last executing test programs: 19m17.119408357s ago: executing program 32 (id=1617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x12, 0x1, 0xfffffffffffffffe}, {0x10000, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 16m23.562230397s ago: executing program 33 (id=3853): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a440, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000e00)=0x4) poll(&(0x7f0000000200)=[{r4}], 0x1, 0x3) 12m23.160091197s ago: executing program 34 (id=4954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[]) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r2, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5414, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r4 = dup(r2) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) 11m49.098689057s ago: executing program 2 (id=5045): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491", 0xd) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4ba", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000005000400040000000800110000000000050021000100000008001800ac1414bb06000300070000000500220001"], 0x44}}, 0x40004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3f0200000000000000ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7d02002c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a"], 0x294}}, 0x4048014) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) 11m46.439645051s ago: executing program 2 (id=5048): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 11m40.937132914s ago: executing program 2 (id=5063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 11m36.015155203s ago: executing program 2 (id=5081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fsopen(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xf0ff1f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0xee01, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000e00)={0xc, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e21, @empty}, 0x10) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x3ff}, 0x0, [0x80000000, 0x63c8855c, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50f3, 0x1, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xcbfffffd, 0x0, 0x4000, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x3], [0x5, 0x0, 0x2d1, 0x8d, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x22000079, 0x400, 0x0, 0x0, 0x10000, 0x40040, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0x4000, 0xe, 0x8, 0x0, 0xf20e, 0x0, 0x200000, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000004, 0xfffffffd, 0x0, 0x200, 0x80000, 0x80], [0x2, 0x0, 0x6, 0x83a, 0x0, 0x6, 0xc, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x20000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0xfffff14d, 0xfffffffd, 0x0, 0x100, 0x10, 0x5, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) 11m34.61545862s ago: executing program 2 (id=5085): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x3ae7f80ddcd82fcf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x28, 0x64, 0x0, 0xff08) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(r0, 0x0) renameat2(r1, &(0x7f0000000400)='./bus\x00', r1, &(0x7f0000000000)='./file0\x00', 0x2) 11m33.426687992s ago: executing program 2 (id=5088): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[r0], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x20, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000a00", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11m17.206576447s ago: executing program 35 (id=5088): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[r0], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x20, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000a00", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11m17.167235065s ago: executing program 5 (id=5124): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() connect$can_bcm(r1, &(0x7f00000002c0), 0x10) socket(0x10, 0x80002, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, &(0x7f0000002900)="9e", 0x1, 0x205a, 0x1ff, 0x0, 0x96b, 0x6, 0x0}) close(r6) 11m15.267685492s ago: executing program 5 (id=5127): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xf04c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x31f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000240), 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0xd}, 0x40000) 11m5.165040166s ago: executing program 5 (id=5145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x80001, 0x0) setrlimit(0xb, &(0x7f00000000c0)={0x2, 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}}, 0x4004004) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 11m2.844528238s ago: executing program 5 (id=5154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xa00080, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) wait4(r5, 0x0, 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents(r7, 0x0, 0x0) 11m1.464272473s ago: executing program 5 (id=5158): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x3, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfeffffff) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r7) writev(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m59.943649095s ago: executing program 5 (id=5163): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x12ce, 0x3}, 0x0) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b000", @ANYRES16=r1], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf2508000100010000000800010002000000080001000200"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) 10m44.67567692s ago: executing program 36 (id=5163): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x12ce, 0x3}, 0x0) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b000", @ANYRES16=r1], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf2508000100010000000800010002000000080001000200"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) 9m41.464560011s ago: executing program 6 (id=5811): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000000c0)=0x10, 0x4) 9m41.261210945s ago: executing program 6 (id=5816): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac0009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0a0}, 0x40010) 9m40.993934766s ago: executing program 7 (id=5820): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2020, 0x5}]}) 9m40.748503037s ago: executing program 7 (id=5822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 9m40.500536487s ago: executing program 7 (id=5825): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb27, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \t0\x00\x00\x00nrwo'], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m39.532913545s ago: executing program 6 (id=5840): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbfd, {0xa}}, 0x14}}, 0x0) 9m39.427580209s ago: executing program 6 (id=5843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 9m39.335099676s ago: executing program 6 (id=5845): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x80) 9m39.160045688s ago: executing program 6 (id=5848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 9m38.716212444s ago: executing program 7 (id=5856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000010c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 9m38.639614624s ago: executing program 7 (id=5857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 9m38.512288078s ago: executing program 7 (id=5860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000002000010000000000fedbdf250a101400000400082d00010014000200fc0200000000000000000000001700010500160030000000140001002001"], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 9m24.040429136s ago: executing program 37 (id=5848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 9m23.445023168s ago: executing program 38 (id=5860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000002000010000000000fedbdf250a101400000400082d00010014000200fc0200000000000000000000001700010500160030000000140001002001"], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 5m41.390413649s ago: executing program 1 (id=7936): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r4}, 0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r5 = socket(0x1d, 0x2, 0x6) sendmmsg$sock(r5, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000880)) 5m33.903484271s ago: executing program 1 (id=7947): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x48002) 5m20.00293228s ago: executing program 1 (id=7971): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) r0 = getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) creat(&(0x7f00000000c0)='./file1\x00', 0x142) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x2000775) close(r2) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="79000000000000000400000000000000020000c30700000001000000000000000900000000000000a6a10000000000000004000000000000000000004000"/88]) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 5m16.357208262s ago: executing program 1 (id=7976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x388) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e24, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25030117800c00160006ac0f00000000001400010000000000000000000000ffff0000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r5, &(0x7f0000001640)=[{&(0x7f0000001080)="e12c20255d232d65c7973a4775d48e65e5fd177b3b53a4a382d70692476c6ac0ab7b13b42bda89d9c50f4d89a57da13dbd80a1da35656ef5111f2b93b5a3c47ea84dd0243d9c22c674bf88f80e7bdbe5574c3304107e7aa0f5960426d3294950ea3f4dfa94e7", 0x66}, {&(0x7f0000001100)="1ed510d111e636511e361bbc26131cc057c20143a7e7957c3ff845e9bada7082e4a54221d1a7171c273552d3de1d0b2e1a3ce9333964b08227b3944d22388272c7f4f43cc85810f4db86abcd82a835fb96e34eca383f8ebcf6df8fb310843474663daec934f421272a30a856dc9298ee6da4cc9dd6c9007c9a8b2d", 0x7b}, {&(0x7f0000001180)="efa68c98e7ed0c75342494564e5edc263faa5be65d94f879046219d8e983ef3ec0c4f65000211db849bf8c43bcb9ce7d9584fd4955ec1605c7b3317021c484ffc68d20b2ec7e604fa3bf76253bdaf9cba663e37a959b2aa102260f2a73fc289a0c8c4255f01b3953f62c", 0x6a}, {&(0x7f0000001200)="7d26c5a78abb9cbc885564efec735954dd4d9abaa637fe944eb8ca07507364ab8dccb9988347a65ca68ef8404f1fce130e92c53bbae42754d42e4e1409e3a6b7dd3deb5f924e6363438782cf4677f0ed85975906b9fa00dfc1adcf5b93cde3d3f6f39fa0397a628fbaad9f6c416f0e0c1162f2a689e51b98a1c24303c5d23941f14c646cdf8fc040843c13c3580d5a4ca7378b347dae5909fb99ca13dc7ef77793cd829f7d2893f0a9f682e69a204c3febc3de255142", 0xb6}, {&(0x7f00000013c0)="2b5330ea8e602e2ac442ba4fba97", 0xe}, {&(0x7f0000001400)="13459acc4ff567721dcfb8010776c220cc19c294f8dabc34903d5f1d5e30f90ce0a969d9d1a64b34fa387a9b74cb51e48717016becddd8ac606b400e0a705b89ea8aaea63f4bcefd5aa1bc7a32a7240d94cc8026373e4efe4aa9b5dd99dd9be1192433753ba19f531fdddc8a911905970c6a1cfba9e60a66b43517a74e21109b60dc81d67be24db5ff201f8e6e8bf5", 0x8f}, {&(0x7f00000014c0)="373c437c25b896840dbb2957e29f288aebbe3a4b9b464ec5df51192bf53a5c8394f143509f0acab29e1f80a6f93918cfdd7cd642b7d877920994094c3d5326c70f6ef73d63656c30c199e03310598b995df860399725a1bb8c8e9d60a3e975f560e72b4f35b4e8156994fa99", 0x6c}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="913a6ec2645932ec0d99c63080b145f8c6bce5bd0a67b27ad9cff93f0b684cdd9f5a9c2c2718df550165041fa31f25", 0x2f}], 0x9) socket$nl_route(0x10, 0x3, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) 5m11.84888726s ago: executing program 1 (id=7982): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x840) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 5m10.377576868s ago: executing program 1 (id=7986): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x27cb5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000600)=0x18000, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x2208004, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) 4m55.400186051s ago: executing program 39 (id=7986): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x27cb5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000600)=0x18000, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x2208004, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) 14.168051247s ago: executing program 4 (id=9392): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 12.525399564s ago: executing program 4 (id=9400): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xf04c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x31f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 12.380308365s ago: executing program 9 (id=9401): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340)={[], 0xf000000}, &(0x7f0000000380), 0x0) 11.977516196s ago: executing program 9 (id=9405): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) syz_usb_connect$uac1(0x6, 0xdc, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0) 8.684244419s ago: executing program 3 (id=9421): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), 0x0}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="9fffffff00000000fd7a4fcc1918098eca421103", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0x0, 0x9, 0x1003, 0x5c95239c, 0x5, 0x3bb, 0x802, 0x1600, 0x1, 0x20000001, 0x2, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x5, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25DELFWD(r5, 0x89eb, 0x0) 7.224440337s ago: executing program 8 (id=9423): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x301, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmmsg$inet(r1, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x40000) 7.068568482s ago: executing program 3 (id=9425): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) unshare(0x2c020400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@random={'security.', 'tmpfs\x00'}) 7.057774053s ago: executing program 9 (id=9426): socket$inet6_udplite(0xa, 0x2, 0x88) poll(0x0, 0x0, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (fail_nth: 1) 6.930716173s ago: executing program 8 (id=9427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3ce}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01f22bbd700000e900003900040b08000300", @ANYRES32=r3, @ANYBLOB="10005a800c0004800500060002000000"], 0x2c}}, 0x2400c090) syz_usb_connect(0x2, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0xbb, 0x1d, 0xc0, 0x40, 0x45e, 0x284, 0xe712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x2, 0x2, 0x17, 0xce, 0x31, 0x0, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x2, 0x6, 0x10}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x6, 0x1, 0x2}}]}}]}}]}}, 0x0) 6.568403783s ago: executing program 9 (id=9428): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17}) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 6.471120845s ago: executing program 3 (id=9430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103001, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d32f2e9f4f7bc8f91ee13973968f49799ff1f2b03af84c8ebda50c932ab957f3a6cd04e48f60af79d455a360fc2cb4e4c46baea632d70dc1de6783fba14ebdad291690e099210d80a4868164579a8ae29b42b31a6893996b4de4ae5ec89b6b1874971773c17a9ef52d712ccb3ea0568769d1ec661cacbdcebc1a226c94a3c5ac54dbbd2864eb2d684b3c41ef7b74f9ad3a38681792eb67c9997470673e252749d0e08ad7bdd375ef979d9", @ANYBLOB=',\x00']) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000010004093\x00'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000100)={0x1}) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) 6.254820749s ago: executing program 4 (id=9431): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a810c0b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800100000000000ffdbdf250a0000000000000004000b0008000500", @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.events.local\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) r6 = accept(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffe, 0x0) (async) recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073d75e00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa4, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029200030104a0060904000000010100000a2401f7ff0702010209240303000303030b0524050601090401000001020000090401010101020000072401800802100c2402012001000644d8d005090501090004ffc803072501000405000904020000010200000904020101010200000b240203060108013a388207240101c800000905820950"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) (async) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) dup(0xffffffffffffffff) 4.898580154s ago: executing program 9 (id=9433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r5, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0x2d, 0x9, 0x6, '\x00', 0x1}, {0x4, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0xd, '\x00', 0x1}, {0x13, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x0, '\x00', 0xd3}, {0xf, 0xfc, 0x8, '\x00', 0x5}, {0xb, 0x4, 0x1, '\x00', 0xa}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x4, 0xd5, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0xe9}, {0x8, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x4}, {0x6e, 0x4, 0x1, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x9}, {0x3, 0x7}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc6}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a000100fefe807eb37b0000580100800c0005400000000000000003a40002803c000280080003400000000208000180fffffffb08000180000000000900020073797a32b0078832695994860000000008000180ffffffff0900020073797a31000000005000028008000340000000030800034000000003080003400000000408000180fffffffb0900020073797a3200000000080001800000000008000180fffffffc08000180fffffffe08000180fffffffc1400028008000180fffffffa080003"], 0x565c}}, 0x40) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r9 = dup(r8) (async) r10 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) sendfile(r9, r10, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0xfffffffd, 0x2, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x34}}, 0x0) 4.704066059s ago: executing program 4 (id=9435): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000ffffff807b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="3e9441973147c3bd016b650606d03503d6c7b8fd", 