last executing test programs: 10.289514489s ago: executing program 3 (id=2005): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0x95, 0xf3, 0x40, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbd, 0x1, 0x93}}]}}]}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000880)=0xff) ppoll(&(0x7f0000001040)=[{r5}, {}, {}, {}, {}, {}], 0x63, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000400)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48}, {0x6}]}) write$ppp(r6, &(0x7f00000010c0)="1e00", 0x2) add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)='c', 0x1, 0xffffffffffffffff) 7.516350199s ago: executing program 2 (id=2012): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) open_tree(r1, 0x0, 0x1100) pipe(0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGWINSZ(r4, 0x545d, &(0x7f0000000340)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="756ed1d78638f0a8f38e"], 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c00048028000180080001006f7366001c0002800500020000000000080003400000000108000140000000000900010073797a30000000000900020073797a32001090293e0000001100010000000000000000000000000a"], 0x80}}, 0x0) llistxattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 7.269833741s ago: executing program 0 (id=2013): creat(0x0, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.03487074s ago: executing program 3 (id=2014): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x7}}, 0x24, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x40000100) socketpair$unix(0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x2) 7.011294771s ago: executing program 0 (id=2015): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c730020000000000006fa1bf9f1dc2375e", 0x2f}, {&(0x7f0000000300)="997a7e88616a566ed2d8da3839e9beaee15eb04f2e14ce0a50b05f956e43a51023566f7ba4383d0cbd427781ebc6bd5aa486dc6e7288fa16e3d341a77372159a", 0x40}], 0x2}, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6.672237382s ago: executing program 4 (id=2016): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6000000000383a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000000060fd906300002b0000000000000000000000000000000001000000000000000000000000000000011e520b4c95"], 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x44) open(&(0x7f0000000100)='./file0\x00', 0xa0ff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x703881, 0x40) fcntl$setlease(r2, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3af69c30fdf94d64e67a36", @ANYRESHEX=r2], 0x50}}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1}, {0x2}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f000059c000/0x2000)=nil, 0x2000, 0x16) socket$kcm(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, 0x0}, 0x0) 5.853804877s ago: executing program 3 (id=2017): socket$netlink(0x10, 0x3, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000380)="0bd52aab98791946b4e750d71163388e50dc990f05cef86f7989043d4254c04699949c1be1a2fa62930bc5f26de0837573e4087dcaa82edea56a7c9eb3b5a6cb31b45ff2313543684c6e5566ee2b91b10c9df6cbe96636abcd7a3f408c1cd914adbee2ce6aa5d69cd8099b84c86a5d962400fad188a64a", &(0x7f0000000300)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001240)="3a7a2ff4fe75a4c0bcf4cda668f8aacbaeb460de889020b9d878470a14561862c26cc68f9be96ef850541f0afb6f26973bfecfe2f2d58f74caa737d202faf2afb6c3135de69e0f268ea7f003f99d4929407b11680e297eaf902accb0c0319c1475f4fb2c9247b964922e5affc371a28cc9da175a3654736fef7f364d", 0x7c}], 0x1}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x33, 0x3c, 0x23, 0x40, 0x3fd, 0xebbe, 0xd20d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xcd, 0x64}}]}}]}}, 0x0) 5.568331646s ago: executing program 2 (id=2019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x90) r4 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x1, 0xfffffffe, 0x0, 0x2, 0x80000000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(r4, &(0x7f0000000d40)=[{{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001480)="38cfa062425b2665a639bd71a9e2acd37cc7777873a5b116c65aa8435a0254996dece6de399c55c23e95a048553cea2c9c061bd5e2551e4e433fd794192fc467c76ec1f54e4d9c02af6412fc5ba007a11d1c238d2fb23b2e867f2b51810e41654cf214a6ec4f9b8f775348ef15131f4a3f59bbf59c0eefe9476f168dbfed22b1e35d1b9f66c51df3843bf7207386a37fc89ce9d4e8a0ffb8ec7a5ef27b67edc13b018707cf11cc52a23d24729a6b41e8291e1b31791a64d94bb6958a86c51f19305344c0fe2b99d95fce730fb833cbae8f3f70ffac29157b65797f67c4b063a5c07e95c556c9bb845539f8cf0352b2dbf6a76e1103c44b72cefeedd3e7add86dc16f0c80c20f81aa7a25d47ac1882d5065f5e5a1ca38132c09220423fc2d1fa58db8fb0e9ac7129dc7a84488e16a814435164446bbb435e472a9df109f3e8cd1b7feb2a29e0833e3deb6b59a6667dcdc3e0e2e6df5c3827efa190f736d7263f9eb4d8f726c4ee77116cb4f5d9119c1788c69fc3095013c233a6975626c21680e5ecd1a6be08d69ace2b0222773f627711cbb85f004e8ed7066767c3bd184787de7ccfdf47c64bd17891f1407f7c5ed475ac7b3b9d7a7d82fa1e20f9af0f3ed5907f6983b2aade55081f856e451384161977f169446445ca81dcac5a1295003a82b82365047876092be4f9b69b72ce18d62240f24f0619e105e90f5e33ec696393fbb44f82bf5026a15c41fda240e296cbdb2339319cb7c05ab8ec7fff9431a38d058a0b217a0e2c09a6a07c9de4298d0026e391e346e4817a346860099650f7c4b7b4f800cad492da6dc99474dc7cf511f9eb00521b3517534bb678c21f30e14acdf7071c81b2928b7b78bb8561a45e0c062c503181e65aeccbe0faa60e5b32f64724835ccebc37ab9dab2cb9f574d051579a2fdc1ffdbacecba443b57375deedfdeb1d33ea1eb9cd47972d7dbd825969a0a5a2ca7b8934396b4719615392a3a3a6f6ea00972365082ead224ae103d2cb2c2ec344919972cc0988615d274e924beb21e7c5a6438e0e315ea3827cdd0cb4515561ef147404c0d1d4216d1a5ee1d8fe92bdf35bcb4414d8202904e80aec0575bedbd1290cf4d20aa4ea69f442859bf017332bfb2a4dcd41e9d7f33c5f2aa7841574cdb2d1c483a19d1cb7a41e7584e983490e8f0f29e519b1589534b410624b98d5244581f182b94b081f4263591c02b1e7314a25dcb9a093628144e44730a91803ba9db47334abcda87e675bfd399bc7060ca2abb2c571146f015e22ae845a9b903ea02cf362498ea52092b280404c71b4006f4e3b963a154aaa333149bfd0e4ba697c01fe5b6e3ece04a3fd110e3297dc67a8f29a90fe61202afd7b1b6a4379f04a1459670baf84c3e45161e9bf9cd2ecdc1b3c679dde2c0f90bf9e506e043a3236548d59e576050bcbca04bb7984209d283ae5ec96b222439dbbfed49e442a302860eeb56245c1df3833bdab5b7ef96176bf8e05046778fa0dfe1a5c0d8d596ba771b5ac1a799bfc7d0366e1d2caf919fd43bbfda97d58289f85bcf497d5ebc24f28700512e477f544fea8581c168b2b94847c235dc4b6ed4901e92f243f3be383e91a8085962082f6c2f8715cbab4497dc8c9ce29d5185b8ca7f45c141d2dba5ce13425e72dd12e056255f7564952ac6b1342f7612bedf3819d87c48a3b4cd3cf3576a1775ca2d769eb148c07b6e8014c2c1e8d79c419c43fb90209273a92c95e4e03df6681e9173e863061629ec6d6cef64c04f4b6cc3ec96931c34149bcaefcc9d5fb234211e173068e8c5e49117e1c450e4aa18ca382c94e236e5c2f26eb18a17f1f57eddb83a7306f927b853e2ac75bc5f6e40f681cb03c1688d78a324e0310225a1e9cc8c6115c8066373f752f11faffc3ed692d1e794a002b33282ce82e61488cdf8d9ec532ee6795e33a93df1e0a6c84ed331d7cdd5feaadcdcae26c44a1794e3e02bf20e18b97752f3b7267eeae36e7c27f7e23cf55ed9005623f71fc4f8d5d7fb6f1c00fab1d794597663c396c1b193fa8867652c982b832ff2e76f1ed04c5b0ac23fd45f4f693d73c227e2df50230420abf342c5e3245352fba929ef0af4329377c982b8ba64b94ee409f7c09f0c9407ae0ea755124c4cc0e3ef586ebf9ae4e735becc17be9820fc30dcd0e4af56c25388ccc14b4404e5d43038afa1e3359a8e05aa836c65f21a0e3fb8e940b4c000db90df681124bc9d5f575783f10b2d19668d35c6e2225c615aa670e693f77c0284a9c5975bfbcfe6a7161ab739f44e549f274e8e87df579af53c55523144ddf4ef1c13c8121c305da1d6abc300ccfcedabf0245b09b0b461cc72c691bd2b68db5a6fcbd1efbd7950288a719d9945a41515e7beb273637c06b0e8c3cb5b84d36cad7ef9155ccafb55f2159a554b9712e0db79dcb74fb119edece1ab30b6e10629a77897d0f2f241ad3032fa667387597d6729db60714df8f0fe979385b68cec928419309301fe7ca58c298ad80a02fe7f71198e65ccb488b0e1eaa9a08c9d35ada2c76ed8a494063bd4c96ccf284ec7cc8d80ff6b7293057f545444fb7189bad2dc2a48a6138cf866c33bd59dc97daa281e6d04c7cb183be58accc347e8b15b78862979cb59fe5671fd25953d83f3a9b024a2c0f60043c1b478bff7de081d9e661ed753e270bdc41a8c64eedf6923395bd1a75686ce0c44e8b184832180603b3ce32cbc271c713d2c04f153f794e2cc51a7e7d1e19af521ed477a7b914c96847ba7e7ce53537516af897e6baae0e352cb4699d228fcd5292ffe30077bfc13e5e611b247b2b5", 0x7cd}, {&(0x7f0000000900)="2602cd9325d8c83dc65a536bd797cf87981a41bb5244f4a5847ed528881646dd", 0x20}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x50, 0x4040800}}], 0x1, 0x0) 5.527040653s ago: executing program 0 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getpeername(r1, &(0x7f00000001c0)=@x25, &(0x7f0000000140)=0x80) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x80000000006, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x74380, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x420000, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) bind$ax25(r3, 0x0, 0x0) 5.188954355s ago: executing program 0 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x545) (fail_nth: 3) 4.832270121s ago: executing program 0 (id=2023): socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x5, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='h', 0x1}, {&(0x7f0000000280)="5834e0277094f259", 0x8}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000460000000000cf9d0300128009000100766574680000000065551c12", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x58}}, 0x0) socket$inet6(0xa, 0x5, 0x8000000003c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 3.872586685s ago: executing program 1 (id=2025): creat(0x0, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.846798946s ago: executing program 4 (id=2026): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xb, 0x0, 0x20, 0x37, r0, 0x9, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) syz_io_uring_setup(0x4a92, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x4}, &(0x7f0000001280), 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000003840)) fallocate(r3, 0x0, 0x0, 0x58) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) 3.736093528s ago: executing program 2 (id=2027): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x7}}, 0x24, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x40000100) socketpair$unix(0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x2) 3.697937793s ago: executing program 1 (id=2028): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b34366d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb6ac) 3.666570139s ago: executing program 4 (id=2029): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 3.376689813s ago: executing program 3 (id=2030): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) open_tree(r1, 0x0, 0x1100) pipe(0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGWINSZ(r4, 0x545d, &(0x7f0000000340)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="756ed1d78638f0a8f38e"], 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c00048028000180080001006f7366001c0002800500020000000000080003400000000108000140000000000900010073797a30000000000900020073797a32001090293e0000001100010000000000000000000000000a"], 0x80}}, 0x0) llistxattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 3.375837336s ago: executing program 1 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c730020000000000006fa1bf9f1dc2375e", 0x2f}, {&(0x7f0000000300)="997a7e88616a566ed2d8da3839e9beaee15eb04f2e14ce0a50b05f956e43a51023566f7ba4383d0cbd427781ebc6bd5aa486dc6e7288fa16e3d341a77372159a", 0x40}], 0x2}, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.621291089s ago: executing program 4 (id=2032): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xb, 0x0, 0x20, 0x37, r0, 0x9, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) syz_io_uring_setup(0x4a92, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x4}, &(0x7f0000001280), 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) 2.617697922s ago: executing program 2 (id=2033): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000980)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073"], 0x7c}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000180)='n'}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf25050000000c0008001a000000000000000c00030002000000000000000c00020051b30000000000000c000600000000000000000008000100000000000c00050006000000000000002c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x1004c042) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) accept(0xffffffffffffffff, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r9, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000cc0)=""/168, 0xa8}, {&(0x7f0000000d80)=""/149, 0x95}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000400)=""/52, 0x34}, {&(0x7f0000000e40)=""/224, 0xe0}, {&(0x7f0000000480)=""/56, 0x38}, {&(0x7f0000000f40)=""/77, 0x4d}, {&(0x7f0000000fc0)=""/179, 0xb3}, {&(0x7f0000001080)=""/168, 0xa8}], 0xa}, 0x100) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$inet(r8, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r10, 0x402c542c, 0x0) dup(r10) 2.352717714s ago: executing program 1 (id=2034): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffb) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) dup3(r3, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xdc0, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x30, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}, @register_looper, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}], 0xc6, 0x0, &(0x7f0000000100)="d39a5e28521c3dce443800306699fed72209d6dbe11d3db0e6a55f82e206b8eace45f89155cec4fae19885d0c2aa12c8c812d5ec62fe477e62496a9c5a0cbf345cf5417048cabe0957256eccc15b4141c41609c70aa514edaa7d89ad9a27c4727f299f92ae2be2e3d908adb3700703891a977dd0f6b0b5e4ba2c85c6a8ff854a55a7a13c457b36832be1ad136c35a37290c2b3aa7e89fd316dc88cb60644095ee14f2a092fe154171ca101e53186fec6dfdbb8e5da51ac10ce04b020f846824c187929d418ee"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800ac00", @ANYRES16=r7, @ANYBLOB="010000000000000000003100000005003300000000000a0001007770616e31000000"], 0x28}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000500)=@ethtool_link_settings={0x2}}) 2.258222674s ago: executing program 2 (id=2035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'dummy0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000001c0)=@userptr={0x0, 0x1, 0x4, 0x352c34c113f2f238, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0ed290c8"}, 0x0, 0x2, {0x0}}) time(0xfffffffffffffffc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.232526197s ago: executing program 4 (id=2036): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x5, 0x0, @empty, @private, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@loopback}, {@multicast1}, {@dev}, {@dev}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a'], 0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) readlinkat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=""/126, 0x7e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 1.30075385s ago: executing program 2 (id=2037): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6000000000383a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000000060fd906300002b0000000000000000000000000000000001000000000000000000000000000000011e520b4c95"], 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x44) open(&(0x7f0000000100)='./file0\x00', 0xa0ff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x703881, 0x40) fcntl$setlease(r2, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3af69c30fdf94d64e67a36", @ANYRESHEX=r2], 0x50}}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1}, {0x2}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f000059c000/0x2000)=nil, 0x2000, 0x16) socket$kcm(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, 0x0}, 0x0) 1.143492493s ago: executing program 1 (id=2038): creat(0x0, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.142406023s ago: executing program 4 (id=2039): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x90) r4 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x1, 0xfffffffe, 0x0, 0x2, 0x80000000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(r4, &(0x7f0000000d40)=[{{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001480)="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", 0x7cd}, {&(0x7f0000000900)="2602cd9325d8c83dc65a536bd797cf87981a41bb5244f4a5847ed528881646dd", 0x20}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x50, 