last executing test programs: 3m40.856014133s ago: executing program 4 (id=5): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001f0000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 3m40.666178028s ago: executing program 4 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = dup3(r1, r1, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000500)={0x10, 0x960, 0xf0, 0x4b0, 0x7, 0x9bc, 0x0, 0x1, {0x4, 0xffffffff}, {0xb, 0x229, 0x1}, {0x3, 0xfffffff7}, {0x8, 0x4}, 0x6e9dbcace6b36c3f, 0x12, 0x5, 0x40, 0x1, 0x1, 0xd1e, 0xc8cd, 0x2, 0x6, 0x1, 0x7, 0x24, 0x0, 0x3, 0x1}) (async) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') read(r5, &(0x7f00000000c0)=""/181, 0xb5) (async) sendfile(r5, r5, 0x0, 0xfff) (async) ftruncate(r4, 0x3000000) sendfile(r3, r4, 0x0, 0x80000001) (async) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r7, r7}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r9, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x38) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)=r0}, 0x20) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x614}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x60}, 0x9}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x32, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x1, 0x2, 0x1, 0x0, 0x3, 0xffffffffffffffc0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @generic={0x16, 0x4, 0x5, 0x1, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074021440fd07010099480102030109021b0001000300000904000001c5b3e30009050bb2", @ANYRES8], 0x0) 3m36.627725931s ago: executing program 4 (id=24): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x3, &(0x7f0000000040)=r3, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000884}, 0x40000) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xbe}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}], 0x1, 0x200284c1) 3m35.432046046s ago: executing program 4 (id=26): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) timer_gettime(r5, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x77359400}, {r6, r7+60000000}}, &(0x7f0000000200)) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) dup3(r3, r1, 0x0) 3m19.874558896s ago: executing program 32 (id=26): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) timer_gettime(r5, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x77359400}, {r6, r7+60000000}}, &(0x7f0000000200)) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) dup3(r3, r1, 0x0) 13.240195974s ago: executing program 5 (id=636): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket$isdn(0x22, 0x2, 0x25) r6 = socket$isdn(0x22, 0x2, 0x26) dup3(r5, r6, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100), 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0xc}) 12.337159018s ago: executing program 3 (id=637): r0 = eventfd(0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000009542dc9d5a7d6f0c5ce6ccd39300000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xab5, 0x0, 0x0, 0x0, 0xe4, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x2c}, 0x10) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r4, r0, 0x0, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0xeeb, 0xc10800) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="150100002a08001700", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x3000000}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000000040)="0f20") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x76, 0xffffffffffffffff}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x4000000}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r10, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) 10.660132609s ago: executing program 5 (id=642): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$inet(0x2, 0x2000000080002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d10, 0x0, 0x51c, 0x0) 9.619840247s ago: executing program 5 (id=645): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x1) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000008c0)="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", 0x753}], 0x2}}], 0x1, 0x0) fanotify_mark(r2, 0x549, 0x4800003a, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='hfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85512, &(0x7f0000000180)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) open(&(0x7f0000000140)='./file0\x00', 0x37, 0x0) 9.244943737s ago: executing program 2 (id=647): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xb) unshare(0x20000400) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x20000000, @loopback, 0xfffffffe}, 0x1c) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x800) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x810, r0, 0x3e9a7000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) 9.055945419s ago: executing program 5 (id=648): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xb8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007"], 0x2c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c000180060006008848"], 0x24}}, 0x0) 8.619111036s ago: executing program 3 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="310300000000000002140b00000008000300", @ANYRES32=r7], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 8.228836732s ago: executing program 2 (id=650): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x8, 0x0, 0x1, 0x81, 0x0, 0x4, "01e60000000000000034dbb39fe6083a", 0x0, 0x0, 0x0, 0x99}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) mount$9p_tcp(&(0x7f00000003c0), 0x0, &(0x7f0000000440), 0x800, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x16b301, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) r5 = io_uring_setup(0x1bcf, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001300)=""/4095, 0x1e7240}], 0x1000000000000209) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "93"}]}], {0x14}}, 0x84}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x9}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) 8.133598811s ago: executing program 0 (id=652): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000068c0)=@delchain={0x124c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1140, 0x2, [@TCA_CGROUP_POLICE={0x2c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xed58}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x58, 0x1, [@m_ct={0x54, 0x13, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x101}]}, {0x21, 0x6, "5743973d4ebb2affd6bf2be49ebd00656eca9a3493ba3017de1d1c1b83"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_POLICE={0xc5c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x9, 0x2, 0xe, {0xa8, 0x1, 0x3ff, 0x2, 0x1, 0xfffffff8}, {0x3, 0x1, 0x5, 0x7, 0x2be1, 0x31}, 0xb, 0x40, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x28d4, 0x9, 0x4, 0x2, 0x4, 0x4, 0x9, 0x5, 0x8, 0x6, 0x85c3, 0x9a1, 0x9, 0x0, 0x1, 0x9, 0xf, 0x0, 0x7, 0x0, 0x67, 0xff, 0x6, 0x40, 0x200, 0x5, 0x2, 0x9, 0x8000, 0x7a, 0x401, 0x40, 0x8, 0x7, 0x3, 0x6, 0x7ff, 0x4, 0x5, 0x5, 0x3, 0xff, 0x4, 0x0, 0x80, 0x1, 0x100, 0x7, 0x2, 0x8000, 0x2, 0x7b7f, 0x80000000, 0x25, 0x1, 0x7ff, 0x400, 0x1, 0x5, 0x8, 0x4, 0x0, 0xe, 0x0, 0x2, 0x6, 0x8001, 0x5, 0xfffffff5, 0x0, 0x0, 0x1, 0x6, 0x6, 0x5, 0x8, 0x5462, 0x3, 0x10001, 0x8, 0x6, 0x2, 0x6, 0x0, 0x2, 0x5, 0x100, 0xc, 0x3, 0xffffffff, 0x1, 0x831, 0xfffffff9, 0x5, 0x4, 0x10001, 0x9cf, 0x8, 0x1000000, 0x6ce2, 0x6, 0x4384, 0x2, 0x7, 0xfffffffa, 0x5, 0x7, 0x1000, 0xe, 0x401, 0x7, 0x9, 0x7, 0x0, 0xb, 0x9, 0x5, 0x7ff, 0x6, 0x10001, 0x5, 0x10, 0x7, 0x9, 0xffffffff, 0x5, 0x1, 0x400, 0x400, 0x9, 0x2, 0x9, 0x8, 0x8, 0xf, 0x400, 0xfffffffa, 0x9, 0x3, 0x3, 0x5, 0xd, 0x8, 0x7, 0x4, 0x0, 0xb, 0x8001, 0x2, 0x8, 0x518f6508, 0x5, 0x400, 0x3a018f14, 0x2, 0xfffffffb, 0x40, 0x0, 0xbe, 0xfffffff7, 0x3d, 0xb, 0x7fffffff, 0x7, 0x81, 0x3, 0x3, 0x10000, 0x1, 0xc96, 0x2, 0x7, 0x6, 0x1b, 0x0, 0x82c, 0x1, 0xfffffc00, 0xa4eb, 0x2, 0xf, 0xda, 0x8, 0x7, 0x2, 0x3, 0x2, 0xfffffffc, 0xd2f9, 0x7f, 0x40000000, 0x8, 0x5, 0x80000000, 0x5, 0x8, 0x9, 0x7fffffff, 0x2, 0x4, 0x5, 0xada4, 0x1, 0x7fff, 0x0, 0x7fffffff, 0x7, 0x7f, 0x101, 0x5, 0x81, 0x40, 0x6, 0x9, 0x1, 0x2, 0x0, 0x100, 0x0, 0x9, 0x3, 0xffff, 0x2, 0x6, 0x4, 0x7, 0xff, 0x39e5ad71, 0x6, 0x9, 0x8, 0x401, 0x40, 0x8, 0x410, 0x9, 0xe5, 0x8001, 0x89, 0x80, 0x10001, 0x2, 0x6, 0xf, 0x9, 0x5, 0x23, 0x0, 0xa, 0xa2bc, 0xffffd7b1, 0x3, 0x0, 0x7, 0x1000, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x400, 0xa9a3, 0x2, 0x3, 0xe, 0xf1, 0x1, 0x2, 0x2, 0x3, 0x4, 0xb, 0x81, 0x9, 0x8, 0xffffffff, 0x5, 0xfffffffd, 0x5, 0x5, 0x4, 0xe82, 0xe13, 0xb, 0x3ff, 0x3, 0x0, 0x101, 0x2, 0x1, 0x0, 0x0, 0x89ac, 0x7, 0x9, 0x2, 0x8, 0x20f0747, 0x1ff, 0x4d1d, 0x7, 0xe, 0x4a18, 0x0, 0x8, 0x7, 0x81, 0xb, 0x9, 0x1, 0x3, 0x3, 0xd2, 0x7, 0xb, 0x6e, 0x3, 0xfffffffd, 0x9, 0x2, 0x9, 0x2, 0xf546, 0x2, 0x868, 0x0, 0x1ff, 0x8, 0x8b97, 0x6, 0x4, 0x0, 0x9, 0x9, 0xa4, 0x0, 0x9, 0x5, 0x57, 0x8, 0x1000, 0x9, 0xffffffff, 0x8, 0x6281, 0x3, 0xffffff00, 0x3ff, 0x7, 0x7, 0x9f, 0x5, 0x6, 0x2, 0x9, 0x94, 0x9, 0x0, 0x8, 0xfffffffc, 0x8, 0x3c9, 0x2e, 0x9, 0xfffffffe, 0x2, 0xff, 0x1, 0xac73, 0x3, 0x4, 0xfff, 0x3, 0x1, 0xffff, 0x0, 0x0, 0x7, 0x1, 0x2, 0x101, 0x1, 0x3, 0x1, 0x400, 0xfffffffc, 0x4368851d, 0x0, 0x0, 0x7, 0x101, 0x9, 0x9, 0xfffffff8, 0x9f4, 0x4, 0x5, 0xf, 0xf, 0x3, 0x2, 0x9, 0x0, 0x40, 0xda, 0x0, 0xe13, 0x9, 0xd6, 0x8, 0x7, 0xfffffff5, 0x8001, 0x2, 0x8000, 0x7, 0x7, 0x168, 0x1, 0xffff, 0x769, 0x1, 0xfffffffd, 0xcfa4, 0xfffffffa, 0x7, 0x400, 0xdb, 0x140000, 0x765, 0x9, 0x1, 0x100, 0x1, 0x3, 0x2, 0xfff, 0x3, 0x9, 0x101, 0x13d8, 0xffff, 0x8, 0x3, 0x1, 0x2cc, 0x7, 0x2, 0xae74, 0x8, 0x9, 0x1ff, 0x9359, 0xe, 0x0, 0xfb99, 0x3, 0x9, 0x2, 0x7f, 0xfe, 0x4, 0x8, 0x3, 0x74, 0xaa, 0x81, 0x24000, 0x21af, 0x200, 0x5, 0xffffffff, 0x8, 0xf9, 0x9, 0x3, 0x7, 0x800, 0xa, 0x2c, 0xa, 0x2, 0x1, 0x6b, 0xd9fe, 0x6, 0x1, 0x3, 0x3, 0x5, 0xd85, 0x6, 0x8, 0x1ff, 0x9, 0xc7, 0x1ff, 0x81, 0xfffffffc, 0x100, 0x0, 0x3, 0x4f67, 0xfffffffe, 0x3, 0x2, 0x2, 0x13f, 0x0, 0x6, 0x3, 0x4, 0x987, 0xcc08, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffffffc0, 0x8, 0x5b, 0x2, 0xfff, 0x4800000, 0x8, 0x24, 0xfffffffd, 0x0, 0x6, 0x5, 0x9, 0xfffffff3, 0x7, 0x4, 0x9, 0x1, 0x79b, 0xfffffff7, 0x8, 0x10001, 0x26, 0xfff, 0x58, 0x74821527, 0x9, 0x0, 0x80, 0x3, 0x405, 0xffffffff, 0x0, 0x7, 0x4, 0x3, 0x50d1, 0x0, 0x9, 0xd5, 0x2, 0x80000001, 0x0, 0xa, 0x400, 0x1, 0xfc4, 0x2, 0xe7c, 0x6, 0x9, 0x101, 0xfffffffe, 0x6, 0x101, 0x5, 0x76, 0x3, 0x40, 0x5, 0xfffffff8, 0x0, 0x0, 0x8001, 0xfffffffb, 0x9, 0xff, 0x9, 0x7, 0xba6, 0x8, 0x4d, 0x458c, 0x7, 0xff, 0x800, 0x8, 0x5, 0x7, 0x8, 0xfffffffd, 0x4, 0x7ff, 0x4, 0x7, 0x7f, 0x8, 0x4d37, 0x4000, 0x2, 0x6, 0x7, 0x5, 0x4, 0x200, 0x73, 0x7fffffff, 0xd, 0x7, 0xba, 0xe8cb, 0x0, 0xd, 0x1, 0x0, 0x1, 0x400, 0x1, 0x4, 0x4, 0x5, 0x6, 0x200, 0x1, 0x9, 0x510b, 0x4, 0xfffffff3, 0x1, 0x6, 0x4000000, 0x7, 0x10001, 0xd, 0x1, 0x9, 0x1000, 0x81, 0x7, 0x8001, 0xa, 0x5, 0x7, 0x8, 0x9, 0x0, 0x4, 0x4f, 0x3, 0x7, 0xa36, 0x6, 0xffff, 0x81, 0x9, 0x4, 0xa9, 0x248, 0x2, 0xe31, 0x9, 0x12f1, 0x7, 0x5, 0x9, 0x3, 0x5, 0x7, 0x3, 0x80000000, 0x7, 0x8, 0x8, 0x912, 0x7fffffff, 0x81, 0x80000001, 0x800, 0x7, 0x1, 0x40, 0x2, 0x81d0, 0x3, 0x7, 0xd213, 0x9, 0x1, 0x51, 0x200, 0x5, 0x1, 0x3, 0x97d8, 0xc, 0x5, 0x5, 0x8, 0x0, 0x0, 0xd, 0x3386, 0x2, 0x5, 0x15e, 0xffffffff, 0x40, 0xffffffff, 0x6, 0xfffffffc, 0x6, 0xf, 0x1a8, 0x257d, 0x5, 0x1000, 0x7f, 0x80000001, 0x3, 0x2, 0x1, 0xe4e, 0x7, 0x8, 0x8000, 0x2, 0x6, 0x5, 0x21, 0x6, 0x200, 0x0, 0x6, 0x9, 0x5, 0x8, 0xfffffff9, 0xfffffff7, 0x6, 0x3, 0x100, 0x100, 0x4, 0xf, 0xd, 0x6d0000, 0x22, 0x5, 0x6, 0x1, 0x7, 0x81, 0x3, 0xfffffff7, 0x6, 0x1, 0x3, 0xfff, 0x3, 0xf1, 0xe, 0x2, 0xffff, 0xa0, 0x6ad]}]}, @TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x9, 0x1, 0x3, {0x3, 0x2, 0x5, 0xbf4, 0xa3e0, 0x8}, {0x3, 0x0, 0x400, 0xffff, 0x2, 0xb}, 0xae, 0xff, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x4, 0x1, 0xb, 0x8d, 0x80000001, 0x5, 0x2, 0x1, 0x9, 0x84c, 0x3, 0x7, 0xe, 0xfffffff0, 0xf4, 0x100, 0x9, 0x3, 0xc, 0x2, 0x80000001, 0xfffffff8, 0x8, 0x3aa, 0x0, 0x6, 0x3ff, 0xc, 0x502, 0xffffffee, 0x9, 0x6, 0x0, 0x7fff, 0x30a9, 0x4, 0x4e8, 0x33b1f100, 0x6902, 0x3, 0x5, 0x49, 0x1, 0x4, 0x749f, 0x3, 0x3, 0x0, 0xd6, 0x3, 0xbb, 0x5, 0x5, 0x0, 0x1, 0x3, 0x24c, 0x790, 0x5, 0x3ff, 0xab69, 0x393a, 0x6, 0x2, 0x7, 0xf, 0x5, 0x7, 0xc15f, 0xbe86, 0x6, 0x800, 0x8, 0x1, 0x8001, 0xcf5, 0xfffff800, 0xfffffc00, 0x2, 0x8, 0xf9, 0x6, 0xe, 0x1, 0x2e, 0x40, 0x5, 0x8, 0xfffffff8, 0xc, 0x5, 0x80000001, 0x7c38, 0x1, 0x1846ea98, 0x8, 0x77f, 0x0, 0x3, 0x1, 0x8, 0x3, 0xbeb8, 0x10000, 0xe424, 0x1, 0x3, 0xffff0dae, 0x5, 0x3, 0x94b, 0x7, 0x4, 0x4, 0x7ff, 0x6, 0xe, 0x6, 0x0, 0x800, 0x1, 0xb, 0x6, 0x6, 0x0, 0x2, 0x8b3d, 0x1, 0x2e, 0x16a, 0x3f, 0x8001, 0xbc76, 0x1, 0xa, 0x9, 0x7f, 0xb, 0x90be, 0x3, 0x9, 0x11a, 0x4, 0x5, 0x1ff, 0x3, 0xfffffff8, 0xd, 0x6, 0x9, 0x5, 0x7f, 0x1, 0x8, 0x5, 0x4, 0xa, 0x4, 0x3126, 0x2, 0x8, 0xd4e0, 0x2, 0x9, 0xc5b1df9, 0x2, 0x3, 0xffffffff, 0x1e0, 0xc9a9, 0x9, 0x400, 0x5, 0x5, 0xa7ac, 0xcd5c, 0x6, 0x6b, 0xe7, 0x4393, 0x0, 0xfffffff7, 0x0, 0x5, 0x7, 0x5, 0xfffffff0, 0x3, 0x0, 0x4, 0x101, 0x8, 0x0, 0x4fe2, 0x2, 0x7, 0xa6a, 0x1, 0x6, 0x0, 0x8001, 0x6, 0x8, 0x101, 0x7, 0x696ab22c, 0x5, 0x2, 0x5, 0x1, 0x53, 0x4, 0x7fff, 0x8, 0x72, 0x9, 0x8c, 0x7, 0x5, 0x3, 0x80, 0x6, 0x17c6000, 0x9, 0xfffffffd, 0x5, 0xa96, 0x5c, 0x8, 0x8, 0x9, 0x1, 0x3ff, 0x24000, 0xc97, 0x8, 0xaf45, 0x6, 0x208, 0x2, 0x1000, 0xa8, 0x6, 0x1, 0x7, 0x1, 0x6, 0x1, 0x0, 0x8, 0x80, 0xffff, 0x80000000, 0x265]}, @TCA_POLICE_RESULT={0x8}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xb4, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x124c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7.949608321s ago: executing program 0 (id=654): futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffffffff00000001000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff08021100"], 0x398}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00'}}, 0x118) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 7.100177589s ago: executing program 5 (id=655): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000007e00)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000800)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x619, @private0, 0x2}}, [0xfffffffffffffff9, 0x6, 0x6, 0x401, 0x9962, 0x80000000, 0x3, 0xb, 0x0, 0x6, 0xd25, 0x7, 0xa34f, 0x7, 0x2]}, &(0x7f0000000500)=0x100) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) renameat2(r4, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x5, 0xfffffffc, &(0x7f0000000040)={{0x0, 0xfffffffe, 0x80, 0xfffffffe}}, 0x0, 0x0}}) syz_open_procfs(0x0, 0x0) r6 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000001000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000100)={{0x3a, @multicast1, 0x0, 0x0, 'rr\x00'}, {@remote}}, 0x44) 6.762595024s ago: executing program 0 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000a07debbd2251d47700000000000000000000000000000000ffffffff10000000000000000000"]}, 0xde) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r3 = socket(0x840000000002, 0x3, 0xff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) ioprio_set$pid(0x1, 0x0, 0x2000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2200000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)=@newtaction={0x894, 0x30, 0xffff, 0xffffffff, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1ff, 0xe, 0x100, 0x2, 0x5, 0x4, 0x0, 0x20009, 0x1, 0xb2, 0x97, 0x0, 0x9, 0xfffff000, 0x3, 0xfffff7d3, 0x4, 0x9, 0xa0, 0x8, 0x4, 0x7, 0x400, 0x8, 0x9, 0x3, 0x8, 0x8, 0x6, 0x8e9, 0x7fffffff, 0x3, 0x400, 0x3, 0xb, 0x7, 0x7, 0x0, 0x101, 0x7, 0xd, 0x3, 0xaf, 0xe, 0x0, 0x9, 0x8, 0x0, 0x489, 0x9, 0x3, 0xce, 0x3, 0x8, 0x7f7c, 0x80000000, 0x63b, 0x6, 0x400, 0x3, 0x5, 0x4, 0x5aa, 0x3, 0x52b, 0x7, 0xfffffffa, 0x5, 0x8, 0x8, 0xf796, 0x0, 0x5, 0x3ff, 0x29, 0x3c, 0x771c, 0x4, 0x9, 0x9, 0xaffc, 0x6, 0x101, 0x3, 0xea00, 0x100, 0x8, 0x9, 0x4, 0xfffffff3, 0x32, 0xe, 0x7ff, 0x7, 0x0, 0x0, 0x9, 0x9, 0x9, 0x6, 0x81, 0xffc, 0x6, 0xffff0001, 0x4, 0x9, 0x0, 0x8, 0x200, 0xa, 0xbde, 0xe, 0x78500, 0x3, 0x443f4d4f, 0x8, 0x1, 0x800, 0x5, 0x8, 0x8, 0xfe, 0x54b, 0xfffffffe, 0xd91e, 0x1000, 0x6, 0x5, 0xac, 0xf, 0x8, 0x0, 0xd78, 0x9, 0x9, 0x3, 0x3, 0x26, 0x364b, 0x80, 0x99, 0x1ff, 0x801, 0xc, 0xfaaf, 0x3, 0x6, 0x98ef, 0xa6be, 0x1, 0x2, 0x8, 0xa0000, 0x80000000, 0x1ff, 0xdac, 0x8, 0xe, 0x5, 0x2, 0x2f8c, 0x10000, 0x0, 0x8, 0x8, 0x9a9, 0xffffffff, 0x3, 0x644, 0x4, 0x6, 0x1, 0xb, 0x8, 0x5, 0x8, 0x3, 0x0, 0x3, 0x8000, 0xb8b, 0x9, 0x6, 0xffff0001, 0x10001, 0x8, 0x17b, 0xcb, 0x10001, 0xc9, 0x199, 0x9, 0xf7ee, 0x5, 0x9, 0x9, 0x0, 0x5, 0x5, 0x5, 0x1, 0x4, 0x6, 0x9, 0x0, 0xb, 0xfffffffc, 0x0, 0x9, 0x8, 0x8, 0x7, 0x0, 0xba, 0x3, 0x2, 0x7fffffff, 0x68b459d7, 0xff0a, 0x4183, 0xfffd, 0x4, 0x0, 0x40, 0x6, 0xfff, 0x5, 0xf, 0x9, 0x40, 0xffffffff, 0x5, 0x4, 0x9, 0x9, 0x80000000, 0x7, 0x1, 0x7f, 0x8, 0xffffc166, 0x2, 0x2, 0x10, 0x1000, 0xc, 0x2726, 0x7fffffff, 0x7, 0x2, 0xffffffff, 0x7fff, 0x8, 0x1, 0x10006]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x10000000, 0x1, 0xdfaa, 0x3, {0xfb, 0x0, 0x5, 0x3, 0x6, 0xfff}, {0x5, 0x2, 0x7b, 0x7, 0x8, 0x1}, 0x6, 0xd, 0x10001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0xeb2, 0x2e, 0x202, 0x1, 0xc, 0x5, 0x40, 0x2, 0x5, 0x0, 0x9, 0x0, 0xfffffffc, 0x8, 0x7ff, 0x8, 0x1b8e, 0xfe, 0x9, 0x7, 0xfffffff2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x5, 0x5, 0x1, 0x5, 0x5, 0x8cf, 0x2f, 0x1829, 0x3, 0x0, 0x6, 0x64c, 0x9, 0x7, 0x0, 0x8, 0x8, 0x7ff, 0x0, 0x1, 0x4, 0x6, 0x542, 0x1, 0x286b6384, 0x9bb5, 0x8003, 0xde8, 0x9, 0x4, 0x2, 0x0, 0x6, 0x5, 0x2, 0x7, 0x7fffffff, 0x5, 0x6, 0x2, 0xbb1f, 0x40, 0x6, 0x8, 0x2, 0xfffffffe, 0x0, 0x3, 0x6, 0x4, 0x79, 0xffffffff, 0x3a, 0x80, 0x4, 0x7, 0x8, 0x6, 0xfffffffd, 0x5, 0x28662100, 0x1, 0xd3fe, 0x8, 0x9, 0x2, 0x4, 0x2, 0x5, 0x9, 0x8, 0x3, 0x564, 0x7fff, 0xc3b6, 0x200, 0x5de6, 0x8, 0x6, 0x800000, 0x1, 0x81, 0x8, 0x6, 0xd, 0x5, 0x7, 0xfffffff9, 0x7, 0x6, 0xfffffffb, 0x2, 0x100, 0x4ba, 0x7b40, 0xfffffff8, 0xc, 0x22, 0x7, 0x5, 0xfff, 0x4, 0xfffffff2, 0x5, 0xffff, 0x5, 0x6, 0x0, 0x0, 0x200, 0x40, 0x9, 0x13e, 0xff, 0xa, 0x7, 0x3, 0x720, 0xffffffff, 0xd, 0x1, 0x4c6a, 0x1, 0xc, 0x6, 0x7e, 0xa3, 0x0, 0x10000, 0x1, 0xc, 0x9, 0x8, 0x400003, 0x6, 0x8, 0x5, 0x1, 0x9, 0x9, 0x8, 0x2, 0x5, 0xffff, 0x1, 0xffffff75, 0x8, 0x1, 0x0, 0x400, 0x2, 0x3, 0x6, 0x4, 0x3, 0x3, 0x6, 0x1, 0x2, 0x80000000, 0x4, 0xcf, 0x5, 0xfffffffe, 0x6, 0x8b, 0x4, 0x2000, 0x7, 0x2, 0x80, 0xc7, 0x7fffffff, 0xca, 0x9, 0xff7, 0xd, 0x1, 0x2, 0x3, 0x3e6d, 0x2, 0x2, 0x6, 0x1000, 0x6, 0x5, 0x3, 0x4, 0x0, 0x1ff, 0x3, 0xfffff97b, 0x0, 0x2, 0x401, 0x80000001, 0x3, 0xfffffc00, 0xfdcb, 0x6, 0x0, 0x8, 0xfff, 0x46f, 0x1, 0x4, 0x8, 0x6, 0x7, 0x7, 0x59, 0xe, 0xb8, 0x1, 0x5, 0x3, 0xe444, 0x7, 0x9, 0xd1, 0xa1, 0xf3, 0xff, 0x1000, 0xffffff7f, 0x72a, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x40000}, 0x4) lsm_get_self_attr(0x0, &(0x7f0000000040)={0x0, 0x0, 0xb5, 0x95, ""/149}, &(0x7f0000000100)=0xb5, 0x1) socket$kcm(0x29, 0x5, 0x0) syz_clone(0x5e08a57c1e740ecf, &(0x7f0000000480)="4ddc6134f44924353b11790a24596c75735cda57ff83bb1d36768d82e1c0063a463b782dea71d9", 0x27, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="c0f781a06965338bbf52e5219a614117b02c17fcf2ab347f03e1837a2e913dd690a5d3186d333af1abe8eef40e38") 6.762155912s ago: executing program 2 (id=658): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.545212751s ago: executing program 1 (id=659): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000002040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r3, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000008c0)="d6d849e873e049f344f05771db4de015adba155019642b550121f62396c48bca07ec1b58461fdbc32eae279733248faf2bdc7689c5a4c3dad01a3b3d46632edd7f827494a878f9ba9b3d187c5fba93da7404b18fac3eec38142b0896c97394ead0e1f9d74f6c513acc0c2eb5376cda1b1c726a1b7660aef5fc1994581917f7919f31b0bd8966f5409f951d79d3faf4d110a4203082a53c1a38420d918ddf832bf6e9f9bb3d0f8a6426d45f0e1aef8a423bbd89a5db1aab03991d5f75b5995a9801a9a6e7894d27bbd498aefc5f0d48de865dd71a4ad74487fcffdb0683fc928bf9f2b8d3bc3909ab23dea63611ba54b7a51eec95b56f2eaf69086bb5f15ce051ce2a070dc10a9ad508d2c4231cbe4d1a53c1e07d00879e280144965129edbac5af4ae1bd0e527b54d42e95d1e98f89576180ef624dd5fea08ed9e7afbb109d743c03085bf508f519ad6dacb378c2b688c28795962f2e8f85a0a2070825caafeac4046b4bc6e9da4084743dd04bed8960ba88ff091ee3e4f3a5316e72445cd00c6ea570eacfa2cb42e0ba3d8eada8397ce30ddd42e79d2db782e908142e4bcef8de3eaccadaebc84295d453731f3b832785b48242ce83ad78472fa3d61c8f6912313ab0453a18b97e70ea87c95ab50f1932452dc4394b6e60a1d56560d835ec66598aa9e21758b2696195600a22c281a4042e9e62859e20ab649cf7bb74c6f09c023bde910ac703798977c95a1ef6b9ac8bd1a68f651b4ccd7a99b809a24855b11a658ed6ec4ae67bc9de03a13a73c3dd901c6a763f63810d3037310b2829828a5e265528dc0a6867b5cc865acc33ab557172f226226f02381004dbb8af68de8d610b7009767821d476f714e25606e05ca5da5584b0f13fdc627b97d395d7b7904cd5e14628f9a713a2cdc9a196d30cfbe9e42f368f927c9c5c1bf784f1db86b8ff58a286bbe057c8f49b6668cec12643fc8fce5909c724dd6d9e6a1de7b42653087e8cd2ae1fbd7a8575e4db43f7aa85849c5626a6e90eb5970543a0e15247ae4be203b62a2f8b0df5be4e395bcc07fd0a7abb2c885473eaab6f26eee9a6ed788efde9db711003477fc4ab11abff092c598be0baabb6ca9c96e8ed7ef4798ebb5631b92fdc8dd6216529951717ea26dc0ff280d8ae31d1e27ba4e5879ecdffbccf48f026af490ea5ecd76d43c67ce027a94abb0a980ab9d170208177b7ac857a7f7880b430bc440b0ad428f776fc82314f4188709114a123190c483ed010cc8fa7869863d72b46130bf84c81621e2e18113b382f1b269a35ed8a7d84b2344849fef240253e85ac2a0909cf7046a864484095eed1b44a65f76bfba38b337eacea4767db9443e307a851aa6fb60a7114e1dc0887aab5931363acf3e829381303182bf58726c9722bee70d593f1491ace2bbc2925ea5357e60ef7fdd27d852ac5e53bb7459517509708beffe3462a6ccd732c113fb85f1f884b76229bc7a014123b6709d11bd364343b871eb247340393c00183f6f37b4bee78f6ca8a6e4c03518066b8d59831609b3377dbae0749207103eb6dab75c5d0f47341e392e109b618e36388dbc6d19b844249397ba06e7159104b2608e6cf7d89bfa5c2decb40cbad9c97dd1875ba77906a021cae82b193ed5cac11fcd7c65939774a3c0375aae5a88c3f66641439848e500273e549b85d89b9bbf118629441bdbc2ee5c17ed82535c553b09e654ad61fdcef7fdef99213da51c59dec8b8682bf6a23e87e048dc10160b6be4fb0a45da6b53175957efc440fecfd5b2b16b8450e880a675985cdcfd3ce835eafe0caab20daa95d66a13eab6dc2750a114e5c3b2e04a7291ccafa50c0d6f1b9e3eed71d990dc15bfedebf4b9a97d7be307804e119cb40cabf939a7cb2dea2043a20220758e3374404e53b54005bfb22e45deca44a47a29eca98ae36980000d5491c85c8177338edf53ee113e3726f4442877c9c381b2b36b87019fd2caf420556e574a69eefe83bdaf5b666a7bd8f17b5c6a78c590b0fe7a34c4fb04fbda59c38ac20d5fe254eb780caf28b0d52d6fb70fc1ef256fe7083eb9cf63dd708313ca6491fd94cc89057dd377a5a578506dc202f7aebfa38e837bdae0a5ea281d85d00c3b6cd96ca627069e022bbda129befed6bd73e939340affa48b2458d0ede3d806a9c64701891d9d8a02d311713637230642a30a28bd64de9991feb95b52a509e553164e47faf16e0263b0e319cdf79639981ea814601a98436f2c264c68c5ee4f9ea2fd089a0d3bb08ae69a76f07c7ef8e78081550e10ac18910013a3c1340b8fcae84ac094785e4f4047caac511408da93c0d148e95d3b49653f34e4a7b415f16ebb1d7bf39de7dec74acbd2e3338f8d130621f94b972a926f907e70e7564afe62642bfd0e7beefed6cc1b43b2b5011fd7c14483f08e19989800b6f71dab2c24298a2359f37ec23590d4f4e232e3a2275c6a999f28b6f221d0328f7ee621e52daa60a56fc5597ba6f41f8ba4e93d535c71cf044e00766e514c6cb481a79ff0327ef658e950725f9b2a63cfe4900f79f15ab5a209ffd5358b0c663f76bc301d77b3b4a0c920ab5477bacfa3d5b5216dc24d7f1ce08682d1a6de83d6fe85a2f2a07f728a0b3bb9727817b02af6121b875", 