0x14}, {&(0x7f0000000440)="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", 0x1000}], 0x2}, 0x20000890) poll(0x0, 0x0, 0x7) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x7, 0x6, 0x6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/kernel/kexec_crash_loaded', 0x8500, 0x8) pread64(r4, &(0x7f0000002280)=""/215, 0xd7, 0x7) r5 = openat$cgroup_ro(r4, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) timer_create(0x5, 0x0, &(0x7f0000044000)) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002a39efb087c2c9602589e0102030109021200010607a007090404460008b5e2051f7370a05a667d8722a467681969123b23f99608"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x7, 0x1, [0x3]}, &(0x7f00000003c0)=0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001440)={0x5, 0x0, 0x5, 0xa, r6}, 0x10) syz_io_uring_setup(0x7ef7, &(0x7f0000000200)={0x0, 0x1579, 0x800, 0x0, 0x1cf}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, &(0x7f00000002c0)=0x1, 0x0, 0x4) 3.146710495s ago: executing program 3 (id=9442): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 3.010991879s ago: executing program 3 (id=9444): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) 2.801957436s ago: executing program 3 (id=9445): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffd97, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00N']) 2.692461891s ago: executing program 8 (id=9447): read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000009180), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) stat(0x0, &(0x7f0000009200)) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)=""/127, &(0x7f0000000140)=0x7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 2.51248784s ago: executing program 8 (id=9449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(r6) r7 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f00000001c0)={[0x100000000]}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 2.048112869s ago: executing program 0 (id=9452): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p20']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) 1.475719324s ago: executing program 9 (id=9453): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xf04c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x31f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 1.252360024s ago: executing program 0 (id=9454): socket$kcm(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1869, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0xe, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xc95}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x7, 0xc}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xf8, 0x8, 0x2, 0x20, 0x5}, 0xbe, &(0x7f00000001c0)={0x5, 0xf, 0xbe, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x6, 0x6, 0x8000, 0xfc}, @generic={0x1a, 0x10, 0x2, "fd8878e33d23e26bee9d8e606bf6b901fb9d5d459550b0"}, @generic={0x94, 0x10, 0x1, "2fb2d0fdda2e0f2e9f3bb9a837a13998748f01347caee20dde5b757056fbf4716efe201625a3d2568a6d81fba7f3fa60630177584d1fedb591f2ea01be6f8702dbea5447cd67648a935c4cc5ff9f759abe530fbab43d3fba121c662a807810b3cdc038174143ee4c0100fc008805d9e703a9561d6ff7a9ef3da0f8837195ef03219a26071a7dc0178e0b3ceb543ca21b93"}]}, 0x9, [{0xc7, &(0x7f0000000800)=@string={0xc7, 0x3, "92d46381ce4ebd9e7e9e3cf61bb47e2055f43ae798326db2d57535944f56586b4f59c627208676ae9f7b9ef3014a04f3eea9678c4525fb8417a693dfa30e23bdc52c4db0a0f1b24aa08a9738849dfc82a3124070aabadfe33ff3ef5aa226390a1d46faf83fb8cabd70f797600ed6e1293fd568b97948dcb8b9df998fe939a2de10bfe58d5a48e16a9648fa55d4bb733e9efc26f94b1f83a6b0db9bb1292c1920e4181b2545a2fb458af37cbe76d9ddc98db45161d28d3a2c7563614ac2b3b4ec77cc729f7f"}}, {0xee, &(0x7f0000000280)=@string={0xee, 0x3, "764b628f47500128281f3d7b92cc370bd2458ed6d64c73b3c96d57b63a34492ff89d4eb41d70a994b0074e5f7dacb484c1014b680e63ea222a11ba40d3acf4b167ea92a806b09cfaa2b698f76284f8bd9357cc463b25047c1a3cef12790fc72043358fce311ec4ce3b80761d08bd85cb4f58190cd86a9332f82d3d935ab6e1c86a1bdd184412a81b382e24a2ff8fdc05d3d884c4baef9b8e031cfe9fe443aa22466dde2ec3ea5fc0609ecb27b081c2112e5b44d90c1f26829779f450e40767e5fa6292bdb984a5ae5646771e4f5b0921f1289325ca2d47dbbbb95793b60236f888f250ede36a0b407213d664"}}, {0xf1, &(0x7f0000000980)=@string={0xf1, 0x3, "b29feae70d5ce6ed306c6d13b9a6d038d8de73b312baab9f4cf33637bb11e8fdc548742c1f1db8ecca76127539080749f2a6fcf712d0ddc16e0584c79ec2666b95af440d167f560cfefb4bf07bdcb5c9896357250ac34428f3a8222a45b740ea14560a6221c23c0fa5010096b194a1d03a29cf6b086062eb9790b65a00e643b38bf74b117fdb722968a8471d03d3f6158e7b7dd3a2a2e81c7799aad1230c4116226258a31477e6ef5f70877366e1ae66eef9c504477d64db579e2243b230a7800dd3aa454dbae7ac9247c9bd660217b817aa1c4d7ce29977f795e30397248facde9e9cc0d49ce87364da4e85df6701"}}, {0x72, &(0x7f0000000380)=@string={0x72, 0x3, "96e2a9383391776ac4875f0f0d99dcbba99d45a5e7bdaf2e0cdebbfaa48e35e970802aab03ad1d6a0d489ba2a55620490e1771469f859e15c848359b7386104fce797bf7ee1b118ec6ce5f0d6ee33c2394154c9ac64218626f18f186719b9c9b3501242bf7f599af4fe4453e2e35c1ba"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x812}}, {0x46, &(0x7f0000000bc0)=ANY=[@ANYBLOB="46035ee44c167d15c1c3d14aa8e01d3427b6cfe01cc2681bc6af1d5c94a383161eba38458195289969b50159e091246861303afe1354525de3266fef1f40d55e699e0d064bc3941544c827194c77923d"]}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x804}}, {0x44, &(0x7f0000000a80)=@string={0x44, 0x3, "3d8d4791c02c6698434ba605da5b377de0f12999e390490a729f714556ebd27c5e77206e4c3f7906f0754f6e7e7ec6316241c6895b4798c56da4826927704c224a89"}}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2, 0x0, 0x7ff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_elf64(r5, &(0x7f0000001880)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x2, 0x4, 0x5, 0x2, 0x3e, 0x335, 0x162, 0x40, 0x1f3, 0x1, 0xd3, 0x38, 0x1, 0x1, 0x4, 0x1000}, [{0x4, 0xffffffff, 0x4, 0x2, 0x7, 0x8, 0x1, 0x1}]}, 0x78) splice(r4, 0x0, r3, 0x0, 0x100000004, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.251698266s ago: executing program 4 (id=9455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x9eb, &(0x7f0000000400)={0x0, 0x92a5, 0x800, 0x22, 0x243}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x2, &(0x7f00000000c0)) 932.759616ms ago: executing program 8 (id=9456): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 884.876191ms ago: executing program 0 (id=9457): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3ce}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f22bbd700000e900003900040b08000300", @ANYRES32=r2, @ANYBLOB="10005a800c0004800500060002000000"], 0x2c}}, 0x2400c090) syz_usb_connect(0x2, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0xbb, 0x1d, 0xc0, 0x40, 0x45e, 0x284, 0xe712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x2, 0x2, 0x17, 0xce, 0x31, 0x0, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x2, 0x6, 0x10}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x6, 0x1, 0x2}}]}}]}}]}}, 0x0) 409.06545ms ago: executing program 0 (id=9458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) shutdown(r0, 0x3dc3d3e8ab26e36b) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x804c800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 407.948891ms ago: executing program 4 (id=9459): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400000200006c068a5a000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000380)={0x2e, 0x0, [{0xc0000000, 0x8, 0x5, 0x80, 0x5, 0x8, 0x6c7}, {0x40000000, 0x9, 0x4, 0x6, 0x8, 0x2, 0xffff}, {0x4, 0x7, 0x6, 0x6, 0x6, 0xa19, 0x401}, {0xc0000000, 0x5, 0x6, 0x2, 0x0, 0x100, 0xd}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', r4, 0x0, r3}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 326.699096ms ago: executing program 8 (id=9460): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x9, 0x20}, 0xc) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x20, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000040)={0x0, 0xff, 0x5ef2, '\x00', 0x0}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0xb, 0x1f, @empty}]}}]}, 0x50}}, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000080000000800000009200052f170283041dc6331e656b3fc463dd2b593a07253ac778ffdfb3fcab13b570b806dcd4fc66be6ba691e9497c0941da014b5942bc180894f8bc81f1f2c634b565a5ec8faa922ea13af4ec7e629d0921879e52d44ef3dd463e82722c76d2e6cde283db0bc4866ef8dea0a6e29a701beeb1d9525fed7e2c6eda167e13db1c390d2fa60f80ffec4", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000008c9cae4105128d6f00000000000000d760a015afd877e1f94fad7aaf95e61d225a9e9a8ab201e7b8c9a8e013cb525f0b1df5620ad6ee9f90892b056c0f0e5ae50c1232e7b01d1bf71679513ccc4362", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='fscache_access_cache\x00', r13}, 0x18) timer_create(0x6, &(0x7f0000000480)={0x0, 0x1e, 0x1, @thr={&(0x7f0000001300)="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", &(0x7f00000001c0)="72a8f961c913c528bea2736083764ee0a08c6ec58757d73a9af769eb8a994b9537e1994c27acf1c51724c7aa66ebd603c0e5e62ed36c456cb7c7136e352c10122edd48caa03bab58ccc02141f1f386cbcc76014ed927cda05b4015e01855f2304fda7d974ffef8da98ff5cc409"}}, &(0x7f0000000580)) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) read$smackfs_access(r5, &(0x7f0000000080), 