0x4040800}}], 0x1, 0x0) 1.115468766s ago: executing program 0 (id=2040): socket$netlink(0x10, 0x3, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000380)="0bd52aab98791946b4e750d71163388e50dc990f05cef86f7989043d4254c04699949c1be1a2fa62930bc5f26de0837573e4087dcaa82edea56a7c9eb3b5a6cb31b45ff2313543684c6e5566ee2b91b10c9df6cbe96636abcd7a3f408c1cd914adbee2ce6aa5d69cd8099b84c86a5d962400fad188a64a", &(0x7f0000000300)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001240)="3a7a2ff4fe75a4c0bcf4cda668f8aacbaeb460de889020b9d878470a14561862c26cc68f9be96ef850541f0afb6f26973bfecfe2f2d58f74caa737d202faf2afb6c3135de69e0f268ea7f003f99d4929407b11680e297eaf902accb0c0319c1475f4fb2c9247b964922e5affc371a28cc9da175a3654736fef7f364d", 0x7c}], 0x1}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x33, 0x3c, 0x23, 0x40, 0x3fd, 0xebbe, 0xd20d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xcd, 0x64}}]}}]}}, 0x0) 995.07083ms ago: executing program 3 (id=2041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'dummy0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448"], 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000001c0)=@userptr={0x0, 0x1, 0x4, 0x352c34c113f2f238, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0ed290c8"}, 0x0, 0x2, {0x0}}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 993.953038ms ago: executing program 1 (id=2042): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaab6d, 0x3a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfbe2, 0x11a, 0x86, 0xa80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0x5, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7}, 0x50) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 3 (id=2043): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) kernel console output (not intermixed with test programs): 3 in high speed [ 567.548207][ T5266] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 567.569555][ T5266] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 567.731186][ T7952] usb 4-1: USB disconnect, device number 38 [ 567.847905][ T4957] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 568.037384][ T4957] usb 2-1: Using ep0 maxpacket: 8 [ 568.052655][ T4957] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 568.063022][ T4957] usb 2-1: config 179 has no interface number 0 [ 568.088952][ T4957] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 568.883262][T10775] infiniband syz2: set active [ 568.888001][T10775] infiniband syz2: added team_slave_1 [ 568.893707][T10775] syz2: rxe_create_cq: returned err = -12 [ 568.899511][T10775] infiniband syz2: Couldn't create ib_mad CQ [ 568.905554][T10775] infiniband syz2: Couldn't open port 1 [ 568.928542][T10775] RDS/IB: syz2: added [ 568.932580][T10775] smc: adding ib device syz2 with port count 1 [ 568.938812][T10775] smc: ib device syz2 port 1 has pnetid [ 569.368902][ T4957] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 569.393832][ T4957] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 569.414060][ T4957] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 569.464758][ T4957] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 569.522779][ T4957] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 569.560716][ T29] audit: type=1326 audit(1722462478.950:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10762 comm="syz.4.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6505773b9 code=0x0 [ 569.587124][ T4957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.762994][T10749] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.897749][ T4957] usb 2-1: USB disconnect, device number 51 [ 570.903710][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 570.903756][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 571.227800][T10801] vlan0: entered promiscuous mode [ 571.232881][T10801] vlan0: entered allmulticast mode [ 571.273896][T10801] veth0_vlan: entered allmulticast mode [ 571.336514][T10801] team0: Port device vlan0 added [ 571.337217][ T5266] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 571.441959][T10809] fuse: Unknown parameter 'bhgroup_id' [ 571.549247][ T4957] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 571.556120][T10814] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 571.556120][T10814] SȘȞZ6' [ 571.558120][ T5266] usb 3-1: not running at top speed; connect to a high speed hub [ 571.948893][T10817] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 572.478950][ T5266] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.522698][ T5266] usb 3-1: config 1 interface 0 has no altsetting 0 [ 572.538375][ T4957] usb 2-1: Using ep0 maxpacket: 32 [ 572.553827][ T5266] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.40 [ 572.582759][ T4957] usb 2-1: unable to get BOS descriptor or descriptor too short [ 572.601411][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.618174][ T4957] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 572.643999][ T5266] usb 3-1: Product: ᾘ秌魻鈄ݱ嚾궠璿ᩲ頋ꊰ땙≧Ɏ逷긬⯎뤥⡺딤Ჷ者＞慭펜٦ꐨ猳殨ﰈ袡䎓흍쨛⠌鈻鞔ひ틎剿宻溁劰鉒덱盨ि繪ⷲ샦痓쑮₦믊ᴺ㜄뵅繂전僎Ꭲ牓臹訾뫶乴囹ꕳ띺紃鐍壴쀶帗෻㗒炵／毫韦斶쯨嘰ꞵ鹁죝戚걌읻ꐋ텬液뽵錺드ᢤ嬻綺鴹䯘嶲嘩 [ 572.677709][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.684296][ T4957] usb 2-1: can't read configurations, error -71 [ 572.704486][ T5266] usb 3-1: Manufacturer: ь [ 572.709882][ T5266] usb 3-1: SerialNumber: 尜 [ 572.917480][ T5395] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 572.949153][ T5266] usbhid 3-1:1.0: can't add hid device: -71 [ 572.955108][ T5266] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 572.967274][ T7936] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 572.989248][ T5266] usb 3-1: USB disconnect, device number 47 [ 573.128634][ T5395] usb 4-1: Using ep0 maxpacket: 16 [ 573.135178][ T5395] usb 4-1: config 0 has no interfaces? [ 573.143700][ T5395] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 573.152928][ T5395] usb 4-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 573.161350][ T5395] usb 4-1: Product: syz [ 573.165608][ T5395] usb 4-1: Manufacturer: syz [ 573.170334][ T5395] usb 4-1: SerialNumber: syz [ 573.176643][ T7936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 573.177582][ T5395] usb 4-1: config 0 descriptor?? [ 573.195583][ T7936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 573.206501][ T7936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 573.215775][ T7936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.226164][T10821] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 573.237941][ T7936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 573.402086][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.411324][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.425379][ T5395] usb 4-1: USB disconnect, device number 39 [ 573.450042][ T5266] usb 1-1: USB disconnect, device number 39 [ 574.212917][ T29] audit: type=1326 audit(1722462483.600:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.1.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x0 [ 574.233858][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.267140][ T944] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 575.597577][ T944] usb 4-1: Using ep0 maxpacket: 32 [ 575.619768][ T944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 575.647508][ T944] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 575.665406][ T944] usb 4-1: can't read configurations, error -71 [ 575.791406][ T7936] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 575.869914][T10889] FAULT_INJECTION: forcing a failure. [ 575.869914][T10889] name failslab, interval 1, probability 0, space 0, times 0 [ 575.882963][T10889] CPU: 0 UID: 0 PID: 10889 Comm: syz.2.1518 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 575.893719][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 575.903766][T10889] Call Trace: [ 575.907041][T10889] [ 575.909977][T10889] dump_stack_lvl+0x241/0x360 [ 575.914651][T10889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.919857][T10889] ? __pfx__printk+0x10/0x10 [ 575.924470][T10889] ? __kmalloc_noprof+0xb0/0x400 [ 575.929419][T10889] ? __pfx___might_resched+0x10/0x10 [ 575.934699][T10889] should_fail_ex+0x3b0/0x4e0 [ 575.939381][T10889] ? kernfs_fop_write_iter+0x15b/0x500 [ 575.944848][T10889] should_failslab+0xac/0x100 [ 575.949519][T10889] ? kernfs_fop_write_iter+0x15b/0x500 [ 575.954967][T10889] __kmalloc_noprof+0xd8/0x400 [ 575.959732][T10889] ? rcu_read_lock_any_held+0xb7/0x160 [ 575.965204][T10889] kernfs_fop_write_iter+0x15b/0x500 [ 575.970483][T10889] aio_write+0x575/0x7d0 [ 575.974718][T10889] ? __pfx_aio_write+0x10/0x10 [ 575.979507][T10889] ? __might_fault+0xaa/0x120 [ 575.984191][T10889] ? __pfx_lock_release+0x10/0x10 [ 575.989225][T10889] ? __fget_files+0x3f6/0x470 [ 575.989953][ T7936] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 575.993901][T10889] ? __might_fault+0xaa/0x120 [ 575.993933][T10889] io_submit_one+0x8a7/0x18b0 [ 576.011443][T10889] ? __pfx_io_submit_one+0x10/0x10 [ 576.013938][ T7936] usb 2-1: config 0 has no interface number 1 [ 576.016551][T10889] ? __might_fault+0xaa/0x120 [ 576.016578][T10889] ? __pfx_lock_release+0x10/0x10 [ 576.025387][ T7936] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 576.027277][T10889] ? lookup_ioctx+0x94/0x6a0 [ 576.027302][T10889] ? __might_fault+0xaa/0x120 [ 576.027323][T10889] ? __might_fault+0xc6/0x120 [ 576.027346][T10889] __se_sys_io_submit+0x179/0x2f0 [ 576.027373][T10889] ? __pfx___se_sys_io_submit+0x10/0x10 [ 576.027395][T10889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 576.027423][T10889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 576.027449][T10889] ? do_syscall_64+0x100/0x230 [ 576.027475][T10889] ? do_syscall_64+0xb6/0x230 [ 576.027500][T10889] do_syscall_64+0xf3/0x230 [ 576.027524][T10889] ? clear_bhb_loop+0x35/0x90 [ 576.027552][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.032642][ T7936] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.042330][T10889] RIP: 0033:0x7f7dbfb773b9 [ 576.042353][T10889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.042370][T10889] RSP: 002b:00007f7dc08b5048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 576.042393][T10889] RAX: ffffffffffffffda RBX: 00007f7dbfd05f80 RCX: 00007f7dbfb773b9 [ 576.042407][T10889] RDX: 0000000020000500 RSI: 0000000000000001 RDI: 00007f7dc0894000 [ 576.042420][T10889] RBP: 00007f7dc08b50a0 R08: 0000000000000000 R09: 0000000000000000 [ 576.042433][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.042445][T10889] R13: 000000000000000b R14: 00007f7dbfd05f80 R15: 00007ffcfb130278 [ 576.042475][T10889] [ 576.054212][ T7936] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 576.204169][ T7936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 576.212542][ T7936] usb 2-1: SerialNumber: syz [ 576.219385][ T7936] usb 2-1: config 0 descriptor?? [ 576.719569][ T7936] usb 2-1: Found UVC 0.00 device (0002:0000) [ 576.766937][ T7936] usb 2-1: No valid video chain found. [ 576.771408][T10896] process 'syz.0.1520' launched './file0' with NULL argv: empty string added [ 576.780641][ T7936] usb 2-1: USB disconnect, device number 54 [ 576.858102][T10900] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1522'. [ 576.989354][T10896] use of bytesused == 0 is deprecated and will be removed in the future, [ 577.005332][T10896] use the actual size instead. [ 577.072362][T10896] ./file0: Can't lookup blockdev [ 577.089426][T10896] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1520'. [ 577.129070][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 577.148803][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.152932][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 577.175314][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.305495][ T29] audit: type=1326 audit(1722462486.690:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10895 comm="syz.3.1521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdee7773b9 code=0x0 [ 577.456554][T10930] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 577.498574][ T7936] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 578.428409][ T7936] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 578.456967][ T7936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.473162][ T7936] usb 2-1: config 0 descriptor?? [ 578.507422][ T7936] usb 2-1: selecting invalid altsetting 3 [ 578.513193][ T7936] comedi comedi0: could not set alternate setting 3 in high speed [ 578.564192][ T7936] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 578.594672][ T7936] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 578.737749][ T7936] usb 2-1: USB disconnect, device number 55 [ 578.765563][T10945] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1535'. [ 578.982368][T10951] input: syz0 as /devices/virtual/input/input26 [ 578.988901][T10951] input: failed to attach handler leds to device input26, error: -6 [ 579.077157][ T7949] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 579.226411][T10955] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 579.226411][T10955] SȘȞZ6' [ 579.307163][ T7950] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 579.347917][ T7949] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 579.384881][ T7949] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 579.413225][ T7949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.465412][ T7949] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 579.473898][T10957] xt_nfacct: accounting object `sy' does not exists [ 579.480880][ T7949] usb 5-1: No valid video chain found. [ 580.200676][ T7950] usb 1-1: Using ep0 maxpacket: 8 [ 580.212260][ T7950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 580.248439][ T7950] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e355, bcdDevice=89.67 [ 580.284120][ T7950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.348908][ T7950] usb 1-1: Product: syz [ 580.353119][ T7950] usb 1-1: Manufacturer: syz [ 580.367608][ T5395] usb 5-1: USB disconnect, device number 37 [ 580.384266][ T7950] usb 1-1: SerialNumber: syz [ 580.401440][ T7950] usb 1-1: config 0 descriptor?? [ 580.422037][T10973] FAULT_INJECTION: forcing a failure. [ 580.422037][T10973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.438778][ T7950] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:e355, interface 0, class 0) [ 580.454491][ T7950] em28xx 1-1:0.0: Video interface 0 found: [ 580.461296][T10973] CPU: 0 UID: 0 PID: 10973 Comm: syz.2.1544 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 580.472079][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 580.482145][T10973] Call Trace: [ 580.485438][T10973] [ 580.488384][T10973] dump_stack_lvl+0x241/0x360 [ 580.493092][T10973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.498314][T10973] ? __pfx__printk+0x10/0x10 [ 580.502931][T10973] ? snprintf+0xda/0x120 [ 580.507200][T10973] should_fail_ex+0x3b0/0x4e0 [ 580.511906][T10973] _copy_to_user+0x2f/0xb0 [ 580.516345][T10973] simple_read_from_buffer+0xca/0x150 [ 580.521749][T10973] proc_fail_nth_read+0x1e9/0x250 [ 580.526805][T10973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.532377][T10973] ? rw_verify_area+0x520/0x6b0 [ 580.537259][T10973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.542827][T10973] vfs_read+0x204/0xbc0 [ 580.546993][T10973] ? __pfx_lock_release+0x10/0x10 [ 580.552028][T10973] ? __pfx_vfs_read+0x10/0x10 [ 580.556701][T10973] ? __fget_files+0x29/0x470 [ 580.561285][T10973] ? __fget_files+0x3f6/0x470 [ 580.565960][T10973] ksys_read+0x1a0/0x2c0 [ 580.570197][T10973] ? __pfx_ksys_read+0x10/0x10 [ 580.574954][T10973] ? do_syscall_64+0x100/0x230 [ 580.579714][T10973] ? do_syscall_64+0xb6/0x230 [ 580.584385][T10973] do_syscall_64+0xf3/0x230 [ 580.588879][T10973] ? clear_bhb_loop+0x35/0x90 [ 580.593553][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.599440][T10973] RIP: 0033:0x7f7dbfb75dfc [ 580.603845][T10973] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 580.623445][T10973] RSP: 002b:00007f7dc08b5040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.631854][T10973] RAX: ffffffffffffffda RBX: 00007f7dbfd05f80 