last executing test programs: 23m24.200109326s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000009500000000003742"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff5e, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, 0xffffffffffffffff, 0x34, 0x0, @val=@perf_event={0x5}}, 0x18) splice(r2, &(0x7f0000000380), r6, &(0x7f0000000440)=0x2, 0x10001, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1ffd, 0x6, 0x2}) chdir(&(0x7f0000000080)='./file1\x00') r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000}}, 0x20) 23m17.065058315s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setreuid(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff0, 0x4800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={r4, r5, 0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000500)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000940)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x9, 0x8, 0xa}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000a80)={0x1, 0x4, &(0x7f00000003c0)=[0x0, r2, r5, r6], &(0x7f0000000400)=[0x7, 0xffffffff, 0x7fffffff, 0x800, 0xd93, 0xc], &(0x7f0000000640)=[r7, r8], 0x0, 0x0, 0xfffffffffffffffa}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r10, r9}, 0xc) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 23m15.136143563s ago: executing program 3 (id=26): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000009500000000003742"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff5e, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, 0xffffffffffffffff, 0x34, 0x0, @val=@perf_event={0x5}}, 0x18) splice(r2, &(0x7f0000000380), r6, &(0x7f0000000440)=0x2, 0x10001, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1ffd, 0x6, 0x2}) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000}}, 0x20) 22m59.632674287s ago: executing program 32 (id=26): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000009500000000003742"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff5e, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, 0xffffffffffffffff, 0x34, 0x0, @val=@perf_event={0x5}}, 0x18) splice(r2, &(0x7f0000000380), r6, &(0x7f0000000440)=0x2, 0x10001, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1ffd, 0x6, 0x2}) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000}}, 0x20) 21m18.779445137s ago: executing program 4 (id=169): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000), 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0xff00) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x40209}, {0xffffff7e, 0x5461d6e9}]}}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0x2000, 0xd000, 0x1}}, "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", "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"}) 21m17.316632848s ago: executing program 4 (id=172): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000), 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0xff00) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x40209}, {0xffffff7e, 0x5461d6e9}]}}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0x2000, 0xd000, 0x1}}, "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", "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"}) 21m15.235424956s ago: executing program 4 (id=175): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000), 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0xff00) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x40209}, {0xffffff7e, 0x5461d6e9}]}}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) 21m12.878367191s ago: executing program 4 (id=177): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 21m10.213824669s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xb1, 0x4e, 0xb0, 0x8, 0x12d1, 0x6ce6, 0xafa8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd3, 0x0, 0x2, 0xff, 0x1, 0xf, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}, {{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 21m6.760554949s ago: executing program 4 (id=182): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 20m51.56488723s ago: executing program 33 (id=182): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 1m14.137494449s ago: executing program 0 (id=1973): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x100) restart_syscall() sched_setscheduler(r0, 0x5, &(0x7f0000000380)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40000020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x80, 0x0) chdir(&(0x7f0000000400)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file1\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x7fffffff, 0x2, 0x1}, &(0x7f00000002c0)=0x10) 1m13.174111387s ago: executing program 0 (id=1976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000000006d000000953c61404ea7c301ea0d7eab66016ad0a121ef6934444ff60fe5176879183f55e16aa563cb1da68f16655ad8ee2b086d648ba611ad1cd3f775b75bd8e2a755938232ba7d76ed698df4c62a230412f37cf967aae3a7822b30376b3d7afa7c25a056df36dda688a1df035b3203ca9cf9b64e3f53443e07cd4b60ae006353b346537295d81abacf197a25c5defbb8f2d0db6f079b5afefda89c0eb676525d8995ba5ee7de9e72abb910a285649bab7d3ada9dfdb0cfebe4cd333a167ecf0370f908f4a5557505e3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0xcc03, 0x0, 0x0) shutdown(r2, 0x2) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7000}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x80000000}) 1m12.009293767s ago: executing program 0 (id=1981): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r7, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m10.643966107s ago: executing program 0 (id=1984): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000304e2b6facc448f9c"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) clock_gettime(0x9, &(0x7f0000000280)) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) io_uring_enter(r1, 0x2e27, 0x69e9, 0x8, 0x0, 0x0) 1m4.488577802s ago: executing program 0 (id=1994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='wchan\x00') sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff3}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m3.227733283s ago: executing program 0 (id=1998): socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udplite(0xa, 0x2, 0x88) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) socket$netlink(0x10, 0x3, 0x10) creat(0x0, 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) 47.320238043s ago: executing program 34 (id=1998): socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udplite(0xa, 0x2, 0x88) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) socket$netlink(0x10, 0x3, 0x10) creat(0x0, 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) 18.280542239s ago: executing program 1 (id=2081): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x660600, 0x0) read$usbfs(r0, &(0x7f0000000000)=""/125, 0x7d) 17.485359772s ago: executing program 1 (id=2083): socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r4 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x100) 9.744907942s ago: executing program 2 (id=2099): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x9}}, @fwd={0x4}]}, {0x0, [0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/161, 0x41, 0xa1, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf25010000000c0002000000000000000000340007800c00018008000100", @ANYRES32=r5, @ANYBLOB='\f'], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) 9.705096223s ago: executing program 6 (id=2100): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb9b, 0x10, 0x3, 0x3}, &(0x7f00000001c0)=0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'sha224\x00'}}) 9.501700039s ago: executing program 5 (id=2101): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) openat$autofs(0xffffffffffffff9c, 0x0, 0x109000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x73}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x58}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x37}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x57e14630097bbd01) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae9c5125d58d78ab2b70ec9216b42cf69b0cd34aa9a9b8e32e1841f19a7d38ce8de4d6d24b1a239ccfbb0935e4db5f50c9b8ebdf158eb582b914857522de035110521a268d3fa0888ebd65ab713338b2fa1029851d62af03f2bcf6034cf0287f10c84c967bae32a79fbf90122d41a622c0fa8a0fae4ffa55df5ec7ebb0708dbb6148f2cde6d128018a0efa8598fa29ac80c6642d52c6f6b979e8fe5e1fbe7615ca1bc31f2bc541b3f67f129a490900000004ab65b661139a2d66fbe14888b28fb681b11cd33e07a04cee7fa46193218553971e41d0eaed454f6b4520963c5d21b889764986530174051ddeca7547b3aeb0ed720e20099fbeec90859a9f22b9229f72fb45e62fb2c7048099eb484edac92717591a6467c38af94b14d4bf366d5fb232c24bc8a9d5361dd979a98ff5ea6a331cf27110b4457301454119173622e1ddef43e79842b3dcbce701ec9195770fd820823cd45fe00baa87d3000000000000570d", 0x223}], 0x1) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.464958885s ago: executing program 1 (id=2102): r0 = socket$inet6(0x2d, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) signalfd(r0, &(0x7f00000005c0)={[0x8]}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r1}, 0x10) r3 = gettid() kcmp(r3, r3, 0x6, r1, r2) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x803, 0x0) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000001c0)=""/46, &(0x7f0000000200)=0x2e) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x28, 0x66, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @multicast1, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "35fa15"}]}]}}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000440)=0x16) 9.298885447s ago: executing program 6 (id=2103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000070000008500000007"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x8881}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @hci={0x1f, 0x1, 0x3}, @ethernet={0x1, @local}, @vsock={0x28, 0x0, 0x0, @host}, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0xffffffffffffffc3}) socket$nl_netfilter(0x10, 0x3, 0xc) 7.953239982s ago: executing program 2 (id=2104): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x2, 0x1}, &(0x7f00000002c0)=0x10) 7.814905897s ago: executing program 5 (id=2105): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.305053587s ago: executing program 1 (id=2106): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xe0000, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000070851d40cd061201183e01020301090224000100006f900904eb1002617c7d000905020240000000eb09050502"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x34e5a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="68d04e6a59efc93009174061c303bb9c4078dc1ba2e2b6f905729eadc5a80f17ecbcb0ad0599b648d12181c3b3c9ebff547be83a1d9605de6f5020c1217e0029dc6a95597a28065f63d27b3dcc75909087abbd9a505241bd5b2a347df78fc1c126637fa92f15ee65817ec9244c0ec19ff5191217f9c5b34620acc0a41293168a2fe90cccdfff988b06deca3e50a319edea40f4c35c4df2222bade9"], 0x80}}, 0x5) r6 = userfaultfd(0x509df34b049dab42) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.17494278s ago: executing program 2 (id=2107): socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$isdn(0x22, 0x3, 0x10) creat(0x0, 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = getpgrp(r2) kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) 5.908215108s ago: executing program 2 (id=2108): unshare(0x22020600) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24040891) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.706710033s ago: executing program 5 (id=2109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)}], 0x1}, 0x20000044) 4.524355895s ago: executing program 5 (id=2110): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x0, 0x2, 0xce, 0xf, r0}) 3.972262142s ago: executing program 6 (id=2111): socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r2 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x100) 3.733877455s ago: executing program 5 (id=2112): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0xfad, 0xa9, 0xd, 0x913f, 0x2, 0x6, 0x80000000, {0x0, @in={{0x2, 0x4e23, @empty}}, 0xa2, 0x8, 0xf, 0x100, 0x400}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) 3.445115424s ago: executing program 6 (id=2113): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x9}}, @fwd={0x4}]}, {0x0, [0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/161, 0x41, 0xa1, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf25010000000c0002000000000000000000340007800c00018008000100", @ANYRES32=r5, @ANYBLOB='\f'], 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) 3.26956774s ago: executing program 1 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) openat$autofs(0xffffffffffffff9c, 0x0, 0x109000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x73}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x58}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x37}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x57e14630097bbd01) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x223}], 0x1) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.722585393s ago: executing program 6 (id=2115): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x800, &(0x7f0000000540)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009000)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1, &(0x7f00000003c0)=[@rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000700)=""/65, 0x41}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000880)=""/147, 0x93}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x7}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000003280)=""/95, 0x5f}, {&(0x7f0000003300)=""/89, 0x59}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000003380)=""/76, 0x4c}, {&(0x7f0000003400)=""/185, 0xb9}, {&(0x7f00000034c0)=""/137, 0x89}, {&(0x7f0000003580)=""/124, 0x7c}, {&(0x7f0000003600)=""/122, 0x7a}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x9, &(0x7f0000004740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004780), 0x6e, &(0x7f0000004980)=[{&(0x7f0000004800)=""/43, 0x2b}, {&(0x7f0000004840)=""/52, 0x34}, {&(0x7f0000004880)=""/225, 0xe1}], 0x3, &(0x7f00000049c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/239, 0xef}, {&(0x7f0000004b00)=""/7, 0x7}, {&(0x7f0000004b40)=""/110, 0x6e}, {&(0x7f0000004bc0)=""/221, 0xdd}], 0x5, &(0x7f0000004d40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xd0}}, {{&(0x7f0000004e40), 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004ec0)=""/53, 0x35}, {&(0x7f0000004f00)=""/58, 0x3a}, {&(0x7f0000004f40)=""/14, 0xe}, {&(0x7f0000004f80)=""/47, 0x2f}], 0x4, &(0x7f0000005000)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000050c0), 0x6e, &(0x7f0000005200)=[{&(0x7f0000005140)=""/131, 0x83}], 0x1, &(0x7f0000005240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000005280)=""/33, 0x21}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/116, 0x74}], 0x4, &(0x7f0000007580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000005400)=@abs, 0x6e, &(0x7f0000008880)=[{&(0x7f00000076c0)=""/146, 0x92}, {&(0x7f0000007780)=""/109, 0x6d}, {&(0x7f0000005480)=""/47, 0x2f}, {&(0x7f0000007800)=""/115, 0x73}, {&(0x7f0000007880)=""/4096, 0x1000}], 0x5, &(0x7f0000008900)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000008a00), 0x6e, &(0x7f0000008f40)=[{&(0x7f0000008a80)=""/110, 0x6e}, {&(0x7f0000008b00)=""/121, 0x79}, {&(0x7f0000008b80)=""/69, 0x45}, {&(0x7f0000008c00)=""/77, 0x4d}, {&(0x7f0000008c80)=""/104, 0x68}, {&(0x7f0000008d00)=""/37, 0x25}, {&(0x7f0000008d40)=""/202, 0xca}, {&(0x7f0000008e40)=""/195, 0xc3}], 0x8, &(0x7f0000008fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0xa, 0x40000122, &(0x7f0000009280)={0x0, 0x989680}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000009340)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r6 = gettid() sched_setscheduler(r4, 0x3, &(0x7f00000092c0)=0x7) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) readv(r7, &(0x7f0000001500)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/time\x00') 1.501462569s ago: executing program 1 (id=2116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008d253baf67e0a3b8af50000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0001000000000904c50003ff0107000905050208000003010904", @ANYRES32, @ANYRESDEC], 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000007380)={@fallback, 0xffffffffffffffff, 0x32, 0x24, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40, 0x0) fsmount(r3, 0x0, 0x7c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x0, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "2ac0e1"}, {0x5, 0x24, 0x0, 0x3cfb}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x81, 0x6}, {0x6, 0x24, 0x1a, 0x800, 0x3}, [@obex={0x5, 0x24, 0x15, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xa, 0x5, 0xf9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x278, 0xc0, 0xaf, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0xc}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x3e, 0x4, 0x1, 0x40, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1555555555555595}) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x2, 0x7fff, @name="5df25356e56463d243dd7d17a3cbcddeb5dac368c1a57924c0753818a087c09b"}) r5 = fsmount(r1, 0x1, 