0x14) 188.622521ms ago: executing program 0 (id=9461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103001, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d32f2e9f4f7bc8f91ee13973968f49799ff1f2b03af84c8ebda50c932ab957f3a6cd04e48f60af79d455a360fc2cb4e4c46baea632d70dc1de6783fba14ebdad291690e099210d80a4868164579a8ae29b42b31a6893996b4de4ae5ec89b6b1874971773c17a9ef52d712ccb3ea0568769d1ec661cacbdcebc1a226c94a3c5ac54dbbd2864eb2d684b3c41ef7b74f9ad3a38681792eb67c9997470673e252749d0e08ad7bdd375ef979d9", @ANYBLOB=',\x00']) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000010004093\x00'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x1}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) 0s ago: executing program 0 (id=9462): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) unshare(0x2c020400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@random={'security.', 'tmpfs\x00'}) kernel console output (not intermixed with test programs): nterface 228 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1323.835996][ T5961] usb 4-1: config 89 interface 228 has no altsetting 0 [ 1323.839214][ T5961] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5e.95 [ 1323.839243][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.839265][ T5961] usb 4-1: Product: syz [ 1323.839282][ T5961] usb 4-1: Manufacturer: syz [ 1323.839297][ T5961] usb 4-1: SerialNumber: syz [ 1324.176560][ T5961] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1324.203185][ T5961] usb 4-1: USB disconnect, device number 17 [ 1324.216552][ T1148] usb 4-1: Failed to submit usb control message: -71 [ 1324.216592][ T1148] usb 4-1: unable to send the bmi data to the device: -71 [ 1324.216611][ T1148] usb 4-1: unable to get target info from device [ 1324.216626][ T1148] usb 4-1: could not get target info (-71) [ 1324.216723][ T1148] usb 4-1: could not probe fw (-71) [ 1326.069556][ T5961] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1326.240608][ T5961] usb 9-1: Using ep0 maxpacket: 32 [ 1326.243292][ T5961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.243328][ T5961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.243374][ T5961] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1326.243402][ T5961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.294567][ T5961] usb 9-1: config 0 descriptor?? [ 1326.318772][T26402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8436'. [ 1326.380918][T26404] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8435'. [ 1326.401132][T26404] geneve2: entered promiscuous mode [ 1326.422370][T26402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.462041][T11048] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1326.466057][T11048] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1326.466197][T11048] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1326.466237][T11048] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1326.479788][T26402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.561518][ T5961] usbhid 9-1:0.0: can't add hid device: -71 [ 1326.561667][ T5961] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1326.581064][ T5961] usb 9-1: USB disconnect, device number 8 [ 1326.678483][T26415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8440'. [ 1327.004125][T26419] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8442'. [ 1327.934525][T26457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.951013][T26457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.293230][T26463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8460'. [ 1328.861045][T26426] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8447'. [ 1329.150631][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8463'. [ 1329.595317][ T5961] IPVS: starting estimator thread 0... [ 1329.677014][T26490] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1329.722675][T26494] IPVS: using max 11 ests per chain, 26400 per kthread [ 1330.018794][T26499] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1330.464804][T26506] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8473'. [ 1330.697459][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.785030][ T5960] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1332.483169][ T5960] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1332.483960][ T5960] usb 4-1: not running at top speed; connect to a high speed hub [ 1332.485750][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1332.485783][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1332.485814][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 1332.485845][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1332.485871][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1332.485896][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1332.572598][ T5960] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1332.572634][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.572656][ T5960] usb 4-1: Product: syz [ 1332.572671][ T5960] usb 4-1: Manufacturer: syz [ 1332.572686][ T5960] usb 4-1: SerialNumber: syz [ 1332.620122][ T5960] usb 4-1: config 0 descriptor?? [ 1332.621910][T26532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1332.622193][T26532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1332.650870][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1332.756940][ T5960] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1332.787846][ T5887] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1332.967586][ T5887] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1332.968735][ T5887] usb 10-1: not running at top speed; connect to a high speed hub [ 1332.971677][ T5887] usb 10-1: config 17 has an invalid interface number: 8 but max is 1 [ 1332.971706][ T5887] usb 10-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1332.971729][ T5887] usb 10-1: config 17 has no interface number 0 [ 1332.971783][ T5887] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1332.971807][ T5887] usb 10-1: config 17 interface 8 has no altsetting 0 [ 1332.982838][ T5887] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1332.982872][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.982893][ T5887] usb 10-1: Product: syz [ 1332.982908][ T5887] usb 10-1: Manufacturer: syz [ 1332.982923][ T5887] usb 10-1: SerialNumber: syz [ 1333.388160][T26532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.392077][T26532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.485777][T26532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.497821][T26532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.782983][ T5887] usb 10-1: selecting invalid altsetting 0 [ 1333.952990][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.975449][ T5888] usb 4-1: USB disconnect, device number 18 [ 1334.138660][ T5887] usb 10-1: USB disconnect, device number 7 [ 1334.464210][T26600] netlink: 'syz.3.8508': attribute type 39 has an invalid length. [ 1334.666277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.718449][ T5960] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1334.746916][T18606] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1334.861364][ T5960] usb 9-1: Using ep0 maxpacket: 8 [ 1334.864282][ T5960] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1334.864321][ T5960] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1334.864350][ T5960] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1334.864378][ T5960] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1334.864425][ T5960] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1334.864451][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.943472][T18606] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1334.943503][T18606] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1334.943524][T18606] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1334.943537][T18606] usb 4-1: config 1 has no interface number 1 [ 1334.943568][T18606] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1334.946147][T18606] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1334.946176][T18606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.946191][T18606] usb 4-1: Product: syz [ 1334.946200][T18606] usb 4-1: Manufacturer: syz [ 1334.946210][T18606] usb 4-1: SerialNumber: syz [ 1335.128240][ T5887] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1335.229050][ T5960] usb 9-1: GET_CAPABILITIES returned 0 [ 1335.229362][ T5960] usbtmc 9-1:16.0: can't read capabilities [ 1335.295141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1335.325285][ T5887] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1335.325321][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1335.325346][ T5887] usb 10-1: Product: syz [ 1335.325363][ T5887] usb 10-1: Manufacturer: syz [ 1335.325378][ T5887] usb 10-1: SerialNumber: syz [ 1335.418178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1335.420612][T18606] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1335.420680][T18606] usb 