RCX: 00007f7dbfb75dfc [ 580.639817][T10973] RDX: 000000000000000f RSI: 00007f7dc08b50b0 RDI: 0000000000000004 [ 580.647780][T10973] RBP: 00007f7dc08b50a0 R08: 0000000000000000 R09: 0000000000000000 [ 580.655741][T10973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.663701][T10973] R13: 000000000000000b R14: 00007f7dbfd05f80 R15: 00007ffcfb130278 [ 580.671674][T10973] [ 580.747739][ T7950] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 580.748083][ T7937] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 580.942552][ T7950] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 580.965267][ T7950] em28xx 1-1:0.0: board has no eeprom [ 582.097414][ T7950] em28xx 1-1:0.0: Identified as Kworld 355 U DVB-T (card=42) [ 582.281987][ T7950] em28xx 1-1:0.0: [ 582.281987][ T7950] [ 582.281987][ T7950] The support for this board weren't valid yet. [ 582.281987][ T7950] Please send a report of having this working [ 582.281987][ T7950] not to V4L mailing list (and/or to other addresses) [ 582.281987][ T7950] [ 582.413746][ T7950] em28xx 1-1:0.0: Currently, V4L2 is not supported on this model [ 582.422137][ T944] em28xx 1-1:0.0: Binding DVB extension [ 582.429271][ T944] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0 [ 582.438134][ T944] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 582.450247][ T7950] usb 1-1: USB disconnect, device number 40 [ 582.459584][ T7950] em28xx 1-1:0.0: Disconnecting em28xx [ 582.465225][ T944] em28xx 1-1:0.0: Remote control support is not available for this card. [ 582.474977][ T7950] em28xx 1-1:0.0: Closing input extension [ 582.503963][ T7950] em28xx 1-1:0.0: Freeing device [ 582.649920][ T29] audit: type=1326 audit(1722462492.040:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.4.1545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6505773b9 code=0x0 [ 582.684643][T11000] sp0: Synchronizing with TNC [ 583.214388][T11015] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 583.214388][T11015] SȘȞZ6' [ 585.031735][ T7950] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 585.699200][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'. [ 585.817466][ T7950] usb 3-1: device descriptor read/64, error -71 [ 586.237822][ T7937] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 586.275127][ T7950] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 586.510244][ T7937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 586.525006][ T7937] usb 5-1: not running at top speed; connect to a high speed hub [ 586.545333][ T7937] usb 5-1: config 123 has an invalid interface number: 222 but max is 1 [ 586.566307][ T29] audit: type=1326 audit(1722462495.950:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11050 comm="syz.3.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdee7773b9 code=0x0 [ 586.568551][ T7937] usb 5-1: config 123 has an invalid interface number: 61 but max is 1 [ 586.587247][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.609734][ T7937] usb 5-1: config 123 has an invalid descriptor of length 235, skipping remainder of the config [ 586.661987][ T7937] usb 5-1: config 123 has no interface number 0 [ 586.682969][ T7937] usb 5-1: config 123 has no interface number 1 [ 586.700100][ T7937] usb 5-1: config 123 interface 61 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.745460][ T7937] usb 5-1: config 123 interface 222 has no altsetting 0 [ 586.754965][ T7937] usb 5-1: config 123 interface 61 has no altsetting 0 [ 586.784266][ T7937] usb 5-1: string descriptor 0 read error: -22 [ 586.854042][ T7937] usb 5-1: New USB device found, idVendor=13d3, idProduct=2021, bcdDevice=8f.1c [ 586.864016][ T7937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.899357][ T7937] rndis_host 5-1:123.61: skipping garbage [ 586.912950][ T7937] usb 5-1: bad CDC descriptors [ 587.118465][ T7937] usb 5-1: USB disconnect, device number 38 [ 587.154147][T11069] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 587.154147][T11069] SȘȞZ6' [ 587.407168][ T7950] usb 3-1: device descriptor read/64, error -71 [ 588.179314][ T7950] usb usb3-port1: attempt power cycle [ 588.514105][T11093] Cannot find add_set index 0 as target [ 588.617876][ T7950] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 588.672354][ T7950] usb 3-1: Using ep0 maxpacket: 32 [ 588.684665][ T7950] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 588.700504][ T7950] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 588.714942][ T7950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.730070][ T7950] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.745229][ T7950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.753845][ T7950] usb 3-1: Product: syz [ 588.758463][ T7950] usb 3-1: Manufacturer: 븂ᵾ坨蟍郝ප䝢扚猏감ꃲ㬕䪡曈䄓鬢䂳덚䴬僰⪴鎧홏텗繒Ꚑ䉺앉␙澸Ჴﲨ謔죰簈揀ᄽ㨹飖꣺췪ᕋ㚇゛쀖嘘䞤皕퉐⁕䩧쎟僪葸蚭䐟椀佤桏豁쟛뇞ꙣ챵␪澤땨꩞⽫歴ꌬᯙ౻꫅켺蔯퉰䘨鰣ᢂ῔ㅖ꤇崄콯䷍迬 [ 588.788378][ T7950] usb 3-1: SerialNumber: syz [ 590.331822][ T5233] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 590.476063][T11114] xt_CONNSECMARK: invalid mode: 0 [ 590.783909][ T7950] usb 3-1: 0:2 : does not exist [ 590.804925][ T7950] usb 3-1: USB disconnect, device number 50 [ 590.839180][ C1] eth0: bad gso: type: 1, size: 1408 [ 591.080995][ T29] audit: type=1326 audit(1722462500.470:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11126 comm="syz.0.1587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89161773b9 code=0x0 [ 591.167455][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'. [ 591.184424][T11130] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1587'. [ 591.222378][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'. [ 591.351325][ T29] audit: type=1326 audit(1722462500.740:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11112 comm="syz.1.1584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x0 [ 591.372291][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.677440][ T7937] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 591.876446][ T7937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 591.929409][ T7937] usb 5-1: not running at top speed; connect to a high speed hub [ 591.980690][ T7937] usb 5-1: config 123 has an invalid interface number: 222 but max is 1 [ 592.028555][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 592.037836][ T7937] usb 5-1: config 123 has an invalid interface number: 61 but max is 1 [ 592.089658][ T7937] usb 5-1: config 123 has an invalid descriptor of length 235, skipping remainder of the config [ 592.151093][ T7937] usb 5-1: config 123 has no interface number 0 [ 592.191230][ T7937] usb 5-1: config 123 has no interface number 1 [ 592.236360][ T7937] usb 5-1: config 123 interface 61 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.331950][ T7937] usb 5-1: config 123 interface 222 has no altsetting 0 [ 592.375983][ T7937] usb 5-1: config 123 interface 61 has no altsetting 0 [ 592.410351][ T7937] usb 5-1: string descriptor 0 read error: -22 [ 592.424731][ T7937] usb 5-1: New USB device found, idVendor=13d3, idProduct=2021, bcdDevice=8f.1c [ 592.468947][ T7937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.572014][ T7937] rndis_host 5-1:123.61: skipping garbage [ 592.614726][ T7937] usb 5-1: bad CDC descriptors [ 592.849210][ T7950] usb 5-1: USB disconnect, device number 39 [ 592.988463][T11161] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 593.418808][T11180] syz2: rxe_newlink: already configured on team_slave_1 [ 594.609183][T11188] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 594.609183][T11188] SȘȞZ6' [ 594.839385][ T29] audit: type=1326 audit(1722462504.220:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11170 comm="syz.0.1601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89161773b9 code=0x0 [ 595.747369][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1609'. [ 596.206145][ T7949] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 596.419689][ T7949] usb 3-1: Using ep0 maxpacket: 8 [ 596.448268][ T7949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 596.476805][ T7949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 596.532511][ T7949] usb 3-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 596.553729][ T7949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.611420][ T7949] usb 3-1: Product: syz [ 596.630690][ T7949] usb 3-1: Manufacturer: syz [ 596.655210][ T7949] usb 3-1: SerialNumber: syz [ 596.719004][ T7949] usb 3-1: config 0 descriptor?? [ 597.157325][T11204] autofs4:pid:11204:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 597.220010][T11204] autofs4:pid:11204:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 597.285495][ T5263] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 597.333819][ T7949] usb 3-1: USB disconnect, device number 51 [ 597.477426][ T5263] usb 4-1: Using ep0 maxpacket: 32 [ 597.522119][ T5263] usb 4-1: unable to get BOS descriptor or descriptor too short [ 597.533134][ T5263] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 597.547250][ T5263] usb 4-1: can't read configurations, error -71 [ 597.786801][ T5395] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 598.050094][ T5395] usb 2-1: unable to get BOS descriptor or descriptor too short [ 598.058564][ T5395] usb 2-1: not running at top speed; connect to a high speed hub [ 598.068377][ T5395] usb 2-1: config 123 has an invalid interface number: 222 but max is 1 [ 598.076742][ T5395] usb 2-1: config 123 has an invalid interface number: 61 but max is 1 [ 598.091169][ T5395] usb 2-1: config 123 has an invalid descriptor of length 235, skipping remainder of the config [ 598.113677][T11233] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 598.113677][T11233] SȘȞZ6' [ 598.117098][ T5395] usb 2-1: config 123 has no interface number 0 [ 598.136219][ T5395] usb 2-1: config 123 has no interface number 1 [ 598.142843][ T5395] usb 2-1: config 123 interface 61 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.191457][ T5395] usb 2-1: config 123 interface 222 has no altsetting 0 [ 598.204224][ T5395] usb 2-1: config 123 interface 61 has no altsetting 0 [ 598.238301][ T5395] usb 2-1: string descriptor 0 read error: -22 [ 598.264944][ T5395] usb 2-1: New USB device found, idVendor=13d3, idProduct=2021, bcdDevice=8f.1c [ 598.310348][ T5395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.382430][ T5395] rndis_host 2-1:123.61: skipping garbage [ 598.390209][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.397825][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.405818][T11238] bridge0: entered allmulticast mode [ 598.412373][ T5395] usb 2-1: bad CDC descriptors [ 599.169162][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 599.287261][ T7936] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 599.321166][ T5395] usb 2-1: USB disconnect, device number 56 [ 599.673754][ T7936] usb 3-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 599.693158][ T7936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.705370][ T7936] usb 3-1: config 0 descriptor?? [ 599.724012][ T7936] usb 3-1: selecting invalid altsetting 3 [ 599.729888][ T7936] comedi comedi0: could not set alternate setting 3 in high speed [ 599.738037][ T7936] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 599.753997][ T7936] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 600.056349][ T5395] usb 3-1: USB disconnect, device number 52 [ 601.257162][ T5224] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 601.553049][T11270] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 602.617173][ T7936] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 602.632714][ T4957] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 602.797297][ T7936] usb 3-1: Using ep0 maxpacket: 32 [ 602.834257][ T4957] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 602.844504][ T7936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.875000][ T7936] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 602.883534][ T4957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.916594][ T7936] usb 3-1: can't read configurations, error -71 [ 602.926933][ T4957] usb 1-1: config 0 descriptor?? [ 602.951123][ T4957] usb 1-1: selecting invalid altsetting 3 [ 602.966963][ T4957] comedi comedi0: could not set alternate setting 3 in high speed [ 602.991435][ T4957] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 603.015908][ T4957] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 603.151482][ T4957] usb 1-1: USB disconnect, device number 41 [ 606.024763][T11307] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 606.024763][T11307] SȘȞZ6' [ 606.049750][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 607.001916][ T5233] Bluetooth: hci4: sending frame failed (-49) [ 607.010371][ T5224] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 609.727234][ T7937] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 609.769656][T11359] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1655'. [ 609.948782][ T7937] usb 4-1: not running at top speed; connect to a high speed hub [ 609.983837][ T7937] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.054715][ T5233] Bluetooth: hci4: sending frame failed (-49) [ 610.062754][ T5224] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 610.063827][ T5233] Bluetooth: hci4: unexpected event 0x01 length: 0 < 1 [ 610.079578][ T7937] usb 4-1: config 1 interface 0 has no altsetting 0 [ 610.096615][ T7937] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.40 [ 610.118228][ T7937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.158505][ T7937] usb 4-1: Product: ᾘ秌魻鈄ݱ嚾궠璿ᩲ頋ꊰ땙≧Ɏ逷긬⯎뤥⡺딤Ჷ者＞慭펜٦ꐨ猳殨ﰈ袡䎓흍쨛⠌鈻鞔ひ틎剿宻溁劰鉒덱盨ि繪ⷲ샦痓쑮₦믊ᴺ㜄뵅繂전僎Ꭲ牓臹訾뫶乴囹ꕳ띺紃鐍壴쀶帗෻㗒炵／毫韦斶쯨嘰ꞵ鹁죝戚걌읻ꐋ텬液뽵錺드ᢤ嬻綺鴹䯘嶲嘩 [ 610.232634][ T7937] usb 4-1: Manufacturer: ь [ 610.243506][ T7937] usb 4-1: SerialNumber: 尜 [ 610.931690][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'. [ 611.877650][ T7937] usbhid 4-1:1.0: can't add hid device: -71 [ 611.895385][ T7937] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 611.920148][ T7937] usb 4-1: USB disconnect, device number 45 [ 612.237686][ T7949] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 612.354690][ T5233] Bluetooth: hci4: unexpected event 0x01 length: 0 < 1 [ 612.589528][ T7949] usb 5-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 612.598840][ T7949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.609352][ T7949] usb 5-1: config 0 descriptor?? [ 612.620282][ T7949] usb 5-1: selecting invalid altsetting 3 [ 612.626098][ T7949] comedi comedi0: could not set alternate setting 3 in high speed [ 612.634035][ T7949] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 612.645538][ T7949] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 612.838518][ T5263] usb 5-1: USB disconnect, device number 40 [ 613.337946][ T7949] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 613.541157][ T7949] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.566161][ T7949] usb 3-1: config 1 interface 0 has no altsetting 0 [ 613.584031][ T7949] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.40 [ 613.596825][ T7949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.626299][ T7949] usb 3-1: Product: ᾘ秌魻鈄ݱ嚾궠璿ᩲ頋ꊰ땙≧Ɏ逷긬⯎뤥⡺딤Ჷ者＞慭펜٦ꐨ猳殨ﰈ袡䎓흍쨛⠌鈻鞔ひ틎剿宻溁劰鉒덱盨ि繪ⷲ샦痓쑮₦믊ᴺ㜄뵅繂전僎Ꭲ牓臹訾뫶乴囹ꕳ띺紃鐍壴쀶帗෻㗒炵／毫韦斶쯨嘰ꞵ鹁죝戚걌읻ꐋ텬液뽵錺드ᢤ嬻綺鴹䯘嶲嘩 [ 613.673782][ T7949] usb 3-1: Manufacturer: ь [ 613.681742][ T7949] usb 3-1: SerialNumber: 尜 [ 613.928388][ T7949] usbhid 3-1:1.0: can't add hid device: -71 [ 613.934516][ T7949] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 613.945707][ T7949] usb 3-1: USB disconnect, device number 55 [ 614.399174][ T5233] Bluetooth: hci4: command 0x1003 tx timeout [ 614.399203][ T5224] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 614.669637][T11475] overlayfs: missing 'lowerdir' [ 615.693660][T11484] syz2: rxe_newlink: already configured on team_slave_1 [ 616.027161][ T5263] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 616.208913][ T5263] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 616.218400][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.231627][ T5263] usb 2-1: config 0 descriptor?? [ 616.244246][ T5263] usb 2-1: selecting invalid altsetting 