0x0) fchdir(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 954.364026ms ago: executing program 2 (id=2117): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb9b, 0x10, 0x3, 0x3}, &(0x7f00000001c0)=0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'sha224\x00'}}) 631.136014ms ago: executing program 6 (id=2118): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 437.70523ms ago: executing program 7 (id=2025): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000304e2b6facc448f9c"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) io_uring_enter(r1, 0x2e27, 0x69e9, 0x8, 0x0, 0x0) 428.127386ms ago: executing program 2 (id=2119): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad837003", 0xe, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0xf, 0xfe}, {0x5, 0x8}, 0x9, 0x0, 0x9}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x3, 0x0, 0x6, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x1, 0x4}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x4048041) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=2120): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) modify_ldt$read(0x0, 0x0, 0x11) kernel console output (not intermixed with test programs): q: adding VLAN 0 to HW filter on device bond7 [ 1207.887636][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1208.768326][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1208.775568][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1208.786699][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.807653][T10806] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1208.821096][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1208.853822][T10124] udevd[10124]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1208.902765][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1208.937260][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.007716][T10806] usb 7-1: Using ep0 maxpacket: 16 [ 1210.224018][ T9] usb 2-1: Product: syz [ 1210.231495][T10806] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1210.248635][T10806] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.277923][ T9] usb 2-1: Manufacturer: syz [ 1210.285713][T10806] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1210.295190][ T9] usb 2-1: SerialNumber: syz [ 1210.309718][T10806] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1210.342619][ T9] usb 2-1: can't set config #1, error -71 [ 1210.363954][T10806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.373127][ T9] usb 2-1: USB disconnect, device number 55 [ 1210.403929][T10806] usb 7-1: Product: syz [ 1210.430443][T10806] usb 7-1: Manufacturer: syz [ 1210.447944][T10806] usb 7-1: SerialNumber: syz [ 1210.548079][ T5825] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1210.558947][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1210.558968][ T30] audit: type=1326 audit(1750480194.362:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1210.675827][ T30] audit: type=1326 audit(1750480194.362:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1210.828358][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 1210.864536][ T5825] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1210.887655][ T30] audit: type=1326 audit(1750480194.362:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1210.917837][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.919021][ T30] audit: type=1326 audit(1750480194.362:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1211.005310][ T30] audit: type=1326 audit(1750480194.362:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1211.398328][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.446993][ T30] audit: type=1326 audit(1750480194.362:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1211.801764][T10806] usb 7-1: 0:2 : does not exist [ 1211.822797][ T5825] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1211.839657][T10806] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1211.848609][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.858938][ T5825] usb 6-1: Product: syz [ 1211.866785][ T30] audit: type=1326 audit(1750480194.362:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1212.007143][ T30] audit: type=1326 audit(1750480194.362:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1212.028950][ T30] audit: type=1326 audit(1750480194.362:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1212.051170][ T30] audit: type=1326 audit(1750480194.362:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13410 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64c98e929 code=0x7ffc0000 [ 1212.080930][ T5825] usb 6-1: Manufacturer: syz [ 1212.920255][ T5825] usb 6-1: SerialNumber: syz [ 1212.951285][T10806] usb 7-1: USB disconnect, device number 26 [ 1213.079374][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1213.236418][T13434] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1213.245160][T13434] [U] J"—e:ÀÆ" [ 1215.198327][ T5825] usb 6-1: 0:2 : does not exist [ 1215.278003][ T5825] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1215.432795][ T5825] usb 6-1: USB disconnect, device number 23 [ 1215.581380][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1215.617771][T13446] capability: warning: `syz.0.1516' uses 32-bit capabilities (legacy support in use) [ 1217.681094][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1217.799173][T13477] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1217.805867][T13477] [U] J"—e:ÀÆ" [ 1217.867782][T11749] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1217.876874][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1218.252791][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1218.312839][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.450552][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1218.462967][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1218.508781][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.516929][ T24] usb 2-1: Product: syz [ 1218.525892][ T24] usb 2-1: Manufacturer: syz [ 1218.546007][ T24] usb 2-1: SerialNumber: syz [ 1218.552640][T11749] usb 6-1: Using ep0 maxpacket: 16 [ 1218.574448][T11749] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1219.338169][T11749] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.497776][T11749] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1219.520555][T11749] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1219.542388][T11749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.551251][T11749] usb 6-1: Product: syz [ 1219.555576][T11749] usb 6-1: Manufacturer: syz [ 1219.566036][T11749] usb 6-1: SerialNumber: syz [ 1220.401034][T13495] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 1220.409193][T13495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1529'. [ 1221.270474][ T5912] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1222.500699][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 1222.524394][ T5912] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1223.312898][ T5912] usb 3-1: config 0 has no interface number 0 [ 1223.319482][ T24] usb 2-1: 0:2 : does not exist [ 1223.345327][ T5912] usb 3-1: config 0 interface 211 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1223.476007][ T5912] usb 3-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1223.486422][ T5912] usb 3-1: config 0 interface 211 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1223.507717][ T5912] usb 3-1: config 0 interface 211 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1223.519073][ T5912] usb 3-1: string descriptor 0 read error: -71 [ 1223.526035][ T5912] usb 3-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1223.536164][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.555948][ T24] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1223.571502][ T5912] usb 3-1: config 0 descriptor?? [ 1223.578912][ T5912] usb 3-1: can't set config #0, error -71 [ 1223.613905][ T5912] usb 3-1: USB disconnect, device number 53 [ 1223.702136][T13514] netlink: 'syz.0.1534': attribute type 10 has an invalid length. [ 1223.710150][T13514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1534'. [ 1224.404022][T11749] usb 6-1: 0:2 : does not exist [ 1224.409106][ T24] usb 2-1: USB disconnect, device number 56 [ 1224.420489][T11749] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1224.456513][T11749] usb 6-1: USB disconnect, device number 24 [ 1225.186759][T13533] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1225.213708][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.234658][T13533] [U] J"—e:ÀÆ" [ 1225.262178][T10124] udevd[10124]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1225.857810][T11749] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1226.937792][T13550] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1226.949242][T13550] [U] J"—e:ÀÆ" [ 1227.338007][T11749] usb 1-1: Using ep0 maxpacket: 16 [ 1227.460893][T11749] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1227.517855][T11749] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.666482][T11749] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1227.690395][T11749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1227.699867][T11749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.709327][T11749] usb 1-1: Product: syz [ 1227.713983][T11749] usb 1-1: Manufacturer: syz [ 1227.767877][T11749] usb 1-1: SerialNumber: syz [ 1227.905528][T13558] netlink: 'syz.5.1543': attribute type 10 has an invalid length. [ 1227.914026][T13558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1543'. [ 1228.788649][T11749] usb 1-1: can't set config #1, error -71 [ 1228.816776][T11749] usb 1-1: USB disconnect, device number 54 [ 1228.836517][T13562] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1546'. [ 1228.961257][T13562] binder: 13560:13562 ioctl 4018620d 0 returned -22 [ 1229.022225][T13567] binder: 13560:13567 ioctl c018620c 0 returned -14 [ 1229.315806][T13569] binder: Bad value for 'stats' [ 1230.962977][ T5912] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1231.128238][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 1231.178532][ T5912] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1231.224447][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.247022][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1231.338599][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1231.377874][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.406853][ T5912] usb 3-1: Product: syz [ 1231.427102][ T5912] usb 3-1: Manufacturer: syz [ 1231.447397][ T5912] usb 3-1: SerialNumber: syz [ 1233.386348][ T5912] usb 3-1: 0:2 : does not exist [ 1233.413842][ T5912] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1233.490513][ T5912] usb 3-1: USB disconnect, device number 54 [ 1233.552922][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.654971][T13612] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1233.661157][T13612] [U] J"—e:ÀÆ" [ 1234.285244][T13618] i2c i2c-0: Invalid block write size 34 [ 1234.329588][T13618] netlink: 'syz.6.1561': attribute type 1 has an invalid length. [ 1235.282781][T13618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1237.559314][T13645] : entered promiscuous mode [ 1239.041808][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.049432][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.057767][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1239.108032][ T5825] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1239.217883][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1239.277701][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 1239.286215][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1239.305383][ T5825] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1239.341393][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.363657][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.544969][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1239.627856][ T5898] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1239.787715][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 1239.801820][ T5898] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 1239.994413][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.113801][ T5898] usb 1-1: config 0 has no interface number 0 [ 1240.141711][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1240.160227][ T5825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1240.174354][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1240.193271][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.202181][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.210375][ T9] usb 6-1: Product: syz [ 1240.216391][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1240.226551][ T5825] usb 2-1: Product: syz [ 1240.231202][ T9] usb 6-1: Manufacturer: syz [ 1240.237197][ T5825] usb 2-1: Manufacturer: syz [ 1240.242050][ T9] usb 6-1: SerialNumber: syz [ 1240.247265][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1240.259393][ T5825] usb 2-1: SerialNumber: syz [ 1240.268359][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1240.282445][ T5898] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1240.487898][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.599300][T13673] netlink: 'syz.6.1575': attribute type 10 has an invalid length. [ 1240.607457][T13673] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1575'. [ 1241.477825][ T5898] usb 1-1: Product: syz [ 1241.482484][ T5898] usb 1-1: Manufacturer: syz [ 1241.487199][ T5898] usb 1-1: SerialNumber: syz [ 1241.578228][ T5898] usb 1-1: config 0 descriptor?? [ 1241.597014][ T5898] option 1-1:0.211: GSM modem (1-port) converter detected [ 1242.182067][ T9] usb 6-1: 0:2 : does not exist [ 1242.202115][ T9] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1242.243464][ T9] usb 6-1: USB disconnect, device number 25 [ 1242.958352][ T24] usb 1-1: USB disconnect, device number 55 [ 1242.971857][ T24] option 1-1:0.211: device disconnected [ 1243.056805][T13689] FAULT_INJECTION: forcing a failure. [ 1243.056805][T13689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.070950][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.5.1580 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 1243.070977][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1243.070988][T13689] Call Trace: [ 1243.070996][T13689] [ 1243.071004][T13689] dump_stack_lvl+0x189/0x250 [ 1243.071037][T13689] ? __pfx____ratelimit+0x10/0x10 [ 1243.071065][T13689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1243.071090][T13689] ? __pfx__printk+0x10/0x10 [ 1243.071122][T13689] should_fail_ex+0x414/0x560 [ 1243.071149][T13689] _copy_to_user+0x31/0xb0 [ 1243.071169][T13689] simple_read_from_buffer+0xe1/0x170 [ 1243.071208][T13689] proc_fail_nth_read+0x1df/0x250 [ 1243.071238][T13689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1243.071267][T13689] ? rw_verify_area+0x258/0x650 [ 1243.071287][T13689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1243.071313][T13689] vfs_read+0x200/0x980 [ 1243.071340][T13689] ? __pfx___mutex_lock+0x10/0x10 [ 1243.071368][T13689] ? __pfx_vfs_read+0x10/0x10 [ 1243.071392][T13689] ? __fget_files+0x2a/0x420 [ 1243.071421][T13689] ? __fget_files+0x3a0/0x420 [ 1243.071444][T13689] ? __fget_files+0x2a/0x420 [ 1243.071476][T13689] ksys_read+0x145/0x250 [ 1243.071501][T13689] ? __pfx_ksys_read+0x10/0x10 [ 1243.071530][T13689] ? do_syscall_64+0xbe/0x3b0 [ 1243.071552][T13689] do_syscall_64+0xfa/0x3b0 [ 1243.071568][T13689] ? lockdep_hardirqs_on+0x9c/0x150 [ 1243.071593][T13689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.071611][T13689] ? clear_bhb_loop+0x60/0xb0 [ 1243.071635][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.071653][T13689] RIP: 0033:0x7f0d7598d33c [ 1243.071671][T13689] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1243.071687][T13689] RSP: 002b:00007f0d7673f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1243.071709][T13689] RAX: ffffffffffffffda RBX: 00007f0d75bb5fa0 RCX: 00007f0d7598d33c [ 1243.071723][T13689] RDX: 000000000000000f RSI: 00007f0d7673f0a0 RDI: 0000000000000003 [ 1243.071734][T13689] RBP: 00007f0d7673f090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.071745][T13689] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.071756][T13689] R13: 0000000000000001 R14: 00007f0d75bb5fa0 R15: 00007fff1d593548 [ 1243.071788][T13689] [ 1244.784841][ T5825] usb 2-1: 0:2 : does not exist [ 1244.987476][ T5825] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1245.292664][ T5825] usb 2-1: USB disconnect, device number 57 [ 1245.440880][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1245.491591][T10613] udevd[10613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1247.743563][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1247.908675][T13720] i2c i2c-0: Invalid block write size 34 [ 1248.008674][T13726] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 1248.456145][ T9] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1248.465411][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.490527][ T9] usb 6-1: config 0 has no interface number 