4-1: MIDIStreaming interface descriptor not found [ 1335.456874][T26602] netlink: 146 bytes leftover after parsing attributes in process `syz.8.8509'. [ 1335.471859][T26619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.472473][T26619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.472828][T26602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.473322][T26602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.483083][ T1245] usb 9-1: USB disconnect, device number 9 [ 1335.484921][ T5887] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1335.562209][T18606] usb 4-1: USB disconnect, device number 19 [ 1335.960639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.661077][ T2750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.661104][ T2750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.005308][ T5887] vp7045: USB control message 'in' went wrong. [ 1337.005329][ T5887] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1337.005376][ T5887] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1337.151524][T26632] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8517' sets config #1 [ 1337.474062][ T61] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 1337.474106][ T61] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 1337.536241][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8524'. [ 1337.536683][T26644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8524'. [ 1337.723732][T26649] : entered promiscuous mode [ 1338.198204][ T5887] usb 10-1: USB disconnect, device number 8 [ 1338.342545][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8535'. [ 1338.536359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.713650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.861903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.234059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.744152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.884007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.739762][T26702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.013727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1341.685548][T26730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.815729][T26731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.185278][T26752] siw: device registration error -23 [ 1343.977939][T26750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8560'. [ 1344.198811][T26750] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8560'. [ 1344.564726][T26774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1344.641334][T26778] i2c i2c-0: Invalid block write size 252 [ 1345.677519][T26804] lo speed is unknown, defaulting to 1000 [ 1346.330256][T24984] Bluetooth: hci5: command 0x0406 tx timeout [ 1346.800285][T26850] FAULT_INJECTION: forcing a failure. [ 1346.800285][T26850] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.800325][T26850] CPU: 0 UID: 0 PID: 26850 Comm: syz.0.8597 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1346.800352][T26850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1346.800365][T26850] Call Trace: [ 1346.800375][T26850] [ 1346.800385][T26850] dump_stack_lvl+0x189/0x250 [ 1346.800423][T26850] ? __pfx____ratelimit+0x10/0x10 [ 1346.800453][T26850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.800486][T26850] ? __pfx__printk+0x10/0x10 [ 1346.800521][T26850] ? __pfx___might_resched+0x10/0x10 [ 1346.800546][T26850] ? fs_reclaim_acquire+0x7d/0x100 [ 1346.800584][T26850] should_fail_ex+0x46c/0x600 [ 1346.800618][T26850] ? security_inode_alloc+0x39/0x330 [ 1346.800647][T26850] should_failslab+0xa8/0x100 [ 1346.800681][T26850] ? security_inode_alloc+0x39/0x330 [ 1346.800707][T26850] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1346.800747][T26850] security_inode_alloc+0x39/0x330 [ 1346.800780][T26850] inode_init_always_gfp+0x9bf/0xd70 [ 1346.800819][T26850] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1346.800853][T26850] alloc_inode+0x82/0x1b0 [ 1346.800884][T26850] new_inode+0x22/0x170 [ 1346.800914][T26850] ? resv_map_alloc+0x200/0x2e0 [ 1346.800944][T26850] hugetlbfs_get_inode+0x80/0x660 [ 1346.800976][T26850] ? fput+0xa0/0xd0 [ 1346.801011][T26850] hugetlb_file_setup+0x21d/0x640 [ 1346.801045][T26850] ksys_mmap_pgoff+0x22f/0x720 [ 1346.801077][T26850] ? __x64_sys_mmap+0x7f/0x140 [ 1346.801109][T26850] do_syscall_64+0xfa/0xfa0 [ 1346.801140][T26850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.801162][T26850] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.801184][T26850] ? clear_bhb_loop+0x60/0xb0 [ 1346.801211][T26850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.801232][T26850] RIP: 0033:0x7fd5fb7bf6c9 [ 1346.801253][T26850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.801272][T26850] RSP: 002b:00007fd5f9a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1346.801296][T26850] RAX: ffffffffffffffda RBX: 00007fd5fba15fa0 RCX: 00007fd5fb7bf6c9 [ 1346.801313][T26850] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000 [ 1346.801328][T26850] RBP: 00007fd5f9a1e090 R08: ffffffffffffffff R09: 0000000000000000 [ 1346.801344][T26850] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 1346.801358][T26850] R13: 00007fd5fba16038 R14: 00007fd5fba15fa0 R15: 00007ffe18bc1118 [ 1346.801395][T26850] [ 1346.894351][T26853] fuse: Unknown parameter '' [ 1346.896872][T26854] netlink: 'syz.4.8596': attribute type 39 has an invalid length. [ 1347.114563][T26809] [U] [ 1348.362220][ T37] kauditd_printk_skb: 95 callbacks suppressed [ 1348.362243][ T37] audit: type=1326 audit(2000001244.648:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.362300][ T37] audit: type=1326 audit(2000001244.648:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.365313][ T37] audit: type=1326 audit(2000001244.648:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.365373][ T37] audit: type=1326 audit(2000001244.648:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.365425][ T37] audit: type=1326 audit(2000001244.648:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.366122][ T37] audit: type=1326 audit(2000001244.648:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.366905][ T37] audit: type=1326 audit(2000001244.648:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.367317][ T37] audit: type=1326 audit(2000001244.648:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.368573][ T37] audit: type=1326 audit(2000001244.648:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1348.370777][ T37] audit: type=1326 audit(2000001244.659:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26885 comm="syz.3.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f57d353f6c9 code=0x7ffc0000 [ 1349.550112][ T5960] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1349.698848][ T5960] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1349.699790][ T5960] usb 9-1: not running at top speed; connect to a high speed hub [ 1349.701386][ T5960] usb 9-1: config 9 has an invalid interface number: 198 but max is 0 [ 1349.701412][ T5960] usb 9-1: config 9 has no interface number 0 [ 1349.701450][ T5960] usb 9-1: config 9 interface 198 has no altsetting 0 [ 1349.744990][ T5960] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 1349.745024][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.745047][ T5960] usb 9-1: Product: syz [ 1349.745063][ T5960] usb 9-1: Manufacturer: syz [ 1349.745080][ T5960] usb 9-1: SerialNumber: syz [ 1350.044356][ T5960] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1350.044417][ T5960] dvb-usb: bulk message failed: -22 (3/0) [ 1350.069609][ T5960] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1350.196107][ T5960] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1350.196195][ T5960] dvb_usb_umt_010 9-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22 [ 1350.224068][ T5960] usb 9-1: USB disconnect, device number 10 [ 1350.472666][T26949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.473197][T26949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.617033][T18606] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1350.663443][ T5887] hid_parser_main: 3 callbacks suppressed [ 1350.663462][ T5887] hid-generic 0000:0003:0001.0034: unknown main item tag 0x0 [ 1350.663483][ T5887] hid-generic 0000:0003:0001.0034: unknown main item tag 0x0 [ 1350.688148][T17417] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1350.692457][ T5887] hid-generic 0000:0003:0001.0034: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1350.738838][T26954] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1350.759953][T18606] usb 4-1: Using ep0 maxpacket: 32 [ 1350.764174][T18606] usb 4-1: config 4 has an invalid interface number: 196 but max is 0 [ 1350.764205][T18606] usb 4-1: config 4 has no interface number 0 [ 1350.764274][T18606] usb 4-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=21.39 [ 1350.764301][T18606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.845183][T17417] usb 1-1: Using ep0 maxpacket: 32 [ 1350.849550][T17417] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1350.851544][T17417] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1350.851572][T17417] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.851593][T17417] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1350.851616][T17417] usb 1-1: config 128 has no interface number 0 [ 1350.851672][T17417] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1350.851703][T17417] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1350.851729][T17417] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1350.894035][T17417] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1350.894067][T17417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.894088][T17417] usb 1-1: Product: syz [ 1350.894102][T17417] usb 1-1: Manufacturer: syz [ 1350.894117][T17417] usb 1-1: SerialNumber: syz [ 1351.035067][T18606] usb 4-1: string descriptor 0 read error: -71 [ 1351.044545][T18606] keyspan 4-1:4.196: Keyspan - (without firmware) converter detected [ 1351.074773][T18606] usb 4-1: USB disconnect, device number 20 [ 1351.077536][T18606] keyspan 4-1:4.196: device disconnected [ 1351.237485][T26949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.237976][T26949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.239780][T26949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.240288][T26949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.703660][T17417] usb 1-1: USB disconnect, device number 8 [ 1352.673615][T26980] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8645'. [ 1353.164241][T26988] openvswitch: netlink: Duplicate key (type 21). [ 1353.219864][T26994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8652'. [ 1353.219892][T26994] openvswitch: netlink: Flow actions attr not present in new flow. [ 1353.398477][T18606] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1353.544264][T18606] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1353.544297][T18606] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.544319][T18606] usb 9-1: config 220 has no interface number 2 [ 1353.544425][T18606] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1353.544456][T18606] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1353.544476][T18606] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1353.544496][T18606] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1353.549928][T18606] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1353.549962][T18606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.549985][T18606] usb 9-1: Product: syz [ 1353.550002][T18606] usb 9-1: Manufacturer: syz [ 1353.550018][T18606] usb 9-1: SerialNumber: syz [ 1353.801958][ T5887] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1353.885340][T18606] usb 9-1: selecting invalid altsetting 0 [ 1353.889263][T18606] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1353.889300][T18606] uvcvideo 9-1:220.0: No valid video chain found. [ 1353.919460][T18606] usb 9-1: selecting invalid altsetting 0 [ 1353.919503][T18606] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1353.938223][T18606] usb 9-1: USB disconnect, device number 11 [ 1353.972468][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.972506][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.972548][ T5887] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1353.972576][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.978207][ T5887] usb 5-1: config 0 descriptor?? [ 1354.235695][T26990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.240167][T26990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.683269][ T5887] pyra 0003:1E7D:2CF6.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1354.857558][T26990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.858052][T26990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.862692][ T5887] pyra 0003:1E7D:2CF6.0035: couldn't init struct pyra_device [ 1354.862757][ T5887] pyra 0003:1E7D:2CF6.0035: couldn't install mouse [ 1354.866809][ T5887] pyra 0003:1E7D:2CF6.0035: probe with driver pyra failed with error -71 [ 1354.877889][ T5887] usb 5-1: USB disconnect, device number 33 [ 1357.170947][ T5960] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1357.223673][T27089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1357.225892][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1357.225921][ T37] audit: type=1326 audit(2000001253.950:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27088 comm="syz.3.8690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57d353f6c9 code=0x0 [ 1357.332555][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 1357.340267][ T5960] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1357.340633][ T5960] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1357.340662][ T5960] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1357.340685][ T5960] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1357.340706][ T5960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1357.340728][ T5960] usb 1-1: config 0 has no interface number 0 [ 1357.340784][ T5960] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1357.340816][ T5960] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1357.340840][ T5960] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1357.341043][ T5960] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1357.341076][ T5960] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1357.341098][ T5960] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1357.454337][ T5960] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1357.454364][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.454376][ T5960] usb 1-1: Product: syz [ 1357.454385][ T5960] usb 1-1: Manufacturer: syz [ 1357.454394][ T5960] usb 1-1: SerialNumber: syz [ 1357.491468][ T5960] usb 1-1: config 0 descriptor?? [ 1357.503739][ T5960] usb 1-1: selecting invalid altsetting 2 [ 1357.818188][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1358.189522][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1358.194959][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.195054][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1358.195117][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1358.286565][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1358.286599][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.286623][ T10] usb 9-1: Product: syz [ 1358.286703][ T10] usb 9-1: Manufacturer: syz [ 1358.286721][ T10] usb 9-1: SerialNumber: syz [ 1358.358600][ T10] cdc_ncm 9-1:1.0: skipping garbage [ 1358.358625][ T10] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 1358.358674][ T10] cdc_ncm 9-1:1.0: bind() failure [ 1358.522914][ T5960] get_1284_register timeout [ 1358.535379][ C0] usb 1-1: async_complete: urb error -104 [ 1358.542062][ C0] usb 1-1: async_complete: urb error -104 [ 1358.542237][ C0] usb 1-1: async_complete: urb error -104 [ 1358.542348][ C0] usb 1-1: async_complete: urb error -104 [ 1358.542784][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1358.601452][ T5960] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 1358.628539][T27098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.629188][T27098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.631458][ T5960] usb 9-1: USB disconnect, device number 12 [ 1358.759232][T18606] usb 1-1: USB disconnect, device number 9 [ 1359.018331][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1359.161262][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1359.166566][ T10] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 1359.166599][ T10] usb 5-1: config 4 has no interface number 0 [ 1359.166675][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=21.39 [ 1359.166700][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.407728][ T10] usb 5-1: string descriptor 0 read error: -71 [ 1359.417326][ T10] keyspan 5-1:4.196: Keyspan - (without firmware) converter detected [ 1359.441127][ T10] usb 5-1: USB disconnect, device number 34 [ 1359.443965][ T10] keyspan 5-1:4.196: device disconnected [ 1360.312177][ T5960] hid-generic 0000:0003:0001.0036: unknown main item tag 0x0 [ 1360.312219][ T5960] hid-generic 0000:0003:0001.0036: unknown main item tag 0x0 [ 1360.331241][ T5960] hid-generic 0000:0003:0001.0036: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1360.422116][T27113] [U] [ 1360.510361][T27141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1361.010922][T27155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8717'. [ 1361.218841][T18606] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1361.361992][T18606] usb 4-1: Using ep0 maxpacket: 32 [ 1362.055169][T18606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.055219][T18606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.055358][T18606] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1362.055424][T18606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.198723][T18606] usb 4-1: config 0 descriptor?? [ 