3 [ 616.252502][ T5263] comedi comedi0: could not set alternate setting 3 in high speed [ 616.260535][ T5263] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 616.272663][ T5263] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 616.455305][ T5263] usb 2-1: USB disconnect, device number 57 [ 617.007222][ T5263] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 617.198962][ T5263] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 617.212338][ T5263] usb 1-1: config 1 interface 0 has no altsetting 0 [ 617.226154][ T5263] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.40 [ 617.235783][ T5263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.244275][ T5263] usb 1-1: Product: ᾘ秌魻鈄ݱ嚾궠璿ᩲ頋ꊰ땙≧Ɏ逷긬⯎뤥⡺딤Ჷ者＞慭펜٦ꐨ猳殨ﰈ袡䎓흍쨛⠌鈻鞔ひ틎剿宻溁劰鉒덱盨ि繪ⷲ샦痓쑮₦믊ᴺ㜄뵅繂전僎Ꭲ牓臹訾뫶乴囹ꕳ띺紃鐍壴쀶帗෻㗒炵／毫韦斶쯨嘰ꞵ鹁죝戚걌읻ꐋ텬液뽵錺드ᢤ嬻綺鴹䯘嶲嘩 [ 617.284038][ T5263] usb 1-1: Manufacturer: ь [ 617.289734][ T5263] usb 1-1: SerialNumber: 尜 [ 617.486487][T11513] FAULT_INJECTION: forcing a failure. [ 617.486487][T11513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.504059][T11513] CPU: 0 UID: 0 PID: 11513 Comm: syz.4.1702 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 617.514847][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 617.524914][T11513] Call Trace: [ 617.526515][ T5263] usbhid 1-1:1.0: can't add hid device: -71 [ 617.528188][T11513] [ 617.528201][T11513] dump_stack_lvl+0x241/0x360 [ 617.528235][T11513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.528259][T11513] ? __pfx__printk+0x10/0x10 [ 617.534307][ T5263] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 617.537052][T11513] ? __pfx_lock_release+0x10/0x10 [ 617.537083][T11513] ? vfs_write+0x7c4/0xc90 [ 617.537105][T11513] should_fail_ex+0x3b0/0x4e0 [ 617.537127][T11513] _copy_from_user+0x2f/0xe0 [ 617.537151][T11513] __sys_bpf+0x1a4/0x810 [ 617.537175][T11513] ? __pfx___sys_bpf+0x10/0x10 [ 617.537207][T11513] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 617.537233][T11513] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 617.537256][T11513] ? do_syscall_64+0x100/0x230 [ 617.551858][ T5263] usb 1-1: USB disconnect, device number 42 [ 617.559361][T11513] __x64_sys_bpf+0x7c/0x90 [ 617.559391][T11513] do_syscall_64+0xf3/0x230 [ 617.559414][T11513] ? clear_bhb_loop+0x35/0x90 [ 617.559442][T11513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.559465][T11513] RIP: 0033:0x7fa6505773b9 [ 617.633719][T11513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.653336][T11513] RSP: 002b:00007fa651409048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 617.661746][T11513] RAX: ffffffffffffffda RBX: 00007fa650705f80 RCX: 00007fa6505773b9 [ 617.669708][T11513] RDX: 0000000000000057 RSI: 0000000020000240 RDI: 000000000000000a [ 617.677668][T11513] RBP: 00007fa6514090a0 R08: 0000000000000000 R09: 0000000000000000 [ 617.685628][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.693587][T11513] R13: 000000000000000b R14: 00007fa650705f80 R15: 00007ffda572baf8 [ 617.701559][T11513] [ 617.941000][T11518] syz2: rxe_newlink: already configured on team_slave_1 [ 620.016100][ T29] audit: type=1326 audit(1722462529.400:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.075827][ T29] audit: type=1326 audit(1722462529.430:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.106735][ T29] audit: type=1326 audit(1722462529.440:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.284424][ T29] audit: type=1326 audit(1722462529.440:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.361400][ T29] audit: type=1326 audit(1722462529.440:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.402783][ T29] audit: type=1326 audit(1722462529.440:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.514548][ T29] audit: type=1326 audit(1722462529.440:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.559892][ T29] audit: type=1326 audit(1722462529.440:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.625252][ T29] audit: type=1326 audit(1722462529.440:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.681752][ T29] audit: type=1326 audit(1722462529.440:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11543 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff154b773b9 code=0x7ffc0000 [ 620.749933][ T2530] Bluetooth: hci4: Frame reassembly failed (-84) [ 620.779408][ T5233] Bluetooth: hci4: unexpected event 0x01 length: 0 < 1 [ 622.797384][ T5224] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 622.807503][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 622.819619][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 622.827645][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 622.849729][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 622.858610][ T5224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 622.866102][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 622.915130][T11586] FAULT_INJECTION: forcing a failure. [ 622.915130][T11586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.928477][T11586] CPU: 1 UID: 0 PID: 11586 Comm: syz.1.1724 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 622.939257][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 622.949327][T11586] Call Trace: [ 622.952613][T11586] [ 622.955552][T11586] dump_stack_lvl+0x241/0x360 [ 622.960253][T11586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.965466][T11586] ? __pfx__printk+0x10/0x10 [ 622.970078][T11586] ? tomoyo_path_number_perm+0x68d/0x880 [ 622.975730][T11586] ? __pfx_lock_release+0x10/0x10 [ 622.980781][T11586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.986871][T11586] should_fail_ex+0x3b0/0x4e0 [ 622.991570][T11586] _copy_from_user+0x2f/0xe0 [ 622.996183][T11586] con_set_trans_new+0x9e/0x130 [ 623.001049][T11586] ? __pfx_con_set_trans_new+0x10/0x10 [ 623.006569][T11586] ? safesetid_security_capable+0xb2/0x1d0 [ 623.012393][T11586] ? bpf_lsm_capable+0x9/0x10 [ 623.017081][T11586] ? security_capable+0x90/0xb0 [ 623.021959][T11586] vt_ioctl+0x12c8/0x2090 [ 623.026301][T11586] ? vt_ioctl+0x71/0x2090 [ 623.030641][T11586] ? __pfx_vt_ioctl+0x10/0x10 [ 623.035325][T11586] ? __asan_memset+0x23/0x50 [ 623.039925][T11586] ? smack_file_ioctl+0x2a1/0x3a0 [ 623.044971][T11586] ? __pfx_smack_file_ioctl+0x10/0x10 [ 623.050364][T11586] ? tty_jobctrl_ioctl+0x36e/0xba0 [ 623.055493][T11586] ? __fget_files+0x29/0x470 [ 623.060108][T11586] tty_ioctl+0x915/0xdc0 [ 623.064366][T11586] ? security_file_ioctl+0x87/0xb0 [ 623.069491][T11586] ? __pfx_tty_ioctl+0x10/0x10 [ 623.074271][T11586] __se_sys_ioctl+0xfc/0x170 [ 623.078881][T11586] do_syscall_64+0xf3/0x230 [ 623.083401][T11586] ? clear_bhb_loop+0x35/0x90 [ 623.088086][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.093978][T11586] RIP: 0033:0x7ff154b773b9 [ 623.098384][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.117978][T11586] RSP: 002b:00007ff155967048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.126385][T11586] RAX: ffffffffffffffda RBX: 00007ff154d05f80 RCX: 00007ff154b773b9 [ 623.134345][T11586] RDX: 00000000200011c0 RSI: 0000000000004b6a RDI: 0000000000000003 [ 623.142304][T11586] RBP: 00007ff1559670a0 R08: 0000000000000000 R09: 0000000000000000 [ 623.150262][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.158221][T11586] R13: 000000000000000b R14: 00007ff154d05f80 R15: 00007ffd7daf5e28 [ 623.166193][T11586] [ 623.169296][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.329891][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.356098][T11593] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 623.356098][T11593] SȘȞZ6' [ 623.867646][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.181788][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.212328][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 624.226699][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 624.236355][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 624.265322][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 624.274386][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 624.333194][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 624.641223][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.955631][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.980528][ T5224] Bluetooth: hci6: command tx timeout [ 626.398106][ T5224] Bluetooth: hci4: command tx timeout [ 626.445464][T11582] chnl_net:caif_netlink_parms(): no params data found [ 626.497263][ T11] bridge_slave_1: left allmulticast mode [ 626.505801][ T11] bridge_slave_1: left promiscuous mode [ 626.537325][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.618012][ T11] bridge_slave_0: left allmulticast mode [ 626.623990][ T11] bridge_slave_0: left promiscuous mode [ 626.635542][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.037313][ T5224] Bluetooth: hci6: command tx timeout [ 628.557267][ T5224] Bluetooth: hci4: command tx timeout [ 628.844449][T11649] Invalid ELF header type: 0 != 1 [ 629.137544][ T5224] Bluetooth: hci6: command tx timeout [ 629.339215][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.718995][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.115049][ T11] bond0 (unregistering): Released all slaves [ 630.392720][T11659] fuse: Unknown parameter 'bhgroup_id' [ 630.649618][ T5233] Bluetooth: hci4: command tx timeout [ 630.747272][ T4957] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 630.957513][ T4957] usb 1-1: Using ep0 maxpacket: 16 [ 630.998259][ T4957] usb 1-1: config 0 has no interfaces? [ 631.048713][ T4957] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 631.067711][ T4957] usb 1-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 631.071891][T11658] xt_hashlimit: max too large, truncated to 1048576 [ 631.083813][ T4957] usb 1-1: Product: syz [ 631.119714][ T4957] usb 1-1: Manufacturer: syz [ 631.127570][ T4957] usb 1-1: SerialNumber: syz [ 631.150096][ T4957] usb 1-1: config 0 descriptor?? [ 631.197327][ T5233] Bluetooth: hci6: command tx timeout [ 631.367221][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.376135][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.389204][T11582] bridge_slave_0: entered allmulticast mode [ 631.392036][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.396464][T11582] bridge_slave_0: entered promiscuous mode [ 631.427426][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.431737][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.458854][ T5266] usb 1-1: USB disconnect, device number 43 [ 631.607529][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.615296][T11582] bridge_slave_1: entered allmulticast mode [ 631.622874][T11582] bridge_slave_1: entered promiscuous mode [ 631.735747][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.773322][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.880212][ T11] hsr_slave_0: left promiscuous mode [ 631.886108][ T11] hsr_slave_1: left promiscuous mode [ 631.913220][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.927274][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.964159][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.973466][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.019282][ T11] veth1_macvtap: left promiscuous mode [ 632.030500][ T11] veth0_macvtap: left promiscuous mode [ 632.036230][ T11] veth1_vlan: left promiscuous mode [ 632.046200][ T11] veth0_vlan: left promiscuous mode [ 632.215723][ T11] infiniband syz2: set down [ 633.572859][T11687] overlayfs: failed to resolve './file1': -2 [ 633.601025][ T5233] Bluetooth: hci4: command tx timeout [ 634.437348][T11699] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 635.806563][ T11] team0 (unregistering): Port device team_slave_1 removed [ 635.826167][ T2530] smc: removing ib device syz2 [ 635.869253][ T11] team0 (unregistering): Port device team_slave_0 removed [ 636.409331][T11716] FAULT_INJECTION: forcing a failure. [ 636.409331][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.424149][T11716] CPU: 0 UID: 0 PID: 11716 Comm: syz.1.1756 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 636.434954][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 636.445017][T11716] Call Trace: [ 636.448296][T11716] [ 636.451228][T11716] dump_stack_lvl+0x241/0x360 [ 636.455901][T11716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.461092][T11716] ? __pfx__printk+0x10/0x10 [ 636.465681][T11716] ? snprintf+0xda/0x120 [ 636.469922][T11716] should_fail_ex+0x3b0/0x4e0 [ 636.474592][T11716] _copy_to_user+0x2f/0xb0 [ 636.479004][T11716] simple_read_from_buffer+0xca/0x150 [ 636.484374][T11716] proc_fail_nth_read+0x1e9/0x250 [ 636.489397][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.494941][T11716] ? rw_verify_area+0x520/0x6b0 [ 636.499788][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.505328][T11716] vfs_read+0x204/0xbc0 [ 636.509473][T11716] ? __pfx_lock_release+0x10/0x10 [ 636.514496][T11716] ? __pfx_vfs_read+0x10/0x10 [ 636.519168][T11716] ? __fget_files+0x29/0x470 [ 636.523753][T11716] ? __fget_files+0x3f6/0x470 [ 636.528430][T11716] ksys_read+0x1a0/0x2c0 [ 636.532665][T11716] ? __pfx_ksys_read+0x10/0x10 [ 636.537419][T11716] ? do_syscall_64+0x100/0x230 [ 636.542178][T11716] ? do_syscall_64+0xb6/0x230 [ 636.546846][T11716] do_syscall_64+0xf3/0x230 [ 636.551341][T11716] ? clear_bhb_loop+0x35/0x90 [ 636.556016][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.561903][T11716] RIP: 0033:0x7ff154b75dfc [ 636.566304][T11716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 636.585896][T11716] RSP: 002b:00007ff155946040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.594302][T11716] RAX: ffffffffffffffda RBX: 00007ff154d06058 RCX: 00007ff154b75dfc [ 636.602262][T11716] RDX: 000000000000000f RSI: 00007ff1559460b0 RDI: 000000000000000a [ 636.610221][T11716] RBP: 00007ff1559460a0 R08: 0000000000000000 R09: 0000000000000000 [ 636.618179][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.626137][T11716] R13: 000000000000006e R14: 00007ff154d06058 R15: 00007ffd7daf5e28 [ 636.634107][T11716] [ 636.656378][T11717] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 637.904091][T11582] team0: Port device team_slave_0 added [ 637.926057][T11724] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 637.926057][T11724] SȘȞZ6' [ 638.175886][T11582] team0: Port device team_slave_1 added [ 639.265952][T11731] fuse: Unknown parameter 'bhgroup_id' [ 639.336705][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.357225][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.383120][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.406856][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.574150][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.617185][ T5395] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 639.626340][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.652336][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.672075][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.847382][ T5395] usb 1-1: Using ep0 maxpacket: 16 [ 639.856823][T11598] chnl_net:caif_netlink_parms(): no params data found [ 639.862785][ T5395] usb 1-1: config 0 has no interfaces? [ 639.874033][ T5395] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 639.894875][ T5395] usb 1-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 639.912648][ T5395] usb 1-1: Product: syz [ 639.945847][ T5395] usb 1-1: Manufacturer: syz [ 639.955904][ T5395] usb 1-1: SerialNumber: syz [ 640.023509][ T5395] usb 1-1: config 0 descriptor?? [ 640.116364][T11582] hsr_slave_0: entered promiscuous mode [ 640.143718][T11582] hsr_slave_1: entered promiscuous mode [ 640.166808][T11582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.183269][T11582] Cannot create hsr debugfs directory [ 640.308696][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.354147][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.434950][ T5395] usb 1-1: USB disconnect, device number 44 [ 641.228575][T11598] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.280672][T11598] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.288367][T11598] bridge_slave_0: entered allmulticast mode [ 