0 [ 1248.524269][T13726] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1248.585795][ T9] usb 6-1: string descriptor 0 read error: -71 [ 1248.605716][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1248.634694][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.709320][ T9] usb 6-1: config 0 descriptor?? [ 1248.874486][ T9] usb 6-1: can't set config #0, error -71 [ 1248.888019][ T5912] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1248.902149][ T9] usb 6-1: USB disconnect, device number 26 [ 1249.047832][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 1249.081309][ T5912] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1249.092456][ T5912] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.103609][ T5912] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1249.119504][ T5912] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1249.152309][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.292105][ T5912] usb 7-1: Product: syz [ 1249.297020][ T5912] usb 7-1: Manufacturer: syz [ 1249.302743][ T5912] usb 7-1: SerialNumber: syz [ 1250.944241][ T5912] usb 7-1: 0:2 : does not exist [ 1251.006604][ T5912] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1251.200713][ T5912] usb 7-1: USB disconnect, device number 27 [ 1252.182407][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1252.495921][ T5825] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1252.577909][ T5912] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1252.646481][T13773] i2c i2c-0: Invalid block write size 34 [ 1252.652559][T11749] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1252.654854][T13773] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 1252.673159][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 1252.680689][ T5825] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 1252.689147][ T5825] usb 1-1: config 0 has no interface number 0 [ 1252.695287][ T5825] usb 1-1: config 0 interface 228 has no altsetting 0 [ 1252.721812][ T5825] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1252.737589][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 1252.737926][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.751818][ T5912] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1252.763290][ T5912] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.857758][T11749] usb 3-1: Using ep0 maxpacket: 16 [ 1252.871854][ T5912] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1252.878208][T13773] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1252.892024][ T5825] usb 1-1: Product: syz [ 1252.896034][T11749] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1252.896334][ T5825] usb 1-1: Manufacturer: syz [ 1252.916043][T11749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.928066][T11749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1252.938513][ T5912] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1252.949968][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.959735][ T5912] usb 7-1: Product: syz [ 1252.964579][ T5912] usb 7-1: Manufacturer: syz [ 1252.971803][T11749] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1252.981295][T11749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.989652][ T5912] usb 7-1: SerialNumber: syz [ 1252.992304][ T5825] usb 1-1: SerialNumber: syz [ 1252.994789][T11749] usb 3-1: Product: syz [ 1253.010814][T11749] usb 3-1: Manufacturer: syz [ 1253.016841][T11749] usb 3-1: SerialNumber: syz [ 1253.039201][ T5825] usb 1-1: config 0 descriptor?? [ 1253.309116][ T9] usb 1-1: USB disconnect, device number 56 [ 1253.683935][T13782] netlink: 'syz.5.1603': attribute type 10 has an invalid length. [ 1253.692041][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1603'. [ 1255.259147][ T5912] usb 7-1: 0:2 : does not exist [ 1255.296244][ T5912] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1255.334290][T13789] netlink: 'syz.5.1604': attribute type 1 has an invalid length. [ 1255.376860][ T5912] usb 7-1: USB disconnect, device number 28 [ 1255.610385][T11749] usb 3-1: 0:2 : does not exist [ 1255.631551][T11749] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1255.668778][T13789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1255.715025][T11749] usb 3-1: USB disconnect, device number 55 [ 1257.471211][T10124] udevd[10124]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1257.551574][T13805] netlink: 'syz.6.1608': attribute type 1 has an invalid length. [ 1257.758836][T11749] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1257.894912][T13811] binder: Bad value for 'stats' [ 1257.937853][T11749] usb 3-1: Using ep0 maxpacket: 16 [ 1257.953815][T11749] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1258.528841][T11749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.605001][T11749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1259.146217][T13805] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1259.385153][T11749] usb 3-1: string descriptor 0 read error: -71 [ 1259.407751][T11749] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1259.416897][T11749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.561647][T13820] binder: Bad value for 'stats' [ 1259.927128][T11749] usb 3-1: can't set config #1, error -71 [ 1260.282193][T13823] netlink: 'syz.5.1612': attribute type 1 has an invalid length. [ 1260.375931][T11749] usb 3-1: USB disconnect, device number 56 [ 1260.396940][T10280] udevd[10280]: setting owner of /dev/bus/usb/003/056 to uid=0, gid=0 failed: No such file or directory [ 1260.427332][T13825] FAULT_INJECTION: forcing a failure. [ 1260.427332][T13825] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.547491][T13825] CPU: 0 UID: 0 PID: 13825 Comm: syz.2.1613 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 1260.547521][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1260.547531][T13825] Call Trace: [ 1260.547539][T13825] [ 1260.547547][T13825] dump_stack_lvl+0x189/0x250 [ 1260.547578][T13825] ? __pfx____ratelimit+0x10/0x10 [ 1260.547606][T13825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1260.547632][T13825] ? __pfx__printk+0x10/0x10 [ 1260.547671][T13825] should_fail_ex+0x414/0x560 [ 1260.547701][T13825] should_failslab+0xa8/0x100 [ 1260.547727][T13825] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1260.547749][T13825] ? skb_clone+0x212/0x3a0 [ 1260.547777][T13825] skb_clone+0x212/0x3a0 [ 1260.547805][T13825] __netlink_deliver_tap+0x404/0x850 [ 1260.547843][T13825] ? netlink_deliver_tap+0x2e/0x1b0 [ 1260.547867][T13825] netlink_deliver_tap+0x19c/0x1b0 [ 1260.547889][T13825] netlink_sendskb+0x68/0x140 [ 1260.547912][T13825] netlink_rcv_skb+0x28c/0x470 [ 1260.547934][T13825] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1260.547957][T13825] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1260.548004][T13825] ? netlink_deliver_tap+0x2e/0x1b0 [ 1260.548025][T13825] ? netlink_deliver_tap+0x2e/0x1b0 [ 1260.548054][T13825] netlink_unicast+0x758/0x8d0 [ 1260.548087][T13825] netlink_sendmsg+0x805/0xb30 [ 1260.548117][T13825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1260.548147][T13825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1260.548168][T13825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1260.548192][T13825] __sock_sendmsg+0x219/0x270 [ 1260.548225][T13825] ____sys_sendmsg+0x505/0x830 [ 1260.548254][T13825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1260.548289][T13825] ? import_iovec+0x74/0xa0 [ 1260.548313][T13825] ___sys_sendmsg+0x21f/0x2a0 [ 1260.548339][T13825] ? __pfx____sys_sendmsg+0x10/0x10 [ 1260.548406][T13825] ? __fget_files+0x2a/0x420 [ 1260.548430][T13825] ? __fget_files+0x3a0/0x420 [ 1260.548477][T13825] __x64_sys_sendmsg+0x19b/0x260 [ 1260.548504][T13825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1260.548540][T13825] ? __pfx_ksys_write+0x10/0x10 [ 1260.548559][T13825] ? rcu_is_watching+0x15/0xb0 [ 1260.548593][T13825] ? do_syscall_64+0xbe/0x3b0 [ 1260.548615][T13825] do_syscall_64+0xfa/0x3b0 [ 1260.548631][T13825] ? lockdep_hardirqs_on+0x9c/0x150 [ 1260.548660][T13825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.548679][T13825] ? clear_bhb_loop+0x60/0xb0 [ 1260.548702][T13825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.548721][T13825] RIP: 0033:0x7fd64c98e929 [ 1260.548737][T13825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1260.548754][T13825] RSP: 002b:00007fd64d7fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1260.548777][T13825] RAX: ffffffffffffffda RBX: 00007fd64cbb5fa0 RCX: 00007fd64c98e929 [ 1260.548791][T13825] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1260.548803][T13825] RBP: 00007fd64d7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.548815][T13825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.548827][T13825] R13: 0000000000000000 R14: 00007fd64cbb5fa0 R15: 00007fffcd730228 [ 1260.548859][T13825] [ 1261.026310][T13823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1261.290369][T13834] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 1261.298501][T13834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1614'. [ 1262.398536][T13836] i2c i2c-0: Invalid block write size 34 [ 1262.440559][T13836] netlink: 'syz.2.1616': attribute type 1 has an invalid length. [ 1262.667618][ T5898] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1263.719955][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 1263.769195][ T5898] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1263.829902][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.861550][ T5898] usb 2-1: Product: syz [ 1263.867056][ T5898] usb 2-1: Manufacturer: syz [ 1263.872630][ T5898] usb 2-1: SerialNumber: syz [ 1263.885056][ T5898] usb 2-1: config 0 descriptor?? [ 1263.920317][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1264.309719][T13856] binder: Bad value for 'stats' [ 1267.177684][ T5898] gspca_sonixj: reg_r err -110 [ 1267.182772][ T5898] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1267.519579][ T5898] usb 2-1: USB disconnect, device number 58 [ 1267.987719][T11749] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1268.707602][ T5825] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1268.758759][T11749] usb 1-1: Using ep0 maxpacket: 16 [ 1268.766247][T11749] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1268.783987][T11749] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.794545][T11749] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.888614][ T5825] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1268.911917][ T5825] usb 3-1: config 0 has no interface number 0 [ 1268.919184][ T5825] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1268.934066][ T5825] usb 3-1: config 0 interface 235 has no altsetting 0 [ 1268.944742][ T5825] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1268.959115][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.967369][ T5825] usb 3-1: Product: syz [ 1268.974752][ T5825] usb 3-1: Manufacturer: syz [ 1268.985201][ T5825] usb 3-1: SerialNumber: syz [ 1269.010894][ T5825] usb 3-1: config 0 descriptor?? [ 1269.032490][ T5825] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 1269.043381][ T5825] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 1269.054705][ T5825] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 1269.080705][ T5825] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 1269.103260][ T5825] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 1269.115864][ T5825] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 1269.164480][T11749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1269.174127][T11749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.182372][T11749] usb 1-1: Product: syz [ 1269.225499][T13879] netlink: 'syz.5.1628': attribute type 10 has an invalid length. [ 1269.233578][T13879] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1628'. [ 1269.490406][T11749] usb 1-1: Manufacturer: syz [ 1269.652058][T11749] usb 1-1: SerialNumber: syz [ 1269.988537][ T5825] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1270.518194][ T24] usb 3-1: USB disconnect, device number 57 [ 1270.847957][ T5898] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1270.997760][ T5898] usb 7-1: Using ep0 maxpacket: 8 [ 1271.002724][ T5898] usb 7-1: config 0 has an invalid interface number: 211 but max is 0 [ 1271.002777][ T5898] usb 7-1: config 0 has no interface number 0 [ 1271.002917][ T5898] usb 7-1: config 0 interface 211 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1271.002968][ T5898] usb 7-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1271.003043][ T5898] usb 7-1: config 0 interface 211 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1271.003069][ T5898] usb 7-1: config 0 interface 211 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1271.183141][ T5898] usb 7-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1271.183492][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.184847][ T5898] usb 7-1: Product: syz [ 1271.184864][ T5898] usb 7-1: Manufacturer: syz [ 1271.184878][ T5898] usb 7-1: SerialNumber: syz [ 1271.343194][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1271.382845][ T5898] usb 7-1: config 0 descriptor?? [ 1271.407988][T11749] usb 1-1: 0:2 : does not exist [ 1271.500325][ T24] keyspan 3-1:0.235: device disconnected [ 1271.572140][ T5898] option 7-1:0.211: GSM modem (1-port) converter detected [ 1271.596931][T11749] usb 1-1: USB disconnect, device number 57 [ 1271.839231][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.356276][ T24] usb 7-1: USB disconnect, device number 29 [ 1273.371831][ T24] option 7-1:0.211: device disconnected [ 1276.565794][T13926] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 1276.573730][T13926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1640'. [ 1282.019398][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1282.208097][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1282.250037][ T24] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 1282.257605][ T5825] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1282.366530][ T24] usb 1-1: config 0 has no interface number 0 [ 1282.442879][T13987] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1282.450598][T13987] [U] J"—e:ÀÆ" [ 1282.609592][ T24] usb 1-1: config 0 interface 228 has no altsetting 0 [ 1282.647786][ T5825] usb 7-1: device descriptor read/64, error -71 [ 1282.675525][ T24] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1282.716503][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.790291][ T24] usb 1-1: Product: syz [ 1282.795062][ T24] usb 1-1: Manufacturer: syz [ 1282.811813][ T24] usb 1-1: SerialNumber: syz [ 1282.859575][ T24] usb 1-1: config 0 descriptor?? [ 1282.892338][ T24] go7007 1-1:0.228: probe with driver go7007 failed with error -12 [ 1282.917929][ T5825] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1283.087660][ T5825] usb 7-1: device descriptor read/64, error -71 [ 1283.166089][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1658'. [ 1283.198210][ T5825] usb usb7-port1: attempt power cycle [ 1283.227776][ T5898] usb 1-1: USB disconnect, device number 58 [ 1283.567745][ T5825] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1283.600266][ T5825] usb 7-1: device descriptor read/8, error -71 [ 1284.517603][ T5825] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1284.568868][ T5825] usb 7-1: device descriptor read/8, error -71 [ 1284.702164][ T5825] usb usb7-port1: unable to enumerate USB device [ 1285.602348][T14001] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1285.632539][T14001] [U] J"—e:ÀÆ" [ 1285.656557][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 1289.765718][T10931] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1290.268540][T10931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.310760][T10931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.340630][T10931] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1290.377910][T10931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.424290][T10931] usb 2-1: config 0 descriptor?? [ 1290.851240][T14056] netlink: 'syz.6.1674': attribute type 10 has an invalid length. [ 1290.859641][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1674'. [ 1291.842102][T14059] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 1291.850814][T14059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1675'. [ 1292.244414][T10931] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 1292.697849][T10931] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 1292.756601][T10931] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0003/input/input7 [ 1293.852734][T10931] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1294.829016][T10931] usb 2-1: USB disconnect, device number 59 [ 1295.032431][T14080] fido_id[14080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1295.053074][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1683'. [ 1295.066592][T14086] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1295.757638][ T5825] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1295.920035][ T5883] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1295.924445][ T5825] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 1295.983695][ T5825] usb 7-1: config 0 has no interface number 0 [ 1295.991778][ T5825] usb 7-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1296.005305][T14100] FAULT_INJECTION: forcing a failure. [ 1296.005305][T14100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.006423][ T5825] usb 7-1: config 0 interface 235 has no altsetting 0 [ 1296.027631][T14100] CPU: 1 UID: 0 PID: 14100 Comm: syz.2.1688 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 1296.027662][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1296.027673][T14100] Call Trace: [ 1296.027682][T14100] [ 1296.027692][T14100] dump_stack_lvl+0x189/0x250 [ 1296.027725][T14100] ? __pfx____ratelimit+0x10/0x10 [ 1296.027753][T14100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.027780][T14100] ? __pfx__printk+0x10/0x10 [ 1296.027804][T14100] ? get_sigframe+0x596/0x7d0 [ 1296.027834][T14100] should_fail_ex+0x414/0x560 [ 1296.027862][T14100] _copy_to_user+0x31/0xb0 [ 1296.027884][T14100] copy_siginfo_to_user+0x22/0xc0 [ 1296.027912][T14100] x64_setup_rt_frame+0x777/0xd40 [ 1296.027960][T14100] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1296.027994][T14100] arch_do_signal_or_restart+0x3dc/0x750 [ 1296.028025][T14100] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1296.028065][T14100] ? exit_to_user_mode_loop+0x40/0x110 [ 1296.028094][T14100] exit_to_user_mode_loop+0x75/0x110 [ 1296.028118][T14100] do_syscall_64+0x2bd/0x3b0 [ 1296.028134][T14100] ? lockdep_hardirqs_on+0x9c/0x150 [ 1296.028161][T14100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.028179][T14100] ? clear_bhb_loop+0x60/0xb0 [ 1296.028202][T14100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.028221][T14100] RIP: 0033:0x7fd64c98e927 [ 1296.028238][T14100] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1296.028255][T14100] RSP: 002b:00007fd64d7fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 1296.028276][T14100] RAX: 0000000000000049 RBX: 00007fd64cbb5fa0 RCX: 00007fd64c98e929 [ 1296.028289][T14100] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000008 [ 1296.028300][T14100] RBP: 00007fd64d7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.028311][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.028323][T14100] R13: 0000000000000000 R14: 00007fd64cbb5fa0 R15: 00007fffcd730228 [ 1296.028354][T14100] [ 1296.241478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.549130][ T5825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1296.566710][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.583355][ T5825] usb 7-1: Product: syz [ 1296.608393][ T5825] usb 7-1: Manufacturer: syz [ 1296.612006][ T5883] usb 6-1: not running at top speed; connect to a high speed hub [ 1296.617906][ T5825] usb 7-1: SerialNumber: syz [ 1296.623619][ T5883] usb 6-1: config 7 interface 0 has no altsetting 0 [ 1296.667881][ T5825] usb 7-1: config 0 descriptor?? [ 1296.699952][ T5825] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected [ 1296.743173][ T5825] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87 [ 1296.760295][ T5883] usb 6-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1296.769572][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.777785][ T5883] usb 6-1: Product: syz [ 1296.781986][ T5883] usb 6-1: Manufacturer: syz [ 1296.786598][ T5883] usb 6-1: SerialNumber: syz [ 1296.813077][ T5825] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7 [ 1296.839651][ T5825] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81 [ 1296.869728][ T5825] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1 [ 1296.884014][ T5825] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85 [ 1296.900524][ T5825] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1297.632199][ T5898] usb 7-1: USB disconnect, device number 34 [ 1297.773774][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1298.447890][ T5898] keyspan 7-1:0.235: device disconnected [ 1298.494896][ T5883] usb 6-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1298.504679][ T5883] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1298.560358][ T5883] usb 6-1: USB disconnect, device number 27 [ 1298.626386][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1694'. [ 1298.803238][T14120] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1693'. [ 1300.477065][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.483917][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.001260][T14171] binder: Bad value for 'stats' [ 1305.857740][T10931] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1305.948286][T14186] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1305.954272][T14186] [U] J"—e:ÀÆ"! [ 1306.137628][T10931] usb 6-1: Using ep0 maxpacket: 16 [ 1306.165492][T10931] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1306.197547][T10931] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.242881][T10931] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1307.224863][T10931] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1307.261725][T10931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.298188][T10931] usb 6-1: Product: syz [ 1307.302906][T10931] usb 6-1: Manufacturer: syz [ 1307.309057][T10931] usb 6-1: SerialNumber: syz [ 1307.492672][T14208] : entered promiscuous mode [ 1307.898167][T14211] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1720'. [ 1308.388350][T10931] usb 6-1: 0:2 : does not exist [ 1308.695351][T10931] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1308.756700][T10931] usb 6-1: USB disconnect, device number 28 [ 1308.830056][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.876595][T14214] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1312.007594][T10806] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1312.813128][T10806] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1313.017696][T10806] usb 2-1: config 0 has no interface number 0 [ 1313.031331][T10806] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1313.166190][T14252] netlink: 'syz.2.1731': attribute type 10 has an invalid length. [ 1313.174528][T14252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1731'. [ 1313.871827][T10806] usb 2-1: config 0 interface 235 has no altsetting 0 [ 1313.882754][T10806] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1313.892521][T10806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.933127][T10806] usb 2-1: Product: syz [ 1313.963222][T10806] usb 2-1: Manufacturer: syz [ 1313.979246][T10806] usb 2-1: SerialNumber: syz [ 1313.998777][T10806] usb 2-1: config 0 descriptor?? [ 1314.254619][T10806] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 1314.266095][T10806] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 1314.274790][T10806] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 1314.285190][T10806] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 1314.707214][T10806] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 1314.747120][T10806] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 1314.795733][T10806] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1315.439374][T10806] usb 2-1: USB disconnect, device number 60 [ 1315.537869][T10806] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1315.740070][T10806] keyspan 2-1:0.235: device disconnected [ 1317.417749][T14282] netlink: 'syz.1.1737': attribute type 10 has an invalid length. [ 1317.425647][T14282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1737'. [ 1319.946279][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1743'. [ 1320.615413][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 1321.487595][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1321.577590][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1321.577612][ T30] audit: type=1326 audit(1750480305.412:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14319 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdd8e929 code=0x7ffc0000 [ 1321.664281][ T30] audit: type=1326 audit(1750480305.412:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14319 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdd8e929 code=0x7ffc0000 [ 1321.689493][ T10] usb 3-1: device descriptor read/64, error -71 [ 1321.692490][ T30] audit: type=1326 audit(1750480305.412:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14319 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffbbdd8e929 code=0x7ffc0000 [ 1321.718809][ T30] audit: type=1326 audit(1750480305.412:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14319 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdd8e929 code=0x7ffc0000 [ 1321.740691][ T30] audit: type=1326 audit(1750480305.412:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14319 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbdd8e929 code=0x7ffc0000 [ 1322.653929][T14332] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 1322.662027][T14332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1752'. [ 1323.273205][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1323.450483][ T10] usb 3-1: device descriptor read/64, error -71 [ 1324.323563][ T10] usb usb3-port1: attempt power cycle [ 1324.828555][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1324.897890][ T10] usb 3-1: device descriptor read/8, error -71 [ 1328.146482][T14366] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1328.154322][T14366] [U] J"—e:ÀÆ"#ˆ‡‰­ÝÑʉëØc)r¤öZÑP^Ðkg…PŽ±Þé”Ñ‹Nñ‰Îr°yíï„œFãÞß`LúçÃ/x-Ù¤Y“ y„DÖº%F¸ˆ“¿W['Á¯U¥\UʈUÕ܉Û>0ÑBœÄ#ÿd¬ÉýµšvÊø Î<•OŠ–ëåÃ%>ˆêæÌ8ËJd^$ÄŒõ®œQ%Õx«+pì’´,ö› ÓJ©©¸ã.Añš}8ÎäÖÒK#œÏ» 5äÛ_Pɸëߎµ‚¹…u"ÞQR&? ˆŽ½e«q38²ú)…b¯ò¼öLð(ÈL–{®2§Ÿ¿-A¦"ÀúŠ®OúUß^Çë°p»aHòÍæÑ(Šú…˜ú)¬€Æd-RÆö¹yèþ^¾vÊÃ+ÅA³öšI [ 1328.275710][T14377] netlink: 'syz.5.1764': attribute type 10 has an invalid length. [ 1328.283767][T14377] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1764'. [ 1332.261600][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1773'. [ 1333.159145][T14420] netlink: 'syz.1.1778': attribute type 10 has an invalid length. [ 1333.167179][T14420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1778'. [ 1337.067629][ T5912] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1337.260513][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 1337.689516][ T5912] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1337.742594][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.774052][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1337.820331][ T5912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1337.849294][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.857366][ T5912] usb 2-1: Product: syz [ 1337.899336][ T5912] usb 2-1: Manufacturer: syz [ 1337.904113][ T5912] usb 2-1: SerialNumber: syz [ 1338.696082][T14464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1789'. [ 1340.604669][ T5912] usb 2-1: 0:2 : does not exist [ 1340.645675][ T5912] usb 2-1: USB disconnect, device number 61 [ 1341.416867][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.512884][T14490] ======================================================= [ 1341.512884][T14490] WARNING: The mand mount option has been deprecated and [ 1341.512884][T14490] and is ignored by this kernel. Remove the mand [ 1341.512884][T14490] option from the mount to silence this warning. [ 1341.512884][T14490] ======================================================= [ 1341.617753][T10931] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1341.912606][T10931] usb 6-1: Using ep0 maxpacket: 32 [ 1342.028497][T10931] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1342.254318][T10931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.445249][T10931] usb 6-1: config 0 descriptor?? [ 1342.468044][T14495] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1342.475135][T14495] [U] J"—e:ÀÆ" [ 1342.671319][T10931] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1344.754869][T10931] gspca_sunplus: reg_w_riv err -110 [ 1344.763122][T10931] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1345.493251][ T30] audit: type=1326 audit(1750480329.332:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278138e929 code=0x7ffc0000 [ 1345.600756][T14522] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1345.601013][T14521] FAULT_INJECTION: forcing a failure. [ 1345.601013][T14521] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.621471][T14522] [U] J"—e:ÀÆ" [ 1345.678854][T14521] CPU: 0 UID: 0 PID: 14521 Comm: syz.6.1804 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 1345.678884][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1345.678895][T14521] Call Trace: [ 1345.678903][T14521] [ 1345.678912][T14521] dump_stack_lvl+0x189/0x250 [ 1345.678948][T14521] ? __pfx____ratelimit+0x10/0x10 [ 1345.678976][T14521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1345.679003][T14521] ? __pfx__printk+0x10/0x10 [ 1345.679028][T14521] ? __pfx___might_resched+0x10/0x10 [ 1345.679054][T14521] ? fs_reclaim_acquire+0x7d/0x100 [ 1345.679085][T14521] should_fail_ex+0x414/0x560 [ 1345.679114][T14521] should_failslab+0xa8/0x100 [ 1345.679154][T14521] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1345.679175][T14521] ? audit_log_start+0x126/0x870 [ 1345.679197][T14521] audit_log_start+0x126/0x870 [ 1345.679221][T14521] ? __pfx_audit_log_start+0x10/0x10 [ 1345.679244][T14521] ? migrate_enable+0x29c/0x3c0 [ 1345.679268][T14521] ? __pfx_migrate_enable+0x10/0x10 [ 1345.679292][T14521] audit_seccomp+0x64/0x190 [ 1345.679322][T14521] __seccomp_filter+0x9aa/0x1a40 [ 1345.679362][T14521] ? __pfx___seccomp_filter+0x10/0x10 [ 1345.679385][T14521] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1345.679413][T14521] ? __pfx_vfs_write+0x10/0x10 [ 1345.679436][T14521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1345.679466][T14521] ? __fget_files+0x3a0/0x420 [ 1345.679509][T14521] ? __pfx_ksys_write+0x10/0x10 [ 1345.679531][T14521] ? __secure_computing+0xe2/0x2a0 [ 1345.679562][T14521] syscall_trace_enter+0xaa/0x160 [ 1345.679588][T14521] do_syscall_64+0xd3/0x3b0 [ 1345.679606][T14521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.679623][T14521] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1345.679639][T14521] ? clear_bhb_loop+0x60/0xb0 [ 1345.679660][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.679679][T14521] RIP: 0033:0x7f278138e929 [ 1345.679696][T14521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1345.679712][T14521] RSP: 002b:00007f2782232038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1345.679734][T14521] RAX: ffffffffffffffda RBX: 00007f27815b5fa0 RCX: 00007f278138e929 [ 1345.679748][T14521] RDX: 0400000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1345.679759][T14521] RBP: 00007f2782232090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.679771][T14521] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1345.679783][T14521] R13: 0000000000000000 R14: 00007f27815b5fa0 R15: 00007fff37713618 [ 1345.679813][T14521] [ 1345.682888][T14521] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1345.689910][ T30] audit: type=1326 audit(1750480329.382:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f278138e929 code=0x7ffc0000 [ 1345.993540][T14521] audit: out of memory in audit_log_start [ 1346.047548][ T30] audit: type=1326 audit(1750480329.382:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278138e929 code=0x7ffc0000 [ 1346.189788][T11749] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1346.338729][ T30] audit: type=1326 audit(1750480329.402:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f278138e929 code=0x7ffc0000 [ 1346.394620][ T10] usb 6-1: USB disconnect, device number 29 [ 1346.448706][ T30] audit: type=1326 audit(1750480329.402:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278138e929 code=0x7ffc0000 [ 1346.477773][T11749] usb 1-1: Using ep0 maxpacket: 16 [ 1346.494222][T11749] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.523673][ T30] audit: type=1326 audit(1750480329.422:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278138e929 code=0x7ffc0000 [ 1346.560161][T11749] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.591767][ T30] audit: type=1326 audit(1750480329.422:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f278138d290 code=0x7ffc0000 [ 1346.627266][T11749] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1346.643615][T11749] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1346.653498][T11749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.701113][T11749] usb 1-1: config 0 descriptor?? [ 1346.834358][ T30] audit: type=1326 audit(1750480329.442:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f278138d3df code=0x7ffc0000 [ 1346.839920][T14532] syz.1.1808: attempt to access beyond end of device [ 1346.839920][T14532] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1346.893673][T14532] gfs2: error -5 reading superblock [ 1347.450213][T11749] apple 0003:05AC:0247.0004: unexpected long global item [ 1347.517028][T11749] apple 0003:05AC:0247.0004: parse failed [ 1347.567133][T11749] apple 0003:05AC:0247.0004: probe with driver apple failed with error -22 [ 1347.659650][T11749] usb 1-1: USB disconnect, device number 59 [ 1350.800363][ T5898] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1351.047649][T11749] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1351.790829][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 1351.814112][T14569] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1351.820321][T14569] [U] J"—e:ÀÆ" [ 1351.833835][ T5898] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1351.846646][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.540074][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1352.802666][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1352.812011][T11749] usb 1-1: config 13 has an invalid interface number: 230 but max is 0 [ 1352.812043][T11749] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.812072][T11749] usb 1-1: config 13 has no interface number 0 [ 1352.812119][T11749] usb 1-1: config 13 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1352.812146][T11749] usb 1-1: config 13 interface 230 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1352.812175][T11749] usb 1-1: config 13 interface 230 has no altsetting 0 [ 1352.837974][T11749] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1352.871245][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.871276][ T5898] usb 2-1: Product: syz [ 1352.926260][ T5898] usb 2-1: Manufacturer: syz [ 1352.929517][T14579] syz.2.1820: attempt to access beyond end of device [ 1352.929517][T14579] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1352.934657][ T5898] usb 2-1: SerialNumber: syz [ 1352.949819][T11749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.958581][T11749] usb 1-1: Product: syz [ 1352.962799][T11749] usb 1-1: Manufacturer: syz [ 1352.967843][T14579] gfs2: error -5 reading superblock [ 1352.973291][T11749] usb 1-1: SerialNumber: syz [ 1352.999378][T14558] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1353.116190][T14584] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1353.122493][T14584] [U] J"—e:ÀÆ" [ 1353.282978][T11749] ums-usbat 1-1:13.230: USB Mass Storage device detected [ 1353.559901][T11749] ums-usbat 1-1:13.230: Quirks match for vid 0781 pid 0005: 1 [ 1353.625188][ T5898] usb 2-1: can't set config #1, error -71 [ 1353.705639][ T5898] usb 2-1: USB disconnect, device number 62 [ 1353.723926][T11749] usb 1-1: USB disconnect, device number 60 [ 1355.622930][T14607] netlink: 'syz.5.1826': attribute type 10 has an invalid length. [ 1355.631228][T14607] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1826'. [ 1356.281213][T14609] capability: warning: `syz.1.1827' uses deprecated v2 capabilities in a way that may be insecure [ 1358.956376][T14618] Illegal XDP return value 4294967294 on prog (id 618) dev N/A, expect packet loss! [ 1359.133163][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1831'. [ 1359.231509][T14622] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1831'. [ 1359.258143][T14622] netlink: 'syz.5.1831': attribute type 10 has an invalid length. [ 1360.187885][T14634] i2c i2c-0: Invalid block write size 34 [ 1360.204683][T14634] netlink: 'syz.1.1834': attribute type 1 has an invalid length. [ 1360.299950][T14642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1835'. [ 1360.484043][T14634] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1360.669050][ T5898] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1361.002103][T14646] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1361.009732][T14646] [U] J"—e:ÀÆ" [ 1361.938659][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.945161][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.242128][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.317584][ T5898] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1362.326703][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.319543][ T5898] usb 3-1: config 0 descriptor?? [ 1363.482616][ T5898] usb 3-1: can't set config #0, error -71 [ 1363.567608][ T5898] usb 3-1: USB disconnect, device number 62 [ 1363.588090][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1841'. [ 1363.679175][T14666] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 1363.747651][T14666] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1843'. [ 1364.379064][ T5883] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1364.726028][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.766854][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1364.793975][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.817226][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1364.850907][ T5883] usb 6-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 1364.880799][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.915694][ T5883] usb 6-1: config 0 descriptor?? [ 1364.947617][ T5898] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1365.043869][T14685] netlink: 'syz.0.1848': attribute type 11 has an invalid length. [ 1365.108443][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 1365.123014][ T5898] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1365.143910][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.170206][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1365.200243][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1365.219408][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.227973][ T5912] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1365.238472][ T5898] usb 2-1: Product: syz [ 1365.251535][ T5898] usb 2-1: Manufacturer: syz [ 1365.261388][ T5898] usb 2-1: SerialNumber: syz [ 1366.348279][T14693] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1366.355499][T14693] [U] J"—e:ÀÆ" [ 1366.366992][ T5912] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1366.620481][ T5912] usb 3-1: config 0 has no interface number 0 [ 1366.680005][ T5912] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1366.698134][ T5912] usb 3-1: config 0 interface 235 has no altsetting 0 [ 1366.718780][ T5912] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1366.729319][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.740151][ T5912] usb 3-1: Product: syz [ 1366.744512][ T5912] usb 3-1: Manufacturer: syz [ 1366.752964][ T5883] usbhid 6-1:0.0: can't add hid device: -71 [ 1366.759387][ T5883] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1366.793327][ T5912] usb 3-1: SerialNumber: syz [ 1366.813526][ T5883] usb 6-1: USB disconnect, device number 30 [ 1366.846580][ T5912] usb 3-1: config 0 descriptor?? [ 1366.872695][ T5898] usb 2-1: 0:2 : does not exist [ 1366.893994][ T5898] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1366.901101][ T5912] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 1366.951952][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 1367.010391][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 1367.055888][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 1367.057633][ T5898] usb 2-1: USB disconnect, device number 63 [ 1367.085066][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 1367.111043][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 1367.158126][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.760619][ T5912] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1367.806659][ T9] usb 3-1: USB disconnect, device number 63 [ 1367.849620][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1367.870529][ T9] keyspan 3-1:0.235: device disconnected [ 1367.937777][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 1367.978442][ T5883] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1368.157762][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 1368.171762][ T5883] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1368.184069][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.195482][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1368.214216][ T5883] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1368.236564][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.244944][ T5883] usb 6-1: Product: syz [ 1368.249625][ T5883] usb 6-1: Manufacturer: syz [ 1368.254428][ T5883] usb 6-1: SerialNumber: syz [ 1368.413009][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1368.577788][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1368.607630][ T9] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1368.618236][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.626666][ T9] usb 2-1: Product: syz [ 1368.632502][ T9] usb 2-1: Manufacturer: syz [ 1368.637789][ T9] usb 2-1: SerialNumber: syz [ 1368.646171][ T9] usb 2-1: config 0 descriptor?? [ 1369.434759][T14716] netlink: 'syz.2.1855': attribute type 10 has an invalid length. [ 1369.442933][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1855'. [ 1371.333158][ T5883] usb 6-1: 0:2 : does not exist [ 1371.403792][ T5883] usb 6-1: USB disconnect, device number 31 [ 1371.567335][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1371.970807][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 1372.014847][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 1372.174526][ T9] usb 2-1: USB disconnect, device number 64 [ 1373.911965][ T5883] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1374.674663][T14751] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1864'. [ 1374.836950][ T5898] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1374.937608][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 1374.947566][ T5883] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1374.957624][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.977566][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.989841][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1375.003433][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.018820][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 1375.020917][ T5883] usb 2-1: Product: syz [ 1375.036547][ T5898] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1375.038201][ T5883] usb 2-1: Manufacturer: syz [ 1375.055740][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.086567][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1375.096251][ T5883] usb 2-1: SerialNumber: syz [ 1375.106442][T14757] Can't find a SQUASHFS superblock on nullb0 [ 1375.150972][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1375.174467][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.211120][ T5898] usb 6-1: Product: syz [ 1375.218173][ T5898] usb 6-1: Manufacturer: syz [ 1375.245941][ T5898] usb 6-1: SerialNumber: syz [ 1376.362686][T14768] fuse: Unknown parameter 'group_id00000000000000000000' [ 1376.523256][T14770] netlink: 'syz.6.1867': attribute type 10 has an invalid length. [ 1376.531499][T14770] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1867'. [ 1377.189762][ T5883] usb 2-1: 0:2 : does not exist [ 1377.338543][ T5883] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1377.429370][ T5883] usb 2-1: USB disconnect, device number 65 [ 1380.114971][ T5898] usb 6-1: 0:2 : does not exist [ 1380.159559][ T5898] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1380.287994][ T5898] usb 6-1: USB disconnect, device number 32 [ 1380.508541][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1381.158115][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1381.410288][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1381.437360][ T24] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 1381.473617][ T24] usb 1-1: config 0 has no interface number 0 [ 1381.504303][ T24] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1381.547541][ T24] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1381.568695][ T24] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1381.755976][ T24] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1382.962936][ T24] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1383.041047][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1383.041066][ T30] audit: type=1400 audit(1750480366.872:166): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14794 comm="syz.2.1871" netif=wpan0 [ 1383.090767][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.098962][ T24] usb 1-1: Product: syz [ 1383.103181][ T24] usb 1-1: Manufacturer: syz [ 1383.117537][ T24] usb 1-1: SerialNumber: syz [ 1383.137715][ T24] usb 1-1: config 0 descriptor?? [ 1383.149627][ T24] option 1-1:0.211: GSM modem (1-port) converter detected [ 1383.360781][ T9] usb 1-1: USB disconnect, device number 61 [ 1384.374882][ T9] option 1-1:0.211: device disconnected [ 1387.257870][ T5825] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1387.628182][T14857] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1387.635004][T14857] [U] J"—e:ÀÆ" [ 1387.636117][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 1387.754211][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805c9c2000: rx timeout, send abort [ 1387.912768][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 1388.012308][ T5825] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1388.035936][ T5825] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.985492][ T5825] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.018320][ T5825] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1389.069447][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.088003][ T5825] usb 7-1: Product: syz [ 1389.092399][ T5825] usb 7-1: Manufacturer: syz [ 1389.097030][ T5825] usb 7-1: SerialNumber: syz [ 1391.392228][T14889] : entered promiscuous mode [ 1392.050502][ T5825] usb 7-1: 0:2 : does not exist [ 1392.061491][ T5825] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1392.131523][ T5825] usb 7-1: USB disconnect, device number 35 [ 1392.258955][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1893'. [ 1393.619495][T14910] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1393.626892][T14910] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1393.651684][ T30] audit: type=1400 audit(1750480377.482:167): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14906 comm="syz.6.1898" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 1396.229392][ T30] audit: type=1400 audit(1750480380.002:168): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14907 comm="syz.2.1897" netif=wpan0 [ 1399.349043][ T5883] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1399.698749][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 1399.796714][ T5883] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1399.830581][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.880060][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1399.945287][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1399.970448][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.995117][ T5883] usb 2-1: Product: syz [ 1400.025339][ T5883] usb 2-1: Manufacturer: syz [ 1400.115069][ T5898] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1400.530869][ T5883] usb 2-1: SerialNumber: syz [ 1400.638625][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 1400.654447][ T5898] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 1400.667634][ T5898] usb 1-1: config 0 has no interface number 0 [ 1400.679572][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1400.694452][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1400.723227][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1400.743221][ T5898] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1400.761359][ T5898] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1401.177226][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.213005][ T5898] usb 1-1: Product: syz [ 1401.217329][ T5898] usb 1-1: Manufacturer: syz [ 1401.232610][ T5898] usb 1-1: SerialNumber: syz [ 1401.255075][ T5898] usb 1-1: config 0 descriptor?? [ 1401.272315][ T5898] option 1-1:0.211: GSM modem (1-port) converter detected [ 1402.003192][ T5883] usb 2-1: 0:2 : does not exist [ 1402.021951][ T5883] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1403.067828][ T5898] usb 1-1: USB disconnect, device number 62 [ 1403.091172][ T5898] option 1-1:0.211: device disconnected [ 1403.199295][ T5883] usb 2-1: USB disconnect, device number 66 [ 1403.677965][T14992] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 1403.686754][T14992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1918'. [ 1404.385218][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.656170][T15009] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1406.813333][T15009] [U] J"—e:ÀÆ" [ 1408.036725][T15024] i2c i2c-0: Invalid block write size 34 [ 1408.050077][T15024] netlink: 'syz.0.1928': attribute type 1 has an invalid length. [ 1408.685509][ T5825] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1408.910892][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 1408.941966][T15024] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1409.086733][ T5825] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1409.111340][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.248492][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1409.261882][ T5825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1409.290323][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.301020][ T5825] usb 2-1: Product: syz [ 1409.318652][ T5825] usb 2-1: Manufacturer: syz [ 1409.338195][ T5825] usb 2-1: SerialNumber: syz [ 1409.367595][ T5898] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1409.557710][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 1409.611021][ T5898] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1409.623242][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.640531][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1409.659888][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1409.676711][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.690071][ T5898] usb 3-1: Product: syz [ 1409.694502][ T5898] usb 3-1: Manufacturer: syz [ 1409.702985][ T5898] usb 3-1: SerialNumber: syz [ 1410.991235][ T5825] usb 2-1: 0:2 : does not exist [ 1411.006672][ T5825] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1412.259291][ T5825] usb 2-1: USB disconnect, device number 67 [ 1413.029097][T15060] FAULT_INJECTION: forcing a failure. [ 1413.029097][T15060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1413.042618][T15060] CPU: 0 UID: 0 PID: 15060 Comm: syz.0.1935 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 1413.042644][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1413.042655][T15060] Call Trace: [ 1413.042664][T15060] [ 1413.042673][T15060] dump_stack_lvl+0x189/0x250 [ 1413.042714][T15060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1413.042741][T15060] ? __pfx__printk+0x10/0x10 [ 1413.042767][T15060] ? kasan_check_range+0x89/0x2c0 [ 1413.042800][T15060] should_fail_ex+0x414/0x560 [ 1413.042831][T15060] _copy_from_user+0x2d/0xb0 [ 1413.042852][T15060] __sys_bpf+0x1ed/0x860 [ 1413.042879][T15060] ? __pfx___sys_bpf+0x10/0x10 [ 1413.042898][T15060] ? preempt_schedule_irq+0xde/0x150 [ 1413.042960][T15060] __x64_sys_bpf+0x7c/0x90 [ 1413.042982][T15060] do_syscall_64+0xfa/0x3b0 [ 1413.043001][T15060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.043018][T15060] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1413.043036][T15060] ? clear_bhb_loop+0x60/0xb0 [ 1413.043059][T15060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.043078][T15060] RIP: 0033:0x7ffbbdd8e929 [ 1413.043095][T15060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.043111][T15060] RSP: 002b:00007ffbbbbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1413.043134][T15060] RAX: ffffffffffffffda RBX: 00007ffbbdfb6160 RCX: 00007ffbbdd8e929 [ 1413.043147][T15060] RDX: 0000000000000018 RSI: 00002000000003c0 RDI: 000000000000001c [ 1413.043159][T15060] RBP: 00007ffbbbbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.043170][T15060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.043190][T15060] R13: 0000000000000000 R14: 00007ffbbdfb6160 R15: 00007fffdf864d88 [ 1413.043223][T15060] [ 1414.622180][ T5898] usb 3-1: 0:2 : does not exist [ 1414.667293][ T5898] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1415.133029][T15068] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1415.139639][T15068] [U] J"—e:ÀÆ" [ 1415.393376][ T5898] usb 3-1: USB disconnect, device number 64 [ 1415.516443][T10124] udevd[10124]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1415.868035][ T5825] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1416.432122][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 1416.522238][ T5825] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1416.522269][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.522291][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1416.525097][ T5825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1416.525129][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.525161][ T5825] usb 2-1: Product: syz [ 1416.525177][ T5825] usb 2-1: Manufacturer: syz [ 1416.525192][ T5825] usb 2-1: SerialNumber: syz [ 1418.773604][ T5825] usb 2-1: 0:2 : does not exist [ 1418.801773][ T5825] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1418.939470][ T5825] usb 2-1: USB disconnect, device number 68 [ 1419.307724][ T5883] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1420.272242][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 1420.294589][ T5883] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1420.332171][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.328800][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1421.344964][ T5883] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1421.354886][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.363289][ T5883] usb 3-1: Product: syz [ 1421.367757][ T5883] usb 3-1: Manufacturer: syz [ 1421.372418][ T5883] usb 3-1: SerialNumber: syz [ 1423.354438][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.365725][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.624161][ T5883] usb 3-1: can't set config #1, error -71 [ 1423.638210][ T5883] usb 3-1: USB disconnect, device number 65 [ 1423.854555][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1426.003466][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1426.036440][ T24] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1426.054061][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.557883][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1427.903831][ T24] usb 7-1: string descriptor 0 read error: -71 [ 1428.052649][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1428.068279][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.274421][ T24] usb 7-1: can't set config #1, error -71 [ 1429.293039][ T24] usb 7-1: USB disconnect, device number 36 [ 1431.447614][ T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1431.489088][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1431.734564][ T9] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1431.734599][ T9] usb 2-1: config 0 has no interface number 0 [ 1431.734647][ T9] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1431.734672][ T9] usb 2-1: config 0 interface 235 has no altsetting 0 [ 1431.745126][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1431.842748][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.851131][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1431.857828][ T9] usb 2-1: Product: syz [ 1431.863499][ T10] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 1431.872358][ T10] usb 6-1: config 0 has no interface number 0 [ 1431.879074][ T9] usb 2-1: Manufacturer: syz [ 1432.669081][ T10] usb 6-1: config 0 interface 211 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1432.680391][ T9] usb 2-1: SerialNumber: syz [ 1432.687085][ T10] usb 6-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1432.697121][ T10] usb 6-1: config 0 interface 211 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1432.724679][ T9] usb 2-1: config 0 descriptor?? [ 1432.735234][ T10] usb 6-1: config 0 interface 211 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1432.763114][ T9] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 1432.832363][ T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 1432.841534][ T10] usb 6-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1432.851546][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.860219][ T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 1432.869036][ T10] usb 6-1: Product: syz [ 1432.873256][ T10] usb 6-1: Manufacturer: syz [ 1432.883853][ T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 1432.895986][ T10] usb 6-1: SerialNumber: syz [ 1432.902547][ T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 1432.942046][ T10] usb 6-1: config 0 descriptor?? [ 1432.955040][ T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 1433.021019][ T10] option 6-1:0.211: GSM modem (1-port) converter detected [ 1433.354365][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1433.648672][ T5912] usb 2-1: USB disconnect, device number 69 [ 1433.912819][T11749] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1434.038191][T15190] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1434.044937][T15190] [U] J"—e:ÀÆ" [ 1434.326474][T11749] usb 3-1: Using ep0 maxpacket: 16 [ 1435.447249][T11749] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1435.507609][ T10] usb 6-1: USB disconnect, device number 33 [ 1435.735604][ T5912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1435.749584][T11749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.779224][ T5912] keyspan 2-1:0.235: device disconnected [ 1435.785805][T11749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1435.846384][ T10] option 6-1:0.211: device disconnected [ 1435.936609][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 1435.956362][T11749] usb 3-1: string descriptor 0 read error: -71 [ 1435.978511][T15196] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 1435.991792][T11749] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1436.020935][T15196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.059925][T11749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.079673][T15196] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1436.112888][T11749] usb 3-1: can't set config #1, error -71 [ 1436.121433][T11749] usb 3-1: USB disconnect, device number 66 [ 1436.228574][T15196] CIFS mount error: No usable UNC path provided in device string! [ 1436.228574][T15196] [ 1436.330049][T15196] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1437.977669][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1438.705242][T15229] netlink: 'syz.0.1981': attribute type 10 has an invalid length. [ 1438.705267][T15229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1981'. [ 1438.998537][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1439.009331][ T10] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1439.009364][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.009385][ T10] usb 7-1: config 0 has no interface number 0 [ 1439.018860][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1439.018903][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.018924][ T10] usb 7-1: Product: syz [ 1439.018940][ T10] usb 7-1: Manufacturer: syz [ 1439.018956][ T10] usb 7-1: SerialNumber: syz [ 1439.029841][ T10] usb 7-1: config 0 descriptor?? [ 1439.034956][ T10] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1439.034992][ T10] usb 7-1: No valid video chain found. [ 1439.431485][T11749] usb 7-1: USB disconnect, device number 37 [ 1439.697716][ T9154] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1439.726027][T15240] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1439.726253][T15240] [U] J"—e:ÀÆ" [ 1439.938261][ T9154] usb 2-1: Using ep0 maxpacket: 16 [ 1439.940597][ T5825] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1440.135283][ T9154] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1440.135315][ T9154] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.135334][ T9154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1440.158633][ T9154] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1440.158665][ T9154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.158685][ T9154] usb 2-1: Product: syz [ 1440.158700][ T9154] usb 2-1: Manufacturer: syz [ 1440.158714][ T9154] usb 2-1: SerialNumber: syz [ 1440.229197][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 1440.257631][ T5825] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1440.257662][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.257684][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1440.264561][ T5825] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1440.264594][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.264616][ T5825] usb 1-1: Product: syz [ 1440.264633][ T5825] usb 1-1: Manufacturer: syz [ 1440.264649][ T5825] usb 1-1: SerialNumber: syz [ 1442.617032][ T9154] usb 2-1: 0:2 : does not exist [ 1443.473979][ T9154] usb 2-1: USB disconnect, device number 70 [ 1443.650951][T15265] CIFS mount error: No usable UNC path provided in device string! [ 1443.650951][T15265] [ 1443.811885][T15265] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1445.379565][ T5825] usb 1-1: 0:2 : does not exist [ 1445.382727][ T5825] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1445.403174][ T5825] usb 1-1: USB disconnect, device number 63 [ 1445.561934][T10124] udevd[10124]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1445.617224][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.918210][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 1446.998029][ T5825] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1447.328026][ T5898] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1447.348168][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 1447.378527][ T5825] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1448.270554][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.357124][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1448.376561][ T5825] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1448.376595][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.376618][ T5825] usb 6-1: Product: syz [ 1448.376635][ T5825] usb 6-1: Manufacturer: syz [ 1448.376652][ T5825] usb 6-1: SerialNumber: syz [ 1448.429638][ T5898] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1448.429674][ T5898] usb 3-1: config 0 has no interface number 0 [ 1448.429731][ T5898] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1448.429756][ T5898] usb 3-1: config 0 interface 235 has no altsetting 0 [ 1448.432808][ T5898] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1448.432839][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.432861][ T5898] usb 3-1: Product: syz [ 1448.432878][ T5898] usb 3-1: Manufacturer: syz [ 1448.432894][ T5898] usb 3-1: SerialNumber: syz [ 1448.436589][ T5898] usb 3-1: config 0 descriptor?? [ 1448.889664][T15308] CIFS mount error: No usable UNC path provided in device string! [ 1448.889664][T15308] [ 1448.889692][T15308] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1448.893124][ T5898] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 1448.893677][ T5898] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 1448.893752][ T5898] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 1448.895498][ T5898] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 1448.895599][ T5898] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 1448.895727][ T5898] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 1448.908166][ T5898] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1449.411307][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2002'. [ 1450.788174][ T5825] usb 6-1: 0:2 : does not exist [ 1450.839694][ T5825] usb 6-1: USB disconnect, device number 34 [ 1451.445233][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.487873][ T9154] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1451.717841][ T9154] usb 7-1: Using ep0 maxpacket: 16 [ 1452.024714][ T9154] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1452.024748][ T9154] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.024779][ T9154] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1452.047203][ T9154] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1452.047241][ T9154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.047264][ T9154] usb 7-1: Product: syz [ 1452.047281][ T9154] usb 7-1: Manufacturer: syz [ 1452.047297][ T9154] usb 7-1: SerialNumber: syz [ 1454.136438][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2008'. [ 1455.051312][T11749] usb 3-1: USB disconnect, device number 67 [ 1455.065436][T11749] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1455.066590][T11749] keyspan 3-1:0.235: device disconnected [ 1455.247025][ T9154] usb 7-1: 0:2 : does not exist [ 1455.252035][ T9154] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1455.327510][ T9154] usb 7-1: USB disconnect, device number 38 [ 1455.548511][T10280] udevd[10280]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1456.308456][T15354] i2c i2c-0: Invalid block write size 34 [ 1456.308904][T15354] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 1456.446069][T15354] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1456.868139][T15361] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1456.868236][T15361] [U] J"—e:ÀÆ" [ 1457.477553][T11749] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1457.641263][T11749] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.055666][T11749] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1458.055704][T11749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.055725][T11749] usb 6-1: Product: syz [ 1458.055741][T11749] usb 6-1: Manufacturer: syz [ 1458.055756][T11749] usb 6-1: SerialNumber: syz [ 1458.088717][T11749] usb 6-1: config 0 descriptor?? [ 1458.262184][T15375] i2c i2c-0: Invalid block write size 34 [ 1458.262833][T15375] netlink: 'syz.1.2019': attribute type 1 has an invalid length. [ 1458.562955][T15380] netlink: 'syz.6.2018': attribute type 10 has an invalid length. [ 1458.563024][T15380] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2018'. [ 1459.302065][ T59] kworker/u8:4 (59) used greatest stack depth: 19432 bytes left [ 1459.302247][ T6016] kworker/u8:10 (6016) used greatest stack depth: 18392 bytes left [ 1459.385112][T15375] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1459.962335][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2014'. [ 1461.413956][ T5898] usb 6-1: USB disconnect, device number 35 [ 1462.347837][T15399] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1462.348134][T15399] [U] J"—e:ÀÆ" [ 1462.667691][T15401] ip6t_srh: unknown srh invflags 7863 [ 1464.003281][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2032'. [ 1464.415405][T10474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1464.448409][T10474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1464.462511][T10474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1464.482260][T10474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1464.507720][T10474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1464.745811][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1464.755294][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1464.768736][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1464.808103][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1464.824552][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1466.388451][ T9154] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1466.753528][ T9154] usb 2-1: no configurations [ 1466.947615][ T5143] Bluetooth: hci2: command tx timeout [ 1467.153367][ T9154] usb 2-1: can't read configurations, error -22 [ 1467.388148][ T9154] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1467.412990][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.704561][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.764372][ T9154] usb 2-1: no configurations [ 1468.003478][ T9154] usb 2-1: can't read configurations, error -22 [ 1468.112824][ T9154] usb usb2-port1: attempt power cycle [ 1468.479686][ T5898] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1468.732318][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.752694][ T5898] usb 7-1: device descriptor read/64, error -71 [ 1468.762061][T15428] chnl_net:caif_netlink_parms(): no params data found [ 1468.787729][ T24] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1469.029170][ T5143] Bluetooth: hci2: command tx timeout [ 1469.066820][ T5898] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1469.068178][ T24] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 1469.087604][ T24] usb 6-1: config 0 has no interface number 0 [ 1469.095820][ T24] usb 6-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1469.112393][ T24] usb 6-1: config 0 interface 235 has no altsetting 0 [ 1469.129342][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1469.140168][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.152159][ T24] usb 6-1: Product: syz [ 1469.156506][ T24] usb 6-1: Manufacturer: syz [ 1469.167835][ T24] usb 6-1: SerialNumber: syz [ 1469.258163][ T24] usb 6-1: config 0 descriptor?? [ 1469.360817][ T24] keyspan 6-1:0.235: Keyspan 1 port adapter converter detected [ 1469.367578][ T5898] usb 7-1: device descriptor read/64, error -71 [ 1469.393697][ T24] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 87 [ 1469.400333][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.416530][ T24] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 7 [ 1469.478171][ T24] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 81 [ 1469.566796][ T5898] usb usb7-port1: attempt power cycle [ 1469.906913][ T24] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 1 [ 1469.933359][ T24] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 85 [ 1469.964757][ T24] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1470.129388][ T5825] usb 6-1: USB disconnect, device number 36 [ 1470.353781][ T5898] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1470.509283][ T5825] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1470.545587][ T5825] keyspan 6-1:0.235: device disconnected [ 1470.670282][ T5898] usb 7-1: device descriptor read/8, error -71 [ 1470.921201][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2044'. [ 1471.107822][ T5143] Bluetooth: hci2: command tx timeout [ 1471.906263][ T5898] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1472.184568][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.268214][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.342132][T15428] bridge_slave_0: entered allmulticast mode [ 1472.501690][T15428] bridge_slave_0: entered promiscuous mode [ 1473.713413][ T5898] usb 7-1: device descriptor read/8, error -71 [ 1474.818941][ T5898] usb usb7-port1: unable to enumerate USB device [ 1475.257614][ T5143] Bluetooth: hci2: command tx timeout [ 1475.466432][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.477105][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.484473][T15428] bridge_slave_1: entered allmulticast mode [ 1475.493137][T15428] bridge_slave_1: entered promiscuous mode [ 1475.695151][T15428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.727637][ T13] bridge_slave_1: left allmulticast mode [ 1475.740902][ T13] bridge_slave_1: left promiscuous mode [ 1475.754404][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.776683][ T13] bridge_slave_0: left allmulticast mode [ 1475.793824][ T13] bridge_slave_0: left promiscuous mode [ 1475.809438][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.847607][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1475.999096][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1476.019240][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1476.028910][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.058356][ T24] usb 3-1: config 0 descriptor?? [ 1476.217615][ T9154] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1476.461680][ T9154] usb 6-1: no configurations [ 1476.466465][ T9154] usb 6-1: can't read configurations, error -22 [ 1476.491413][T15500] FAULT_INJECTION: forcing a failure. [ 1476.491413][T15500] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.505042][T15500] CPU: 1 UID: 0 PID: 15500 Comm: syz.1.2052 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 1476.505071][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1476.505082][T15500] Call Trace: [ 1476.505097][T15500] [ 1476.505106][T15500] dump_stack_lvl+0x189/0x250 [ 1476.505140][T15500] ? __pfx____ratelimit+0x10/0x10 [ 1476.505169][T15500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1476.505196][T15500] ? __pfx__printk+0x10/0x10 [ 1476.505224][T15500] ? __pfx___might_resched+0x10/0x10 [ 1476.505250][T15500] ? fs_reclaim_acquire+0x7d/0x100 [ 1476.505284][T15500] should_fail_ex+0x414/0x560 [ 1476.505313][T15500] ? newary+0x13e/0xac0 [ 1476.505334][T15500] should_failslab+0xa8/0x100 [ 1476.505360][T15500] __kvmalloc_node_noprof+0x161/0x5f0 [ 1476.505385][T15500] ? newary+0x13e/0xac0 [ 1476.505414][T15500] newary+0x13e/0xac0 [ 1476.505435][T15500] ? __pfx_down_write+0x10/0x10 [ 1476.505468][T15500] ipcget+0x1c2/0xdd0 [ 1476.505488][T15500] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1476.505517][T15500] ? __pfx_vfs_write+0x10/0x10 [ 1476.505550][T15500] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1476.505578][T15500] ? __rcu_read_unlock+0x84/0xe0 [ 1476.505603][T15500] ? __pfx_ipcget+0x10/0x10 [ 1476.505634][T15500] __x64_sys_semget+0x1a3/0x200 [ 1476.505662][T15500] ? __pfx___x64_sys_semget+0x10/0x10 [ 1476.505692][T15500] ? do_syscall_64+0xbe/0x3b0 [ 1476.505715][T15500] do_syscall_64+0xfa/0x3b0 [ 1476.505734][T15500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.505752][T15500] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1476.505770][T15500] ? clear_bhb_loop+0x60/0xb0 [ 1476.505794][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.505812][T15500] RIP: 0033:0x7f302af8e929 [ 1476.505831][T15500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1476.505847][T15500] RSP: 002b:00007f302be3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 1476.505869][T15500] RAX: ffffffffffffffda RBX: 00007f302b1b6160 RCX: 00007f302af8e929 [ 1476.505883][T15500] RDX: 0000000000000024 RSI: 0000000000000004 RDI: 0000000000000000 [ 1476.505895][T15500] RBP: 00007f302be3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.505908][T15500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.505919][T15500] R13: 0000000000000001 R14: 00007f302b1b6160 R15: 00007ffe617865d8 [ 1476.505952][T15500] [ 1476.787061][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1476.987292][ T9154] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1477.179634][ T9154] usb 6-1: no configurations [ 1477.184567][ T9154] usb 6-1: can't read configurations, error -22 [ 1477.211796][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1477.262004][ T9154] usb usb6-port1: attempt power cycle [ 1477.295934][ T24] asix 3-1:0.0: probe with driver asix failed with error -61 [ 1477.684548][ T9154] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1477.753722][ T9154] usb 6-1: no configurations [ 1477.774188][ T13] team0: Port device geneve0 removed [ 1477.774862][ T9154] usb 6-1: can't read configurations, error -22 [ 1478.028636][ T9154] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1478.082575][ T9154] usb 6-1: no configurations [ 1478.087337][ T9154] usb 6-1: can't read configurations, error -22 [ 1478.338706][ T9154] usb usb6-port1: unable to enumerate USB device [ 1478.877693][ T9154] usb 3-1: USB disconnect, device number 68 [ 1480.200690][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.217720][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.227849][ T13] bond0 (unregistering): Released all slaves [ 1480.397541][T10806] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1480.628006][T10806] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1480.666383][T10806] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 1480.691306][T10806] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 1480.718836][T10806] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1480.747545][T10806] usb 7-1: config 129 has no interface number 0 [ 1480.757001][T10806] usb 7-1: config 129 has no interface number 1 [ 1480.774043][T10806] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1480.806495][T10806] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1480.826784][ T13] bond1 (unregistering): Released all slaves [ 1480.856442][T10806] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1480.877989][T10806] usb 7-1: config 129 interface 135 has no altsetting 0 [ 1480.895470][T10806] usb 7-1: config 129 interface 5 has no altsetting 0 [ 1480.916562][T10806] usb 7-1: language id specifier not provided by device, defaulting to English [ 1480.941850][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2062'. [ 1480.992347][T10806] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1481.003882][T10806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.023089][T10806] usb 7-1: SerialNumber: syz [ 1481.164435][ T13] bond2 (unregistering): Released all slaves [ 1481.321119][ T13] bond3 (unregistering): Released all slaves [ 1481.491643][ T13] bond4 (unregistering): Released all slaves [ 1481.652761][ T13] bond5 (unregistering): Released all slaves [ 1481.810106][ T13] bond6 (unregistering): Released all slaves [ 1481.960258][ T13] bond7 (unregistering): Released all slaves [ 1482.125588][ T13] bond8 (unregistering): Released all slaves [ 1482.299897][ T13] bond9 (unregistering): Released all slaves [ 1482.319517][T15428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.425200][T10806] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1482.472137][T10806] usb 7-1: MIDIStreaming interface descriptor not found [ 1482.863945][T10806] usb 7-1: USB disconnect, device number 43 [ 1483.870981][T15428] team0: Port device team_slave_0 added [ 1483.916367][T10824] udevd[10824]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1483.974761][T15428] team0: Port device team_slave_1 added [ 1484.205682][T15428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.219514][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.247964][ T5825] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1484.301879][T15428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.317880][T10806] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1484.351176][ T13] : left promiscuous mode [ 1484.421144][T15428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.431487][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.463734][T15428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.482723][ T5825] usb 2-1: no configurations [ 1484.487987][ T5825] usb 2-1: can't read configurations, error -22 [ 1484.543144][T10806] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 1484.564224][T10806] usb 7-1: config 0 has no interface number 0 [ 1484.583020][T10806] usb 7-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1484.604361][T10806] usb 7-1: config 0 interface 235 has no altsetting 0 [ 1484.616274][T10806] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1484.632118][T10806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.658089][ T5825] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1484.667490][ T5898] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1484.676574][T10806] usb 7-1: Product: syz [ 1484.693726][T10806] usb 7-1: Manufacturer: syz [ 1484.704307][T10806] usb 7-1: SerialNumber: syz [ 1484.732993][T10806] usb 7-1: config 0 descriptor?? [ 1484.744164][T15428] hsr_slave_0: entered promiscuous mode [ 1484.761135][T10806] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected [ 1484.770066][T15428] hsr_slave_1: entered promiscuous mode [ 1484.792754][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.800656][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.800726][T10806] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87 [ 1484.817128][T15428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1484.826391][T15428] Cannot create hsr debugfs directory [ 1484.832104][T10806] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7 [ 1484.840974][ T5825] usb 2-1: no configurations [ 1484.845700][ T5825] usb 2-1: can't read configurations, error -22 [ 1484.854001][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.873465][ T5825] usb usb2-port1: attempt power cycle [ 1484.888033][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1484.914061][T10806] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81 [ 1484.935363][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1484.944823][T10806] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1 [ 1484.955528][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.967642][T10806] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85 [ 1484.983213][ T5898] usb 3-1: Product: syz [ 1484.996661][ T5898] usb 3-1: Manufacturer: syz [ 1485.005771][T10806] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1485.014988][ T5898] usb 3-1: SerialNumber: syz [ 1485.168884][ T13] hsr_slave_0: left promiscuous mode [ 1485.290038][ T5825] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1485.338187][ T13] hsr_slave_1: left promiscuous mode [ 1485.354265][ T5825] usb 2-1: no configurations [ 1485.371354][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.383658][ T5825] usb 2-1: can't read configurations, error -22 [ 1485.416272][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.440970][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.463770][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.548579][ T5825] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1485.631034][T10806] usb 7-1: USB disconnect, device number 44 [ 1485.658580][ T13] veth1_macvtap: left promiscuous mode [ 1485.664580][ T5825] usb 2-1: no configurations [ 1485.721410][ T5825] usb 2-1: can't read configurations, error -22 [ 1485.740051][ T13] veth0_macvtap: left promiscuous mode [ 1485.745922][ T13] veth1_vlan: left promiscuous mode [ 1485.769917][T10806] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1485.788480][ T5825] usb usb2-port1: unable to enumerate USB device [ 1485.796333][ T13] veth0_vlan: left promiscuous mode [ 1485.805090][T10806] keyspan 7-1:0.235: device disconnected [ 1486.308385][T15583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.332660][T15583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.688819][ T9154] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1486.877720][ T9154] usb 7-1: Using ep0 maxpacket: 16 [ 1486.903000][ T9154] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1486.921430][ T9154] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.933900][ T9154] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1486.953191][ T9154] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1486.967521][ T9154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.976230][ T9154] usb 7-1: Product: syz [ 1486.982074][ T9154] usb 7-1: Manufacturer: syz [ 1486.987035][ T9154] usb 7-1: SerialNumber: syz [ 