1362.732965][T27156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8716'. [ 1362.937742][T18606] ft260 0003:0403:6030.0037: unknown main item tag 0x7 [ 1363.002580][ T5887] hid-generic 0000:0003:0001.0038: unknown main item tag 0x0 [ 1363.002618][ T5887] hid-generic 0000:0003:0001.0038: unknown main item tag 0x0 [ 1363.035123][ T5887] hid-generic 0000:0003:0001.0038: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1363.123249][T18606] ft260 0003:0403:6030.0037: chip code: 6424 8183 [ 1363.158611][T27183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1363.315604][T18606] ft260 0003:0403:6030.0037: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1363.508007][T18606] ft260 0003:0403:6030.0037: failed to retrieve status: -71, no wakeup [ 1363.515650][T18606] ft260 0003:0403:6030.0037: failed to retrieve status: -71 [ 1363.516403][T18606] ft260 0003:0403:6030.0037: failed to reset I2C controller: -71 [ 1363.563232][T18606] usb 4-1: USB disconnect, device number 21 [ 1363.837852][T27208] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8738'. [ 1363.917573][T27210] netlink: 'syz.4.8739': attribute type 39 has an invalid length. [ 1364.000601][ T5887] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1364.179390][ T5887] usb 9-1: config 0 has an invalid interface number: 69 but max is 0 [ 1364.179424][ T5887] usb 9-1: config 0 has no interface number 0 [ 1364.179484][ T5887] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1364.179512][ T5887] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1364.179540][ T5887] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1364.320459][ T5888] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1364.539435][ T5887] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1364.539474][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.539496][ T5887] usb 9-1: Product: syz [ 1364.539513][ T5887] usb 9-1: Manufacturer: syz [ 1364.539530][ T5887] usb 9-1: SerialNumber: syz [ 1364.639997][ T37] audit: type=1326 audit(2000001261.739:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27211 comm="syz.9.8740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c408df6c9 code=0x0 [ 1364.884536][ T5887] usb 9-1: config 0 descriptor?? [ 1364.885507][T27206] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1364.899387][ T5887] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1364.901495][ T5887] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1364.915359][ T5887] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1364.954730][T27216] netlink: 'syz.0.8741': attribute type 1 has an invalid length. [ 1364.954796][T27216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1364.954838][T27216] IPv6: NLM_F_CREATE should be set when creating new route [ 1364.954870][T27216] IPv6: NLM_F_CREATE should be set when creating new route [ 1365.008802][T27216] tipc: Started in network mode [ 1365.008835][T27216] tipc: Node identity ac1414aa, cluster identity 4711 [ 1365.014986][T27216] tipc: Enabled bearer , priority 10 [ 1365.026514][T27216] tipc: Enabled bearer , priority 0 [ 1365.032521][ T5888] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1365.032549][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.032568][ T5888] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1365.032588][ T5888] usb 5-1: config 1 has no interface number 1 [ 1365.032636][ T5888] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1365.068085][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1365.068289][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.068314][ T5888] usb 5-1: Product: syz [ 1365.068331][ T5888] usb 5-1: Manufacturer: syz [ 1365.068348][ T5888] usb 5-1: SerialNumber: syz [ 1365.100122][T27221] netlink: 'syz.0.8741': attribute type 1 has an invalid length. [ 1365.100310][T27221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1365.256046][T27206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.256537][T27206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.335511][ T5888] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1365.335575][ T5888] usb 5-1: MIDIStreaming interface descriptor not found [ 1365.369144][ T980] usb 9-1: USB disconnect, device number 13 [ 1365.431814][ T980] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1365.434381][ T980] cyberjack 9-1:0.69: device disconnected [ 1365.526169][ T5888] usb 5-1: USB disconnect, device number 35 [ 1365.991386][ T980] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1366.143877][ T5888] tipc: Node number set to 2886997162 [ 1366.172095][ T5961] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1366.234634][ T980] usb 10-1: config 255 has an invalid interface number: 200 but max is 0 [ 1366.234670][ T980] usb 10-1: config 255 has no interface number 0 [ 1366.234730][ T980] usb 10-1: config 255 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1366.234836][ T980] usb 10-1: config 255 interface 200 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1366.234864][ T980] usb 10-1: config 255 interface 200 has no altsetting 0 [ 1366.243245][ T980] usb 10-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=f3.f9 [ 1366.243277][ T980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.243298][ T980] usb 10-1: Product: syz [ 1366.243312][ T980] usb 10-1: Manufacturer: syz [ 1366.243326][ T980] usb 10-1: SerialNumber: syz [ 1366.259377][T27239] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1366.264300][ T980] ir_toy 10-1:255.200: required endpoints not found [ 1366.371991][ T5960] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1366.400844][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 1366.405338][ T5961] usb 5-1: config 1 interface 0 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 32 [ 1366.405375][ T5961] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1366.408594][ T5961] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1366.408628][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.408650][ T5961] usb 5-1: Product: syz [ 1366.408668][ T5961] usb 5-1: Manufacturer: syz [ 1366.408685][ T5961] usb 5-1: SerialNumber: syz [ 1366.476532][T27243] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1366.540964][ T5960] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.540995][ T5960] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1366.544042][ T5960] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1366.544143][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1366.544168][ T5960] usb 9-1: SerialNumber: syz [ 1366.580588][T27239] tty tty39: ldisc open failed (-12), clearing slot 38 [ 1366.675077][T27243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.675566][T27243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.678609][T27243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.679082][T27243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.697237][T27266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.697720][T27266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.750854][ T5961] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1366.802034][ T5961] usb 5-1: USB disconnect, device number 36 [ 1366.917169][T27272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.921477][T27272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.090288][ T980] usb 10-1: USB disconnect, device number 9 [ 1367.093187][ T5960] usb 9-1: 0:2 : does not exist [ 1367.192131][ T5960] usb 9-1: USB disconnect, device number 14 [ 1367.734626][ T5960] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1367.888458][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 1367.911474][ T5960] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1367.911509][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.911533][ T5960] usb 5-1: Product: syz [ 1367.911549][ T5960] usb 5-1: Manufacturer: syz [ 1367.911565][ T5960] usb 5-1: SerialNumber: syz [ 1367.958699][ T5960] usb 5-1: config 0 descriptor?? [ 1367.970704][ T5960] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1368.793624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.795589][ T5960] gspca_ov534_9: reg_w failed -110 [ 1368.910578][T27323] ubi: mtd0 is already attached to ubi0 [ 1368.924322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.986043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.898685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.354105][ T5960] gspca_ov534_9: Unknown sensor 0000 [ 1370.354236][ T5960] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1370.482856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.706538][ T5960] usb 5-1: USB disconnect, device number 37 [ 1370.830586][T27330] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8782'. [ 1371.010324][T27330] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1371.053087][T27330] bond1 (unregistering): Released all slaves [ 1371.223533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.248624][ T5960] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1371.344140][T27355] netlink: 424 