641.299511][T11598] bridge_slave_0: entered promiscuous mode [ 641.323962][T11598] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.337401][T11598] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.362078][T11598] bridge_slave_1: entered allmulticast mode [ 641.419026][T11740] infiniband syz2: set active [ 641.423718][T11740] infiniband syz2: added team_slave_1 [ 641.429568][T11740] syz2: rxe_create_cq: returned err = -12 [ 641.435312][T11740] infiniband syz2: Couldn't create ib_mad CQ [ 641.442206][T11740] infiniband syz2: Couldn't open port 1 [ 641.461187][T11598] bridge_slave_1: entered promiscuous mode [ 641.470641][T11740] RDS/IB: syz2: added [ 641.474696][T11740] smc: adding ib device syz2 with port count 1 [ 641.480934][T11740] smc: ib device syz2 port 1 has pnetid [ 642.182634][T11598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.206553][T11598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.237430][ T5266] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 643.214851][T11598] team0: Port device team_slave_0 added [ 643.233844][ T5266] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 643.247596][T11598] team0: Port device team_slave_1 added [ 643.257480][ T5266] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 643.275604][ T5266] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 643.286759][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.299289][T11743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 643.309686][ T5266] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.427841][T11598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.434830][T11598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.468975][T11598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.489629][T11598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.496862][T11598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.524615][T11598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.541061][T11760] syz2: rxe_newlink: already configured on team_slave_1 [ 643.542226][ T5266] usb 1-1: USB disconnect, device number 45 [ 643.644819][T11764] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 643.644819][T11764] SȘȞZ6' [ 643.664853][T11598] hsr_slave_0: entered promiscuous mode [ 643.673271][T11598] hsr_slave_1: entered promiscuous mode [ 643.685858][T11598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.706105][T11598] Cannot create hsr debugfs directory [ 644.866326][T11773] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 644.866326][T11773] SȘȞZ6' [ 644.889460][T11582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 644.958618][T11775] overlayfs: conflicting options: nfs_export=on,index=off [ 646.128255][T11582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 646.141973][ T7937] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 646.160845][T11582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 646.186472][T11582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 646.282862][T11598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.358022][ T7937] usb 5-1: Using ep0 maxpacket: 32 [ 646.365838][ T7937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 646.391865][ T7937] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 646.417119][ T7937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 646.445592][ T7937] usb 5-1: Product: syz [ 646.465827][ T7937] usb 5-1: Manufacturer: syz [ 646.482965][ T7937] usb 5-1: SerialNumber: syz [ 646.492791][ T7937] usb 5-1: config 0 descriptor?? [ 646.504479][T11598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.506239][ T7937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.547496][ T7937] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 646.716512][ T7937] usb 5-1: USB disconnect, device number 41 [ 646.734674][T11598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.774474][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.448841][T11598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.846937][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.880216][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.887389][ T7937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.920640][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.927856][ T4957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.985632][T11800] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 648.985632][T11800] SȘȞZ6' [ 649.005199][T11582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.552673][T11598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 649.587589][T11598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 649.629560][T11598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 649.678282][T11598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 649.722945][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.085622][T11582] veth0_vlan: entered promiscuous mode [ 650.174860][T11598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.212681][T11582] veth1_vlan: entered promiscuous mode [ 650.301657][T11598] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.548926][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.556149][ T7937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.741030][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.748267][ T7937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.935404][T11582] veth0_macvtap: entered promiscuous mode [ 651.300279][T11582] veth1_macvtap: entered promiscuous mode [ 651.784628][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.826116][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.846886][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.857659][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.881989][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.923867][T11830] misc userio: Can't change port type on an already running userio instance [ 651.934971][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.958106][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.984462][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.000949][T11582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.039164][T11832] syz2: rxe_newlink: already configured on team_slave_1 [ 652.121341][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.777994][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.789338][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.802144][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.815424][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.828396][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.843874][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.854791][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.868639][T11582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.931120][T11582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.961591][T11582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.987082][T11582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.017082][T11582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.306635][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.327230][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.405674][ T2509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.457016][ T2509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.542984][T11598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.670287][T11598] veth0_vlan: entered promiscuous mode [ 654.704577][T11598] veth1_vlan: entered promiscuous mode [ 654.790154][T11598] veth0_macvtap: entered promiscuous mode [ 654.810494][T11598] veth1_macvtap: entered promiscuous mode [ 654.880077][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.915630][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.929400][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.950266][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.977083][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.160780][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.303886][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.432931][T11858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 655.485391][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.544363][T11858] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 655.628409][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.687833][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.699500][T11598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.808096][T11858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 655.866234][T11858] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 656.006022][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.104961][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.202673][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.304254][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.350726][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.361271][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.371276][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.381817][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.392891][T11598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.403793][T11598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.415336][T11598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.426487][T11598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.439785][T11598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.441028][T11867] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 656.448722][T11863] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 656.527129][T11598] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.553434][T11598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.715496][T11875] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 658.110449][T11877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1797'. [ 658.180301][ T7937] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 661.306845][T11858] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 661.325556][ T7937] usb 3-1: device descriptor read/all, error -71 [ 661.329776][T11858] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 661.394303][T11858] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 661.412495][T11858] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 661.417261][ T4957] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 662.082795][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.110581][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.195280][ T2530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.205570][ T2530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.297771][ T4957] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 663.303232][T11898] ALSA: seq fatal error: cannot create timer (-22) [ 663.680061][ T4957] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 663.697185][ T4957] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 663.717472][T11901] sctp: [Deprecated]: syz.3.1727 (pid 11901) Use of int in max_burst socket option deprecated. [ 663.717472][T11901] Use struct sctp_assoc_value instead [ 663.728277][ T4957] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.747243][ T4957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.770514][T11887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 663.780539][ T4957] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.877194][ T944] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 664.207155][ T944] usb 2-1: Using ep0 maxpacket: 8 [ 664.245101][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 664.301132][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 664.406123][ T944] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 664.415618][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.438387][ T944] usb 2-1: config 0 descriptor?? [ 664.456577][ T944] appletouch 2-1:0.0: Could not find int-in endpoint [ 664.470646][ T944] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 664.493474][ T944] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 664.576135][ T7936] usb 5-1: USB disconnect, device number 43 [ 664.670241][ T5395] usb 2-1: USB disconnect, device number 58 [ 665.315407][ C1] eth0: bad gso: type: 1, size: 1408 [ 665.463820][T11917] FAULT_INJECTION: forcing a failure. [ 665.463820][T11917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.516647][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.3.1808 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 665.527451][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 665.537498][T11917] Call Trace: [ 665.540765][T11917] [ 665.543683][T11917] dump_stack_lvl+0x241/0x360 [ 665.548361][T11917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.553550][T11917] ? __pfx__printk+0x10/0x10 [ 665.558143][T11917] ? snprintf+0xda/0x120 [ 665.562378][T11917] should_fail_ex+0x3b0/0x4e0 [ 665.567053][T11917] _copy_to_user+0x2f/0xb0 [ 665.571470][T11917] simple_read_from_buffer+0xca/0x150 [ 665.576842][T11917] proc_fail_nth_read+0x1e9/0x250 [ 665.581861][T11917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.587403][T11917] ? rw_verify_area+0x520/0x6b0 [ 665.592248][T11917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.597798][T11917] vfs_read+0x204/0xbc0 [ 665.601956][T11917] ? __pfx_lock_release+0x10/0x10 [ 665.606986][T11917] ? __pfx_vfs_read+0x10/0x10 [ 665.611659][T11917] ? __fget_files+0x29/0x470 [ 665.616241][T11917] ? __fget_files+0x3f6/0x470 [ 665.620919][T11917] ksys_read+0x1a0/0x2c0 [ 665.625156][T11917] ? __pfx_ksys_read+0x10/0x10 [ 665.629908][T11917] ? do_syscall_64+0x100/0x230 [ 665.634664][T11917] ? do_syscall_64+0xb6/0x230 [ 665.639334][T11917] do_syscall_64+0xf3/0x230 [ 665.643831][T11917] ? clear_bhb_loop+0x35/0x90 [ 665.648501][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.654385][T11917] RIP: 0033:0x7f088b375dfc [ 665.658823][T11917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 665.678418][T11917] RSP: 002b:00007f088c077040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 665.686825][T11917] RAX: ffffffffffffffda RBX: 00007f088b505f80 RCX: 00007f088b375dfc [ 665.694785][T11917] RDX: 000000000000000f RSI: 00007f088c0770b0 RDI: 0000000000000004 [ 665.702747][T11917] RBP: 00007f088c0770a0 R08: 0000000000000000 R09: 0000000000000000 [ 665.710711][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.718671][T11917] R13: 000000000000000b R14: 00007f088b505f80 R15: 00007ffd2ff74198 [ 665.726645][T11917] [ 665.847375][T11920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1809'. [ 665.906091][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1810'. [ 669.477164][ T4957] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 669.921255][T11937] fuse: Unknown parameter 'bhgroup_id' [ 670.108255][T11937] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1814'. [ 670.211516][T11946] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 670.211516][T11946] SȘȞZ6' [ 671.256643][ C1] eth0: bad gso: type: 1, size: 1408 [ 671.872401][T11961] FAULT_INJECTION: forcing a failure. [ 671.872401][T11961] name failslab, interval 1, probability 0, space 0, times 0 [ 671.887777][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.3.1822 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 671.898565][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 671.908620][T11961] Call Trace: [ 671.911890][T11961] [ 671.914811][T11961] dump_stack_lvl+0x241/0x360 [ 671.919480][T11961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.924662][T11961] ? __pfx__printk+0x10/0x10 [ 671.929238][T11961] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 671.935118][T11961] ? __pfx___might_resched+0x10/0x10 [ 671.940398][T11961] should_fail_ex+0x3b0/0x4e0 [ 671.945062][T11961] ? __d_alloc+0x31/0x700 [ 671.949379][T11961] should_failslab+0xac/0x100 [ 671.954042][T11961] ? __d_alloc+0x31/0x700 [ 671.958359][T11961] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 671.964085][T11961] __d_alloc+0x31/0x700 [ 671.964548][T11963] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 671.968248][T11961] d_alloc_pseudo+0x1f/0xb0 [ 