0x753}], 0x2}}], 0x1, 0x0) fanotify_mark(r1, 0x549, 0x4800003a, r0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000180)={r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='hfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85512, &(0x7f0000000180)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) open(&(0x7f0000000140)='./file0\x00', 0x37, 0x0) 6.424375946s ago: executing program 5 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, &(0x7f0000000500)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) 6.422444259s ago: executing program 2 (id=661): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x10c, 0x24, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x752ebf8429602088, 0xd}, {0xe}, {0xfffa, 0xb}}, [@TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0xd50, 0x10001, 0x0, 0x8, 0x3, 0x1}}, {0x6, 0x2, [0x158]}}, {{0x1c, 0x1, {0x1, 0xe, 0xe37, 0x2, 0x0, 0x9, 0xd6b, 0x8}}, {0x14, 0x2, [0x2, 0x9, 0x4, 0xb, 0x8, 0x3, 0x7, 0x3d5d]}}, {{0x1c, 0x1, {0x0, 0x2, 0x2, 0x9, 0x2, 0x6, 0x8000, 0x3}}, {0xa, 0x2, [0xb2, 0xe, 0x8000]}}, {{0x1c, 0x1, {0x6b, 0x8, 0x0, 0x800, 0x0, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x800, 0x9]}}, {{0x1c, 0x1, {0x8, 0x7, 0xc9, 0x0, 0x2, 0x9, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x80, 0x5, 0x9, 0x2, 0x2, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_open_pts(r0, 0x161481) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioperm(0x3, 0x4, 0x1000008) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x27}}]}}]}, 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r8) socket$xdp(0x2c, 0x3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x81) 5.263091319s ago: executing program 1 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302aa5c94d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d42a12d6a1009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x6, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ea94c63377526ae8000000000000000558139ede6dc06270ee842", 0xffffffffffffffff}) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(0x4) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r9, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 5.066596803s ago: executing program 0 (id=663): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0x2f, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 4.771917421s ago: executing program 0 (id=664): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001440)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "25edfcce", {0x3, 0x1, 0x0, 0x68, 0xb, 0x7, 0xff}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="00ad6a1177f4c0e2e5dd0c000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001b80)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x9, 0x7ff, 0x1, 0x800, 0x6, 0x1}}, {0x6, 0x2, [0x400]}}, {{0x1c, 0x1, {0xd, 0x4, 0x3, 0x1, 0x1, 0x2, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0xffff, 0x13, 0x0, 0x5b28]}}, {{0x1c, 0x1, {0x81, 0x6, 0x0, 0x7f, 0x0, 0x9a, 0x67, 0x6}}, {0x10, 0x2, [0x39, 0x2, 0xa, 0x62c3, 0x7, 0x1]}}]}]}, 0xa4}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r8) r10 = socket(0x11, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@deltaction={0x14, 0x4}, 0x14}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001dc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001d80)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001e00)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000001c40)=[{0x1, 0x0, [0x7f, 0x0, 0x5, 0x3, 0x4, 0x80, 0x5, 0x1, 0xd, 0x4200, 0x9, 0x8, 0x6, 0x200, 0xff, 0x30]}, {0x2, 0x0, [0xa, 0x2b4b, 0xde4, 0x8, 0xf5, 0xc75, 0x3, 0x0, 0x100, 0x80000000, 0x4, 0xfffffff9, 0x7, 0x29e, 0x9, 0x1]}, {0x18, 0x0, [0xf, 0xc07, 0x6, 0x2, 0x10000, 0x9, 0x4, 0x574, 0x5, 0x38000000, 0x6, 0x4, 0x0, 0x1, 0x7]}, {0x36, 0x0, [0x5, 0xc8c0, 0x8, 0x7, 0x2, 0xbd7, 0x10, 0x200, 0x9, 0x80000000, 0x9, 0x2, 0x8743, 0x1c9, 0x0, 0x80]}], r11, 0x1, 0x1, 0x120}}, 0x20) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r9, 0x3e8c4ddb697c9f8f, 0xa1ff, 0x0, {0x4}}, 0x14}}, 0x0) r12 = syz_usb_connect(0x6, 0xac3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xfa, 0x84, 0x6a, 0x10, 0x489, 0xe04e, 0xe28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab1, 0x4, 0x3, 0x81, 0x20, 0x40, [{{0x9, 0x4, 0x1e, 0x0, 0xd, 0xb3, 0xc4, 0x41, 0x0, [], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x2, 0xd, 0x6, [@generic={0xd3, 0x23, "72b1dfed9a4fa21c2fb2d490e20b3fc4115b9917fd020500ab512307921b2bd3e02550f29272f35c3883a6ac56c112b5f3c72e8c3602b3aa6dc619b5c0b727984a1c3607db5e73be0a785076eb528bd89d3838e8eef7892ac5c655f3a7813152e4c559a47f8adac1435b536d49261e886e2356ee143c1f45ca3f6805715d3a1139a5a0e7af3e2404204f7d765afff082b7925782c10ae4f6e1082444c1a300cd616747e94768dca6bfe81ef1028765e7455f51835fc402d14b1a390776977ff34c671f082166e0fbcfca569b553674ed16"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0x80, 0xe, [@generic={0x70, 0x3, "459684362425c326b96a322a9a5ebbb2db4e48e5f139d261ea30895e7d6d6da9a43cf1b068af749c8a8f84f275feace3bc201156ca9d9fccce5d62682f3ea2afc2dcb16cde435379d8c4f704159b644f8461d06b357d8e40fc7236cf6126008b5f23b2a0fcc260c53c7472f406b1"}, @generic={0x35, 0x3, "7ad451506648e9c42988449b28f4c4ba17f0c1c191315d6f4f517bd924ba066dd5078da77f1272865057cf8fbf8cfdd9486006"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x2, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4d, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xf8, 0x7, 0x6, [@generic={0x3c, 0x22, "249ea9502092d071f007b3deb64daa09addd46f05c1d286974f5707dc6213613454e05dba91574edb500ad940093324910ed481fc36b9ac9b868"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x7, 0xf9, 0x3e, [@generic={0xe4, 0x3, "f1b5cbc6e3c35aa42147cf349a5d3baab781457cf8c345dcca3568063b904c53518a0b0f6906f3d17cfea1cdbbe24a649a118049f43f7dd77a930af52df791348dc1ea8a18ba287a8bd01104eb12512f557550cb613679f823cc854ab85f60a22ae137e3d9ccc5968dccb6b4875a782ec7f260c2ca5614f68b54061ed9cbf1f845587f4a3c7d43fbc4236c567dc8b253da1af02d5721d6f5c93085395c9ddd17eb116f29b43751ecd67e3551a2e07e9af462fbc29435cc71ba7b356415d551ee68de4a4008bbbe0846df5c809a82fc30f7904a40f4d23125516dd13aaa8d80951c58"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x3, 0x5, 0x0, [@generic={0xc7, 0x6, "2dec76a195bf5c8b513a5918be8328294bf29847d10aabe6073c7efe315a0a74fdd8e0411abacad6a7c5cae191867d45386719d2075ec4805cde0dc45f4ef5bbe9462ef0edfb5f86d20822af62123bf160a3eda31314ad2de0d70b464637115c9393e84775475e6f7365ce78316ede63ec3f4be7e49c46741357527728f8a8b6780be1ab8cda7c7ebb75ee892cf1af98f6c4b8b85bc6598924af054db767e9860a7b63120e78865fed8e19afe83bfec947a4ce2515aa90d94ef0dda3346b47f294df185493"}, @generic={0x4b, 0x9, "d45ea85dc0f957aa599dcd0717b7d0a088a714184f47718454d798cf2c2ae53ceab37f3ac5ff18291575b2688b4e862a2741082cebafc41f5db32551419c7c83be1b76162d990ba228"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x1, 0x6, 0x66, [@generic={0x2f, 0x22, "3f1e24f8f1a723a0f472c0ec2abe3b886c33def8322c67f6ce424bfad77b28f6fe4c05c5357348af0a688b8f8d"}, @generic={0xda, 0xf, "b07b83eebcc6b6588440d8e456bebc4a88b25828bf78f263f771ece834508575b68208730ff002af73b70969c1714f89ca5fb26bda54047a9d82c820ff039f2f975831e5bf8fb8fae6cb15cb8edd319bdbca32ea527db7d004f7369d078a6a6d5bb16c274739fe9ba61310dbec58841cc401d765805bf2d1c0cedfc8ea0e1977f6bdb07576e7173b55669fead1269c7d4e7ab75630037fb182ecbb77d49ea52af98372887640aa7bc6c3c7d7351f73786722c375a2cc3513c31c1ef123060684f626a1ef88eb7cc58aaf93ab068928b69b444930e9c97177"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x0, 0x2}}, {{0x9, 0x5, 0xf, 0xc, 0x0, 0x6, 0x4, 0x3, [@generic={0x50, 0xa, "2bb386a748df0286114c6f90c4a94d32b407cc3d51b1ec2dd62e624173711508da7c31a065c2aea9690dae15639d778c9343e69b4bb2aedf5bb3e84b1477f5c8a44b8d07ea69c52f010adac51637"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x31}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3cf, 0x2, 0x1}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x3, 0xb7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xf9, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xf, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xff, 0x7, 0x4, [@generic={0x54, 0xb, "db3f9589654f1900452c01ca54ede37db7802063db2ebc8a7ccb8c1ebfc4c03b277b5ac9a782fedeabaa5467e6d9c05a4dea297d21ec40550e876001587d1c4b3b1fa96a70267f2b5da57b331b465ae26e48"}]}}]}}, {{0x9, 0x4, 0x6d, 0xa, 0x6, 0xb5, 0xf8, 0xf4, 0x0, [], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x2, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xa9}]}}, {{0x9, 0x5, 0x8, 0x13, 0x40, 0x7, 0x7f, 0x0, [@generic={0x40, 0x23, "ceb0eee7892f65c0e0fb9ed9bc6924a6da03c9dca8945dbf440e30047b8adf75e127970a1249c48eb152f7f5508bce9bfb4452cafb85bad87e8bc34441a1"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x60, 0x0, 0x3, 0x7, [@generic={0x3c, 0x0, "29998ad67349baa00b4c77dea658580410d00fb7a2251b511a57ae6ae2643367a1fd8efd2e58aaa57ff5cf296408f96578696681d1eb652847c5"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x3, 0x7, 0x6, [@generic={0x18, 0x7, "7d4d405e2248753d223346e72bf9933b458c39ac24b2"}, @generic={0x74, 0x31, "4c2b56096cf25eb25b1e018701467d9edd36e2da230bed35510af1cf98b0f74a2cddb701ddd3a3c1556c6c255e377bfdc811df5613f2a6e2f5f6c6cd5f1a7e6bd49f3311cbf0cc58c7913bd167f6b9890952c0cf57883c56887318dea0b946c1f613f431df3febdaae7c37e7cb513e7bd393"}]}}, {{0x9, 0x5, 0x97, 0xe7eae24eda9bd84f, 0x3ff, 0xa, 0x2, 0x8, [@generic={0x33, 0x5, "a1e0922b6a3cc4e20ff599f5155566d24e535ce71e02f24e415604506bfff3980efb76dd683a0599c80bad1408995c034f"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x3, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0xd2, 0x8, 0x2, 0xb0, 0xbd, 0x10, 0x4, [], [{{0x9, 0x5, 0x4, 0x4, 0x20, 0x3, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8001}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x0, 0x5, 0xff, [@generic={0x65, 0x9, "7c8d749b47e68359c40e3baee7b17f45e1fefeb11d38cc21c0e6c9d77bf1bd6ee6f8be09ecaf5be0fea80961c4518a8c54dccb4ab7fcaa8cab44adfa82c2a8854d50b1f4a5a414838bbb61f160141f9297b5a7e19012755397479cacbc20a34c789bdc"}]}}]}}, {{0x9, 0x4, 0xf7, 0x3, 0xc, 0x5c, 0x6c, 0x91, 0xc, [], [{{0x9, 0x5, 0xa, 0x8, 0x200, 0x8, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xc, 0x3a, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x420, 0x1, 0x8, 0x3}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x2, 0x7, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x9, 0x84, 0x5b, [@generic={0xc0, 0x21, "ede1cec1ddcd5c17e7adf94e7d7a9a7ad1b3675eed5345ad03e369e6bb184f2c64534e8ec7a8183cf9cdb237e4c1c04e9cb3cfb7b45fbe4f81a58e52e5223281704ef9038bcb5a766d5e684f12ad7ac9aeac8909f8910d1137c3fa1c08cb0f1ebcac701d519acc8c6ab598bb9ae49f00f756847b36328f6f9c147a0cc10e9659ccff3a204887c2c5bae3337765a15ac30ba6a8317ee0b28f9a8efbc67b19a96d5a8ac3f201cfb56f7cd43f4801a6c031c9e3948d61f595c364136b89c893"}, @generic={0xa4, 0xe, "420708e5188e7312054d5e8d9233c48e249288453479381da3af3e4dd6f3a2799bff96c9fccf8915e750799a3dbb99a91dbb3049e52889c6a68bb1189ae340c02f356924843ac629df288191fdf06b47e685ee29a70c9e01027ef1702ff5d2889b2b305ca877226aff00aba9354c8d78c551091a8d9901bc3db10b0a99c776be4c6eaa61a3365b46e7840cfda3d6cfd5825720f909acfd0d2f3c7133f9d9bbec36b2"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x3, 0x1, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x7, 0xae, [@generic={0x63, 0x6, "fe6ad14a5375caf5141ec670943ea300f6cf685ce09b48c184e08f2d2543e6199bc3a679df042ed5b7a1cfe8e845e819df3d6a2cbdac15ece3d07da4713125dd5abd7500137f2cd7db970ced9c40a23cbea912c530a0d626624b8965533b0ce1ed"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x7, 0x1, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffb}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x4, 0x24}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x0, 0x4, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0x8, 0x3, [@generic={0x42, 0x0, "a117953d7372fc838017c44040972c88599e769bd664b613de86f40b7a46ef0a9ad3ea023bf9b65dc5b3d9438c6fca0735e16810223b1266b892fcfff43cbb90"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0xfffa}]}}, {{0x9, 0x5, 0x7, 0x25, 0x400, 0x6, 0xb, 0x40}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x67, 0x7f, 0x4, 0x10, 0x7}, 0x207, &(0x7f0000000c00)={0x5, 0xf, 0x207, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe5, 0x8, 0x5}, @generic={0x101, 0x10, 0x3, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x0, 0x4}, @generic={0x8f, 0x10, 0x1, "099f08a5643cb4370a3e6b893564833f44be82526ef56bd8d6405bdf7ac7f7ca4f1b305301070c6bd68e137dcb4d4337f6f842640514885c57fadeb0d6cbe22f4d0a19849fcaff35c71c0071e436fb8f9ee8f41528ef7b343c722eb60a071eb1b172bd2a6c913c7219436facf511f93dc883f030c7989ca114a05aa972d227d0322aa3bd503490582b15b977"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0x0, 0x4, [0x3f30, 0x3f00]}, @generic={0x4d, 0x10, 0xb, "fd05eeed356e45497fd6ac72893178f192cb1746b04d98b565c0236b305d1d920d8abc187280854d8da91ce34d29f2c086204be86869c54a2ab5721f0c567a17b5b7c12c348c6c3ebe01"}]}, 0xa, [{0xa6, &(0x7f0000000e40)=@string={0xa6, 0x3, "c5d0c524458d8b82b9b5f3b7b08e137e9c29ea46d6a2ad91c9d8837a53e431e0b647990e7efb0fa144a644e8c3b93cc749e918a5cf1cbdbef2863a12379469bc79eb2881c16861b2608e563492439a193c1f052c8cc89daece3996615ec2e2fb28280da8f7c2e5844659ffa8609cf30dd94aac8b853c3165b3dd0c505330534a3116dc9989bb8787d8abc31f416dcdac6ac52b9d5fb5dc02fd613ccdc9205b30991ed54e"}}, {0xea, &(0x7f0000000f00)=@string={0xea, 0x3, "3558e673b9be792620fb8df32e1a35c4b4068a990a143ee38a82106bfc1cd08ca0de96d8bc86d7664abedb706d45406f254b998a5af256f62b984d656d818565995a09ff7e97317c8f6a8ed9cecbd41c15f1834de450160fa2c49dc4dae22659ebabd771325fc9efa9d0e389ef322b024f0e3266d592ae70d835a96f0a1a7429ecd5da761ae7e778da6ee3aa10d64ca9aeb9a6f5b839877ac560943f0a8d52258022c9d7225a0ae1dcf94293a2e77add6a2d5fdaf67f4e50475d70b5c12c21ed12f718b3cdb84ed3ff6968887189dd4f957530fc61a40078b0d8c008508a749caad64eb45844dca7"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x404}}, {0xac, &(0x7f0000001040)=@string={0xac, 0x3, "a4e137cde232e12b0f43ecd8919b4a30e2f20fd664d69104042ab0b4f968a81610df4bfaec40646a39e84014738c38f6ba60a3b1e0f72addbaddcf43a1bfca825428f11630925f7852726dca57f3ec0bf01395aaca6db05e71af6775c23935c0ff7888f73e7452c8f069f78544145cfed24e694e1cfe90f90c0a2462fd065e3509ea24f19506f0813022a498eb25ba3f8f8368a0392cf0a72af558a81d46cf230468da6e07c4c2d64d70"}}, {0x43, &(0x7f0000001100)=@string={0x43, 0x3, "c5fd70d0ee3e3bf19420ac494b53906a2cea93191fdba6003ecf1e25a12fd022deedee751c783b8d34126252f5f9718c4bfde4ad6e956c0de7649813cd83937d38"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x21}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x429}}, {0x85, &(0x7f0000001240)=@string={0x85, 0x3, "0e5b48203ffa74ece75e6ef4acf1bb1227fca9f3c5ed38fe717e88c6eaaef60ef81108b204ed244599cbeaa66a4df3f280dd8b260eabd5c7bc91b3984265a7ef65df0cef21d45cdb5b2fbe2e2f756a2b93c1b52b4b442ec89fbbcf0807f61eab1a20a979bdf2af18390146f60a9ebb394a9ef509e68d4cd89e0ffbf528dab002dc9d37"}}, {0x16, &(0x7f0000001300)=@string={0x16, 0x3, "54e160ee756213bd37bf459982d95fccd17a5614"}}]}) syz_usb_control_io(r12, &(0x7f0000001600)={0x2c, &(0x7f0000001e40)=ANY=[@ANYBLOB="0004dc000000dc0886e09103d9b66e03d2a237ff67ff03000000000000892e014a27f03e0288b4809de6f4ade4fd3f2dd77ce2ce4b0365e5e3b6bb37926ccb26490350b8f83ae5bc7c3d3973f123c0a3b24a2596b3691834fd1ea093303d28f59ac1119d740b26ef52256d353fa08e4bbb4a58142f20cedecd0940af76ab13c03767da07fa0f00000000000000560565d51e59d33a30dfea9ec9ce91e36beb525ed877db1320ac1ccda54384ee27efb78ebd873e021b07060675c4a3a73b22a8045aa3c0f9b9bbef8453303189c5b7deef7da33b2f361f124871415956ad976e44027bc9d8c56c7b"], &(0x7f0000001500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000001540)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0x0, 0xd}]}}, &(0x7f0000001580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x0, 0x81, 0xb, "99364dab", "1c20d613"}}, &(0x7f00000015c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x9, 0x7, 0x6, 0x6, 0x6}}}, &(0x7f0000001ac0)={0x84, &(0x7f0000001640)={0x20, 0x6, 0xb7, "4a5d039c9a00e0bc9aac55bf75045b24b5bc0686497e6a778216c74f5a553e94241aa82d454f3e9f0e1d4a9109bc13459344eff72bc6369a49addbc15ad7b2b0f829b32169aa9b872509a42b29ee60c3e89bdb9eed2b7bebf3d61a2e021fb7689473211a83e36aaaa8b0cae8985ce33676e9fd78ba6749a67d2a119225fc686701825f2bd5b6140b3e6c5be150d94d13343e824e4d5afa6448c66c4ec95f6dfb9d5df543884c39f2fc99cc581821b20c3ad9ac11cd9730"}, &(0x7f0000001700)={0x0, 0xa, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x99}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000017c0)={0x20, 0x0, 0x8, {0x20, 0x8, [0xff0]}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001840)={0x40, 0x9, 0x1}, &(0x7f0000001880)={0x40, 0xb, 0x2, "b95a"}, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001980)={0x40, 0x19, 0x2, "0641"}, &(0x7f00000019c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001a00)={0x40, 0x1c, 0x1}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0x3}}) 4.538318006s ago: executing program 3 (id=665): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) (async) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioprio_set$pid(0x2, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x46842, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000380)={0x0, 0xfb, 0x1b, 0x3, 0x5, "d0db4db11e848ada747e3325e0ad9d1f", "62b2b9c9912f"}, 0x1b, 0x2) (async) sendfile(r2, r2, 0x0, 0x7a680000) (async) unshare(0x2000680) r3 = epoll_create1(0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x701441, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) 4.028620746s ago: executing program 1 (id=666): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$video4linux(0x0, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0) 3.973824682s ago: executing program 2 (id=667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, &(0x7f0000000500)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0xa}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) 3.59447793s ago: executing program 3 (id=668): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x6, 0x0, 0xa, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2={0xff, 0x3, '\x00', 0xf}, 0x40, 0xba08, 0x0, 0xffffffff}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) 2.804508694s ago: executing program 1 (id=669): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x280, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 2.804141885s ago: executing program 3 (id=670): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000007e00)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000800)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x619, @private0, 0x2}}, [0xfffffffffffffff9, 0x6, 0x6, 0x401, 0x9962, 0x80000000, 0x3, 0xb, 0x0, 0x6, 0xd25, 0x7, 0xa34f, 0x7, 0x2]}, &(0x7f0000000500)=0x100) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) renameat2(r4, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x5, 0xfffffffc, &(0x7f0000000040)={{0x0, 0xfffffffe, 0x80, 0xfffffffe}}, 0x0, 0x0}}) syz_open_procfs(0x0, 0x0) r6 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000001000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000100)={{0x3a, @multicast1, 0x0, 0x0, 'rr\x00'}, {@remote}}, 0x44) 2.698747498s ago: executing program 2 (id=671): futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffffffff00000001000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff08021100"], 0x398}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2.674086823s ago: executing program 1 (id=672): futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffffffff00000001000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff08021100"], 0x398}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00'}}, 0x118) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2.436353423s ago: executing program 3 (id=673): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket$isdn(0x22, 0x2, 0x25) r6 = socket$isdn(0x22, 0x2, 0x26) dup3(r5, r6, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100), 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0xc}) 706.693674ms ago: executing program 0 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100001040800b5df2a00000000000a4c", @ANYRES32=0x0, @ANYBLOB="6a400400200400001800128008000100677470000c00028008000200", @ANYBLOB="acf0f1bc34a287333ab095355c6c6a5aaf"], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) unshare(0x2c060000) unshare(0x24020400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r6, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=675): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x5, 0x1000008b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001600)=""/4103, 0x1007, 0x4b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x1383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1f}, 0x1c) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000000d40)=0xfdfdffff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x1f}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="3b928de84cfc54ee627e958e0bcd95ea00000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)}], 0x1) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@tcp, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000600)='./file0\x00') syz_clone3(&(0x7f0000000200)={0x184060100, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) kernel console output (not intermixed with test programs): hci3: Opcode 0x0406 failed: -4 [ 80.244181][ T6074] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.252271][ T6074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.280309][ T6074] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.291626][ T6074] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.301830][ T6093] fuse: Bad value for 'fd' [ 80.434185][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.536670][ T6095] fuse: Unknown parameter 'user_i00000000000000000000' [ 80.698508][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.146757][ T6097] delete_channel: no stack [ 81.154056][ T6097] delete_channel: no stack [ 82.047293][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.053630][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.206744][ T57] cfg80211: failed to load regulatory.db [ 82.282651][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.288792][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.389203][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.55'. [ 83.383876][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.735585][ T6123] Zero length message leads to an empty skb [ 84.114920][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.121160][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.193880][ T118] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.222924][ T6134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.348618][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 84.361111][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.364731][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.367549][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.442881][ T118] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=74.c4 [ 84.459624][ T118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.487349][ T118] usb 2-1: Product: syz [ 84.500696][ T118] usb 2-1: Manufacturer: syz [ 84.510767][ T118] usb 2-1: SerialNumber: syz [ 84.525343][ T118] usb 2-1: config 0 descriptor?? [ 84.541513][ T118] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.549062][ T6139] capability: warning: `syz.3.61' uses deprecated v2 capabilities in a way that may be insecure [ 84.843997][ T5922] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.006320][ T5922] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 85.021615][ T5922] usb 4-1: config 0 has no interface number 0 [ 85.035567][ T5922] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 85.052222][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.067746][ T5922] usb 4-1: Product: syz [ 85.078866][ T5922] usb 4-1: Manufacturer: syz [ 85.087825][ T5922] usb 4-1: SerialNumber: syz [ 85.109749][ T5922] usb 4-1: config 0 descriptor?? [ 85.188513][ T5922] usb 2-1: USB disconnect, device number 4 [ 85.335925][ T5974] usb 4-1: USB disconnect, device number 4 [ 85.345151][ T6148] syz.0.64 uses obsolete (PF_INET,SOCK_PACKET) [ 85.396594][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.303960][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.310470][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.090041][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.096313][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.466497][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.475601][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.487101][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.503524][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.512318][ T5853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.520189][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.611068][ T6182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.339039][ T6176] chnl_net:caif_netlink_parms(): no params data found [ 89.799098][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.844048][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.854482][ T6176] bridge_slave_0: entered allmulticast mode [ 90.045697][ T6176] bridge_slave_0: entered promiscuous mode [ 90.061947][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.109073][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.245122][ T6176] bridge_slave_1: entered allmulticast mode [ 90.594938][ T5851] Bluetooth: hci5: command tx timeout [ 90.795494][ T6176] bridge_slave_1: entered promiscuous mode [ 91.023587][ T6176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.103194][ T6176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.146274][ T6176] team0: Port device team_slave_0 added [ 92.184977][ T6176] team0: Port device team_slave_1 added [ 92.430836][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.479448][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.611110][ T6176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.680858][ T5851] Bluetooth: hci5: command tx timeout [ 92.717171][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.730755][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.759500][ T6176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.610930][ T6228] syz.2.86: attempt to access beyond end of device [ 93.610930][ T6228] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 93.623654][ T6228] hfs: can't find a HFS filesystem on dev nbd2 [ 93.809441][ T6233] xt_ecn: cannot match TCP bits for non-tcp packets [ 94.440403][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 94.578636][ T6176] hsr_slave_0: entered promiscuous mode [ 94.756649][ T5851] Bluetooth: hci5: command tx timeout [ 94.801774][ T29] audit: type=1800 audit(1732931336.668:3): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.87" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 94.865085][ T6176] hsr_slave_1: entered promiscuous mode [ 94.893909][ T6176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.913847][ T6176] Cannot create hsr debugfs directory [ 95.108377][ T6251] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.415404][ T6176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.432623][ T6176] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.486476][ T6176] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.506310][ T6176] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.757518][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.858207][ T6176] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.896505][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.904699][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.985855][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.993039][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.200763][ T6176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.110299][ T5853] Bluetooth: hci5: command tx timeout [ 99.678847][ T29] audit: type=1800 audit(1732931341.558:4): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.101" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 99.732203][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.769229][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 100.439274][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 100.448979][ T5959] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.464470][ T6317] syz.1.106: attempt to access beyond end of device [ 100.464470][ T6317] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 100.479157][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'. [ 100.489215][ T6317] hfs: can't find a HFS filesystem on dev nbd1 [ 100.503022][ T6176] veth0_vlan: entered promiscuous mode [ 100.624570][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 100.683864][ T5959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.700375][ T6176] veth1_vlan: entered promiscuous mode [ 100.706203][ T5959] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.737155][ T6325] warning: `syz.3.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.764176][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.870111][ T29] audit: type=1800 audit(1732931342.758:5): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.108" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 100.889511][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.896957][ T5959] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.906314][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.914926][ T5959] usb 1-1: Product: syz [ 100.919999][ T5959] usb 1-1: Manufacturer: syz [ 100.926453][ T5959] usb 1-1: SerialNumber: syz [ 100.939628][ T6176] veth0_macvtap: entered promiscuous mode [ 100.957874][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.987948][ T6176] veth1_macvtap: entered promiscuous mode [ 101.017097][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.053901][ T5860] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 101.078035][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.088183][ T6327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.093586][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.109162][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.117211][ T29] audit: type=1326 audit(1732931342.998:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.122944][ T5860] usb 3-1: config 0 descriptor?? [ 101.146072][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.152027][ T29] audit: type=1326 audit(1732931343.038:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.158571][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.209574][ T29] audit: type=1326 audit(1732931343.038:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.231482][ T5959] usb 1-1: 0:2 : does not exist [ 101.241883][ T5959] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 101.262458][ T29] audit: type=1326 audit(1732931343.038:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.284135][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.304849][ T5959] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 101.324312][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.386026][ T29] audit: type=1326 audit(1732931343.038:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.407333][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.413929][ T29] audit: type=1326 audit(1732931343.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.443953][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.460579][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.490957][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.515714][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.532873][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.575678][ T5959] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 101.587095][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.614717][ T5959] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 101.632983][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.648923][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.661121][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.673528][ T5959] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 101.693338][ T5959] usb 1-1: USB disconnect, device number 2 [ 101.703222][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.731095][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.760439][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.773301][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.789949][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.808284][ T5860] petalynx 0003:18B1:0037.0002: unknown main item tag 0xd [ 101.810824][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.819107][ T5860] petalynx 0003:18B1:0037.0002: unexpected long global item [ 101.841954][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.858700][ T29] audit: type=1326 audit(1732931343.748:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.883686][ T29] audit: type=1326 audit(1732931343.748:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 101.952756][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 102.003034][ T6176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.024235][ T5860] petalynx 0003:18B1:0037.0002: parse failed [ 102.030331][ T5860] petalynx 0003:18B1:0037.0002: probe with driver petalynx failed with error -22 [ 102.074355][ T6176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.090026][ T6176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.392395][ T6176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.469125][ T6324] binder: 6316:6324 ioctl 8924 20000580 returned -22 [ 102.949909][ T118] usb 3-1: USB disconnect, device number 4 [ 103.844931][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.852811][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.868934][ T29] audit: type=1800 audit(1732931345.688:14): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.113" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 103.885313][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 103.886993][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.887013][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.907728][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.627356][ T6350] tty tty1: ldisc open failed (-12), clearing slot 0 [ 105.987293][ T6374] syz.1.120: attempt to access beyond end of device [ 105.987293][ T6374] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 106.000141][ T6374] hfs: can't find a HFS filesystem on dev nbd1 [ 106.460434][ T6388] FAULT_INJECTION: forcing a failure. [ 106.460434][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 106.474108][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.5.127 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 106.484392][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.494478][ T6388] Call Trace: [ 106.497769][ T6388] [ 106.500715][ T6388] dump_stack_lvl+0x241/0x360 [ 106.505419][ T6388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.510640][ T6388] ? __pfx__printk+0x10/0x10 [ 106.515254][ T6388] ? __kmalloc_noprof+0xb5/0x4c0 [ 106.520208][ T6388] ? __pfx___might_resched+0x10/0x10 [ 106.525516][ T6388] should_fail_ex+0x3b0/0x4e0 [ 106.530214][ T6388] should_failslab+0xac/0x100 [ 106.534909][ T6388] __kmalloc_noprof+0xdd/0x4c0 [ 106.539874][ T6388] ? iovec_from_user+0x87/0x240 [ 106.544766][ T6388] iovec_from_user+0x87/0x240 [ 106.549472][ T6388] __import_iovec+0x152/0x870 [ 106.554183][ T6388] import_iovec+0xeb/0x120 [ 106.558629][ T6388] copy_msghdr_from_user+0x52f/0x680 [ 106.563936][ T6388] ? read_tsc+0x9/0x20 [ 106.568034][ T6388] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 106.573865][ T6388] ? __fget_files+0x2a/0x410 [ 106.578481][ T6388] ? __fget_files+0x2a/0x410 [ 106.583104][ T6388] do_recvmmsg+0x3bd/0xab0 [ 106.587553][ T6388] ? __pfx_do_recvmmsg+0x10/0x10 [ 106.592532][ T6388] ? __pfx___might_resched+0x10/0x10 [ 106.597836][ T6388] ? __might_fault+0xaa/0x120 [ 106.602535][ T6388] ? __pfx_lock_release+0x10/0x10 [ 106.607573][ T6388] ? vfs_write+0x730/0xd30 [ 106.612018][ T6388] ? get_timespec64+0x19c/0x280 [ 106.616892][ T6388] __x64_sys_recvmmsg+0x1b8/0x250 [ 106.621935][ T6388] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 106.627501][ T6388] ? do_syscall_64+0x100/0x230 [ 106.632279][ T6388] ? do_syscall_64+0xb6/0x230 [ 106.636969][ T6388] do_syscall_64+0xf3/0x230 [ 106.641483][ T6388] ? clear_bhb_loop+0x35/0x90 [ 106.646180][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.652085][ T6388] RIP: 0033:0x7f3d98380849 [ 106.656510][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.676135][ T6388] RSP: 002b:00007f3d990c9058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 106.684580][ T6388] RAX: ffffffffffffffda RBX: 00007f3d98545fa0 RCX: 00007f3d98380849 [ 106.692564][ T6388] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 106.700547][ T6388] RBP: 00007f3d990c90a0 R08: 0000000020003700 R09: 0000000000000000 [ 106.708531][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.716516][ T6388] R13: 0000000000000000 R14: 00007f3d98545fa0 R15: 00007fff062baa48 [ 106.724514][ T6388] [ 107.898692][ T6398] FAULT_INJECTION: forcing a failure. [ 107.898692][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.927629][ T6398] CPU: 0 UID: 0 PID: 6398 Comm: syz.0.128 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 107.937940][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.948202][ T6398] Call Trace: [ 107.951537][ T6398] [ 107.954491][ T6398] dump_stack_lvl+0x241/0x360 [ 107.959199][ T6398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.964423][ T6398] ? __pfx__printk+0x10/0x10 [ 107.969049][ T6398] ? __pfx_lock_release+0x10/0x10 [ 107.974135][ T6398] should_fail_ex+0x3b0/0x4e0 [ 107.978859][ T6398] _copy_from_iter+0x21f/0x1e70 [ 107.983715][ T6398] ? __virt_addr_valid+0x183/0x530 [ 107.988828][ T6398] ? skb_set_owner_w+0x246/0x380 [ 107.993767][ T6398] ? __pfx_lock_release+0x10/0x10 [ 107.998799][ T6398] ? __pfx__copy_from_iter+0x10/0x10 [ 108.004088][ T6398] ? __virt_addr_valid+0x183/0x530 [ 108.009223][ T6398] ? __virt_addr_valid+0x183/0x530 [ 108.014341][ T6398] ? __virt_addr_valid+0x45f/0x530 [ 108.019451][ T6398] ? __phys_addr_symbol+0x2f/0x70 [ 108.024472][ T6398] ? __check_object_size+0x48e/0x900 [ 108.029754][ T6398] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 108.035478][ T6398] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 108.041209][ T6398] ? skb_put+0x114/0x1f0 [ 108.045459][ T6398] packet_sendmsg+0x4465/0x6a40 [ 108.050338][ T6398] ? smack_socket_sendmsg+0x1bb/0x540 [ 108.055713][ T6398] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 108.061431][ T6398] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 108.067842][ T6398] ? __pfx_packet_sendmsg+0x10/0x10 [ 108.073036][ T6398] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 108.079801][ T6398] ? __fget_files+0x2a/0x410 [ 108.084391][ T6398] ? __might_fault+0xaa/0x120 [ 108.089068][ T6398] ? __pfx_packet_sendmsg+0x10/0x10 [ 108.094259][ T6398] __sock_sendmsg+0x221/0x270 [ 108.098944][ T6398] __sys_sendto+0x363/0x4c0 [ 108.103447][ T6398] ? __pfx___sys_sendto+0x10/0x10 [ 108.108462][ T6398] ? __mutex_unlock_slowpath+0x21e/0x790 [ 108.114101][ T6398] ? __fget_files+0x2a/0x410 [ 108.118699][ T6398] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.124682][ T6398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.131014][ T6398] __x64_sys_sendto+0xde/0x100 [ 108.135777][ T6398] do_syscall_64+0xf3/0x230 [ 108.140312][ T6398] ? clear_bhb_loop+0x35/0x90 [ 108.145013][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.150921][ T6398] RIP: 0033:0x7fe99d980849 [ 108.155353][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.174977][ T6398] RSP: 002b:00007fe99e716058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.183404][ T6398] RAX: ffffffffffffffda RBX: 00007fe99db46080 RCX: 00007fe99d980849 [ 108.191375][ T6398] RDX: 0000000000000026 RSI: 0000000020000000 RDI: 0000000000000003 [ 108.199354][ T6398] RBP: 00007fe99e7160a0 R08: 0000000020000200 R09: 0000000000000014 [ 108.207345][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.215330][ T6398] R13: 0000000000000001 R14: 00007fe99db46080 R15: 00007fffc6daab08 [ 108.223319][ T6398] [ 108.303877][ T5922] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.325797][ T6402] FAULT_INJECTION: forcing a failure. [ 108.325797][ T6402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.394086][ T6402] CPU: 0 UID: 0 PID: 6402 Comm: syz.1.130 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 108.404398][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.414480][ T6402] Call Trace: [ 108.417775][ T6402] [ 108.420729][ T6402] dump_stack_lvl+0x241/0x360 [ 108.425437][ T6402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.430658][ T6402] ? __pfx__printk+0x10/0x10 [ 108.435282][ T6402] ? snprintf+0xda/0x120 [ 108.439544][ T6402] should_fail_ex+0x3b0/0x4e0 [ 108.444250][ T6402] _copy_to_user+0x31/0xb0 [ 108.448698][ T6402] simple_read_from_buffer+0xca/0x150 [ 108.454100][ T6402] proc_fail_nth_read+0x1e9/0x250 [ 108.459147][ T6402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.464716][ T6402] ? rw_verify_area+0x55e/0x6f0 [ 108.469586][ T6402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.475150][ T6402] vfs_read+0x1fc/0xb70 [ 108.479333][ T6402] ? do_sock_setsockopt+0x3e2/0x720 [ 108.484566][ T6402] ? __pfx_vfs_read+0x10/0x10 [ 108.489270][ T6402] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 108.495198][ T6402] ? do_sock_setsockopt+0x3e2/0x720 [ 108.500424][ T6402] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 108.505997][ T6402] ksys_read+0x18f/0x2b0 [ 108.510274][ T6402] ? __pfx_ksys_read+0x10/0x10 [ 108.515067][ T6402] ? do_syscall_64+0x100/0x230 [ 108.519861][ T6402] ? do_syscall_64+0xb6/0x230 [ 108.524583][ T6402] do_syscall_64+0xf3/0x230 [ 108.529111][ T6402] ? clear_bhb_loop+0x35/0x90 [ 108.533812][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.539721][ T6402] RIP: 0033:0x7f4e3657f25c [ 108.544147][ T6402] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 108.563781][ T6402] RSP: 002b:00007f4e343f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.572223][ T6402] RAX: ffffffffffffffda RBX: 00007f4e36745fa0 RCX: 00007f4e3657f25c [ 108.580230][ T6402] RDX: 000000000000000f RSI: 00007f4e343f60b0 RDI: 0000000000000004 [ 108.588228][ T6402] RBP: 00007f4e343f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.596218][ T6402] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.604213][ T6402] R13: 0000000000000000 R14: 00007f4e36745fa0 R15: 00007ffc4a6f16f8 [ 108.612228][ T6402] [ 108.774138][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.896689][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 108.924579][ T57] usb 6-1: device descriptor read/64, error -71 [ 109.079543][ T5922] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 109.106075][ T5922] usb 4-1: config 179 has no interface number 0 [ 109.112577][ T5922] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.163865][ T5922] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 109.213185][ T5922] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.286687][ T5922] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 109.585390][ T5922] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 109.623908][ T5922] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 109.626874][ T6415] syz.1.133: attempt to access beyond end of device [ 109.626874][ T6415] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 109.635083][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.663958][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.692586][ T6391] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 109.707241][ T6415] hfs: can't find a HFS filesystem on dev nbd1 [ 