300003][ T7989] R13: 0000000020003cc6 R14: 0000000000000006 R15: 0000000020003cc0 [ 507.308273][ T7989] ? _copy_to_user+0xcd/0x110 [ 507.313291][ T7989] do_seccomp+0x592/0x16c0 [ 507.318047][ T7989] ? ksys_write+0x41d/0x4c0 [ 507.322888][ T7989] ? kmsan_get_metadata+0x13e/0x1c0 [ 507.328474][ T7989] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 507.334671][ T7989] __x64_sys_seccomp+0x90/0xd0 [ 507.339799][ T7989] x64_sys_call+0x294b/0x3ba0 [ 507.344827][ T7989] do_syscall_64+0xcd/0x1e0 [ 507.349623][ T7989] ? clear_bhb_loop+0x25/0x80 [ 507.354640][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.360885][ T7989] RIP: 0033:0x7fd72bf7def9 [ 507.365569][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.385521][ T7989] RSP: 002b:00007fd72cdd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 507.394289][ T7989] RAX: ffffffffffffffda RBX: 00007fd72c135f80 RCX: 00007fd72bf7def9 [ 507.402548][ T7989] RDX: 0000000020003cc0 RSI: 0000000000000000 RDI: 0000000000000003 [ 507.410799][ T7989] RBP: 00007fd72cdd2090 R08: 0000000000000000 R09: 0000000000000000 [ 507.419054][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.427398][ T7989] R13: 0000000000000001 R14: 00007fd72c135f80 R15: 00007ffd2a232328 [ 507.435697][ T7989] [ 507.440536][ T5234] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 507.783235][ T5234] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.798508][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 507.822908][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 507.835945][ T5234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.852148][ T7983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.865567][ T7983] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.867988][ T5234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.889867][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.935986][ T7995] 9pnet_fd: Insufficient options for proto=fd [ 508.084960][ T5234] usb 3-1: config 0 descriptor?? [ 508.287699][ T7997] 9pnet_fd: Insufficient options for proto=fd [ 508.368957][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 508.378400][ T7998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.855'. [ 508.491386][ T7470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.624944][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.635233][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.645085][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.654637][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.664581][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.674342][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.701540][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.711549][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.721311][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.730857][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.740451][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.750323][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.760148][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.769694][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.803103][ T5234] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 508.930181][ T5234] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 509.003954][ T5234] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 509.323809][ T8007] FAULT_INJECTION: forcing a failure. [ 509.323809][ T8007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.338246][ T8007] CPU: 1 UID: 0 PID: 8007 Comm: syz.3.859 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 509.348853][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 509.359275][ T8007] Call Trace: [ 509.362775][ T8007] [ 509.365928][ T8007] dump_stack_lvl+0x216/0x2d0 [ 509.370943][ T8007] dump_stack+0x1e/0x30 [ 509.375412][ T8007] should_fail_ex+0x748/0x7f0 [ 509.380465][ T8007] should_fail+0x2a/0x40 [ 509.385054][ T8007] should_fail_usercopy+0x2e/0x40 [ 509.390479][ T8007] _copy_from_user+0x33/0x160 [ 509.395536][ T8007] __sys_bpf+0x2dc/0xd90 [ 509.400214][ T8007] __x64_sys_bpf+0xa0/0xe0 [ 509.404996][ T8007] x64_sys_call+0x2cce/0x3ba0 [ 509.410046][ T8007] do_syscall_64+0xcd/0x1e0 [ 509.414866][ T8007] ? clear_bhb_loop+0x25/0x80 [ 509.419902][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.426153][ T8007] RIP: 0033:0x7fe8ff57def9 [ 509.430859][ T8007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.450827][ T8007] RSP: 002b:00007fe900435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.459621][ T8007] RAX: ffffffffffffffda RBX: 00007fe8ff735f80 RCX: 00007fe8ff57def9 [ 509.467893][ T8007] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000001c [ 509.476153][ T8007] RBP: 00007fe900435090 R08: 0000000000000000 R09: 0000000000000000 [ 509.484480][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.492745][ T8007] R13: 0000000000000000 R14: 00007fe8ff735f80 R15: 00007ffea06233e8 [ 509.501038][ T8007] [ 510.044434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 510.057833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 510.313481][ T5234] usb 3-1: USB disconnect, device number 17 [ 510.341708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 510.878323][ T8018] sctp: failed to load transform for md5: -2 [ 510.970388][ T1902] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 511.387541][ T1902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 511.402687][ T1902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 511.425485][ T1902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 511.438407][ T1902] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 511.450100][ T1902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.825769][ T8036] FAULT_INJECTION: forcing a failure. [ 511.825769][ T8036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.839610][ T8036] CPU: 1 UID: 0 PID: 8036 Comm: syz.1.867 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 511.850219][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 511.860559][ T8036] Call Trace: [ 511.864047][ T8036] [ 511.867191][ T8036] dump_stack_lvl+0x216/0x2d0 [ 511.872204][ T8036] dump_stack+0x1e/0x30 [ 511.876653][ T8036] should_fail_ex+0x748/0x7f0 [ 511.881709][ T8036] should_fail+0x2a/0x40 [ 511.886298][ T8036] should_fail_usercopy+0x2e/0x40 [ 511.891685][ T8036] _copy_from_user+0x33/0x160 [ 511.896744][ T8036] __sys_bpf+0x2dc/0xd90 [ 511.901394][ T8036] __x64_sys_bpf+0xa0/0xe0 [ 511.906174][ T8036] x64_sys_call+0x2cce/0x3ba0 [ 511.911230][ T8036] do_syscall_64+0xcd/0x1e0 [ 511.916061][ T8036] ? clear_bhb_loop+0x25/0x80 [ 511.921106][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.927361][ T8036] RIP: 0033:0x7fd72bf7def9 [ 511.932059][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.952032][ T8036] RSP: 002b:00007fd72cdd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 511.960827][ T8036] RAX: ffffffffffffffda RBX: 00007fd72c135f80 RCX: 00007fd72bf7def9 [ 511.969128][ T8036] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000001c [ 511.977376][ T8036] RBP: 00007fd72cdd2090 R08: 0000000000000000 R09: 0000000000000000 [ 511.985625][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.993880][ T8036] R13: 0000000000000000 R14: 00007fd72c135f80 R15: 00007ffd2a232328 [ 512.002259][ T8036] [ 512.033460][ T1902] usb 4-1: config 0 descriptor?? [ 512.168976][ T1902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.178596][ T1902] usb 4-1: MIDIStreaming interface descriptor not found [ 513.035118][ T8045] loop2: detected capacity change from 0 to 1024 [ 513.809852][ T5544] hfsplus: bad catalog entry type [ 513.914036][ T5544] ===================================================== [ 513.921937][ T5544] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x821/0x2350 [ 513.929616][ T5544] hfsplus_uni2asc+0x821/0x2350 [ 513.934716][ T5544] hfsplus_readdir+0xbd7/0x18d0 [ 513.939946][ T5544] iterate_dir+0x5b3/0x9e0 [ 513.944587][ T5544] __se_sys_getdents64+0x169/0x530 [ 513.955015][ T5544] __x64_sys_getdents64+0x96/0xe0 [ 513.961935][ T5544] x64_sys_call+0x3430/0x3ba0 [ 513.966954][ T5544] do_syscall_64+0xcd/0x1e0 [ 513.971794][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.978141][ T5544] [ 513.980587][ T5544] Uninit was created at: [ 513.985115][ T5544] __kmalloc_noprof+0x661/0xf30 [ 513.990447][ T5544] hfsplus_find_init+0x95/0x1d0 [ 513.995531][ T5544] hfsplus_readdir+0x1da/0x18d0 [ 514.000793][ T5544] iterate_dir+0x5b3/0x9e0 [ 514.005636][ T5544] __se_sys_getdents64+0x169/0x530 [ 514.010981][ T5544] __x64_sys_getdents64+0x96/0xe0 [ 514.016396][ T5544] x64_sys_call+0x3430/0x3ba0 [ 514.021320][ T5544] do_syscall_64+0xcd/0x1e0 [ 514.026176][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.032324][ T5544] [ 514.038983][ T5544] CPU: 1 UID: 0 PID: 5544 Comm: syz-executor Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 514.055527][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 514.067495][ T5544] ===================================================== [ 514.074728][ T5544] Disabling lock debugging due to kernel taint [ 514.081049][ T5544] Kernel panic - not syncing: kmsan.panic set ... [ 514.087650][ T5544] CPU: 1 UID: 0 PID: 5544 Comm: syz-executor Tainted: G B 6.11.0-syzkaller-08481-g88264981f208 #0 [ 514.099919][ T5544] Tainted: [B]=BAD_PAGE [ 514.104219][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 514.114478][ T5544] Call Trace: [ 514.117907][ T5544] [ 514.121024][ T5544] dump_stack_lvl+0x216/0x2d0 [ 514.125965][ T5544] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 514.132093][ T5544] dump_stack+0x1e/0x30 [ 514.136451][ T5544] panic+0x4e2/0xcf0 [ 514.140620][ T5544] ? kmsan_get_metadata+0x91/0x1c0 [ 514.146038][ T5544] kmsan_report+0x2c7/0x2d0 [ 514.150812][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.156382][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.161865][ T5544] ? __msan_warning+0x95/0x120 [ 514.166889][ T5544] ? hfsplus_uni2asc+0x821/0x2350 [ 514.172170][ T5544] ? hfsplus_readdir+0xbd7/0x18d0 [ 514.177426][ T5544] ? iterate_dir+0x5b3/0x9e0 [ 514.182243][ T5544] ? __se_sys_getdents64+0x169/0x530 [ 514.187863][ T5544] ? __x64_sys_getdents64+0x96/0xe0 [ 514.193309][ T5544] ? x64_sys_call+0x3430/0x3ba0 [ 514.198512][ T5544] ? do_syscall_64+0xcd/0x1e0 [ 514.203403][ T5544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.209819][ T5544] ? filter_irq_stacks+0x60/0x1a0 [ 514.215136][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.220612][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.226200][ T5544] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 514.232304][ T5544] ? hfsplus_bnode_read_u16+0x3e/0x2b0 [ 514.238063][ T5544] ? filter_irq_stacks+0x60/0x1a0 [ 514.243370][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.248849][ T5544] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 514.255057][ T5544] ? utf32_to_utf8+0x4b1/0x4e0 [ 514.260174][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.265651][ T5544] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 514.272097][ T5544] __msan_warning+0x95/0x120 [ 514.276934][ T5544] hfsplus_uni2asc+0x821/0x2350 [ 514.282042][ T5544] ? __msan_memcpy+0x108/0x1c0 [ 514.287070][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.292574][ T5544] ? __msan_memcpy+0x108/0x1c0 [ 514.297607][ T5544] hfsplus_readdir+0xbd7/0x18d0 [ 514.302814][ T5544] ? __rcu_read_unlock+0x7b/0xe0 [ 514.308088][ T5544] ? aa_file_perm+0x3de/0x1780 [ 514.313140][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.318632][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.324134][ T5544] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 514.330734][ T5544] ? kmsan_get_metadata+0x13e/0x1c0 [ 514.336212][ T5544] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 514.342337][ T5544] ? __pfx_hfsplus_readdir+0x10/0x10 [ 514.347853][ T5544] iterate_dir+0x5b3/0x9e0 [ 514.352497][ T5544] ? __pfx_hfsplus_readdir+0x10/0x10 [ 514.358010][ T5544] ? mutex_lock+0x38/0x60 [ 514.362617][ T5544] __se_sys_getdents64+0x169/0x530 [ 514.367981][ T5544] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 514.374675][ T5544] ? __pfx_filldir64+0x10/0x10 [ 514.379701][ T5544] __x64_sys_getdents64+0x96/0xe0 [ 514.384985][ T5544] x64_sys_call+0x3430/0x3ba0 [ 514.389930][ T5544] do_syscall_64+0xcd/0x1e0 [ 514.394655][ T5544] ? clear_bhb_loop+0x25/0x80 [ 514.399593][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.405747][ T5544] RIP: 0033:0x7fe374bb0093 [ 514.410346][ T5544] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 514.430215][ T5544] RSP: 002b:00007fff1e11a728 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 514.438879][ T5544] RAX: ffffffffffffffda RBX: 0000555587569600 RCX: 00007fe374bb0093 [ 514.447164][ T5544] RDX: 0000000000008000 RSI: 0000555587569600 RDI: 0000000000000005 [ 514.455338][ T5544] RBP: 00005555875695d4 R08: 0000000000000000 R09: 0000000000000000 [ 514.463523][ T5544] R10: 0000000000000100 R11: 0000000000000293 R12: ffffffffffffffa8 [ 514.471713][ T5544] R13: 0000000000000016 R14: 00005555875695d0 R15: 00007fff1e11c9d0 [ 514.479928][ T5544] [ 514.483467][ T5544] Kernel Offset: disabled [ 514.487884][ T5544] Rebooting in 86400 seconds..