671.968280][T11961] alloc_file_pseudo+0x123/0x290 [ 671.968307][T11961] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 671.968331][T11961] ? evm_inode_alloc_security+0x40/0xb0 [ 671.997210][T11961] ? security_inode_alloc+0xc5/0x120 [ 671.997238][T11961] ? inode_init_always+0x97c/0xc90 [ 671.997263][T11961] sock_alloc_file+0xb8/0x290 [ 671.997288][T11961] do_accept+0x3b8/0x6c0 [ 671.997316][T11961] ? __pfx_do_accept+0x10/0x10 [ 671.997362][T11961] __sys_accept4+0x11e/0x1c0 [ 671.997389][T11961] ? __pfx___sys_accept4+0x10/0x10 [ 671.997414][T11961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 671.997441][T11961] ? do_syscall_64+0x100/0x230 [ 671.997465][T11961] __x64_sys_accept4+0x9a/0xb0 [ 671.997489][T11961] do_syscall_64+0xf3/0x230 [ 671.997512][T11961] ? clear_bhb_loop+0x35/0x90 [ 671.997539][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.997562][T11961] RIP: 0033:0x7f088b3773b9 [ 671.997581][T11961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.997597][T11961] RSP: 002b:00007f088c077048 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 671.997619][T11961] RAX: ffffffffffffffda RBX: 00007f088b505f80 RCX: 00007f088b3773b9 [ 671.997635][T11961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 671.997648][T11961] RBP: 00007f088c0770a0 R08: 0000000000000000 R09: 0000000000000000 [ 671.997661][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.997673][T11961] R13: 000000000000000b R14: 00007f088b505f80 R15: 00007ffd2ff74198 [ 671.997704][T11961] [ 671.997826][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.190119][T11949] ALSA: seq fatal error: cannot create timer (-22) [ 672.839201][T11972] sp0: Synchronizing with TNC [ 672.853836][ T944] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 673.123594][ T944] usb 4-1: not running at top speed; connect to a high speed hub [ 673.196936][ T944] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.439570][ T944] usb 4-1: config 1 interface 0 has no altsetting 0 [ 673.457244][ T944] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.40 [ 673.468672][ T944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.479094][ T944] usb 4-1: Product: ᾘ秌魻鈄ݱ嚾궠璿ᩲ頋ꊰ땙≧Ɏ逷긬⯎뤥⡺딤Ჷ者＞慭펜٦ꐨ猳殨ﰈ袡䎓흍쨛⠌鈻鞔ひ틎剿宻溁劰鉒덱盨ि繪ⷲ샦痓쑮₦믊ᴺ㜄뵅繂전僎Ꭲ牓臹訾뫶乴囹ꕳ띺紃鐍壴쀶帗෻㗒炵／毫韦斶쯨嘰ꞵ鹁죝戚걌읻ꐋ텬液뽵錺드ᢤ嬻綺鴹䯘嶲嘩 [ 673.482910][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1827'. [ 673.522139][ T7936] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 673.529805][ T944] usb 4-1: Manufacturer: ь [ 673.534867][ T944] usb 4-1: SerialNumber: 尜 [ 677.527136][ T7936] usb 2-1: Using ep0 maxpacket: 8 [ 677.570656][ T944] usbhid 4-1:1.0: can't add hid device: -71 [ 677.590631][ T944] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 677.749047][T11879] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 677.753963][ T944] usb 4-1: USB disconnect, device number 46 [ 680.299948][ T7936] usb 2-1: device descriptor read/all, error -71 [ 680.600239][T11986] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 680.600239][T11986] SȘȞZ6' [ 681.729947][ T4957] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 681.877743][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.891026][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.899121][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.920307][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.205741][ T1294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.237186][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 682.246276][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.631301][ T1294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.824557][ T1294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.903407][ T4957] usb 1-1: Using ep0 maxpacket: 32 [ 682.943057][ T4957] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 682.957114][ T4957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.965123][ T4957] usb 1-1: Product: syz [ 682.973600][T11879] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 682.989559][ T4957] usb 1-1: Manufacturer: syz [ 682.994412][ T4957] usb 1-1: SerialNumber: syz [ 683.002611][ T4957] usb 1-1: config 0 descriptor?? [ 683.011941][ T4957] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 683.034345][ T1294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.177242][T11879] usb 5-1: Using ep0 maxpacket: 32 [ 683.198183][T11879] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 683.239908][T11879] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 683.286614][T11879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.318103][T11879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.337453][T11879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.527484][T12015] sp0: Synchronizing with TNC [ 684.076192][T11879] usb 5-1: Product: syz [ 684.080662][T11879] usb 5-1: Manufacturer: 븂ᵾ坨蟍郝ප䝢扚猏감ꃲ㬕䪡曈䄓鬢䂳덚䴬僰⪴鎧홏텗繒Ꚑ䉺앉␙澸Ჴﲨ謔죰簈揀ᄽ㨹飖꣺췪ᕋ㚇゛쀖嘘䞤皕퉐⁕䩧쎟僪葸蚭䐟椀佤桏豁쟛뇞ꙣ챵␪澤땨꩞⽫歴ꌬᯙ౻꫅켺蔯퉰䘨鰣ᢂ῔ㅖ꤇崄콯䷍迬 [ 684.110193][T11879] usb 5-1: SerialNumber: syz [ 684.208506][ T1294] bridge_slave_1: left allmulticast mode [ 684.214236][ T1294] bridge_slave_1: left promiscuous mode [ 684.233141][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.249816][ T1294] bridge_slave_0: left allmulticast mode [ 684.255512][ T1294] bridge_slave_0: left promiscuous mode [ 684.265633][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.317983][ T5224] Bluetooth: hci0: command tx timeout [ 685.421172][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.446623][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.461253][ T1294] bond0 (unregistering): Released all slaves [ 685.496286][T12005] chnl_net:caif_netlink_parms(): no params data found [ 685.510220][ T4957] gspca_ov534_9: reg_w failed -71 [ 685.653883][ C1] eth0: bad gso: type: 1, size: 1408 [ 685.680472][T11879] usb 5-1: 0:2 : does not exist [ 685.724498][T11879] usb 5-1: USB disconnect, device number 45 [ 685.857210][ T4957] gspca_ov534_9: Unknown sensor 0000 [ 685.857310][ T4957] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 685.860229][T12038] fuse: Unknown parameter 'bhgroup_id' [ 685.864592][ T4957] usb 1-1: USB disconnect, device number 46 [ 685.871600][T12005] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.906054][T12005] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.917695][T12005] bridge_slave_0: entered allmulticast mode [ 685.925230][T12005] bridge_slave_0: entered promiscuous mode [ 685.942241][T12038] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1844'. [ 686.061416][ C1] eth0: bad gso: type: 1, size: 1408 [ 686.081771][T12005] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.086092][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.096974][T12005] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.137405][T12005] bridge_slave_1: entered allmulticast mode [ 686.282097][T12005] bridge_slave_1: entered promiscuous mode [ 686.397290][ T5224] Bluetooth: hci0: command tx timeout [ 686.602497][T12005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.655383][T12005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.832154][ T1294] hsr_slave_0: left promiscuous mode [ 686.877504][ T1294] hsr_slave_1: left promiscuous mode [ 686.893837][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.950667][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.013915][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.049345][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.079444][ T1294] veth1_macvtap: left promiscuous mode [ 688.085434][ T1294] veth0_macvtap: left promiscuous mode [ 688.102418][ T1294] veth1_vlan: left promiscuous mode [ 688.117321][ T1294] veth0_vlan: left promiscuous mode [ 688.254159][ T1294] infiniband syz2: set down [ 688.368552][ T7936] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 688.477381][ T5224] Bluetooth: hci0: command tx timeout [ 688.583815][ T7936] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 688.598223][ T7936] usb 3-1: config 0 has no interface number 0 [ 688.622605][ T7936] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.655281][ T7936] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.676798][ T7936] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 688.693817][ T7936] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 688.712201][ T7936] usb 3-1: Manufacturer: syz [ 688.726754][ T7936] usb 3-1: config 0 descriptor?? [ 689.204723][ T7936] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0007/input/input28 [ 689.294345][ T7936] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 689.319740][ T1294] team0 (unregistering): Port device team_slave_1 removed [ 689.335343][T12072] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 689.335343][T12072] SȘȞZ6' [ 689.575689][T12075] fuse: Unknown parameter 'bhgroup_id' [ 689.594363][ T1294] team0 (unregistering): Port device team_slave_0 removed [ 689.605789][T12075] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1857'. [ 690.375539][T12080] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 690.375539][T12080] SȘȞZ6' [ 690.583374][ T5263] usb 3-1: reset high-speed USB device number 59 using dummy_hcd [ 690.618691][ T5224] Bluetooth: hci0: command tx timeout [ 692.154942][T12005] team0: Port device team_slave_0 added [ 692.197254][T11879] infiniband syz2: ib_query_port failed (-19) [ 692.243753][T12005] team0: Port device team_slave_1 added [ 692.357899][T12005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.364872][T12005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.390802][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.422089][T12005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.459703][T12005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.466773][T12005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.492664][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.499477][T12005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.598183][ T11] smc: removing ib device syz2 [ 692.605751][T12087] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 692.658940][ C1] eth0: bad gso: type: 1, size: 1408 [ 692.871572][T12005] hsr_slave_0: entered promiscuous mode [ 692.987536][T12005] hsr_slave_1: entered promiscuous mode [ 693.098029][T12105] fuse: Unknown parameter 'bhgroup_id' [ 693.130964][T12105] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1867'. [ 693.252519][ T7936] usb 3-1: USB disconnect, device number 59 [ 695.045235][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 695.560680][T12005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 695.572042][T12005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 695.613791][T12005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 695.637163][ T7936] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 695.666535][T12005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 696.526013][T12132] infiniband syz2: set active [ 696.530767][T12132] infiniband syz2: added team_slave_1 [ 696.536488][T12132] syz2: rxe_create_cq: returned err = -12 [ 696.542293][T12132] infiniband syz2: Couldn't create ib_mad CQ [ 696.548401][T12132] infiniband syz2: Couldn't open port 1 [ 696.568658][T12132] RDS/IB: syz2: added [ 696.572777][T12132] smc: adding ib device syz2 with port count 1 [ 696.579065][T12132] smc: ib device syz2 port 1 has pnetid [ 697.147614][ T7936] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 697.161395][ T7936] usb 1-1: config 0 has no interface number 0 [ 697.170752][ T7936] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.181969][ T7936] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.194966][ T7936] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 697.204102][ T7936] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 697.212168][ T7936] usb 1-1: Manufacturer: syz [ 697.231351][ T7936] usb 1-1: config 0 descriptor?? [ 697.518964][T12141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1878'. [ 698.852134][ T5395] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 700.853829][T12005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.418875][T11879] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 702.977267][ T7936] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0008/input/input29 [ 703.002584][ T5395] usb 4-1: device descriptor read/all, error -71 [ 703.010956][ C1] eth0: bad gso: type: 1, size: 1408 [ 703.019317][T12005] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.175345][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.182560][ T7932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.207994][ T7936] sony 0003:054C:03D5.0008: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 703.390465][ T7932] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.397684][ T7932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.480140][ T7936] usb 1-1: USB disconnect, device number 47 [ 703.975814][T12005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.090261][T12005] veth0_vlan: entered promiscuous mode [ 704.114791][T12005] veth1_vlan: entered promiscuous mode [ 704.179564][T12005] veth0_macvtap: entered promiscuous mode [ 704.202503][T12005] veth1_macvtap: entered promiscuous mode [ 704.259769][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.285214][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.313519][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.341502][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.370247][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.411520][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.447681][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.477338][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.507378][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.528066][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.575489][T12005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.609546][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.643899][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.655005][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.683421][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.694241][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.718124][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.757668][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.797345][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.817340][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.843374][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.881668][T12005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.953950][T12005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.970502][T12005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.987097][T12005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.995809][T12005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.260376][T11823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.280305][T11823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.347466][T11823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.355352][T11823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.839738][ T4957] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 706.039246][ T4957] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 706.061084][ T4957] usb 4-1: config 0 has no interface number 0 [ 706.084348][ T4957] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.114254][ T4957] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.137376][ T4957] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 706.146700][ T4957] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 706.166418][ T4957] usb 4-1: Manufacturer: syz [ 706.174734][ T4957] usb 4-1: config 0 descriptor?? [ 706.631934][ T4957] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0009/input/input30 [ 706.662171][ T4957] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 706.889914][T12222] fuse: Unknown parameter 'bhgroup_id' [ 706.905255][T12222] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1904'. [ 706.983658][ T7932] usb 4-1: USB disconnect, device number 49 [ 706.989609][ T4957] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 