109.806063][ T57] usb 6-1: device descriptor read/64, error -71 [ 109.861209][ T5894] usb 4-1: USB disconnect, device number 5 [ 109.861281][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 109.878528][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 109.985031][ T57] usb usb6-port1: attempt power cycle [ 110.166608][ T6430] FAULT_INJECTION: forcing a failure. [ 110.166608][ T6430] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 110.222366][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.2.139 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 110.232660][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.242710][ T6430] Call Trace: [ 110.245985][ T6430] [ 110.248908][ T6430] dump_stack_lvl+0x241/0x360 [ 110.253582][ T6430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.258772][ T6430] ? __pfx__printk+0x10/0x10 [ 110.263354][ T6430] ? validate_chain+0x11e/0x5920 [ 110.268307][ T6430] should_fail_ex+0x3b0/0x4e0 [ 110.273070][ T6430] prepare_alloc_pages+0x1da/0x5b0 [ 110.278177][ T6430] __alloc_pages_noprof+0x16f/0x710 [ 110.283369][ T6430] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 110.289096][ T6430] ? __pfx_lock_acquire+0x10/0x10 [ 110.294110][ T6430] alloc_pages_mpol_noprof+0x3e8/0x680 [ 110.299558][ T6430] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 110.305528][ T6430] vma_alloc_folio_noprof+0x12e/0x230 [ 110.310886][ T6430] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 110.316769][ T6430] folio_prealloc+0x2e/0x170 [ 110.321345][ T6430] handle_pte_fault+0x2518/0x68a0 [ 110.326367][ T6430] ? mark_lock+0x9a/0x360 [ 110.330706][ T6430] ? __pfx_handle_pte_fault+0x10/0x10 [ 110.336064][ T6430] ? __lock_acquire+0x1397/0x2100 [ 110.341084][ T6430] ? reacquire_held_locks+0x3eb/0x690 [ 110.346465][ T6430] ? lock_vma_under_rcu+0x34b/0x790 [ 110.351657][ T6430] ? __pfx_reacquire_held_locks+0x10/0x10 [ 110.357371][ T6430] handle_mm_fault+0x1053/0x1ad0 [ 110.362310][ T6430] ? __pfx_handle_mm_fault+0x10/0x10 [ 110.367596][ T6430] ? lock_vma_under_rcu+0x602/0x790 [ 110.372795][ T6430] ? lock_vma_under_rcu+0x1dd/0x790 [ 110.378001][ T6430] ? exc_page_fault+0x113/0x8b0 [ 110.382843][ T6430] exc_page_fault+0x459/0x8b0 [ 110.387515][ T6430] asm_exc_page_fault+0x26/0x30 [ 110.392350][ T6430] RIP: 0033:0x7f4bb7e4a81b [ 110.396750][ T6430] Code: 00 00 00 48 8d 3d e5 44 19 00 48 89 c1 31 c0 e8 1b 47 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 19 45 19 00 48 89 34 24 48 8b 14 24 48 8b [ 110.416347][ T6430] RSP: 002b:00007f4bb8dacfd0 EFLAGS: 00010202 [ 110.422403][ T6430] RAX: 0000000000000000 RBX: 00007f4bb8146080 RCX: 0000000000000000 [ 110.430360][ T6430] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000140 [ 110.438320][ T6430] RBP: 00007f4bb8dae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.446278][ T6430] R10: 0000000020000140 R11: 0000000000000000 R12: 0000000000000001 [ 110.454250][ T6430] R13: 0000000000000000 R14: 00007f4bb8146080 R15: 00007ffefb2f0288 [ 110.462219][ T6430] [ 110.788843][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.324064][ T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 111.693239][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 111.702154][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.714137][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.727881][ T57] usb 6-1: device descriptor read/8, error -71 [ 111.747920][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 112.468897][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.494259][ T5922] usb 2-1: config 0 descriptor?? [ 113.086555][ T5922] apple 0003:05AC:026C.0003: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.1-1/input0 [ 113.707631][ T6463] syz.5.147: attempt to access beyond end of device [ 113.707631][ T6463] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 113.731751][ T5894] usb 2-1: USB disconnect, device number 5 [ 113.734011][ T6463] hfs: can't find a HFS filesystem on dev nbd5 [ 113.793688][ T6466] syz.3.148: attempt to access beyond end of device [ 113.793688][ T6466] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 113.838047][ T6466] hfs: can't find a HFS filesystem on dev nbd3 [ 116.684810][ T6495] delete_channel: no stack [ 116.691830][ T6495] delete_channel: no stack [ 117.341794][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 117.397496][ T6509] No such timeout policy "syz0" [ 118.176886][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.162'. [ 118.388822][ T6523] syz.5.163: attempt to access beyond end of device [ 118.388822][ T6523] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 118.457034][ T6523] hfs: can't find a HFS filesystem on dev nbd5 [ 119.694266][ T6545] delete_channel: no stack [ 119.714446][ T6545] delete_channel: no stack [ 120.803254][ T6555] No such timeout policy "syz0" [ 121.834759][ T6558] bond_slave_0: entered promiscuous mode [ 121.840968][ T6558] bond_slave_1: entered promiscuous mode [ 121.924181][ T6558] macsec1: entered promiscuous mode [ 121.949541][ T6558] bond0: entered promiscuous mode [ 121.970337][ T6562] fuse: Unknown parameter 'fd0x0000000000000004' [ 122.618531][ T6558] macsec1: entered allmulticast mode [ 122.628357][ T6558] bond0: entered allmulticast mode [ 122.633660][ T6558] bond_slave_0: entered allmulticast mode [ 122.639765][ T6558] bond_slave_1: entered allmulticast mode [ 123.090754][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 123.090772][ T29] audit: type=1800 audit(1732931364.938:16): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.175" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 123.204385][ T6558] bond0: left allmulticast mode [ 123.209421][ T6558] bond_slave_0: left allmulticast mode [ 123.225192][ T6558] bond_slave_1: left allmulticast mode [ 123.230732][ T6558] bond0: left promiscuous mode [ 123.236284][ T6558] bond_slave_0: left promiscuous mode [ 123.241766][ T6558] bond_slave_1: left promiscuous mode [ 123.436734][ T6580] syz.3.180: attempt to access beyond end of device [ 123.436734][ T6580] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 123.524845][ T6580] hfs: can't find a HFS filesystem on dev nbd3 [ 124.419041][ T6578] vlan2: entered promiscuous mode [ 124.445627][ T6578] vlan2: entered allmulticast mode [ 124.787118][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'. [ 125.023921][ T118] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.089305][ T6600] block nbd0: Device being setup by another task [ 125.193638][ T6608] No such timeout policy "syz0" [ 125.792347][ T118] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.806524][ T6602] block nbd0: shutting down sockets [ 125.814337][ T118] usb 4-1: config 0 has no interfaces? [ 125.843966][ T118] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 125.857101][ T118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.593901][ T118] usb 4-1: config 0 descriptor?? [ 130.515150][ T2149] usb 4-1: USB disconnect, device number 6 [ 130.725845][ T6628] syz.5.194: attempt to access beyond end of device [ 130.725845][ T6628] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 130.784722][ T6628] hfs: can't find a HFS filesystem on dev nbd5 [ 130.983593][ T29] audit: type=1800 audit(1732931372.868:17): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.192" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 132.367552][ T6661] No such timeout policy "syz0" [ 132.932032][ T6665] FAULT_INJECTION: forcing a failure. [ 132.932032][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.955575][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.0.200 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 132.965880][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.976061][ T6665] Call Trace: [ 132.979361][ T6665] [ 132.982313][ T6665] dump_stack_lvl+0x241/0x360 [ 132.987021][ T6665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.992251][ T6665] ? __pfx__printk+0x10/0x10 [ 132.996874][ T6665] ? __pfx_lock_release+0x10/0x10 [ 133.001965][ T6665] should_fail_ex+0x3b0/0x4e0 [ 133.006686][ T6665] _copy_from_user+0x2f/0xc0 [ 133.011311][ T6665] core_sys_select+0x508/0x910 [ 133.016107][ T6665] ? __pfx_core_sys_select+0x10/0x10 [ 133.021424][ T6665] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 133.027374][ T6665] ? __pfx_vfs_write+0x10/0x10 [ 133.032177][ T6665] ? __pfx_set_user_sigmask+0x10/0x10 [ 133.037596][ T6665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.043617][ T6665] ? __fget_files+0x2a/0x410 [ 133.048256][ T6665] __se_sys_pselect6+0x323/0x3f0 [ 133.053232][ T6665] ? __pfx___se_sys_pselect6+0x10/0x10 [ 133.058730][ T6665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.065090][ T6665] ? do_syscall_64+0x100/0x230 [ 133.069886][ T6665] ? __x64_sys_pselect6+0x21/0xf0 [ 133.074947][ T6665] do_syscall_64+0xf3/0x230 [ 133.079487][ T6665] ? clear_bhb_loop+0x35/0x90 [ 133.084201][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.090166][ T6665] RIP: 0033:0x7fe99d980849 [ 133.094605][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.114246][ T6665] RSP: 002b:00007fe99e737058 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 133.122706][ T6665] RAX: ffffffffffffffda RBX: 00007fe99db45fa0 RCX: 00007fe99d980849 [ 133.130712][ T6665] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000002000 [ 133.138746][ T6665] RBP: 00007fe99e7370a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.146754][ T6665] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 133.154760][ T6665] R13: 0000000000000000 R14: 00007fe99db45fa0 R15: 00007fffc6daab08 [ 133.162776][ T6665] [ 133.199741][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207544][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.657778][ T6683] FAULT_INJECTION: forcing a failure. [ 133.657778][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 133.670648][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.3.204 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 133.680929][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.691019][ T6683] Call Trace: [ 133.694324][ T6683] [ 133.697277][ T6683] dump_stack_lvl+0x241/0x360 [ 133.701985][ T6683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.707213][ T6683] ? __pfx__printk+0x10/0x10 [ 133.711843][ T6683] ? __kmalloc_cache_noprof+0x48/0x390 [ 133.717333][ T6683] ? __pfx___might_resched+0x10/0x10 [ 133.722657][ T6683] should_fail_ex+0x3b0/0x4e0 [ 133.727375][ T6683] should_failslab+0xac/0x100 [ 133.732083][ T6683] __kmalloc_cache_noprof+0x70/0x390 [ 133.737482][ T6683] ? binder_get_thread+0x1c2/0x6c0 [ 133.742627][ T6683] binder_get_thread+0x1c2/0x6c0 [ 133.747602][ T6683] binder_ioctl+0x2b6/0x1cb0 [ 133.752234][ T6683] ? __pfx___schedule+0x10/0x10 [ 133.757114][ T6683] ? smack_log+0x123/0x540 [ 133.761576][ T6683] ? __pfx_binder_ioctl+0x10/0x10 [ 133.766630][ T6683] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.772657][ T6683] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.778677][ T6683] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.785031][ T6683] ? irqentry_exit+0x63/0x90 [ 133.789629][ T6683] ? lockdep_hardirqs_on+0x99/0x150 [ 133.794842][ T6683] ? __se_sys_ioctl+0x51/0x170 [ 133.799610][ T6683] ? do_vfs_ioctl+0x5/0x2e40 [ 133.804232][ T6683] ? __pfx_binder_ioctl+0x10/0x10 [ 133.809272][ T6683] __se_sys_ioctl+0xf5/0x170 [ 133.813894][ T6683] do_syscall_64+0xf3/0x230 [ 133.818500][ T6683] ? clear_bhb_loop+0x35/0x90 [ 133.823197][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.829102][ T6683] RIP: 0033:0x7fbe39580849 [ 133.833606][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.853214][ T6683] RSP: 002b:00007fbe3a347058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.861637][ T6683] RAX: ffffffffffffffda RBX: 00007fbe39746080 RCX: 00007fbe39580849 [ 133.869604][ T6683] RDX: 0000000020000080 RSI: 00000000c0306201 RDI: 0000000000000008 [ 133.877584][ T6683] RBP: 00007fbe3a3470a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.885555][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.893527][ T6683] R13: 0000000000000000 R14: 00007fbe39746080 R15: 00007ffc892e10f8 [ 133.901503][ T6683] [ 133.910471][ T6683] binder: 6674:6683 ioctl c0306201 20000080 returned -12 [ 135.283508][ T6698] syz.1.209: attempt to access beyond end of device [ 135.283508][ T6698] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 135.382968][ T6698] hfs: can't find a HFS filesystem on dev nbd1 [ 136.557023][ T6715] No such timeout policy "syz0" [ 137.189078][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.215'. [ 137.273163][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 137.704507][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.220'. [ 137.747316][ T6735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.253979][ T5959] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.423860][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 140.442100][ T5959] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.453641][ T5959] usb 1-1: config 0 has no interface number 0 [ 140.476884][ T5959] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.509323][ T5959] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.539439][ T5959] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 140.593802][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.670562][ T5959] usb 1-1: config 0 descriptor?? [ 140.970962][ T6754] FAULT_INJECTION: forcing a failure. [ 140.970962][ T6754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.157808][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.0.223 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 141.168147][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.178227][ T6754] Call Trace: [ 141.181537][ T6754] [ 141.184489][ T6754] dump_stack_lvl+0x241/0x360 [ 141.189192][ T6754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.194422][ T6754] ? __pfx__printk+0x10/0x10 [ 141.199049][ T6754] ? snprintf+0xda/0x120 [ 141.203314][ T6754] should_fail_ex+0x3b0/0x4e0 [ 141.208020][ T6754] _copy_to_user+0x31/0xb0 [ 141.212456][ T6754] simple_read_from_buffer+0xca/0x150 [ 141.217858][ T6754] proc_fail_nth_read+0x1e9/0x250 [ 141.222908][ T6754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.228482][ T6754] ? rw_verify_area+0x55e/0x6f0 [ 141.233351][ T6754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.238918][ T6754] vfs_read+0x1fc/0xb70 [ 141.243108][ T6754] ? __pfx___mutex_lock+0x10/0x10 [ 141.248157][ T6754] ? __pfx_vfs_read+0x10/0x10 [ 141.252858][ T6754] ? __fget_files+0x2a/0x410 [ 141.257467][ T6754] ? __fget_files+0x395/0x410 [ 141.262158][ T6754] ? __fget_files+0x2a/0x410 [ 141.266783][ T6754] ksys_read+0x18f/0x2b0 [ 141.271047][ T6754] ? __pfx_ksys_read+0x10/0x10 [ 141.275826][ T6754] ? do_syscall_64+0x100/0x230 [ 141.280607][ T6754] ? do_syscall_64+0xb6/0x230 [ 141.285301][ T6754] do_syscall_64+0xf3/0x230 [ 141.289819][ T6754] ? clear_bhb_loop+0x35/0x90 [ 141.294522][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.300450][ T6754] RIP: 0033:0x7fe99d97f25c [ 141.305070][ T6754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 141.324721][ T6754] RSP: 002b:00007fe99e737050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.333435][ T6754] RAX: ffffffffffffffda RBX: 00007fe99db45fa0 RCX: 00007fe99d97f25c [ 141.341437][ T6754] RDX: 000000000000000f RSI: 00007fe99e7370b0 RDI: 0000000000000005 [ 141.349437][ T6754] RBP: 00007fe99e7370a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.357435][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.365436][ T6754] R13: 0000000000000000 R14: 00007fe99db45fa0 R15: 00007fffc6daab08 [ 141.373447][ T6754] [ 141.557528][ T5959] usbhid 1-1:0.1: can't add hid device: -71 [ 141.563710][ T5959] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 141.602355][ T5959] usb 1-1: USB disconnect, device number 3 [ 142.719626][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.231'. [ 142.793523][ T6789] FAULT_INJECTION: forcing a failure. [ 142.793523][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 142.808443][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.0.234 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 142.818737][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.828823][ T6789] Call Trace: [ 142.832127][ T6789] [ 142.835089][ T6789] dump_stack_lvl+0x241/0x360 [ 142.839797][ T6789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.845039][ T6789] ? __pfx__printk+0x10/0x10 [ 142.849675][ T6789] ? __kmalloc_cache_noprof+0x48/0x390 [ 142.855168][ T6789] ? __pfx___might_resched+0x10/0x10 [ 142.860496][ T6789] should_fail_ex+0x3b0/0x4e0 [ 142.865213][ T6789] should_failslab+0xac/0x100 [ 142.869911][ T6789] __kmalloc_cache_noprof+0x70/0x390 [ 142.875202][ T6789] ? rfcomm_dlc_alloc+0x76/0x410 [ 142.880150][ T6789] rfcomm_dlc_alloc+0x76/0x410 [ 142.884924][ T6789] rfcomm_dev_ioctl+0xf3e/0x2220 [ 142.889885][ T6789] ? __pfx_lock_release+0x10/0x10 [ 142.894908][ T6789] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 142.900302][ T6789] ? tomoyo_path_number_perm+0x679/0x860 [ 142.905962][ T6789] ? tomoyo_path_number_perm+0x679/0x860 [ 142.911611][ T6789] ? __lock_acquire+0x1397/0x2100 [ 142.916646][ T6789] ? bt_sock_ioctl+0xe9/0x2c0 [ 142.921333][ T6789] sock_do_ioctl+0x158/0x460 [ 142.926021][ T6789] ? __pfx_smack_log+0x10/0x10 [ 142.930797][ T6789] ? __pfx_sock_do_ioctl+0x10/0x10 [ 142.935922][ T6789] ? smk_tskacc+0x300/0x370 [ 142.940441][ T6789] ? smack_file_ioctl+0x29e/0x3a0 [ 142.945474][ T6789] sock_ioctl+0x626/0x8e0 [ 142.949810][ T6789] ? __pfx_sock_ioctl+0x10/0x10 [ 142.954661][ T6789] ? __fget_files+0x2a/0x410 [ 142.959428][ T6789] ? __fget_files+0x2a/0x410 [ 142.964020][ T6789] ? __pfx_sock_ioctl+0x10/0x10 [ 142.968875][ T6789] __se_sys_ioctl+0xf5/0x170 [ 142.973476][ T6789] do_syscall_64+0xf3/0x230 [ 142.977983][ T6789] ? clear_bhb_loop+0x35/0x90 [ 142.982665][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.988559][ T6789] RIP: 0033:0x7fe99d980849 [ 142.992982][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.013829][ T6789] RSP: 002b:00007fe99e737058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.023430][ T6789] RAX: ffffffffffffffda RBX: 00007fe99db45fa0 RCX: 00007fe99d980849 [ 143.031408][ T6789] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000006 [ 143.039389][ T6789] RBP: 00007fe99e7370a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.047457][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.055431][ T6789] R13: 0000000000000000 R14: 00007fe99db45fa0 R15: 00007fffc6daab08 [ 143.063515][ T6789] [ 143.135921][ T2149] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.213880][ T5959] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.387348][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.407575][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.423884][ T5974] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 143.441901][ T5959] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 143.462369][ T2149] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.471582][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 143.479764][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 143.546450][ T6800] FAULT_INJECTION: forcing a failure. [ 143.546450][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.560962][ T6800] CPU: 1 UID: 0 PID: 6800 Comm: syz.0.237 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 143.571322][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.581396][ T6800] Call Trace: [ 143.584692][ T6800] [ 143.587642][ T6800] dump_stack_lvl+0x241/0x360 [ 143.592340][ T6800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.597552][ T6800] ? __pfx__printk+0x10/0x10 [ 143.602169][ T6800] ? __pfx_lock_release+0x10/0x10 [ 143.607217][ T6800] should_fail_ex+0x3b0/0x4e0 [ 143.611936][ T6800] _copy_from_iter+0x21f/0x1e70 [ 143.616859][ T6800] ? __virt_addr_valid+0x183/0x530 [ 143.621990][ T6800] ? __pfx_lock_release+0x10/0x10 [ 143.627034][ T6800] ? __alloc_skb+0x28f/0x440 [ 143.631676][ T6800] ? __pfx__copy_from_iter+0x10/0x10 [ 143.636983][ T6800] ? __virt_addr_valid+0x183/0x530 [ 143.642109][ T6800] ? __virt_addr_valid+0x183/0x530 [ 143.647228][ T6800] ? __virt_addr_valid+0x45f/0x530 [ 143.652446][ T6800] ? __check_object_size+0x48e/0x900 [ 143.657753][ T6800] netlink_sendmsg+0x73d/0xcb0 [ 143.662543][ T6800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.667856][ T6800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.673160][ T6800] __sock_sendmsg+0x221/0x270 [ 143.677868][ T6800] ____sys_sendmsg+0x52a/0x7e0 [ 143.682750][ T6800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.688046][ T6800] ? __fget_files+0x2a/0x410 [ 143.692663][ T6800] ? __fget_files+0x2a/0x410 [ 143.697287][ T6800] __sys_sendmsg+0x269/0x350 [ 143.701898][ T6800] ? __pfx_lock_release+0x10/0x10 [ 143.706940][ T6800] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.712594][ T6800] ? __pfx_vfs_write+0x10/0x10 [ 143.717401][ T6800] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.724179][ T6800] ? do_syscall_64+0x100/0x230 [ 143.728963][ T6800] ? do_syscall_64+0xb6/0x230 [ 143.733682][ T6800] do_syscall_64+0xf3/0x230 [ 143.738198][ T6800] ? clear_bhb_loop+0x35/0x90 [ 143.742892][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.748809][ T6800] RIP: 0033:0x7fe99d980849 [ 143.753244][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.772874][ T6800] RSP: 002b:00007fe99e6f5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.781316][ T6800] RAX: ffffffffffffffda RBX: 00007fe99db46160 RCX: 00007fe99d980849 [ 143.789313][ T6800] RDX: 0000000000000800 RSI: 00000000200001c0 RDI: 0000000000000006 [ 143.797305][ T6800] RBP: 00007fe99e6f50a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.805301][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.813458][ T6800] R13: 0000000000000000 R14: 00007fe99db46160 R15: 00007fffc6daab08 [ 143.821462][ T6800] [ 143.848639][ T5959] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 143.858939][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.867994][ T5959] usb 2-1: Product: syz [ 143.872198][ T5959] usb 2-1: Manufacturer: syz [ 143.875406][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.877159][ T5959] usb 2-1: SerialNumber: syz [ 143.887362][ T2149] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.904681][ T5959] usb 2-1: config 0 