1487.177287][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1488.393525][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1489.472681][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1489.674207][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1489.707763][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1489.736772][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.809140][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1489.852744][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1489.862648][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.877521][ T24] usb 6-1: Product: syz [ 1489.881887][ T24] usb 6-1: Manufacturer: syz [ 1489.896798][ T24] usb 6-1: SerialNumber: syz [ 1490.344433][T15614] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1490.351387][T15614] [U] J"—e:ÀÆ" [ 1490.877928][ T5898] usb 3-1: 0:2 : does not exist [ 1490.925992][ T9154] usb 7-1: 0:2 : does not exist [ 1490.997270][ T9154] usb 7-1: USB disconnect, device number 45 [ 1491.182722][ T24] usb 6-1: 0:2 : does not exist [ 1491.243180][ T24] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1491.263876][T10806] usb 3-1: USB disconnect, device number 69 [ 1491.354804][ T24] usb 6-1: USB disconnect, device number 41 [ 1491.685725][T10124] udevd[10124]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1495.380191][T15428] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1495.429661][T15428] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1495.490209][T15428] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1495.523874][T15428] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1495.842130][T15666] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1495.848816][T15666] [U] J"—e:ÀÆ" [ 1496.546487][T15428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.643790][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.754508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.762011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.893546][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.900869][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.914777][T15676] netlink: 'syz.6.2092': attribute type 10 has an invalid length. [ 1496.922777][T15676] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2092'. [ 1497.979527][T15428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1497.991318][T15428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1500.751474][T15712] nbd: socks must be embedded in a SOCK_ITEM attr [ 1500.760819][T15712] block nbd0: shutting down sockets [ 1501.542286][T15719] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1501.549744][T15719] [U] J"—e:ÀÆ" [ 1501.736219][T15428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.023651][T15725] i2c i2c-0: Invalid block write size 34 [ 1502.066712][T15725] netlink: 'syz.6.2103': attribute type 1 has an invalid length. [ 1502.382627][T15725] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1503.209374][ T5898] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1504.158013][ T5898] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1504.207170][ T5898] usb 2-1: config 0 has no interface number 0 [ 1504.238335][ T5898] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1504.290656][ T5898] usb 2-1: config 0 interface 235 has no altsetting 0 [ 1504.350484][ T5898] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1504.407555][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.446357][ T5898] usb 2-1: Product: syz [ 1504.461441][ T5898] usb 2-1: Manufacturer: syz [ 1504.487595][ T5898] usb 2-1: SerialNumber: syz [ 1504.502094][ T5898] usb 2-1: config 0 descriptor?? [ 1504.531257][ T5898] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 1504.682935][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 1505.478746][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 1505.518183][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 1505.526311][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 1505.576487][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 1505.755954][ T5898] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1506.113540][ T5898] usb 2-1: USB disconnect, device number 78 [ 1506.143110][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1506.188556][ T5898] keyspan 2-1:0.235: device disconnected [ 1506.357306][T15428] veth0_vlan: entered promiscuous mode [ 1506.433156][T15428] veth1_vlan: entered promiscuous mode [ 1506.479744][T15428] veth0_macvtap: entered promiscuous mode [ 1506.512021][T15428] veth1_macvtap: entered promiscuous mode [ 1506.602968][T15428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.868487][T15774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.877116][T15774] batadv_slave_0: entered promiscuous mode [ 1506.883253][T15774] batadv_slave_0: entered allmulticast mode [ 1507.154962][T15428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.430875][T15428] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.557595][T15428] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.627960][T15428] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.636827][T15428] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.783019][T15780] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1507.789308][T15780] [U] J"—e:ÀÆ" [ 1508.488944][T12959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.527549][T12959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.720554][T12954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.842650][T12954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.868444][T11749] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1509.145142][T11749] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 1509.354056][T11749] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1509.391968][T11749] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1509.430004][T11749] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1509.471133][T11749] usb 2-1: config 0 has no interface number 0 [ 1509.498478][T11749] usb 2-1: config 0 has no interface number 1 [ 1509.543528][T11749] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1509.598947][T11749] usb 2-1: config 0 interface 197 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1509.672708][T11749] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1509.747012][T11749] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1509.823656][T11749] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1509.844753][T11749] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1509.878643][T11749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.905979][T11749] usb 2-1: Product: syz [ 1509.925836][T11749] usb 2-1: Manufacturer: syz [ 1509.950957][T11749] usb 2-1: SerialNumber: syz [ 1509.978981][T11749] usb 2-1: config 0 descriptor?? [ 1510.005843][T15787] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1510.021397][T11749] qmi_wwan 2-1:0.197: probe with driver qmi_wwan failed with error -22 [ 1510.038829][ T9154] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1510.050241][T15812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1510.064371][T15809] ------------[ cut here ]------------ [ 1510.071323][T15809] WARNING: CPU: 1 PID: 15809 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 1510.081689][T15809] Modules linked in: [ 1510.085904][T15809] CPU: 1 UID: 0 PID: 15809 Comm: syz.2.2119 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1510.098425][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1510.108937][T15809] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1510.114253][T15809] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cd 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cf 47 5c 09 cc e8 39 7a ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1510.134633][T15809] RSP: 0018:ffffc900044b7250 EFLAGS: 00010283 [ 1510.141398][T15809] RAX: ffffffff8205e117 RBX: 0000000000000000 RCX: 0000000000080000 [ 1510.150034][T15809] RDX: ffffc9000c36c000 RSI: 00000000000022ee RDI: 00000000000022ef [ 1510.159686][T15809] RBP: 0000000000000000 R08: ffffea0001a74707 R09: 1ffffd400034e8e0 [ 1510.167790][T15809] R10: dffffc0000000000 R11: fffff9400034e8e1 R12: ffffea0001a74730 [ 1510.175958][T15809] R13: dffffc0000000000 R14: ffff888023cd5e80 R15: 0000000000000002 [ 1510.184969][T15809] FS: 00007fd64d7fe6c0(0000) GS:ffff888125d83000(0000) knlGS:0000000000000000 [ 1510.194232][T15809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1510.200915][T15809] CR2: 0000000000000000 CR3: 0000000033934000 CR4: 00000000003526f0 [ 1510.209217][T15809] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1510.217348][T15809] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1510.225469][T15809] Call Trace: [ 1510.229487][T15809] [ 1510.232461][T15809] workingset_activation+0x5f/0x4a0 [ 1510.238371][T15809] ? folio_mark_accessed+0x301/0x4a0 [ 1510.243791][T15809] folio_mark_accessed+0x3b5/0x4a0 [ 1510.249153][T15809] kvm_release_page_clean+0x9a/0xe0 [ 1510.254466][T15809] kvm_tdp_page_fault+0x2dd/0x370 [ 1510.259786][T15809] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1510.265758][T15809] ? vmx_vcpu_run+0xd8b/0x25d0 [ 1510.270708][T15809] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1510.276724][T15809] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1510.282421][T15809] ? __pfx_current_save_fsgs+0x10/0x10 [ 1510.287987][T15809] kvm_mmu_page_fault+0x22f/0xb70 [ 1510.293126][T15809] ? __pfx_handle_ept_violation+0x10/0x10 [ 1510.298986][T15809] vmx_handle_exit+0x1090/0x18a0 [ 1510.304023][T15809] ? vcpu_run+0x361c/0x6f70 [ 1510.308763][T15809] ? rcu_is_watching+0x15/0xb0 [ 1510.314150][T15809] vcpu_run+0x432e/0x6f70 [ 1510.318634][T15809] ? vcpu_run+0x361c/0x6f70 [ 1510.323277][T15809] ? __pfx_vcpu_run+0x10/0x10 [ 1510.328189][T15809] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1510.334855][T15809] ? rcu_is_watching+0x15/0xb0 [ 1510.340156][T15809] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1510.346213][T15809] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1510.352236][T15809] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1510.358348][T15809] ? rcu_is_watching+0x15/0xb0 [ 1510.363220][T15809] ? look_up_lock_class+0x74/0x170 [ 1510.368590][T15809] ? register_lock_class+0x51/0x320 [ 1510.373978][T15809] ? __lock_acquire+0xab9/0xd20 [ 1510.379013][T15809] kvm_vcpu_ioctl+0x95c/0xe90 [ 1510.383788][T15809] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.389931][T15809] ? __lock_acquire+0xab9/0xd20 [ 1510.395518][T15809] ? __asan_memset+0x22/0x50 [ 1510.400207][T15809] ? smack_file_ioctl+0x302/0x340 [ 1510.405307][T15809] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1510.410935][T15809] ? __fget_files+0x2a/0x420 [ 1510.415774][T15809] ? __fget_files+0x3a0/0x420 [ 1510.420593][T15809] ? __fget_files+0x2a/0x420 [ 1510.425292][T15809] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1510.430535][T15809] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.436416][T15809] __se_sys_ioctl+0xfc/0x170 [ 1510.441694][T15809] do_syscall_64+0xfa/0x3b0 [ 1510.446279][T15809] ? lockdep_hardirqs_on+0x9c/0x150 [ 1510.451613][T15809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.457834][T15809] ? clear_bhb_loop+0x60/0xb0 [ 1510.462593][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.468875][T15809] RIP: 0033:0x7fd64c98e929 [ 1510.473360][T15809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1510.493091][ C1] vkms_vblank_simulate: vblank timer overrun [ 1510.499321][T15809] RSP: 002b:00007fd64d7fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.507872][T15809] RAX: ffffffffffffffda RBX: 00007fd64cbb5fa0 RCX: 00007fd64c98e929 [ 1510.515936][T15809] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 1510.518081][T15787] openvswitch: netlink: IP tunnel TTL not specified. [ 1510.524062][T15809] RBP: 00007fd64ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1510.539705][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.548318][T15809] R13: 0000000000000000 R14: 00007fd64cbb5fa0 R15: 00007fffcd730228 [ 1510.556498][T15809] [ 1510.560413][T15809] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1510.567743][T15809] CPU: 1 UID: 0 PID: 15809 Comm: syz.2.2119 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 1510.579843][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1510.589914][T15809] Call Trace: [ 1510.593207][T15809] [ 1510.596191][T15809] dump_stack_lvl+0x99/0x250 [ 1510.600813][T15809] ? __asan_memcpy+0x40/0x70 [ 1510.605412][T15809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1510.610648][T15809] ? __pfx__printk+0x10/0x10 [ 1510.615263][T15809] panic+0x2db/0x790 [ 1510.619182][T15809] ? __pfx_panic+0x10/0x10 [ 1510.623633][T15809] __warn+0x31b/0x4b0 [ 1510.627638][T15809] ? folio_memcg+0x1a8/0x310 [ 1510.632305][T15809] ? folio_memcg+0x1a8/0x310 [ 1510.637090][T15809] report_bug+0x2be/0x4f0 [ 1510.641449][T15809] ? folio_memcg+0x1a8/0x310 [ 1510.646054][T15809] ? folio_memcg+0x1a8/0x310 [ 1510.650882][T15809] ? folio_memcg+0x1aa/0x310 [ 1510.655490][T15809] handle_bug+0x84/0x160 [ 1510.659748][T15809] exc_invalid_op+0x1a/0x50 [ 1510.664433][T15809] asm_exc_invalid_op+0x1a/0x20 [ 1510.669297][T15809] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1510.674530][T15809] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cd 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cf 47 5c 09 cc e8 39 7a ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1510.694580][T15809] RSP: 0018:ffffc900044b7250 EFLAGS: 00010283 [ 1510.700745][T15809] RAX: ffffffff8205e117 RBX: 0000000000000000 RCX: 0000000000080000 [ 1510.708730][T15809] RDX: ffffc9000c36c000 RSI: 00000000000022ee RDI: 00000000000022ef [ 1510.716710][T15809] RBP: 0000000000000000 R08: ffffea0001a74707 R09: 1ffffd400034e8e0 [ 1510.724887][T15809] R10: dffffc0000000000 R11: fffff9400034e8e1 R12: ffffea0001a74730 [ 1510.732869][T15809] R13: dffffc0000000000 R14: ffff888023cd5e80 R15: 0000000000000002 [ 1510.740946][T15809] ? folio_memcg+0x1a7/0x310 [ 1510.745747][T15809] workingset_activation+0x5f/0x4a0 [ 1510.750960][T15809] ? folio_mark_accessed+0x301/0x4a0 [ 1510.756266][T15809] folio_mark_accessed+0x3b5/0x4a0 [ 1510.761401][T15809] kvm_release_page_clean+0x9a/0xe0 [ 1510.766616][T15809] kvm_tdp_page_fault+0x2dd/0x370 [ 1510.771654][T15809] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1510.776946][T15809] ? vmx_vcpu_run+0xd8b/0x25d0 [ 1510.781816][T15809] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1510.787747][T15809] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1510.793307][T15809] ? __pfx_current_save_fsgs+0x10/0x10 [ 1510.798811][T15809] kvm_mmu_page_fault+0x22f/0xb70 [ 1510.803892][T15809] ? __pfx_handle_ept_violation+0x10/0x10 [ 1510.809649][T15809] vmx_handle_exit+0x1090/0x18a0 [ 1510.814899][T15809] ? vcpu_run+0x361c/0x6f70 [ 1510.819422][T15809] ? rcu_is_watching+0x15/0xb0 [ 1510.824322][T15809] vcpu_run+0x432e/0x6f70 [ 1510.828702][T15809] ? vcpu_run+0x361c/0x6f70 [ 1510.833258][T15809] ? __pfx_vcpu_run+0x10/0x10 [ 1510.838266][T15809] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1510.844098][T15809] ? rcu_is_watching+0x15/0xb0 [ 1510.848884][T15809] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1510.854536][T15809] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1510.860273][T15809] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1510.866265][T15809] ? rcu_is_watching+0x15/0xb0 [ 1510.871043][T15809] ? look_up_lock_class+0x74/0x170 [ 1510.876179][T15809] ? register_lock_class+0x51/0x320 [ 1510.881481][T15809] ? __lock_acquire+0xab9/0xd20 [ 1510.886382][T15809] kvm_vcpu_ioctl+0x95c/0xe90 [ 1510.891081][T15809] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.896298][T15809] ? __lock_acquire+0xab9/0xd20 [ 1510.901204][T15809] ? __asan_memset+0x22/0x50 [ 1510.905908][T15809] ? smack_file_ioctl+0x302/0x340 [ 1510.910949][T15809] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1510.916436][T15809] ? __fget_files+0x2a/0x420 [ 1510.921047][T15809] ? __fget_files+0x3a0/0x420 [ 1510.925919][T15809] ? __fget_files+0x2a/0x420 [ 1510.930706][T15809] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1510.935758][T15809] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.940998][T15809] __se_sys_ioctl+0xfc/0x170 [ 1510.945981][T15809] do_syscall_64+0xfa/0x3b0 [ 1510.950498][T15809] ? lockdep_hardirqs_on+0x9c/0x150 [ 1510.955715][T15809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.961794][T15809] ? clear_bhb_loop+0x60/0xb0 [ 1510.966483][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.972429][T15809] RIP: 0033:0x7fd64c98e929 [ 1510.976856][T15809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1510.996672][T15809] RSP: 002b:00007fd64d7fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1511.005395][T15809] RAX: ffffffffffffffda RBX: 00007fd64cbb5fa0 RCX: 00007fd64c98e929 [ 1511.013410][T15809] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 1511.021409][T15809] RBP: 00007fd64ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1511.029484][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.037560][T15809] R13: 0000000000000000 R14: 00007fd64cbb5fa0 R15: 00007fffcd730228 [ 1511.045575][T15809] [ 1511.048927][T15809] Kernel Offset: disabled [ 1511.053263][T15809] Rebooting in 86400 seconds..