707.000722][T12227] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1905'. [ 707.167178][ T4957] usb 2-1: Using ep0 maxpacket: 16 [ 707.173999][ T4957] usb 2-1: config 0 has no interfaces? [ 707.309210][ T4957] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 707.327170][ T4957] usb 2-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 707.335501][ T4957] usb 2-1: Product: syz [ 707.345635][ T4957] usb 2-1: Manufacturer: syz [ 707.352106][ T4957] usb 2-1: SerialNumber: syz [ 707.367394][ T4957] usb 2-1: config 0 descriptor?? [ 707.944112][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.987554][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.095545][ T7932] usb 2-1: USB disconnect, device number 61 [ 708.475000][T12240] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 708.475000][T12240] SȘȞZ6' [ 709.869261][T12253] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 710.500628][T12267] fuse: Unknown parameter 'bhgroup_id' [ 710.529705][T12267] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1917'. [ 710.855862][T12277] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1918'. [ 711.421591][T12279] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 711.580541][T12288] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 711.580541][T12288] SȘȞZ6' [ 711.728712][ T944] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 712.572460][ T4957] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 712.767228][ T4957] usb 3-1: Using ep0 maxpacket: 16 [ 712.794344][ T4957] usb 3-1: config 0 has no interfaces? [ 712.818924][ T4957] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 712.838979][ T944] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 712.854697][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.863266][ T944] usb 2-1: Product: syz [ 712.867864][ T944] usb 2-1: Manufacturer: syz [ 712.871409][ T4957] usb 3-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 712.872454][ T944] usb 2-1: SerialNumber: syz [ 712.892869][ T944] usb 2-1: config 0 descriptor?? [ 712.901222][ T4957] usb 3-1: Product: syz [ 712.906996][ T944] ums-karma 2-1:0.0: USB Mass Storage device detected [ 712.913861][ T4957] usb 3-1: Manufacturer: syz [ 712.913883][ T4957] usb 3-1: SerialNumber: syz [ 712.928356][ T4957] usb 3-1: config 0 descriptor?? [ 713.580382][T12310] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 713.645342][T12286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.654161][T12286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.666285][ T4957] usb 3-1: USB disconnect, device number 61 [ 714.434449][T12319] sp0: Synchronizing with TNC [ 715.060544][T12322] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1932'. [ 715.159416][ T944] usb 2-1: USB disconnect, device number 62 [ 716.662594][T12359] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1944'. [ 718.257338][ T5395] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 719.307079][ T5395] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 719.316163][ T5395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.325184][ T5395] usb 3-1: Product: syz [ 719.329718][ T5395] usb 3-1: Manufacturer: syz [ 719.334331][ T5395] usb 3-1: SerialNumber: syz [ 719.341991][ T5395] usb 3-1: config 0 descriptor?? [ 719.349245][ T5395] ums-karma 3-1:0.0: USB Mass Storage device detected [ 720.496326][T12404] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1955'. [ 720.784527][ T5395] usb 3-1: USB disconnect, device number 62 [ 720.793767][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 720.793785][ T29] audit: type=1326 audit(1722462630.103:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12397 comm="syz.4.1954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6505773b9 code=0x0 [ 722.617161][ T4957] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 722.628999][ T5263] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 722.817173][ T4957] usb 1-1: Using ep0 maxpacket: 8 [ 722.838128][ T4957] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 722.852676][ T5263] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 722.867118][ T4957] usb 1-1: config 179 has no interface number 0 [ 722.887129][ T5263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.895318][ T4957] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 722.924266][ T5263] usb 5-1: Product: syz [ 722.931227][ T4957] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 722.942890][ T5263] usb 5-1: Manufacturer: syz [ 722.952208][ T5263] usb 5-1: SerialNumber: syz [ 722.961488][ T4957] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 722.976656][ T5263] usb 5-1: config 0 descriptor?? [ 722.995557][ T5263] xillyusb 5-1:0.0: Failed to send quiesce request. Aborting. [ 723.003364][ T4957] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 723.023719][ T5263] xillyusb 5-1:0.0: probe with driver xillyusb failed with error -5 [ 723.049147][ T4957] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 723.082052][ T4957] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 723.094363][ T4957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.112537][T12431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 723.203766][ T4957] usb 5-1: USB disconnect, device number 46 [ 723.353382][T12444] input: syz1 as /devices/virtual/input/input31 [ 723.567312][T12448] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 723.813748][T12431] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1962'. [ 724.110822][ T4957] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input32 [ 724.377406][ T7952] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 724.480510][ T7932] usb 1-1: USB disconnect, device number 48 [ 724.480583][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 724.494779][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 724.518566][ T7932] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 724.587183][ T7952] usb 2-1: Using ep0 maxpacket: 32 [ 724.610192][ T7952] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=be.e2 [ 724.627219][ T7952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.314021][ T7952] usb 2-1: Product: syz [ 725.337179][ T7952] usb 2-1: Manufacturer: syz [ 725.341827][ T7952] usb 2-1: SerialNumber: syz [ 725.378266][ T7952] usb 2-1: config 0 descriptor?? [ 726.178419][ T7952] spcp8x5 2-1:0.0: required endpoints missing [ 726.194183][T11879] usb 2-1: USB disconnect, device number 63 [ 726.247563][T12478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1975'. [ 726.466634][T12486] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1977'. [ 726.644187][T12492] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1979'. [ 726.692601][ T29] audit: type=1326 audit(1722462636.076:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f088b3773b9 code=0x0 [ 726.774024][ T29] audit: type=1326 audit(1722462636.116:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.4.1973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6505773b9 code=0x0 [ 727.069802][T12502] syz2: rxe_newlink: already configured on team_slave_1 [ 727.404340][ T7952] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 727.802775][ T7952] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 727.814816][ T7952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.844430][ T7952] usb 1-1: Product: syz [ 727.849532][ T7952] usb 1-1: Manufacturer: syz [ 727.864775][ T7952] usb 1-1: SerialNumber: syz [ 727.885833][ T7952] usb 1-1: config 0 descriptor?? [ 727.915111][ T7952] xillyusb 1-1:0.0: Failed to send quiesce request. Aborting. [ 727.936858][ T7952] xillyusb 1-1:0.0: probe with driver xillyusb failed with error -5 [ 727.962288][T12516] FAULT_INJECTION: forcing a failure. [ 727.962288][T12516] name failslab, interval 1, probability 0, space 0, times 0 [ 728.067476][T12516] CPU: 1 UID: 0 PID: 12516 Comm: syz.4.1986 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 728.078278][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 728.088321][T12516] Call Trace: [ 728.091582][T12516] [ 728.094494][T12516] dump_stack_lvl+0x241/0x360 [ 728.099167][T12516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.104354][T12516] ? __pfx__printk+0x10/0x10 [ 728.108929][T12516] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 728.114811][T12516] ? __pfx___might_resched+0x10/0x10 [ 728.120089][T12516] should_fail_ex+0x3b0/0x4e0 [ 728.124756][T12516] should_failslab+0xac/0x100 [ 728.129423][T12516] __kmalloc_cache_node_noprof+0x74/0x300 [ 728.135128][T12516] ? __get_vm_area_node+0x113/0x270 [ 728.140313][T12516] __get_vm_area_node+0x113/0x270 [ 728.145321][T12516] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 728.151201][T12516] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 728.156725][T12516] ? mark_lock+0x9a/0x350 [ 728.161053][T12516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.167372][T12516] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 728.172922][T12516] __vmalloc_noprof+0x79/0x90 [ 728.177611][T12516] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 728.183147][T12516] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 728.188502][T12516] ? bpf_prog_alloc+0x28/0x1b0 [ 728.193248][T12516] bpf_prog_alloc+0x3a/0x1b0 [ 728.197822][T12516] bpf_prog_load+0x7f7/0x20f0 [ 728.202486][T12516] ? __pfx_bpf_prog_load+0x10/0x10 [ 728.207580][T12516] ? __pfx___might_resched+0x10/0x10 [ 728.212860][T12516] ? __might_fault+0xc6/0x120 [ 728.217521][T12516] ? bpf_lsm_bpf+0x9/0x10 [ 728.221833][T12516] ? security_bpf+0x87/0xb0 [ 728.226341][T12516] __sys_bpf+0x4ee/0x810 [ 728.230607][T12516] ? __pfx___sys_bpf+0x10/0x10 [ 728.232587][T12519] 9pnet_fd: Insufficient options for proto=fd [ 728.235387][T12516] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 728.247407][T12516] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 728.253739][T12516] ? do_syscall_64+0x100/0x230 [ 728.258505][T12516] __x64_sys_bpf+0x7c/0x90 [ 728.262906][T12516] do_syscall_64+0xf3/0x230 [ 728.267414][T12516] ? clear_bhb_loop+0x35/0x90 [ 728.272100][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.277988][T12516] RIP: 0033:0x7fa6505773b9 [ 728.282395][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.301994][T12516] RSP: 002b:00007fa651409048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.310402][T12516] RAX: ffffffffffffffda RBX: 00007fa650705f80 RCX: 00007fa6505773b9 [ 728.318370][T12516] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 728.326333][T12516] RBP: 00007fa6514090a0 R08: 0000000000000000 R09: 0000000000000000 [ 728.334290][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.342245][T12516] R13: 000000000000000b R14: 00007fa650705f80 R15: 00007ffda572baf8 [ 728.350210][T12516] [ 728.358265][T12516] syz.4.1986: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 728.367680][T11879] usb 1-1: USB disconnect, device number 49 [ 728.375211][T12516] CPU: 0 UID: 0 PID: 12516 Comm: syz.4.1986 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 728.391688][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 728.401730][T12516] Call Trace: [ 728.404993][T12516] [ 728.407908][T12516] dump_stack_lvl+0x241/0x360 [ 728.412576][T12516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.417758][T12516] ? __pfx__printk+0x10/0x10 [ 728.422680][T12516] ? __rcu_read_unlock+0xa1/0x110 [ 728.427690][T12516] warn_alloc+0x278/0x410 [ 728.432009][T12516] ? __pfx_warn_alloc+0x10/0x10 [ 728.436867][T12516] ? __get_vm_area_node+0x113/0x270 [ 728.436901][T12516] ? __get_vm_area_node+0x261/0x270 [ 728.447295][T12516] __vmalloc_node_range_noprof+0x3e0/0x1460 [ 728.453207][T12516] ? mark_lock+0x9a/0x350 [ 728.457546][T12516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.463870][T12516] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 728.469407][T12516] __vmalloc_noprof+0x79/0x90 [ 728.474079][T12516] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 728.479623][T12516] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 728.484985][T12516] ? bpf_prog_alloc+0x28/0x1b0 [ 728.489744][T12516] bpf_prog_alloc+0x3a/0x1b0 [ 728.494325][T12516] bpf_prog_load+0x7f7/0x20f0 [ 728.498999][T12516] ? __pfx_bpf_prog_load+0x10/0x10 [ 728.504101][T12516] ? __pfx___might_resched+0x10/0x10 [ 728.509399][T12516] ? __might_fault+0xc6/0x120 [ 728.514068][T12516] ? bpf_lsm_bpf+0x9/0x10 [ 728.518404][T12516] ? security_bpf+0x87/0xb0 [ 728.522907][T12516] __sys_bpf+0x4ee/0x810 [ 728.527160][T12516] ? __pfx___sys_bpf+0x10/0x10 [ 728.531916][T12516] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 728.537887][T12516] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 728.544210][T12516] ? do_syscall_64+0x100/0x230 [ 728.548964][T12516] __x64_sys_bpf+0x7c/0x90 [ 728.553371][T12516] do_syscall_64+0xf3/0x230 [ 728.557867][T12516] ? clear_bhb_loop+0x35/0x90 [ 728.562536][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.568423][T12516] RIP: 0033:0x7fa6505773b9 [ 728.572821][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.592416][T12516] RSP: 002b:00007fa651409048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.600822][T12516] RAX: ffffffffffffffda RBX: 00007fa650705f80 RCX: 00007fa6505773b9 [ 728.608779][T12516] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 728.616733][T12516] RBP: 00007fa6514090a0 R08: 0000000000000000 R09: 0000000000000000 [ 728.624688][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.632661][T12516] R13: 000000000000000b R14: 00007fa650705f80 R15: 00007ffda572baf8 [ 728.632692][T12516] [ 728.659458][T12516] Mem-Info: [ 728.663632][T12516] active_anon:240 inactive_anon:9527 isolated_anon:0 [ 728.663632][T12516] active_file:5741 inactive_file:43695 isolated_file:0 [ 728.663632][T12516] unevictable:768 dirty:167 writeback:24 [ 728.663632][T12516] slab_reclaimable:7704 slab_unreclaimable:100345 [ 728.663632][T12516] mapped:28747 shmem:4101 pagetables:789 [ 728.663632][T12516] sec_pagetables:0 bounce:0 [ 728.663632][T12516] kernel_misc_reclaimable:0 [ 728.663632][T12516] free:1364109 free_pcp:1112 free_cma:0 [ 728.757388][T12516] Node 0 active_anon:11860kB inactive_anon:26608kB active_file:22904kB inactive_file:174780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101488kB dirty:668kB writeback:96kB shmem:14368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9876kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 728.821014][T12516] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 728.853452][T12516] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.882726][T12516] lowmem_reserve[]: 0 2563 2565 0 0 [ 728.893961][T12516] Node 0 DMA32 free:1497464kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:26668kB active_file:21388kB inactive_file:174716kB unevictable:1536kB writepending:764kB present:3129332kB managed:2653296kB mlocked:0kB bounce:0kB free_pcp:13956kB local_pcp:616kB free_cma:0kB [ 728.933712][T12516] lowmem_reserve[]: 0 0 1 0 0 [ 728.938851][T12516] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1516kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 728.961165][T12531] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1990'. [ 728.966889][T12516] lowmem_reserve[]: 0 0 0 0 0 [ 728.980828][T12516] Node 1 Normal free:3951480kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:2056kB local_pcp:2056kB free_cma:0kB [ 729.014120][T12516] lowmem_reserve[]: 0 0 0 0 0 [ 729.037320][T12516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 729.062612][T12516] Node 0 DMA32: 58*4kB (UME) 583*8kB (UME) 271*16kB (UME) 314*32kB (UME) 294*64kB (UME) 108*128kB (UME) 50*256kB (UME) 15*512kB (UME) 10*1024kB (UME) 3*2048kB (UM) 344*4096kB (UM) = 1497808kB [ 729.072031][T12535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1991'. [ 729.087136][T12516] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 729.109776][T12516] Node 1 Normal: 2*4kB (U) 2*8kB (U) 6*16kB (U) 8*32kB (U) 8*64kB (UM) 4*128kB (U) 4*256kB (UM) 5*512kB (UM) 2*1024kB (U) 4*2048kB (UM) 961*4096kB (M) = 3951480kB [ 729.128370][T12516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.143888][T12516] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 