descriptor?? [ 143.915670][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 143.918751][ T6788] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 143.926738][ T2149] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 143.935882][ T5959] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 143.946633][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.953843][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 143.979716][ T5974] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 143.988078][ T5974] usb 6-1: config 0 has no interface number 0 [ 143.997045][ T5974] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 144.006655][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.015023][ T5974] usb 6-1: Product: syz [ 144.019318][ T5974] usb 6-1: Manufacturer: syz [ 144.021657][ T2149] usb 3-1: Product: syz [ 144.024465][ T5974] usb 6-1: SerialNumber: syz [ 144.038494][ T5974] usb 6-1: config 0 descriptor?? [ 144.050196][ T5974] smsc95xx v2.0.0 [ 144.062275][ T2149] usb 3-1: Manufacturer: syz [ 144.073558][ T2149] usb 3-1: SerialNumber: syz [ 144.196421][ T2149] usb 3-1: config 0 descriptor?? [ 144.203206][ T2149] usb 3-1: ucan: probing device on interface #0 [ 144.217081][ T2149] usb 3-1: ucan: invalid endpoint configuration [ 144.223565][ T2149] usb 3-1: ucan: probe failed; try to update the device firmware [ 144.338948][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 144.397150][ T2149] usb 2-1: USB disconnect, device number 6 [ 144.456326][ T5974] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 144.475962][ T5974] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 144.519863][ T57] usb 3-1: USB disconnect, device number 5 [ 144.554037][ T5922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.744636][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 144.763687][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.783823][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.800925][ T5922] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.810242][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.831346][ T5922] usb 1-1: config 0 descriptor?? [ 144.859554][ T5922] hub 1-1:0.0: USB hub found [ 145.045356][ T6807] FAULT_INJECTION: forcing a failure. [ 145.045356][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.081268][ T5922] hub 1-1:0.0: 1 port detected [ 145.082437][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.1.240 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 145.096341][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.106422][ T6807] Call Trace: [ 145.109727][ T6807] [ 145.112683][ T6807] dump_stack_lvl+0x241/0x360 [ 145.117390][ T6807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.122608][ T6807] ? __pfx__printk+0x10/0x10 [ 145.127320][ T6807] ? __pfx_lock_release+0x10/0x10 [ 145.132400][ T6807] should_fail_ex+0x3b0/0x4e0 [ 145.137114][ T6807] _copy_from_iter+0x21f/0x1e70 [ 145.141990][ T6807] ? __virt_addr_valid+0x183/0x530 [ 145.147128][ T6807] ? __pfx_lock_release+0x10/0x10 [ 145.152287][ T6807] ? __alloc_skb+0x28f/0x440 [ 145.156920][ T6807] ? __pfx__copy_from_iter+0x10/0x10 [ 145.162244][ T6807] ? __virt_addr_valid+0x183/0x530 [ 145.167381][ T6807] ? __virt_addr_valid+0x183/0x530 [ 145.172533][ T6807] ? __virt_addr_valid+0x45f/0x530 [ 145.177701][ T6807] ? __check_object_size+0x48e/0x900 [ 145.183027][ T6807] netlink_sendmsg+0x73d/0xcb0 [ 145.187924][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.193337][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.198657][ T6807] __sock_sendmsg+0x221/0x270 [ 145.203378][ T6807] ____sys_sendmsg+0x52a/0x7e0 [ 145.208188][ T6807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.213518][ T6807] ? __fget_files+0x2a/0x410 [ 145.218249][ T6807] ? __fget_files+0x2a/0x410 [ 145.222895][ T6807] __sys_sendmsg+0x269/0x350 [ 145.227523][ T6807] ? __pfx_lock_release+0x10/0x10 [ 145.232596][ T6807] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.237746][ T6807] ? __pfx_vfs_write+0x10/0x10 [ 145.243311][ T6807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.249675][ T6807] ? do_syscall_64+0x100/0x230 [ 145.254475][ T6807] ? do_syscall_64+0xb6/0x230 [ 145.259719][ T6807] do_syscall_64+0xf3/0x230 [ 145.264302][ T6807] ? clear_bhb_loop+0x35/0x90 [ 145.269010][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.275025][ T6807] RIP: 0033:0x7f4e36580849 [ 145.279474][ T6807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.299376][ T6807] RSP: 002b:00007f4e343f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.307831][ T6807] RAX: ffffffffffffffda RBX: 00007f4e36745fa0 RCX: 00007f4e36580849 [ 145.315840][ T6807] RDX: 0000000004000000 RSI: 0000000020000b00 RDI: 000000000000000a [ 145.323843][ T6807] RBP: 00007f4e343f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.331843][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.339966][ T6807] R13: 0000000000000000 R14: 00007f4e36745fa0 R15: 00007ffc4a6f16f8 [ 145.348574][ T6807] [ 145.510160][ T5974] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 145.527751][ T5974] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 145.551958][ T5974] usb 6-1: USB disconnect, device number 6 [ 145.820340][ T5974] hub 1-1:0.0: activate --> -90 [ 146.250625][ T5974] usb 1-1-port1: config error [ 146.260717][ T118] usb 1-1: USB disconnect, device number 4 [ 146.342719][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 146.409209][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'. [ 146.456969][ T6829] syz.1.248: attempt to access beyond end of device [ 146.456969][ T6829] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 146.472705][ T6829] hfs: can't find a HFS filesystem on dev nbd1 [ 146.524980][ T57] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 146.645172][ T6833] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.677816][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 146.884365][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 146.891322][ T57] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.903055][ T57] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.914424][ T57] usb 6-1: config 0 interface 0 has no altsetting 0 [ 146.921444][ T57] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 147.645454][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.657940][ T57] usb 6-1: config 0 descriptor?? [ 148.115705][ T57] kye 0003:0458:5010.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 148.406745][ T57] kye 0003:0458:5010.0004: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 148.467032][ T57] kye 0003:0458:5010.0004: tablet-enabling feature report not found [ 148.575339][ T57] kye 0003:0458:5010.0004: tablet enabling failed [ 149.398351][ T6860] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.936620][ T57] usb 6-1: USB disconnect, device number 7 [ 150.788300][ T6879] FAULT_INJECTION: forcing a failure. [ 150.788300][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.811858][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.2.261 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 150.822294][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.832379][ T6879] Call Trace: [ 150.835683][ T6879] [ 150.838632][ T6879] dump_stack_lvl+0x241/0x360 [ 150.843337][ T6879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.848568][ T6879] ? __pfx__printk+0x10/0x10 [ 150.853195][ T6879] ? __pfx_lock_release+0x10/0x10 [ 150.858320][ T6879] should_fail_ex+0x3b0/0x4e0 [ 150.863038][ T6879] _copy_from_iter+0x21f/0x1e70 [ 150.867929][ T6879] ? __virt_addr_valid+0x183/0x530 [ 150.873082][ T6879] ? __pfx_lock_release+0x10/0x10 [ 150.878135][ T6879] ? __alloc_skb+0x28f/0x440 [ 150.882749][ T6879] ? __pfx__copy_from_iter+0x10/0x10 [ 150.888084][ T6879] ? __virt_addr_valid+0x183/0x530 [ 150.893227][ T6879] ? __virt_addr_valid+0x183/0x530 [ 150.898372][ T6879] ? __virt_addr_valid+0x45f/0x530 [ 150.903862][ T6879] ? __check_object_size+0x48e/0x900 [ 150.909188][ T6879] netlink_sendmsg+0x73d/0xcb0 [ 150.913991][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.919333][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.924655][ T6879] __sock_sendmsg+0x221/0x270 [ 150.929369][ T6879] ____sys_sendmsg+0x52a/0x7e0 [ 150.934167][ T6879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.939479][ T6879] ? __fget_files+0x2a/0x410 [ 150.944094][ T6879] ? __fget_files+0x2a/0x410 [ 150.948716][ T6879] __sys_sendmsg+0x269/0x350 [ 150.953368][ T6879] ? __pfx_lock_release+0x10/0x10 [ 150.958422][ T6879] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.963570][ T6879] ? __pfx_vfs_write+0x10/0x10 [ 150.968392][ T6879] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.974779][ T6879] ? do_syscall_64+0x100/0x230 [ 150.979572][ T6879] ? do_syscall_64+0xb6/0x230 [ 150.984277][ T6879] do_syscall_64+0xf3/0x230 [ 150.988819][ T6879] ? clear_bhb_loop+0x35/0x90 [ 150.993515][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.999432][ T6879] RIP: 0033:0x7f4bb7f80849 [ 151.003872][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.023767][ T6879] RSP: 002b:00007f4bb8dcf058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.032221][ T6879] RAX: ffffffffffffffda RBX: 00007f4bb8145fa0 RCX: 00007f4bb7f80849 [ 151.040218][ T6879] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 000000000000000d [ 151.048225][ T6879] RBP: 00007f4bb8dcf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.056227][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.064222][ T6879] R13: 0000000000000000 R14: 00007f4bb8145fa0 R15: 00007ffefb2f0288 [ 151.072240][ T6879] [ 151.464083][ T5974] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 151.989107][ T5974] usb 6-1: device descriptor read/64, error -71 [ 152.162377][ T6896] FAULT_INJECTION: forcing a failure. [ 152.162377][ T6896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.175922][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.0.264 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 152.186195][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.196294][ T6896] Call Trace: [ 152.199594][ T6896] [ 152.202562][ T6896] dump_stack_lvl+0x241/0x360 [ 152.207267][ T6896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.212493][ T6896] ? __pfx__printk+0x10/0x10 [ 152.217121][ T6896] ? __pfx_lock_release+0x10/0x10 [ 152.222173][ T6896] should_fail_ex+0x3b0/0x4e0 [ 152.226888][ T6896] _copy_from_user+0x2f/0xc0 [ 152.231540][ T6896] ____sys_sendmsg+0x2ef/0x7e0 [ 152.236344][ T6896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.241651][ T6896] ? __fget_files+0x2a/0x410 [ 152.246272][ T6896] ? __fget_files+0x2a/0x410 [ 152.250901][ T6896] __sys_sendmsg+0x269/0x350 [ 152.255517][ T6896] ? __pfx_lock_release+0x10/0x10 [ 152.260571][ T6896] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.265726][ T6896] ? __pfx_vfs_write+0x10/0x10 [ 152.270671][ T6896] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.277040][ T6896] ? do_syscall_64+0x100/0x230 [ 152.281850][ T6896] ? do_syscall_64+0xb6/0x230 [ 152.286561][ T6896] do_syscall_64+0xf3/0x230 [ 152.291101][ T6896] ? clear_bhb_loop+0x35/0x90 [ 152.295843][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.301872][ T6896] RIP: 0033:0x7fe99d980849 [ 152.306315][ T6896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.326211][ T6896] RSP: 002b:00007fe99e737058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.334757][ T6896] RAX: ffffffffffffffda RBX: 00007fe99db45fa0 RCX: 00007fe99d980849 [ 152.342760][ T6896] RDX: 000000000000ff00 RSI: 0000000020000000 RDI: 0000000000000003 [ 152.350764][ T6896] RBP: 00007fe99e7370a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.358774][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.366789][ T6896] R13: 0000000000000000 R14: 00007fe99db45fa0 R15: 00007fffc6daab08 [ 152.374804][ T6896] [ 152.475447][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 152.933931][ T5974] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 152.974375][ T57] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.095675][ T5974] usb 6-1: device descriptor read/64, error -71 [ 153.141016][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.170935][ T57] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 153.185682][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.194998][ T57] usb 2-1: Product: syz [ 153.213575][ T57] usb 2-1: Manufacturer: syz [ 153.234581][ T5974] usb usb6-port1: attempt power cycle [ 153.254777][ T57] usb 2-1: SerialNumber: syz [ 153.305344][ T57] usb 2-1: config 0 descriptor?? [ 153.385904][ T57] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 153.823983][ T5974] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 153.856845][ T6911] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 153.858104][ T5974] usb 6-1: device descriptor read/8, error -71 [ 154.015002][ T57] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.076407][ T6913] FAULT_INJECTION: forcing a failure. [ 154.076407][ T6913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.091656][ T6913] CPU: 1 UID: 0 PID: 6913 Comm: syz.2.273 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 154.101948][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.112033][ T6913] Call Trace: [ 154.115334][ T6913] [ 154.118287][ T6913] dump_stack_lvl+0x241/0x360 [ 154.122998][ T6913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.128229][ T6913] ? __pfx__printk+0x10/0x10 [ 154.132872][ T6913] ? __pfx_lock_release+0x10/0x10 [ 154.137937][ T6913] should_fail_ex+0x3b0/0x4e0 [ 154.142660][ T6913] _copy_from_user+0x2f/0xc0 [ 154.147292][ T6913] __se_sys_mount+0x17d/0x3c0 [ 154.152018][ T6913] ? __pfx___se_sys_mount+0x10/0x10 [ 154.157415][ T6913] ? do_syscall_64+0x100/0x230 [ 154.162273][ T6913] ? __x64_sys_mount+0x20/0xc0 [ 154.167040][ T6913] do_syscall_64+0xf3/0x230 [ 154.171544][ T6913] ? clear_bhb_loop+0x35/0x90 [ 154.176398][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.182294][ T6913] RIP: 0033:0x7f4bb7f80849 [ 154.186708][ T6913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.206498][ T6913] RSP: 002b:00007f4bb8dcf058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.214939][ T6913] RAX: ffffffffffffffda RBX: 00007f4bb8145fa0 RCX: 00007f4bb7f80849 [ 154.222928][ T6913] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 154.230901][ T6913] RBP: 00007f4bb8dcf0a0 R08: 0000000020000400 R09: 0000000000000000 [ 154.238873][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.247102][ T6913] R13: 0000000000000000 R14: 00007f4bb8145fa0 R15: 00007ffefb2f0288 [ 154.255106][ T6913] [ 154.367184][ T57] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.383191][ T57] usb 1-1: config 1 has no interface number 0 [ 154.403515][ T57] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.421153][ T57] usb 1-1: too many endpoints for config 1 interface 1 altsetting 177: 105, using maximum allowed: 30 [ 154.433448][ T57] usb 1-1: config 1 interface 1 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 154.474924][ T57] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 139 [ 154.503195][ T57] usb 1-1: config 1 interface 1 has no altsetting 2 [ 154.518434][ T57] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.529808][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.672513][ T57] usb 1-1: Product: syz [ 154.677912][ T57] usb 1-1: Manufacturer: syz [ 154.682645][ T57] usb 1-1: SerialNumber: syz [ 154.925517][ T6908] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 155.090881][ T6926] sctp: [Deprecated]: syz.3.277 (pid 6926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.090881][ T6926] Use struct sctp_sack_info instead [ 155.978950][ T6908] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 156.318320][ T5974] usb 2-1: USB disconnect, device number 7 [ 156.433477][ T57] cdc_ncm 1-1:1.1: bind() failure [ 156.491518][ T6927] fuse: Bad value for 'user_id' [ 156.497689][ T6927] fuse: Bad value for 'user_id' [ 157.652457][ T6934] syz.2.280: attempt to access beyond end of device [ 157.652457][ T6934] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 157.679271][ T6934] hfs: can't find a HFS filesystem on dev nbd2 [ 157.702962][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 157.925258][ T6940] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 158.105516][ T6942] input: syz0 as /devices/virtual/input/input8 [ 159.076979][ T5974] usb 1-1: USB disconnect, device number 5 [ 159.137621][ T29] audit: type=1326 audit(1732931399.968:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.216970][ T29] audit: type=1326 audit(1732931399.968:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.354150][ T29] audit: type=1326 audit(1732931399.968:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.434650][ T29] audit: type=1326 audit(1732931399.968:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.543969][ T29] audit: type=1326 audit(1732931399.968:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.581920][ T29] audit: type=1326 audit(1732931399.968:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.604058][ T29] audit: type=1326 audit(1732931399.968:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.627512][ T29] audit: type=1326 audit(1732931399.968:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e3657f1b0 code=0x7ffc0000 [ 159.649233][ T29] audit: type=1326 audit(1732931399.968:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e3657f1b0 code=0x7ffc0000 [ 159.671778][ T29] audit: type=1326 audit(1732931399.978:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e36580849 code=0x7ffc0000 [ 159.843878][ T5959] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 160.004292][ T5974] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.014254][ T5959] usb 2-1: config 0 has an invalid interface number: 4 but max is 3 [ 160.022496][ T5959] usb 2-1: config 0 has an invalid interface number: 148 but max is 3 [ 160.031607][ T5959] usb 2-1: config 0 has an invalid interface number: 56 but max is 3 [ 160.044665][ T5959] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 160.692487][ T5959] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 160.701560][ T5959] usb 2-1: config 0 has no interface number 0 [ 160.707749][ T5959] usb 2-1: config 0 has no interface number 1 [ 160.714018][ T5959] usb 2-1: config 0 has no interface number 2 [ 160.720167][ T5959] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 160.731038][ T5959] usb 2-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.741910][ T5959] usb 2-1: config 0 interface 4 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 160.807351][ T5959] usb 2-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.818118][ T5959] usb 2-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.830412][ T5959] usb 2-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.841469][ T5959] usb 2-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.854143][ T5959] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 160.866033][ T5959] usb 2-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.882114][ T5959] usb 2-1: config 0 interface 4 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 160.912857][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 160.926490][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 160.944739][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 160.959109][ T5959] usb 2-1: config 0 interface 148 altsetting 11 bulk endpoint 0x4 has invalid maxpacket 16 [ 160.975520][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 161.004035][ T5959] usb 2-1: config 0 interface 148 altsetting 11 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 161.041051][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 161.052567][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 161.064455][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 161.076519][ T5959] usb 2-1: config 0 interface 148 altsetting 11 has 11 endpoint descriptors, different from the interface descriptor's value: 9 [ 161.090102][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 161.101162][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 161.151415][ T6972] netlink: 68 bytes leftover after parsing attributes in process `syz.2.289'. [ 161.541417][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 161.552663][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 161.564075][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 161.577446][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 161.591004][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 161.602389][ T5959] usb 2-1: config 0 interface 56 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 161.613358][ T5959] usb 2-1: config 0 interface 148 has no altsetting 0 [ 161.620453][ T5959] usb 2-1: config 0 interface 56 has no altsetting 0 [ 161.705045][ T5959] usb 2-1: New USB device found, idVendor=05c6, idProduct=9046, bcdDevice=6d.66 [ 161.714372][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.725350][ T5959] usb 2-1: Product: syz [ 161.729569][ T5959] usb 2-1: Manufacturer: syz [ 161.734275][ T5959] usb 2-1: SerialNumber: syz [ 161.741913][ T5959] usb 2-1: config 0 descriptor?? [ 161.748520][ T6950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.760205][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.775565][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.816031][ T5974] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 161.863891][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.895669][ T5974] usb 4-1: config 0 descriptor?? [ 161.913032][ T6975] autofs: Bad value for 'fd' [ 162.095857][ T5959] usb 2-1: USB disconnect, device number 8 [ 162.357473][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.294'. [ 162.380837][ T5974] usb 4-1: string descriptor 0 read error: -71 [ 162.398233][ T5974] usbhid 4-1:0.0: can't add hid device: -71 [ 162.405971][ T5974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.424185][ T5974] usb 4-1: USB disconnect, device number 7 [ 162.523717][ T6988] syz.0.297: attempt to access beyond end of device [ 162.523717][ T6988] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 162.538803][ T6988] hfs: can't find a HFS filesystem on dev nbd0 [ 162.577657][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 163.791168][ T6995] xt_bpf: check failed: parse error [ 165.060508][ T7008] netlink: 'syz.1.300': attribute type 3 has an invalid length. [ 165.069452][ T7008] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 165.078261][ T7008] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.300'. [ 165.755886][ T7017] No such timeout policy "syz0" [ 165.880770][ T7001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.029865][ T7001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.333970][ T7001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.340148][ T7001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.346613][ T7001] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.352681][ T7001] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 166.359389][ T7001] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 166.673934][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.845993][ T7001] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 166.951435][ T7026] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 166.979533][ T7026] CIFS: Unable to determine destination address [ 167.982961][ T7037] netlink: 32 bytes leftover after parsing attributes in process `syz.5.309'. [ 168.014868][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 168.014885][ T29] audit: type=1800 audit(1732931409.908:41): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.311" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 168.047279][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.074133][ T5959] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.223949][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 168.234650][ T5959] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 168.245631][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.283120][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 168.316062][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 168.329990][ T5974] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.354411][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.373961][ T5959] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.392791][ T5959] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.408693][ T5959] usb 1-1: Manufacturer: syz [ 168.438285][ T5851] Bluetooth: hci5: command 0x0c1a tx timeout [ 168.444618][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 168.450857][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.469863][ T5959] usb 1-1: config 0 descriptor?? [ 168.480689][ T7028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.511044][ T5974] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 168.520710][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.530071][ T5974] usb 2-1: Product: syz [ 168.537804][ T5974] usb 2-1: Manufacturer: syz [ 168.542986][ T5974] usb 2-1: SerialNumber: syz [ 168.550679][ T5974] usb 2-1: config 0 descriptor?? [ 168.907638][ T5974] hso 2-1:0.0: Failed to find BULK IN ep [ 168.925282][ T5974] usb-storage 2-1:0.0: USB Mass Storage device detected [ 169.016344][ T7048] delete_channel: no stack [ 169.038394][ T7048] delete_channel: no stack [ 169.944098][ T5974] usb 2-1: USB disconnect, device number 9 [ 170.106649][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.315'. [ 170.524958][ T5851] Bluetooth: hci5: command 0x0c1a tx timeout [ 170.759408][ T5959] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 170.769627][ T5959] usb 1-1: USB disconnect, device number 6 [ 171.302984][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 171.906443][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 172.062423][ T7083] netlink: 'syz.2.321': attribute type 3 has an invalid length. [ 172.070584][ T7083] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 172.078501][ T7083] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.321'. [ 172.206838][ T7085] hub 9-0:1.0: USB hub found [ 172.238366][ T7085] hub 9-0:1.0: 1 port detected [ 172.517275][ T7100] syz.3.327: attempt to access beyond end of device [ 172.517275][ T7100] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 172.553857][ T7100] hfs: can't find a HFS filesystem on dev nbd3 [ 172.595066][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 172.656050][ T7097] sp0: Synchronizing with TNC [ 172.701823][ T7077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.710060][ T7077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.724738][ T7077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.732443][ T7077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.747483][ T7077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.753554][ T7077] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 173.455194][ T7113] No such timeout policy "syz0" [ 173.501385][ T57] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.143944][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.892329][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 174.899550][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.906658][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.912796][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.919865][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.771491][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 176.241908][ T7128] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 176.282261][ T57] usb 2-1: device descriptor read/all, error -71 [ 176.800367][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 176.956113][ T7138] xt_ecn: cannot match TCP bits for non-tcp packets [ 177.138619][ T5894] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.440729][ T5894] usb 3-1: device descriptor read/64, error -71 [ 177.695315][ T5894] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.005752][ T5894] usb 3-1: device descriptor read/64, error -71 [ 178.015589][ T7148] netlink: 'syz.5.341': attribute type 3 has an invalid length. [ 178.023346][ T7148] netlink: 'syz.5.341': attribute type 1 has an invalid length. [ 178.031641][ T7148] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.341'. [ 178.115526][ T5894] usb usb3-port1: attempt power cycle [ 178.396712][ T7159] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.455021][ T5894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 178.490138][ T5894] usb 3-1: device descriptor read/8, error -71 [ 178.666785][ T7145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.684057][ T7145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.703975][ T7145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.714018][ T7145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.728943][ T7145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.795512][ T5894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 178.799483][ T7145] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 178.964183][ T5894] usb 3-1: device descriptor read/8, error -71 [ 180.130400][ T5894] usb usb3-port1: unable to enumerate USB device [ 182.875683][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.882232][ T5851] Bluetooth: hci5: command 0x0c1a tx timeout [ 182.888377][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.894485][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.901232][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.907713][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.203423][ T7176] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.558734][ T7190] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.612978][ T7191] CIFS: Unable to determine destination address [ 184.320481][ T7188] pim6reg1: entered promiscuous mode [ 184.333093][ T7188] pim6reg1: entered allmulticast mode [ 184.493388][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 184.990362][ T7205] netlink: 'syz.2.355': attribute type 3 has an invalid length. [ 185.089642][ T7205] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 185.165747][ T7205] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.355'. [ 186.775411][ T7198] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 186.777462][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.791581][ T7198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.558555][ T7198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.774186][ T7198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.780582][ T7198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.788747][ T7198] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 189.085723][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.324838][ T7229] delete_channel: no stack [ 189.833259][ T7222] delete_channel: no stack [ 189.841852][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 189.857962][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.865230][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.871339][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.008958][ T7232] trusted_key: encrypted_key: insufficient parameters specified [ 190.290709][ T7240] xt_ecn: cannot match TCP bits for non-tcp packets [ 191.424323][ T57] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.828097][ T7255] CIFS: Unable to determine destination address [ 192.111495][ T7256] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.228518][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 192.247978][ T57] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 192.303390][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.345742][ T57] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.356915][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.366910][ T57] usb 2-1: Product: syz [ 192.371113][ T57] usb 2-1: Manufacturer: syz [ 192.404986][ T57] usb 2-1: SerialNumber: syz [ 192.767451][ T57] usb 2-1: config 0 descriptor?? [ 193.029104][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 193.040181][ T57] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.074898][ T57] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 193.465862][ T57] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 193.473430][ T57] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 193.483618][ T57] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 193.491677][ T57] em28xx 2-1:0.0: No AC97 audio processor [ 194.198370][ T7281] mmap: syz.5.374 (7281) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.330837][ T7276] netlink: 'syz.5.374': attribute type 1 has an invalid length. [ 194.545841][ T57] usb 2-1: USB disconnect, device number 12 [ 194.552720][ T57] em28xx 2-1:0.0: Disconnecting em28xx [ 194.566079][ T57] em28xx 2-1:0.0: Freeing device [ 194.597379][ T7271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.373'. [ 194.660431][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.667708][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.828045][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.379'. [ 197.599228][ T7322] CIFS: Unable to determine destination address [ 198.653694][ T7324] 9pnet_fd: p9_fd_create_unix (7324): problem connecting socket: ./file1: -2 [ 199.150578][ T7329] No such timeout policy "syz0" [ 200.031246][ T7333] syz.2.386: attempt to access beyond end of device [ 200.031246][ T7333] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 200.131924][ T7335] 9pnet_fd: Insufficient options for proto=fd [ 200.138486][ T7333] hfs: can't find a HFS filesystem on dev nbd2 [ 204.370334][ T5923] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 204.965121][ T7367] CIFS: Unable to determine destination address [ 205.466032][ T5923] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 205.503824][ T5923] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 205.526702][ T5923] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 205.543800][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.881306][ T7376] hub 9-0:1.0: USB hub found [ 205.892742][ T7376] hub 9-0:1.0: 1 port detected [ 206.185241][ T7376] netlink: 332 bytes leftover after parsing attributes in process `syz.1.397'. [ 206.232534][ T5922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.528933][ T5922] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 206.538099][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.637749][ T5922] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.718626][ T5922] usb 4-1: config 1 has no interface number 1 [ 206.802067][ T7389] FAULT_INJECTION: forcing a failure. [ 206.802067][ T7389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.816334][ T7389] CPU: 1 UID: 0 PID: 7389 Comm: syz.5.399 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 206.826625][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.836709][ T7389] Call Trace: [ 206.840004][ T7389] [ 206.842950][ T7389] dump_stack_lvl+0x241/0x360 [ 206.847656][ T7389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.852874][ T7389] ? __pfx__printk+0x10/0x10 [ 206.857491][ T7389] ? __pfx_lock_release+0x10/0x10 [ 206.862544][ T7389] should_fail_ex+0x3b0/0x4e0 [ 206.867250][ T7389] _copy_from_user+0x2f/0xc0 [ 206.871861][ T7389] __se_sys_mount+0x17d/0x3c0 [ 206.876563][ T7389] ? __pfx___se_sys_mount+0x10/0x10 [ 206.881796][ T7389] ? do_syscall_64+0x100/0x230 [ 206.886595][ T7389] ? __x64_sys_mount+0x20/0xc0 [ 206.891471][ T7389] do_syscall_64+0xf3/0x230 [ 206.895994][ T7389] ? clear_bhb_loop+0x35/0x90 [ 206.900705][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.906619][ T7389] RIP: 0033:0x7f3d98380849 [ 206.911051][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.930687][ T7389] RSP: 002b:00007f3d961f6058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.939137][ T7389] RAX: ffffffffffffffda RBX: 00007f3d98546160 RCX: 00007f3d98380849 [ 206.947134][ T7389] RDX: 0000000020000100 RSI: 0000000020000500 RDI: 0000000000000000 [ 206.955129][ T7389] RBP: 00007f3d961f60a0 R08: 0000000020000a40 R09: 0000000000000000 [ 206.963120][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.971110][ T7389] R13: 0000000000000000 R14: 00007f3d98546160 R15: 00007fff062baa48 [ 206.979119][ T7389] [ 207.167435][ T5922] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 207.180505][ T5922] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.197391][ T5922] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.213947][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.223848][ T5922] usb 4-1: Product: syz [ 207.228183][ T5922] usb 4-1: Manufacturer: syz [ 207.232933][ T5922] usb 4-1: SerialNumber: syz [ 207.346840][ T7358] ptrace attach of ""[7393] was attempted by ""[7358] [ 207.532788][ T5923] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 207.545162][ T5923] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 207.590954][ T5922] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 207.605155][ T5922] usb 4-1: MIDIStreaming interface descriptor not found [ 207.649850][ T5923] input: failed to attach handler kbd to device input9, error: -5 [ 207.738215][ T5922] usb 4-1: USB disconnect, device number 8 [ 207.759763][ T5923] usb 3-1: USB disconnect, device number 10 [ 209.754397][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 209.878846][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.415'. [ 210.458527][ T7446] No such timeout policy "syz0" [ 210.704967][ T7452] process 'syz.5.420' launched '/dev/fd/4' with NULL argv: empty string added [ 210.791344][ T7449] can0: slcan on ttyS3. [ 210.938373][ T7449] can0 (unregistered): slcan off ttyS3. [ 211.225359][ T57] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.116118][ T7479] overlayfs: failed to resolve './file0': -2 [ 212.200233][ T57] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 212.224726][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 212.248889][ T7481] syz.1.422: attempt to access beyond end of device [ 212.248889][ T7481] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 212.263166][ T57] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.299362][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 212.374955][ T7481] hfs: can't find a HFS filesystem on dev nbd1 [ 212.554816][ T57] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 212.565552][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.573709][ T57] usb 1-1: Product: syz [ 212.598736][ T57] usb 1-1: Manufacturer: syz [ 212.603475][ T57] usb 1-1: SerialNumber: syz [ 212.666427][ T57] usb 1-1: config 0 descriptor?? [ 215.258407][ T57] usb 1-1: can't set config #0, error -71 [ 215.276458][ T57] usb 1-1: USB disconnect, device number 7 [ 215.786544][ T7538] No such timeout policy "syz0" [ 218.104993][ T57] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 218.172171][ T7565] overlayfs: failed to resolve './file0': -2 [ 218.293692][ T7569] syz.2.439: attempt to access beyond end of device [ 218.293692][ T7569] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 218.376725][ T7569] hfs: can't find a HFS filesystem on dev nbd2 [ 218.952523][ T7583] No such timeout policy "syz0" [ 219.032731][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 219.186511][ T7586] bridge0: entered promiscuous mode [ 219.223083][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 219.271260][ T7586] bridge_slave_1: left allmulticast mode [ 219.288192][ T7586] bridge_slave_1: left promiscuous mode [ 219.288704][ T7590] input: syz0 as /devices/virtual/input/input10 [ 219.299459][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.512902][ T7586] bridge_slave_0: left allmulticast mode [ 219.520021][ T7586] bridge_slave_0: left promiscuous mode [ 219.548172][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.740612][ T7599] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 221.583059][ T7599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.603608][ T7600] bond1: (slave bridge1): making interface the new active one [ 221.612215][ T7600] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 222.189449][ T7618] FAULT_INJECTION: forcing a failure. [ 222.189449][ T7618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.204962][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.1.454 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 222.215237][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.225308][ T7618] Call Trace: [ 222.228607][ T7618] [ 222.231548][ T7618] dump_stack_lvl+0x241/0x360 [ 222.236374][ T7618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.241594][ T7618] ? __pfx__printk+0x10/0x10 [ 222.246211][ T7618] ? __pfx_lock_release+0x10/0x10 [ 222.251268][ T7618] should_fail_ex+0x3b0/0x4e0 [ 222.255973][ T7618] _copy_from_user+0x2f/0xc0 [ 222.260590][ T7618] __snd_timer_user_ioctl+0x2d9/0x5390 [ 222.266110][ T7618] ? __pfx___snd_timer_user_ioctl+0x10/0x10 [ 222.272032][ T7618] ? __mutex_trylock_common+0x183/0x2e0 [ 222.277598][ T7618] ? __pfx___might_resched+0x10/0x10 [ 222.283010][ T7618] ? __pfx___mutex_trylock_common+0x10/0x10 [ 222.288927][ T7618] ? rcu_is_watching+0x15/0xb0 [ 222.293822][ T7618] ? trace_contention_end+0x3c/0x120 [ 222.299165][ T7618] ? __mutex_lock+0x37f/0xee0 [ 222.303952][ T7618] ? smk_tskacc+0x300/0x370 [ 222.308491][ T7618] ? snd_timer_user_ioctl+0x4f/0x90 [ 222.313719][ T7618] ? __pfx___mutex_lock+0x10/0x10 [ 222.318770][ T7618] ? __fget_files+0x2a/0x410 [ 222.323393][ T7618] ? __fget_files+0x2a/0x410 [ 222.328015][ T7618] snd_timer_user_ioctl+0x5f/0x90 [ 222.333074][ T7618] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 222.338824][ T7618] __se_sys_ioctl+0xf5/0x170 [ 222.343446][ T7618] do_syscall_64+0xf3/0x230 [ 222.347975][ T7618] ? clear_bhb_loop+0x35/0x90 [ 222.352689][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.358616][ T7618] RIP: 0033:0x7f4e36580849 [ 222.363060][ T7618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.382701][ T7618] RSP: 002b:00007f4e343b4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.391151][ T7618] RAX: ffffffffffffffda RBX: 00007f4e36746160 RCX: 00007f4e36580849 [ 222.399157][ T7618] RDX: 0000000020000500 RSI: 0000000040505412 RDI: 0000000000000005 [ 222.407155][ T7618] RBP: 00007f4e343b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.415149][ T7618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.423144][ T7618] R13: 0000000000000000 R14: 00007f4e36746160 R15: 00007ffc4a6f16f8 [ 222.431156][ T7618] [ 223.453482][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.456'. [ 223.729192][ T7623] overlayfs: failed to resolve './file0': -2 [ 224.023416][ T7627] syz.1.457: attempt to access beyond end of device [ 224.023416][ T7627] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 224.043372][ T7627] hfs: can't find a HFS filesystem on dev nbd1 [ 224.070613][ T7636] No such timeout policy "syz0" [ 224.078164][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 226.573870][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.883455][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 228.155984][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 228.432145][ T5922] usb 2-1: device descriptor read/all, error -71 [ 228.446360][ T7694] FAULT_INJECTION: forcing a failure. [ 228.446360][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 228.461427][ T7696] netlink: 'syz.2.478': attribute type 3 has an invalid length. [ 228.471006][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.5.477 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 228.481294][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.491380][ T7694] Call Trace: [ 228.494685][ T7694] [ 228.497639][ T7694] dump_stack_lvl+0x241/0x360 [ 228.502352][ T7694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.507583][ T7694] ? __pfx__printk+0x10/0x10 [ 228.512188][ T7694] ? __kmalloc_noprof+0xb5/0x4c0 [ 228.517143][ T7694] ? __pfx___might_resched+0x10/0x10 [ 228.522443][ T7694] should_fail_ex+0x3b0/0x4e0 [ 228.527131][ T7694] should_failslab+0xac/0x100 [ 228.531812][ T7694] __kmalloc_noprof+0xdd/0x4c0 [ 228.536581][ T7694] ? bpf_test_init+0xe1/0x180 [ 228.541263][ T7694] bpf_test_init+0xe1/0x180 [ 228.545781][ T7694] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 228.551160][ T7694] ? __pfx_lock_release+0x10/0x10 [ 228.556256][ T7694] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 228.562065][ T7694] ? __fget_files+0x2a/0x410 [ 228.566750][ T7694] ? __fget_files+0x2a/0x410 [ 228.571343][ T7694] ? fput+0x21b/0x290 [ 228.575414][ T7694] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 228.581230][ T7694] bpf_prog_test_run+0x2e4/0x360 [ 228.586173][ T7694] __sys_bpf+0x48d/0x810 [ 228.590425][ T7694] ? __pfx___sys_bpf+0x10/0x10 [ 228.595191][ T7694] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.601180][ T7694] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.607508][ T7694] ? do_syscall_64+0x100/0x230 [ 228.612281][ T7694] __x64_sys_bpf+0x7c/0x90 [ 228.616711][ T7694] do_syscall_64+0xf3/0x230 [ 228.621212][ T7694] ? clear_bhb_loop+0x35/0x90 [ 228.625892][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.631799][ T7694] RIP: 0033:0x7f3d98380849 [ 228.636218][ T7694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.655831][ T7694] RSP: 002b:00007f3d990c9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.664291][ T7694] RAX: ffffffffffffffda RBX: 00007f3d98545fa0 RCX: 00007f3d98380849 [ 228.672269][ T7694] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 228.680255][ T7694] RBP: 00007f3d990c90a0 R08: 0000000000000000 R09: 0000000000000000 [ 228.688234][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.696211][ T7694] R13: 0000000000000000 R14: 00007f3d98545fa0 R15: 00007fff062baa48 [ 228.704206][ T7694] [ 228.802827][ T7696] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.478'. [ 231.015993][ T29] audit: type=1800 audit(1732931472.908:42): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.489" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 231.063953][ T5922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.122519][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 231.441113][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 231.540416][ T5922] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 231.552682][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.568002][ T5922] usb 3-1: Product: syz [ 231.572479][ T5922] usb 3-1: Manufacturer: syz [ 231.579446][ T5922] usb 3-1: SerialNumber: syz [ 231.802715][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.826732][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.852461][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.931857][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.966951][ T5922] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.628876][ T5922] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 232.679509][ T5922] usb 3-1: USB disconnect, device number 11 [ 234.294101][ T29] audit: type=1800 audit(1732931476.168:43): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.501" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 234.614937][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 235.049663][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 237.300015][ T29] audit: type=1800 audit(1732931479.188:44): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.518" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 240.049031][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 240.620212][ T7872] overlayfs: failed to resolve './file1': -2 [ 240.767482][ T7874] syz.3.530: attempt to access beyond end of device [ 240.767482][ T7874] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 240.767551][ T7874] hfs: can't find a HFS filesystem on dev nbd3 [ 240.966883][ T29] audit: type=1800 audit(1732931482.858:45): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.531" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 241.170339][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.532'. [ 241.422631][ T7888] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.465789][ T7888] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 242.344811][ T7910] FAULT_INJECTION: forcing a failure. [ 242.344811][ T7910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.359260][ T7910] CPU: 1 UID: 0 PID: 7910 Comm: syz.5.539 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 242.369549][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.379653][ T7910] Call Trace: [ 242.382996][ T7910] [ 242.385965][ T7910] dump_stack_lvl+0x241/0x360 [ 242.390700][ T7910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.395940][ T7910] ? __pfx__printk+0x10/0x10 [ 242.400679][ T7910] should_fail_ex+0x3b0/0x4e0 [ 242.405492][ T7910] _copy_from_iter+0x21f/0x1e70 [ 242.410405][ T7910] ? pipe_write+0x1c6/0x1a30 [ 242.415033][ T7910] ? __pfx__copy_from_iter+0x10/0x10 [ 242.420360][ T7910] ? alloc_pages_mpol_noprof+0x417/0x680 [ 242.426051][ T7910] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 242.432078][ T7910] ? page_copy_sane+0x46/0x260 [ 242.436897][ T7910] copy_page_from_iter+0x7a/0x100 [ 242.441970][ T7910] pipe_write+0x7f5/0x1a30 [ 242.446443][ T7910] ? __pfx_pipe_write+0x10/0x10 [ 242.451334][ T7910] ? bpf_lsm_file_permission+0x9/0x10 [ 242.457422][ T7910] ? security_file_permission+0x74/0x280 [ 242.463144][ T7910] vfs_write+0xaeb/0xd30 [ 242.467438][ T7910] ? __pfx_pipe_write+0x10/0x10 [ 242.472340][ T7910] ? __pfx_vfs_write+0x10/0x10 [ 242.477151][ T7910] ? __fget_files+0x2a/0x410 [ 242.481796][ T7910] ? __fget_files+0x2a/0x410 [ 242.486439][ T7910] ksys_write+0x18f/0x2b0 [ 242.490834][ T7910] ? __pfx_ksys_write+0x10/0x10 [ 242.495768][ T7910] ? do_syscall_64+0x100/0x230 [ 242.500572][ T7910] ? do_syscall_64+0xb6/0x230 [ 242.505289][ T7910] do_syscall_64+0xf3/0x230 [ 242.509816][ T7910] ? clear_bhb_loop+0x35/0x90 [ 242.514525][ T7910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.520463][ T7910] RIP: 0033:0x7f3d98380849 [ 242.524916][ T7910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.544561][ T7910] RSP: 002b:00007f3d990a8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.553027][ T7910] RAX: ffffffffffffffda RBX: 00007f3d98546080 RCX: 00007f3d98380849 [ 242.561036][ T7910] RDX: 0000000000000015 RSI: 0000000020000080 RDI: 0000000000000008 [ 242.569044][ T7910] RBP: 00007f3d990a80a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.577049][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.585054][ T7910] R13: 0000000000000000 R14: 00007f3d98546080 R15: 00007fff062baa48 [ 242.593076][ T7910] [ 242.596137][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.648233][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 244.162874][ T7929] netlink: 'syz.1.545': attribute type 29 has an invalid length. [ 244.189847][ T7929] netlink: 'syz.1.545': attribute type 29 has an invalid length. [ 244.226038][ T7934] overlayfs: failed to resolve './file1': -2 [ 244.387076][ T7940] syz.5.546: attempt to access beyond end of device [ 244.387076][ T7940] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 244.566733][ T7940] hfs: can't find a HFS filesystem on dev nbd5 [ 244.606068][ T29] audit: type=1800 audit(1732931486.488:46): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.547" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 248.707572][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 251.216875][ T8013] overlayfs: failed to resolve './file1': -2 [ 251.339644][ T8013] syz.0.563: attempt to access beyond end of device [ 251.339644][ T8013] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 251.339687][ T8013] hfs: can't find a HFS filesystem on dev nbd0 [ 253.112379][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 253.607145][ T8031] siw: device registration error -23 [ 254.039270][ T8034] syz.0.568: attempt to access beyond end of device [ 254.039270][ T8034] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 254.072887][ T8034] hfs: can't find a HFS filesystem on dev nbd0 [ 254.235692][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.570'. [ 255.717435][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 256.043087][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058345][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.321761][ T8081] FAULT_INJECTION: forcing a failure. [ 256.321761][ T8081] name failslab, interval 1, probability 0, space 0, times 0 [ 256.437095][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.2.580 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 256.447411][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.457502][ T8081] Call Trace: [ 256.460803][ T8081] [ 256.463753][ T8081] dump_stack_lvl+0x241/0x360 [ 256.468472][ T8081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.473702][ T8081] ? __pfx__printk+0x10/0x10 [ 256.478329][ T8081] should_fail_ex+0x3b0/0x4e0 [ 256.483045][ T8081] should_failslab+0xac/0x100 [ 256.487752][ T8081] ? skb_clone+0x20c/0x390 [ 256.492196][ T8081] kmem_cache_alloc_noprof+0x70/0x380 [ 256.497603][ T8081] skb_clone+0x20c/0x390 [ 256.501887][ T8081] __netlink_deliver_tap+0x3cc/0x7f0 [ 256.507217][ T8081] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.512446][ T8081] netlink_deliver_tap+0x19d/0x1b0 [ 256.517588][ T8081] netlink_unicast+0x7c4/0x990 [ 256.522403][ T8081] ? __pfx_netlink_unicast+0x10/0x10 [ 256.527723][ T8081] ? __virt_addr_valid+0x183/0x530 [ 256.532903][ T8081] ? __check_object_size+0x48e/0x900 [ 256.538219][ T8081] netlink_sendmsg+0x8e4/0xcb0 [ 256.543020][ T8081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.548342][ T8081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.553692][ T8081] __sock_sendmsg+0x221/0x270 [ 256.558395][ T8081] ____sys_sendmsg+0x52a/0x7e0 [ 256.563196][ T8081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.568509][ T8081] ? __fget_files+0x2a/0x410 [ 256.573130][ T8081] ? __fget_files+0x2a/0x410 [ 256.577748][ T8081] __sys_sendmsg+0x269/0x350 [ 256.582354][ T8081] ? __pfx_lock_release+0x10/0x10 [ 256.587398][ T8081] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.592535][ T8081] ? __pfx_vfs_write+0x10/0x10 [ 256.597353][ T8081] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.603712][ T8081] ? do_syscall_64+0x100/0x230 [ 256.608510][ T8081] ? do_syscall_64+0xb6/0x230 [ 256.613221][ T8081] do_syscall_64+0xf3/0x230 [ 256.617752][ T8081] ? clear_bhb_loop+0x35/0x90 [ 256.622465][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.628389][ T8081] RIP: 0033:0x7f4bb7f80849 [ 256.632840][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.652562][ T8081] RSP: 002b:00007f4bb8dcf058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.661015][ T8081] RAX: ffffffffffffffda RBX: 00007f4bb8145fa0 RCX: 00007f4bb7f80849 [ 256.669019][ T8081] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000003 [ 256.677018][ T8081] RBP: 00007f4bb8dcf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 256.685022][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.693091][ T8081] R13: 0000000000000000 R14: 00007f4bb8145fa0 R15: 00007ffefb2f0288 [ 256.701112][ T8081] [ 256.725086][ T8085] xt_ecn: cannot match TCP bits for non-tcp packets [ 257.111272][ T8088] /dev/nullb0: Can't open blockdev [ 257.989128][ T5974] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 258.066115][ T5894] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.123925][ T5974] usb 2-1: device descriptor read/64, error -71 [ 258.226986][ T5894] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.237984][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.271596][ T5894] usb 3-1: config 0 descriptor?? [ 258.289323][ T5894] cp210x 3-1:0.0: cp210x converter detected [ 258.393906][ T5974] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.553830][ T5974] usb 2-1: device descriptor read/64, error -71 [ 258.674185][ T5974] usb usb2-port1: attempt power cycle [ 258.697882][ T5894] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 258.723426][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0 [ 259.037689][ T5974] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.104188][ T5974] usb 2-1: device descriptor read/8, error -71 [ 259.134408][ T5894] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 259.306772][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 259.346205][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 259.368210][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.374684][ T5974] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 259.388181][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.491329][ T5894] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 259.588679][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.709374][ T5894] usb 4-1: Product: syz [ 259.806574][ T5894] usb 4-1: Manufacturer: syz [ 259.878878][ T5894] usb 4-1: SerialNumber: syz [ 260.045502][ T5894] usb 4-1: config 0 descriptor?? [ 260.067105][ T5894] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 260.095319][ T5974] usb 2-1: device descriptor read/8, error -71 [ 260.214091][ T5974] usb usb2-port1: unable to enumerate USB device [ 261.070730][ T5922] usb 3-1: USB disconnect, device number 12 [ 261.108879][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.217161][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 261.219260][ T5922] cp210x 3-1:0.0: device disconnected [ 261.503809][ T5974] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 262.336834][ T5974] usb 6-1: config index 0 descriptor too short (expected 43, got 22) [ 262.347472][ T5974] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 262.376220][ T5974] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 262.401741][ T5974] usb 6-1: config 0 has no interface number 0 [ 262.422073][ T5974] usb 6-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 262.682073][ T5974] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 262.691428][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.699501][ T5974] usb 6-1: Product: syz [ 262.703887][ T5974] usb 6-1: Manufacturer: syz [ 262.708525][ T5974] usb 6-1: SerialNumber: syz [ 262.716381][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 262.716573][ T5974] usb 6-1: config 0 descriptor?? [ 262.843028][ T8138] siw: device registration error -23 [ 263.652483][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.663789][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.689908][ T5974] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 263.714389][ T5974] usb 6-1: USB disconnect, device number 12 [ 263.729294][ T5959] usb 4-1: USB disconnect, device number 10 [ 263.768431][ T8149] syz.0.599: attempt to access beyond end of device [ 263.768431][ T8149] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 263.790431][ T8149] hfs: can't find a HFS filesystem on dev nbd0 [ 263.914603][ T5922] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 264.803797][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 264.815113][ T5922] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 264.824268][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.866552][ T5922] usb 3-1: Product: syz [ 264.870774][ T5922] usb 3-1: Manufacturer: syz [ 264.883768][ T5922] usb 3-1: SerialNumber: syz [ 264.892527][ T5922] usb 3-1: config 0 descriptor?? [ 264.932725][ T5922] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 265.445794][ T5922] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 265.516859][ T8169] netlink: 80 bytes leftover after parsing attributes in process `syz.3.605'. [ 265.915063][ T8169] netlink: 80 bytes leftover after parsing attributes in process `syz.3.605'. [ 266.949417][ T5959] usb 3-1: USB disconnect, device number 13 [ 267.900622][ T29] audit: type=1800 audit(1732931509.778:47): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.614" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 268.769637][ T8212] syz.3.616: attempt to access beyond end of device [ 268.769637][ T8212] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 268.848647][ T8212] hfs: can't find a HFS filesystem on dev nbd3 [ 269.169498][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 269.626977][ T8220] siw: device registration error -23 [ 271.674304][ T29] audit: type=1800 audit(1732931513.558:48): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.620" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 271.997779][ T8243] delete_channel: no stack [ 272.017948][ T8243] delete_channel: no stack [ 273.364767][ T5894] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 273.509022][ T5894] usb 2-1: device descriptor read/64, error -71 [ 273.894516][ T5894] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 274.098358][ T5894] usb 2-1: device descriptor read/64, error -71 [ 274.166299][ T8257] netlink: 104 bytes leftover after parsing attributes in process `syz.2.628'. [ 274.292880][ T8265] syz.5.631: attempt to access beyond end of device [ 274.292880][ T8265] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 274.350197][ T8265] hfs: can't find a HFS filesystem on dev nbd5 [ 274.398117][ T5894] usb usb2-port1: attempt power cycle [ 274.536153][ T8274] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 274.781548][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 274.834802][ T5894] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 276.545076][ T8286] delete_channel: no stack [ 276.623371][ T8286] delete_channel: no stack [ 276.831823][ T5894] usb 2-1: device descriptor read/8, error -71 [ 278.650639][ T8311] syz.5.645: attempt to access beyond end of device [ 278.650639][ T8311] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 278.702665][ T8311] hfs: can't find a HFS filesystem on dev nbd5 [ 279.705390][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.648'. [ 279.761561][ T8323] net_ratelimit: 31 callbacks suppressed [ 279.761584][ T8323] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 279.995129][ T8337] netlink: 'syz.3.649': attribute type 3 has an invalid length. [ 280.078710][ T8337] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 280.140813][ T8337] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.649'. [ 280.181947][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 280.204723][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 280.431015][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 280.658787][ T8348] siw: device registration error -23 [ 281.396972][ T29] audit: type=1800 audit(1732931523.268:49): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.655" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 281.557176][ T8326] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 281.564791][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.642822][ T8363] syz.1.659: attempt to access beyond end of device [ 281.642822][ T8363] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 281.656954][ T8363] hfs: can't find a HFS filesystem on dev nbd1 [ 281.669027][ T8326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.829058][ T8326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.848412][ T8326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.855684][ T8326] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.879590][ T8326] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 282.428992][ T8370] orangefs_mount: mount request failed with -4 [ 283.140749][ T8374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.462836][ T29] audit: type=1800 audit(1732931525.348:50): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.665" name="file0" dev="overlay" ino=857 res=0 errno=0 [ 283.614786][ T5959] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 283.644319][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.754923][ T5959] usb 1-1: device descriptor read/64, error -71 [ 283.874492][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.874748][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.887198][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.960766][ T5851] Bluetooth: hci5: command 0x0c1a tx timeout [ 284.035929][ T5959] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 284.148310][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 284.284929][ T5959] usb 1-1: device descriptor read/64, error -71 [ 284.558537][ T5959] usb usb1-port1: attempt power cycle [ 284.954824][ T5959] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 285.116107][ T5959] usb 1-1: device descriptor read/8, error -71 [ 285.435225][ T5959] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.444677][ T29] audit: type=1800 audit(1732931527.308:51): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.670" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 285.503114][ T5959] usb 1-1: device descriptor read/8, error -71 [ 285.666891][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 285.722282][ T5959] usb usb1-port1: unable to enumerate USB device [ 286.201210][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 286.827587][ T8406] siw: device registration error -23 [ 286.846621][ T8412] siw: device registration error -23 [ 287.369693][ T8417] delete_channel: no stack [ 287.391337][ T8417] delete_channel: no stack [ 317.477891][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.484958][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.925900][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.932264][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.358100][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.365911][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.034982][ T30] INFO: task kworker/u8:8:1134 blocked for more than 143 seconds. [ 448.042856][ T30] Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 448.051660][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.061407][ T30] task:kworker/u8:8 state:D stack:20728 pid:1134 tgid:1134 ppid:2 flags:0x00004000 [ 448.072312][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 448.079313][ T30] Call Trace: [ 448.082590][ T30] [ 448.087157][ T30] __schedule+0x17fb/0x4be0 [ 448.091712][ T30] ? __pfx___schedule+0x10/0x10 [ 448.097673][ T30] ? __blk_flush_plug+0x449/0x500 [ 448.102713][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.108336][ T30] ? __blk_flush_plug+0x449/0x500 [ 448.113358][ T30] ? kthread_data+0x52/0xd0 [ 448.119189][ T30] ? schedule+0x90/0x320 [ 448.123487][ T30] ? wq_worker_sleeping+0x66/0x240 [ 448.129978][ T30] ? schedule+0x90/0x320 [ 448.135312][ T30] schedule+0x14b/0x320 [ 448.139503][ T30] io_schedule+0x8d/0x110 [ 448.145603][ T30] bit_wait_io+0x12/0xd0 [ 448.149872][ T30] __wait_on_bit+0xb0/0x2f0 [ 448.156178][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 448.161142][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 448.167100][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 448.172035][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 448.178754][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 448.187349][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 448.192599][ T30] ? jbd2_write_access_granted+0x71/0x310 [ 448.199066][ T30] do_get_write_access+0x121/0xe50 [ 448.206052][ T30] jbd2_journal_get_write_access+0x1ee/0x240 [ 448.212070][ T30] __ext4_journal_get_write_access+0x1c8/0x680 [ 448.218630][ T30] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 448.225952][ T30] ? __lock_acquire+0x1397/0x2100 [ 448.230995][ T30] ext4_reserve_inode_write+0x271/0x360 [ 448.237057][ T30] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 448.243144][ T30] __ext4_mark_inode_dirty+0x1ec/0x880 [ 448.249208][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 448.256276][ T30] ? __ext4_journal_start_sb+0x239/0x600 [ 448.261932][ T30] ext4_dirty_inode+0xce/0x110 [ 448.267415][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 448.272817][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 448.278543][ T30] ext4_da_update_reserve_space+0x283/0x730 [ 448.285498][ T30] ext4_es_insert_extent+0x2916/0x3350 [ 448.292043][ T30] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 448.298913][ T30] ? rcu_is_watching+0x15/0xb0 [ 448.304745][ T30] ? ext4_es_lookup_extent+0x61a/0xa90 [ 448.310226][ T30] ext4_map_blocks+0xc34/0x1990 [ 448.316149][ T30] ? __pfx_ext4_map_blocks+0x10/0x10 [ 448.321455][ T30] ? rcu_is_watching+0x15/0xb0 [ 448.327067][ T30] ? ext4_inode_journal_mode+0x3a4/0x460 [ 448.332702][ T30] ext4_do_writepages+0x20ef/0x3d10 [ 448.338985][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 448.344894][ T30] ? validate_chain+0x11e/0x5920 [ 448.349865][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 448.355408][ T30] ext4_writepages+0x213/0x3c0 [ 448.360195][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 448.365564][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 448.370779][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 448.377173][ T30] do_writepages+0x35f/0x880 [ 448.381784][ T30] ? __pfx_do_writepages+0x10/0x10 [ 448.387813][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 448.394947][ T30] ? writeback_sb_inodes+0x595/0x1360 [ 448.401045][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.407137][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 448.412205][ T30] __writeback_single_inode+0x14f/0x10d0 [ 448.418935][ T30] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 448.425942][ T30] writeback_sb_inodes+0x820/0x1360 [ 448.431161][ T30] ? mark_lock+0x9a/0x360 [ 448.436688][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 448.442368][ T30] ? __pfx_move_expired_inodes+0x10/0x10 [ 448.448532][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 448.453560][ T30] __writeback_inodes_wb+0x11b/0x260 [ 448.459755][ T30] wb_writeback+0x427/0xb80 [ 448.465288][ T30] ? queue_io+0x361/0x5a0 [ 448.469785][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 448.475854][ T30] wb_workfn+0xb94/0x1080 [ 448.480218][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 448.486015][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.492014][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.500516][ T30] ? process_scheduled_works+0x976/0x1840 [ 448.507096][ T30] process_scheduled_works+0xa66/0x1840 [ 448.512674][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.519651][ T30] ? assign_work+0x364/0x3d0 [ 448.525264][ T30] worker_thread+0x870/0xd30 [ 448.529892][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 448.536861][ T30] ? __kthread_parkme+0x169/0x1d0 [ 448.541916][ T30] ? __pfx_worker_thread+0x10/0x10 [ 448.548095][ T30] kthread+0x2f0/0x390 [ 448.552190][ T30] ? __pfx_worker_thread+0x10/0x10 [ 448.558391][ T30] ? __pfx_kthread+0x10/0x10 [ 448.563022][ T30] ret_from_fork+0x4b/0x80 [ 448.567953][ T30] ? __pfx_kthread+0x10/0x10 [ 448.572551][ T30] ret_from_fork_asm+0x1a/0x30 [ 448.578407][ T30] [ 448.581495][ T30] INFO: task jbd2/sda1-8:5181 blocked for more than 143 seconds. [ 448.589743][ T30] Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 448.598728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.609209][ T30] task:jbd2/sda1-8 state:D stack:24144 pid:5181 tgid:5181 ppid:2 flags:0x00004000 [ 448.620025][ T30] Call Trace: [ 448.623317][ T30] [ 448.627540][ T30] __schedule+0x17fb/0x4be0 [ 448.632089][ T30] ? __pfx___schedule+0x10/0x10 [ 448.637478][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.642499][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.649131][ T30] ? schedule+0x90/0x320 [ 448.653399][ T30] schedule+0x14b/0x320 [ 448.658396][ T30] io_schedule+0x8d/0x110 [ 448.662756][ T30] bit_wait_io+0x12/0xd0 [ 448.667658][ T30] __wait_on_bit+0xb0/0x2f0 [ 448.672200][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 448.678436][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 448.685115][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 448.690081][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 448.696684][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 448.702446][ T30] ? _raw_read_unlock+0x28/0x50 [ 448.708072][ T30] jbd2_journal_commit_transaction+0x34cb/0x6650 [ 448.715254][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 448.721956][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 448.727516][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 448.733430][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 448.739420][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 448.746234][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 448.751721][ T30] ? prepare_to_wait+0x186/0x210 [ 448.757181][ T30] ? schedule+0x90/0x320 [ 448.761435][ T30] kjournald2+0x41c/0x7b0 [ 448.766540][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.772876][ T30] ? __pfx_kjournald2+0x10/0x10 [ 448.778837][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 448.785564][ T30] ? __kthread_parkme+0x169/0x1d0 [ 448.790614][ T30] ? __pfx_kjournald2+0x10/0x10 [ 448.796569][ T30] kthread+0x2f0/0x390 [ 448.801031][ T30] ? __pfx_kjournald2+0x10/0x10 [ 448.807140][ T30] ? __pfx_kthread+0x10/0x10 [ 448.811755][ T30] ret_from_fork+0x4b/0x80 [ 448.816901][ T30] ? __pfx_kthread+0x10/0x10 [ 448.821500][ T30] ret_from_fork_asm+0x1a/0x30 [ 448.827417][ T30] [ 448.830460][ T30] INFO: task syz-executor:5831 blocked for more than 144 seconds. [ 448.839368][ T30] Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 448.847275][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.857066][ T30] task:syz-executor state:D stack:20528 pid:5831 tgid:5831 ppid:5828 flags:0x00000002 [ 448.868467][ T30] Call Trace: [ 448.871761][ T30] [ 448.875231][ T30] __schedule+0x17fb/0x4be0 [ 448.879768][ T30] ? __pfx___schedule+0x10/0x10 [ 448.885789][ T30] ? __pfx_lock_release+0x10/0x10 [ 448.890834][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.897352][ T30] ? schedule+0x90/0x320 [ 448.901600][ T30] schedule+0x14b/0x320 [ 448.906738][ T30] io_schedule+0x8d/0x110 [ 448.911109][ T30] bit_wait_io+0x12/0xd0 [ 448.923279][ T30] __wait_on_bit+0xb0/0x2f0 [ 448.928289][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 448.933252][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 448.939622][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 448.945972][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 448.951997][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 448.958236][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 448.963444][ T30] ? jbd2_write_access_granted+0x71/0x310 [ 448.969856][ T30] do_get_write_access+0x121/0xe50 [ 448.975605][ T30] jbd2_journal_get_write_access+0x1ee/0x240 [ 448.981605][ T30] __ext4_journal_get_write_access+0x1c8/0x680 [ 448.988436][ T30] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 448.996233][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 449.001711][ T30] ext4_reserve_inode_write+0x271/0x360 [ 449.008797][ T30] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 449.015982][ T30] __ext4_mark_inode_dirty+0x1ec/0x880 [ 449.021474][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 449.028675][ T30] ? trace_jbd2_handle_start+0x9c/0x250 [ 449.035519][ T30] ? jbd2__journal_start+0x3b8/0x5d0 [ 449.040830][ T30] ? __ext4_journal_start_sb+0x239/0x600 [ 449.047035][ T30] ext4_dirty_inode+0xce/0x110 [ 449.051797][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 449.057742][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 449.062789][ T30] file_update_time+0x3d2/0x450 [ 449.068827][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 449.075039][ T30] ? do_wp_page+0x71c/0x5160 [ 449.080403][ T30] ? do_wp_page+0x2273/0x5160 [ 449.086879][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 449.092374][ T30] do_page_mkwrite+0x198/0x480 [ 449.097653][ T30] do_wp_page+0x2352/0x5160 [ 449.102170][ T30] ? __pfx_do_wp_page+0x10/0x10 [ 449.110216][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 449.115873][ T30] ? rcu_is_watching+0x15/0xb0 [ 449.120662][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 449.126377][ T30] ? __pfx___pte_offset_map+0x10/0x10 [ 449.131778][ T30] handle_pte_fault+0x111e/0x68a0 [ 449.137347][ T30] ? mark_lock+0x9a/0x360 [ 449.141675][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 449.147980][ T30] ? __lock_acquire+0x1397/0x2100 [ 449.153063][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 449.159863][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 449.165479][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 449.171318][ T30] handle_mm_fault+0x1053/0x1ad0 [ 449.177497][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 449.182856][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 449.189103][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 449.195420][ T30] ? exc_page_fault+0x113/0x8b0 [ 449.200315][ T30] exc_page_fault+0x459/0x8b0 [ 449.205523][ T30] asm_exc_page_fault+0x26/0x30 [ 449.211420][ T30] RIP: 0033:0x7f7c3f069536 [ 449.216902][ T30] RSP: 002b:00007ffc6c6c3b40 EFLAGS: 00010202 [ 449.222999][ T30] RAX: 00007f7c3d178000 RBX: 000055557ed78de0 RCX: 0000000000000003 [ 449.231712][ T30] RDX: 1ffffffff0fe3eb3 RSI: 000055557ed78f88 RDI: 0000000000000008 [ 449.240870][ T30] RBP: 00007ffc6c6c4030 R08: 000055557ed78f88 R09: 00000000000007d6 [ 449.249763][ T30] R10: 00007f7c3fe9c038 R11: 0000000000000246 R12: 00007ffc6c6c3c70 [ 449.258959][ T30] R13: 0000000000000005 R14: 00007ffc6c6c3f00 R15: 585858582e7a7973 [ 449.267482][ T30] [ 449.270552][ T30] INFO: task syz.1.675:8423 blocked for more than 144 seconds. [ 449.279203][ T30] Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 449.287038][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.296707][ T30] task:syz.1.675 state:D stack:25560 pid:8423 tgid:8423 ppid:5841 flags:0x00000004 [ 449.307866][ T30] Call Trace: [ 449.311162][ T30] [ 449.316638][ T30] __schedule+0x17fb/0x4be0 [ 449.321216][ T30] ? __pfx___schedule+0x10/0x10 [ 449.326956][ T30] ? __pfx_lock_release+0x10/0x10 [ 449.332046][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 449.338758][ T30] ? schedule+0x90/0x320 [ 449.343038][ T30] schedule+0x14b/0x320 [ 449.347878][ T30] io_schedule+0x8d/0x110 [ 449.352232][ T30] bit_wait_io+0x12/0xd0 [ 449.357049][ T30] __wait_on_bit+0xb0/0x2f0 [ 449.361573][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 449.367960][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 449.373456][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 449.378917][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 449.385951][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 449.391414][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 449.397784][ T30] ? jbd2_write_access_granted+0x71/0x310 [ 449.403551][ T30] do_get_write_access+0x121/0xe50 [ 449.409864][ T30] jbd2_journal_get_write_access+0x1ee/0x240 [ 449.418298][ T30] __ext4_journal_get_write_access+0x1c8/0x680 [ 449.424876][ T30] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 449.431558][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 449.437901][ T30] ext4_reserve_inode_write+0x271/0x360 [ 449.443480][ T30] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 449.450300][ T30] __ext4_mark_inode_dirty+0x1ec/0x880 [ 449.456317][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 449.462313][ T30] ? trace_jbd2_handle_start+0x9c/0x250 [ 449.469152][ T30] ? jbd2__journal_start+0x3b8/0x5d0 [ 449.475217][ T30] ? __ext4_journal_start_sb+0x239/0x600 [ 449.480960][ T30] ext4_dirty_inode+0xce/0x110 [ 449.486079][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 449.491455][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 449.497554][ T30] file_update_time+0x3d2/0x450 [ 449.502434][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 449.508222][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 449.513343][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 449.519985][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 449.526888][ T30] do_page_mkwrite+0x198/0x480 [ 449.531699][ T30] handle_pte_fault+0x1235/0x68a0 [ 449.537866][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 449.543261][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 449.548893][ T30] ? __pmd_alloc+0x54c/0x670 [ 449.553485][ T30] ? __pfx_lock_release+0x10/0x10 [ 449.559614][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 449.565829][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 449.571070][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 449.577521][ T30] ? __pfx___pmd_alloc+0x10/0x10 [ 449.582459][ T30] handle_mm_fault+0x1053/0x1ad0 [ 449.588071][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 449.593363][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 449.599663][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 449.605948][ T30] ? exc_page_fault+0x113/0x8b0 [ 449.610802][ T30] exc_page_fault+0x459/0x8b0 [ 449.616554][ T30] asm_exc_page_fault+0x26/0x30 [ 449.621796][ T30] RIP: 0033:0x7f4e36452981 [ 449.627117][ T30] RSP: 002b:00007ffc4a6f1860 EFLAGS: 00010246 [ 449.633187][ T30] RAX: 00000000005ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 449.643415][ T30] RDX: 0000001b30920000 RSI: 0000000000600000 RDI: 00007f4e36675e70 [ 449.652073][ T30] RBP: 00007ffc4a6f1aac R08: 0000000000000004 R09: 0000000000040000 [ 449.660555][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 449.669151][ T30] R13: 00000000000461ee R14: 0000000000045ad2 R15: 00007ffc4a6f1b00 [ 449.677876][ T30] [ 449.680938][ T30] [ 449.680938][ T30] Showing all locks held in the system: [ 449.689709][ T30] 5 locks held by kworker/u8:1/12: [ 449.695986][ T30] 1 lock held by khungtaskd/30: [ 449.700849][ T30] #0: ffffffff8e93c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 449.711200][ T30] 6 locks held by kworker/u8:8/1134: [ 449.717013][ T30] #0: ffff888143e86148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 449.731492][ T30] #1: ffffc900041dfd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 449.745744][ T30] #2: ffff88814e79e0e0 (&type->s_umount_key#30){++++}-{4:4}, at: super_trylock_shared+0x22/0xf0 [ 449.757142][ T30] #3: ffff88814e7a8b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 449.768944][ T30] #4: ffff88814e7aa958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 449.779154][ T30] #5: ffff88807a3c6f80 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x7a6/0x1990 [ 449.789442][ T30] 2 locks held by getty/5608: [ 449.795117][ T30] #0: ffff888031dfe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 449.805996][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 449.817053][ T30] 3 locks held by syz-executor/5831: [ 449.822329][ T30] #0: ffff888023c03c40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x34b/0x790 [ 449.835343][ T30] #1: ffff88814e79e518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 449.845583][ T30] #2: ffff88814e7aa958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 449.856310][ T30] 3 locks held by syz.1.675/8423: [ 449.861360][ T30] #0: ffff8880349663d0 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x34b/0x790 [ 449.872218][ T30] #1: ffff88814e79e518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 449.882386][ T30] #2: ffff88814e7aa958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 449.892600][ T30] [ 449.895974][ T30] ============================================= [ 449.895974][ T30] [ 449.905260][ T30] NMI backtrace for cpu 0 [ 449.909578][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 449.919731][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 449.929796][ T30] Call Trace: [ 449.933062][ T30] [ 449.935993][ T30] dump_stack_lvl+0x241/0x360 [ 449.940680][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.945875][ T30] ? __pfx__printk+0x10/0x10 [ 449.950475][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 449.955421][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 449.960879][ T30] ? _printk+0xd5/0x120 [ 449.965036][ T30] ? __pfx__printk+0x10/0x10 [ 449.969629][ T30] ? __wake_up_klogd+0xcc/0x110 [ 449.974480][ T30] ? __pfx__printk+0x10/0x10 [ 449.979079][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 449.984109][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 449.990100][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 449.996090][ T30] watchdog+0xff6/0x1040 [ 450.000333][ T30] ? watchdog+0x1ea/0x1040 [ 450.004752][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.009424][ T30] kthread+0x2f0/0x390 [ 450.013487][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.018187][ T30] ? __pfx_kthread+0x10/0x10 [ 450.022778][ T30] ret_from_fork+0x4b/0x80 [ 450.027193][ T30] ? __pfx_kthread+0x10/0x10 [ 450.031784][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.036564][ T30] [ 450.041323][ T30] Sending NMI from CPU 0 to CPUs 1: [ 450.047420][ C1] NMI backtrace for cpu 1 [ 450.047433][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 450.047453][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.047463][ C1] Workqueue: bat_events batadv_nc_worker [ 450.047487][ C1] RIP: 0010:__lock_acquire+0x7a5/0x2100 [ 450.047508][ C1] Code: 48 c7 c7 e0 8b 80 8e 48 89 de e8 a6 74 7f 03 48 8b 74 24 08 48 ba 00 00 00 00 00 fc ff df e9 62 ff ff ff 65 8b 05 b7 5e 91 7e <85> c0 74 45 49 8d 9d b0 0a 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 [ 450.047522][ C1] RSP: 0018:ffffc900001178f0 EFLAGS: 00000096 [ 450.047536][ C1] RAX: 0000000000000000 RBX: 0000000000060765 RCX: 0000000000000001 [ 450.047547][ C1] RDX: dffffc0000000000 RSI: ffff88801bee64e0 RDI: ffffffff942ee880 [ 450.047559][ C1] RBP: 00000000ffffffff R08: ffffffff942ee887 R09: 1ffffffff285dd10 [ 450.047572][ C1] R10: dffffc0000000000 R11: fffffbfff285dd11 R12: 0000000000000000 [ 450.047583][ C1] R13: ffff88801bee5a00 R14: 1ffff110037dccaa R15: ffff88801bee6550 [ 450.047596][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 450.047610][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.047622][ C1] CR2: 00005555db45b680 CR3: 000000000e738000 CR4: 00000000003526f0 [ 450.047637][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.047647][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.047657][ C1] Call Trace: [ 450.047663][ C1] [ 450.047670][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 450.047689][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 450.047707][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 450.047731][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 450.047753][ C1] ? nmi_handle+0x14f/0x5a0 [ 450.047771][ C1] ? nmi_handle+0x2a/0x5a0 [ 450.047788][ C1] ? __lock_acquire+0x7a5/0x2100 [ 450.047804][ C1] ? default_do_nmi+0x63/0x160 [ 450.047824][ C1] ? exc_nmi+0x123/0x1f0 [ 450.047843][ C1] ? end_repeat_nmi+0xf/0x53 [ 450.047865][ C1] ? __lock_acquire+0x7a5/0x2100 [ 450.047881][ C1] ? __lock_acquire+0x7a5/0x2100 [ 450.047898][ C1] ? __lock_acquire+0x7a5/0x2100 [ 450.047914][ C1] [ 450.047920][ C1] [ 450.047931][ C1] lock_acquire+0x1ed/0x550 [ 450.047946][ C1] ? batadv_nc_worker+0xcb/0x610 [ 450.047966][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 450.047983][ C1] ? batadv_nc_worker+0xcb/0x610 [ 450.047999][ C1] ? __pfx_lock_release+0x10/0x10 [ 450.048017][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.048036][ C1] batadv_nc_worker+0xec/0x610 [ 450.048053][ C1] ? batadv_nc_worker+0xcb/0x610 [ 450.048069][ C1] ? batadv_nc_worker+0xcb/0x610 [ 450.048086][ C1] ? process_scheduled_works+0x976/0x1840 [ 450.048110][ C1] process_scheduled_works+0xa66/0x1840 [ 450.048142][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 450.048168][ C1] ? assign_work+0x364/0x3d0 [ 450.048191][ C1] worker_thread+0x870/0xd30 [ 450.048209][ C1] ? __kthread_parkme+0x169/0x1d0 [ 450.048226][ C1] ? __pfx_worker_thread+0x10/0x10 [ 450.048265][ C1] kthread+0x2f0/0x390 [ 450.048282][ C1] ? __pfx_worker_thread+0x10/0x10 [ 450.048296][ C1] ? __pfx_kthread+0x10/0x10 [ 450.048314][ C1] ret_from_fork+0x4b/0x80 [ 450.048327][ C1] ? __pfx_kthread+0x10/0x10 [ 450.048345][ C1] ret_from_fork_asm+0x1a/0x30 [ 450.048371][ C1] [ 450.060478][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 450.060496][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 450.060519][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.060530][ T30] Call Trace: [ 450.060538][ T30] [ 450.060547][ T30] dump_stack_lvl+0x241/0x360 [ 450.060571][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.060590][ T30] ? __pfx__printk+0x10/0x10 [ 450.060614][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.060640][ T30] ? vscnprintf+0x5d/0x90 [ 450.060661][ T30] panic+0x349/0x880 [ 450.060686][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 450.060708][ T30] ? __pfx_panic+0x10/0x10 [ 450.060730][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 450.060753][ T30] ? __irq_work_queue_local+0x137/0x410 [ 450.060774][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 450.060793][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 450.060813][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 450.060836][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 450.060858][ T30] watchdog+0x1035/0x1040 [ 450.060878][ T30] ? watchdog+0x1ea/0x1040 [ 450.060901][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.060919][ T30] kthread+0x2f0/0x390 [ 450.060938][ T30] ? __pfx_watchdog+0x10/0x10 [ 450.060955][ T30] ? __pfx_kthread+0x10/0x10 [ 450.060975][ T30] ret_from_fork+0x4b/0x80 [ 450.060992][ T30] ? __pfx_kthread+0x10/0x10 [ 450.061011][ T30] ret_from_fork_asm+0x1a/0x30 [ 450.061045][ T30] [ 450.531137][ T30] Kernel Offset: disabled [ 450.535477][ T30] Rebooting in 86400 seconds..