729.177724][ T4957] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 729.248895][T12516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.258662][T12516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 729.268764][T12516] 53894 total pagecache pages [ 729.274003][T12516] 335 pages in swap cache [ 729.278906][T12516] Free swap = 123096kB [ 729.284237][T12516] Total swap = 124996kB [ 729.290129][T12516] 2097051 pages RAM [ 729.294086][T12516] 0 pages HighMem/MovableOnly [ 729.298921][T12516] 402197 pages reserved [ 729.328608][T12516] 0 pages cma reserved [ 729.520959][ T4957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 729.648555][ T7937] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 732.158806][ T4957] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 732.166424][ T4957] usb 4-1: can't read configurations, error -71 [ 732.377141][ T7936] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 732.513772][ T7937] usb 2-1: device not accepting address 64, error -71 [ 732.964402][T12560] FAULT_INJECTION: forcing a failure. [ 732.964402][T12560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.026042][T12560] CPU: 0 UID: 0 PID: 12560 Comm: syz.3.1998 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 733.036852][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 733.046923][T12560] Call Trace: [ 733.050217][T12560] [ 733.053184][T12560] dump_stack_lvl+0x241/0x360 [ 733.057895][T12560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.063097][T12560] ? __pfx__printk+0x10/0x10 [ 733.067689][T12560] ? snprintf+0xda/0x120 [ 733.071931][T12560] should_fail_ex+0x3b0/0x4e0 [ 733.076600][T12560] _copy_to_user+0x2f/0xb0 [ 733.081016][T12560] simple_read_from_buffer+0xca/0x150 [ 733.086385][T12560] proc_fail_nth_read+0x1e9/0x250 [ 733.091404][T12560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.096941][T12560] ? rw_verify_area+0x520/0x6b0 [ 733.101785][T12560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.107324][T12560] vfs_read+0x204/0xbc0 [ 733.111467][T12560] ? __pfx_lock_release+0x10/0x10 [ 733.116478][T12560] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 733.122367][T12560] ? __pfx_vfs_read+0x10/0x10 [ 733.127037][T12560] ? __fget_files+0x29/0x470 [ 733.131631][T12560] ? __fget_files+0x3f6/0x470 [ 733.136307][T12560] ksys_read+0x1a0/0x2c0 [ 733.140548][T12560] ? __pfx_ksys_read+0x10/0x10 [ 733.145313][T12560] ? do_syscall_64+0x100/0x230 [ 733.150076][T12560] ? do_syscall_64+0xb6/0x230 [ 733.154744][T12560] do_syscall_64+0xf3/0x230 [ 733.159236][T12560] ? clear_bhb_loop+0x35/0x90 [ 733.163904][T12560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.169798][T12560] RIP: 0033:0x7f088b375dfc [ 733.174217][T12560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 733.193811][T12560] RSP: 002b:00007f088c077040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 733.202210][T12560] RAX: ffffffffffffffda RBX: 00007f088b505f80 RCX: 00007f088b375dfc [ 733.210165][T12560] RDX: 000000000000000f RSI: 00007f088c0770b0 RDI: 0000000000000005 [ 733.218122][T12560] RBP: 00007f088c0770a0 R08: 0000000000000000 R09: 0000000000000000 [ 733.226100][T12560] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.234058][T12560] R13: 000000000000000b R14: 00007f088b505f80 R15: 00007ffd2ff74198 [ 733.242022][T12560] [ 733.366463][T12562] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1999'. [ 733.522257][ T29] audit: type=1326 audit(1722462642.906:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.4.1996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6505773b9 code=0x0 [ 733.844658][ T7937] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 734.277518][ T7932] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 734.677190][ T7937] usb 2-1: Using ep0 maxpacket: 32 [ 734.708808][ T7937] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 734.737405][ T7937] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 734.768157][ T7937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.802522][ T7937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.862643][ T7932] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 734.878818][ T7932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.887005][ T7932] usb 3-1: Product: syz [ 734.897252][ T7932] usb 3-1: Manufacturer: syz [ 734.904637][ T7932] usb 3-1: SerialNumber: syz [ 734.918271][ T7932] usb 3-1: config 0 descriptor?? [ 734.929068][ T7932] xillyusb 3-1:0.0: Failed to send quiesce request. Aborting. [ 734.955874][ T7932] xillyusb 3-1:0.0: probe with driver xillyusb failed with error -5 [ 735.010379][ T7937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.027101][ T7937] usb 2-1: Product: syz [ 735.031290][ T7937] usb 2-1: Manufacturer: 븂ᵾ坨蟍郝ප䝢扚猏감ꃲ㬕䪡曈䄓鬢䂳덚䴬僰⪴鎧홏텗繒Ꚑ䉺앉␙澸Ჴﲨ謔죰簈揀ᄽ㨹飖꣺췪ᕋ㚇゛쀖嘘䞤皕퉐⁕䩧쎟僪葸蚭䐟椀佤桏豁쟛뇞ꙣ챵␪澤땨꩞⽫歴ꌬᯙ౻꫅켺蔯퉰䘨鰣ᢂ῔ㅖ꤇崄콯䷍迬 [ 735.191351][ T944] usb 3-1: USB disconnect, device number 64 [ 735.427383][ T7932] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 735.686579][ T7932] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 735.759777][ T7932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.787084][ T7937] usb 2-1: SerialNumber: syz [ 735.787531][ T7932] usb 4-1: Product: syz [ 735.804237][ T7932] usb 4-1: Manufacturer: syz [ 735.814351][ T7932] usb 4-1: SerialNumber: syz [ 735.821619][ T7932] usb 4-1: config 0 descriptor?? [ 735.830453][ T7932] ums-karma 4-1:0.0: USB Mass Storage device detected [ 735.907163][ T7936] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 736.100206][ T7936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 736.123168][ T7936] usb 5-1: not running at top speed; connect to a high speed hub [ 736.155739][ T7936] usb 5-1: config 123 has an invalid interface number: 222 but max is 1 [ 736.929829][ T7936] usb 5-1: config 123 has an invalid interface number: 61 but max is 1 [ 736.972122][ T7936] usb 5-1: config 123 has an invalid descriptor of length 235, skipping remainder of the config [ 737.016023][ T7936] usb 5-1: config 123 has no interface number 0 [ 737.033182][ T7936] usb 5-1: config 123 has no interface number 1 [ 737.051917][ T7936] usb 5-1: config 123 interface 61 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.096651][ T7936] usb 5-1: config 123 interface 222 has no altsetting 0 [ 737.120137][ T7936] usb 5-1: config 123 interface 61 has no altsetting 0 [ 737.151926][ T7936] usb 5-1: string descriptor 0 read error: -22 [ 737.175400][ T7936] usb 5-1: New USB device found, idVendor=13d3, idProduct=2021, bcdDevice=8f.1c [ 737.209170][ T7936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.255471][ T7936] rndis_host 5-1:123.61: skipping garbage [ 737.270895][ T7936] usb 5-1: bad CDC descriptors [ 737.477411][ T7936] usb 5-1: USB disconnect, device number 47 [ 737.919101][ T7932] usb 4-1: USB disconnect, device number 52 [ 739.082718][ T7937] usb 2-1: 0:2 : does not exist [ 739.161024][ T7937] usb 2-1: USB disconnect, device number 65 [ 739.190547][T12622] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 739.190547][T12622] SȘȞZ6' [ 739.757237][ T7952] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 739.788952][T12641] FAULT_INJECTION: forcing a failure. [ 739.788952][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 739.801740][T12641] CPU: 0 UID: 0 PID: 12641 Comm: syz.0.2022 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 739.812492][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 739.822533][T12641] Call Trace: [ 739.825799][T12641] [ 739.828726][T12641] dump_stack_lvl+0x241/0x360 [ 739.833396][T12641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.838582][T12641] ? __pfx__printk+0x10/0x10 [ 739.843161][T12641] ? __kmalloc_noprof+0xb0/0x400 [ 739.848091][T12641] ? __pfx___might_resched+0x10/0x10 [ 739.853363][T12641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.859423][T12641] should_fail_ex+0x3b0/0x4e0 [ 739.864087][T12641] ? copy_splice_read+0x18d/0xb60 [ 739.869102][T12641] should_failslab+0xac/0x100 [ 739.873767][T12641] ? copy_splice_read+0x18d/0xb60 [ 739.878779][T12641] __kmalloc_noprof+0xd8/0x400 [ 739.883542][T12641] ? __pfx_copy_splice_read+0x10/0x10 [ 739.888911][T12641] copy_splice_read+0x18d/0xb60 [ 739.893756][T12641] ? __asan_memset+0x23/0x50 [ 739.898333][T12641] ? __pfx_copy_splice_read+0x10/0x10 [ 739.903696][T12641] ? __raw_spin_lock_init+0x45/0x100 [ 739.908987][T12641] ? alloc_pipe_info+0x370/0x4d0 [ 739.913921][T12641] ? __pfx_copy_splice_read+0x10/0x10 [ 739.919294][T12641] splice_direct_to_actor+0x4b7/0xc90 [ 739.924665][T12641] ? __pfx_direct_splice_actor+0x10/0x10 [ 739.930289][T12641] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 739.936174][T12641] ? __fget_files+0x29/0x470 [ 739.940749][T12641] ? __pfx_lock_release+0x10/0x10 [ 739.945762][T12641] do_splice_direct+0x28c/0x3e0 [ 739.950605][T12641] ? __pfx_do_splice_direct+0x10/0x10 [ 739.955966][T12641] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 739.961843][T12641] ? security_file_permission+0x7f/0xa0 [ 739.967379][T12641] ? rw_verify_area+0x1d2/0x6b0 [ 739.972220][T12641] do_sendfile+0x56d/0xe20 [ 739.976631][T12641] ? __pfx_do_sendfile+0x10/0x10 [ 739.981564][T12641] __se_sys_sendfile64+0x17c/0x1e0 [ 739.986663][T12641] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 739.992287][T12641] ? do_syscall_64+0x100/0x230 [ 739.997044][T12641] ? do_syscall_64+0xb6/0x230 [ 740.001724][T12641] do_syscall_64+0xf3/0x230 [ 740.006217][T12641] ? clear_bhb_loop+0x35/0x90 [ 740.010885][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.016765][T12641] RIP: 0033:0x7f89161773b9 [ 740.021167][T12641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.040763][T12641] RSP: 002b:00007f8916f3b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 740.049162][T12641] RAX: ffffffffffffffda RBX: 00007f8916305f80 RCX: 00007f89161773b9 [ 740.057125][T12641] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 740.065084][T12641] RBP: 00007f8916f3b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 740.073039][T12641] R10: 0000000000000545 R11: 0000000000000246 R12: 0000000000000001 [ 740.080993][T12641] R13: 000000000000000b R14: 00007f8916305f80 R15: 00007ffd10e5daa8 [ 740.088958][T12641] [ 740.220716][ T7952] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 740.243598][ T7952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.312373][ T7952] usb 4-1: Product: syz [ 740.322166][ T29] audit: type=1326 audit(1722462649.700:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12618 comm="syz.4.2016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6505773b9 code=0x0 [ 740.348312][ T7952] usb 4-1: Manufacturer: syz [ 740.362975][ T7952] usb 4-1: SerialNumber: syz [ 740.391556][ T7952] usb 4-1: config 0 descriptor?? [ 740.430089][ T7952] xillyusb 4-1:0.0: Failed to send quiesce request. Aborting. [ 740.467183][ T7952] xillyusb 4-1:0.0: probe with driver xillyusb failed with error -5 [ 740.837677][ T4957] usb 4-1: USB disconnect, device number 53 [ 740.950214][T12653] Bluetooth: MGMT ver 1.23 [ 741.387658][ T5233] Bluetooth: hci5: sending frame failed (-49) [ 741.395578][ T5224] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 742.894070][T12687] syz2: rxe_newlink: already configured on team_slave_1 [ 744.219403][T12708] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 745.038545][ T4957] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 745.183015][ T29] audit: type=1326 audit(1722462654.560:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12689 comm="syz.2.2037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaad1773b9 code=0x0 [ 745.251899][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 745.265439][ T4957] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 745.291537][ T4957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.332010][ T4957] usb 1-1: Product: syz [ 745.542802][ T4957] usb 1-1: Manufacturer: syz [ 745.547460][ T4957] usb 1-1: SerialNumber: syz [ 745.555852][ T4957] usb 1-1: config 0 descriptor?? [ 745.587732][ T4957] xillyusb 1-1:0.0: Failed to send quiesce request. Aborting. [ 745.595248][ T4957] xillyusb 1-1:0.0: probe with driver xillyusb failed with error -5 [ 745.606167][ T26] [ 745.608547][ T26] ============================================ [ 745.614675][ T26] WARNING: possible recursive locking detected [ 745.620807][ T26] 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 Not tainted [ 745.627887][ T26] -------------------------------------------- [ 745.634008][ T26] kworker/1:0H/26 is trying to acquire lock: [ 745.639959][ T26] ffff8880798b2d48 ((wq_completion)xillyusb){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 745.650114][ T26] [ 745.650114][ T26] but task is already holding lock: [ 745.657455][ T26] ffff8880798b2d48 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 745.668125][ T26] [ 745.668125][ T26] other info that might help us debug this: [ 745.676157][ T26] Possible unsafe locking scenario: [ 745.676157][ T26] [ 745.683583][ T26] CPU0 [ 745.686842][ T26] ---- [ 745.690099][ T26] lock((wq_completion)xillyusb); [ 745.695189][ T26] lock((wq_completion)xillyusb); [ 745.700279][ T26] [ 745.700279][ T26] *** DEADLOCK *** [ 745.700279][ T26] [ 745.708398][ T26] May be due to missing lock nesting notation [ 745.708398][ T26] [ 745.716689][ T26] 2 locks held by kworker/1:0H/26: [ 745.721772][ T26] #0: ffff8880798b2d48 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 745.732880][ T26] #1: ffffc90000a0fd00 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 745.745552][ T26] [ 745.745552][ T26] stack backtrace: [ 745.751417][ T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/1:0H Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 745.762061][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 745.772096][ T26] Workqueue: xillyusb wakeup_all [ 745.777012][ T26] Call Trace: [ 745.780275][ T26] [ 745.783187][ T26] dump_stack_lvl+0x241/0x360 [ 745.787850][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.793031][ T26] ? print_deadlock_bug+0x479/0x620 [ 745.798206][ T26] validate_chain+0x15d3/0x5900 [ 745.803038][ T26] ? __pfx_validate_chain+0x10/0x10 [ 745.808213][ T26] ? __pfx_validate_chain+0x10/0x10 [ 745.813387][ T26] ? __pfx_validate_chain+0x10/0x10 [ 745.818566][ T26] ? mark_lock+0x9a/0x350 [ 745.822876][ T26] __lock_acquire+0x137a/0x2040 [ 745.827712][ T26] lock_acquire+0x1ed/0x550 [ 745.832193][ T26] ? __flush_workqueue+0x1b0/0x1710 [ 745.837375][ T26] ? __pfx_lock_acquire+0x10/0x10 [ 745.842378][ T26] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 745.848170][ T26] ? __init_swait_queue_head+0xae/0x150 [ 745.853693][ T26] ? __flush_workqueue+0x1b0/0x1710 [ 745.858875][ T26] __flush_workqueue+0x1c9/0x1710 [ 745.863885][ T26] ? __flush_workqueue+0x1b0/0x1710 [ 745.869067][ T26] ? rcu_is_watching+0x15/0xb0 [ 745.873811][ T26] ? trace_contention_end+0x3c/0x120 [ 745.879073][ T26] ? __pfx___flush_workqueue+0x10/0x10 [ 745.884515][ T26] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 745.890480][ T26] drain_workqueue+0xc9/0x3a0 [ 745.895143][ T26] destroy_workqueue+0xba/0xc40 [ 745.899969][ T26] ? kfree+0x149/0x360 [ 745.904020][ T26] kref_put+0x104/0x180 [ 745.908153][ T26] ? process_scheduled_works+0x945/0x1830 [ 745.913851][ T26] process_scheduled_works+0xa2c/0x1830 [ 745.919385][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 745.925345][ T26] ? assign_work+0x364/0x3d0 [ 745.929915][ T26] worker_thread+0x86d/0xd40 [ 745.934486][ T26] ? __kthread_parkme+0x169/0x1d0 [ 745.939492][ T26] ? __pfx_worker_thread+0x10/0x10 [ 745.944583][ T26] kthread+0x2f0/0x390 [ 745.948632][ T26] ? __pfx_worker_thread+0x10/0x10 [ 745.953722][ T26] ? __pfx_kthread+0x10/0x10 [ 745.958290][ T26] ret_from_fork+0x4b/0x80 [ 745.962689][ T26] ? __pfx_kthread+0x10/0x10 [ 745.967255][ T26] ret_from_fork_asm+0x1a/0x30 [ 745.972005][ T26] [ 745.984671][ T4957] usb 1-1: USB disconnect, device number 50 [ 747.277138][ T5233] Bluetooth: hci5: command 0x1003 tx timeout [ 747.277138][ T5224] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 747.518774][ T1261] ieee802154 phy0 wpan0: encryption failed: -22