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1371.417761][ T5960] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1371.417802][ T5960] usb 5-1: config 0 has no interface number 0 [ 1371.417842][ T5960] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1371.422429][ T5960] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1371.422464][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.422488][ T5960] usb 5-1: Product: syz [ 1371.422504][ T5960] usb 5-1: Manufacturer: syz [ 1371.422521][ T5960] usb 5-1: SerialNumber: syz [ 1371.484716][ T5960] usb 5-1: config 0 descriptor?? [ 1372.177613][ T5960] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1372.177650][ T5960] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1372.472887][ T5960] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 1372.489594][ T5960] usb 5-1: USB disconnect, device number 38 [ 1372.527186][T27369] netlink: 'syz.8.8796': attribute type 39 has an invalid length. [ 1372.754294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.821276][T18606] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1372.967261][T18606] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1372.967294][T18606] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.967329][T18606] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1372.967364][T18606] usb 9-1: config 1 has no interface number 1 [ 1372.967420][T18606] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1372.970714][T18606] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1372.970747][T18606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.970769][T18606] usb 9-1: Product: syz [ 1372.970786][T18606] usb 9-1: Manufacturer: syz [ 1372.970803][T18606] usb 9-1: SerialNumber: syz [ 1373.201600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.259126][ T5888] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1374.236851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.239268][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1374.239353][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.303294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.325935][ T5888] usb 10-1: Using ep0 maxpacket: 32 [ 1374.340281][ T5888] usb 10-1: config 0 has an invalid interface number: 195 but max is 0 [ 1374.340313][ T5888] usb 10-1: config 0 has no interface number 0 [ 1374.340377][ T5888] usb 10-1: config 0 interface 195 has no altsetting 0 [ 1374.355687][ T5888] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=25.d4 [ 1374.355858][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.355884][ T5888] usb 10-1: Product: syz [ 1374.355900][ T5888] usb 10-1: Manufacturer: syz [ 1374.355917][ T5888] usb 10-1: SerialNumber: syz [ 1374.378860][ T5888] usb 10-1: config 0 descriptor?? [ 1374.396025][ T5888] kvaser_usb 10-1:0.195: error -ENODEV: Cannot get usb endpoint(s) [ 1374.472823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.594507][T18606] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1374.595301][T18606] usb 9-1: MIDIStreaming interface descriptor not found [ 1374.666649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.673099][T17417] usb 10-1: USB disconnect, device number 10 [ 1374.735828][ T5888] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1374.791349][T18606] usb 9-1: USB disconnect, device number 15 [ 1374.848225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.964780][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.964815][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1374.964839][ T5888] usb 5-1: config 1 has no interface number 0 [ 1374.964894][ T5888] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1374.968300][ T5888] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1374.968337][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.968360][ T5888] usb 5-1: Product: syz [ 1374.968377][ T5888] usb 5-1: Manufacturer: syz [ 1374.968394][ T5888] usb 5-1: SerialNumber: syz [ 1375.023444][ T5888] usb 5-1: selecting invalid altsetting 1 [ 1375.192741][ T5960] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1375.581428][ T37] audit: type=1326 audit(2000001273.224:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27427 comm="syz.8.8822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f377273f6c9 code=0x0 [ 1375.615661][ T5960] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1375.616884][ T5960] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1375.616926][ T5960] usb 1-1: can't read configurations, error -71 [ 1375.625874][ T5888] usb 5-1: selecting invalid altsetting 1 [ 1375.625946][ T5888] cdc_ncm 5-1:1.1: bind() failure [ 1375.807574][T18606] usb 5-1: USB disconnect, device number 39 [ 1375.953109][ T5961] hid-generic 0000:0003:0001.0039: unknown main item tag 0x0 [ 1375.953156][ T5961] hid-generic 0000:0003:0001.0039: unknown main item tag 0x0 [ 1375.975282][ T5961] hid-generic 0000:0003:0001.0039: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1375.976732][T27443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8827'. [ 1376.109979][T27443] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1376.321380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.815620][T27459] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8834'. [ 1376.955936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.148570][T27472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1377.391227][T27479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8841'. [ 1377.393342][T18606] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1377.394977][ T5960] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1380.425833][ T5814] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1380.443030][T18606] usb 1-1: device descriptor read/all, error -71 [ 1380.553274][ T5960] usb 5-1: device descriptor read/all, error -71 [ 1380.801053][T27502] netlink: 'syz.4.8845': attribute type 1 has an invalid length. [ 1380.846776][T17417] hid-generic 0000:0003:0001.003A: unknown main item tag 0x0 [ 1380.846819][T17417] hid-generic 0000:0003:0001.003A: unknown main item tag 0x0 [ 1380.910379][T27507] netlink: 'syz.4.8845': attribute type 10 has an invalid length. [ 1380.916069][T17417] hid-generic 0000:0003:0001.003A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1380.991979][T27502] bond1: entered promiscuous mode [ 1380.992571][T27502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1381.957544][T27512] netlink: 'syz.4.8845': attribute type 10 has an invalid length. [ 1382.094795][T27504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1382.121153][T27504] bond1: (slave bond2): making interface the new active one [ 1382.128924][T27504] bond2: entered promiscuous mode [ 1382.137278][T27504] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1382.262111][T27507] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1382.262325][T27507] team0: Failed to send options change via netlink (err -105) [ 1382.262345][T27507] team0: Port device dummy0 added [ 1382.359339][T27512] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1383.319015][T27512] team0: Failed to send options change via netlink (err -105) [ 1383.319342][T27512] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1383.320009][T27512] team0: Port device dummy0 removed [ 1383.326111][T27512] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1383.673983][T27552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8862'. [ 1383.754369][T27556] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8864'. [ 1383.881832][T27560] FAULT_INJECTION: forcing a failure. [ 1383.881832][T27560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.881870][T27560] CPU: 0 UID: 0 PID: 27560 Comm: syz.3.8867 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1383.881905][T27560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1383.881920][T27560] Call Trace: [ 1383.881930][T27560] [ 1383.881940][T27560] dump_stack_lvl+0x189/0x250 [ 1383.881980][T27560] ? __pfx____ratelimit+0x10/0x10 [ 1383.882011][T27560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1383.882045][T27560] ? __pfx__printk+0x10/0x10 [ 1383.882073][T27560] ? __might_fault+0xb0/0x130 [ 1383.882119][T27560] should_fail_ex+0x46c/0x600 [ 1383.882157][T27560] _copy_from_user+0x2d/0xb0 [ 1383.882184][T27560] sctp_setsockopt+0x19f/0x1200 [ 1383.882218][T27560] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1383.882256][T27560] do_sock_setsockopt+0x17c/0x1b0 [ 1383.882288][T27560] __x64_sys_setsockopt+0x145/0x1b0 [ 1383.882320][T27560] do_syscall_64+0xfa/0xfa0 [ 1383.882349][T27560] ? lockdep_hardirqs_on+0x9c/0x150 [ 1383.882379][T27560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.882401][T27560] ? clear_bhb_loop+0x60/0xb0 [ 1383.882430][T27560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.882452][T27560] RIP: 0033:0x7f57d353f6c9 [ 1383.882473][T27560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.882494][T27560] RSP: 002b:00007f57d179e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1383.882520][T27560] RAX: ffffffffffffffda RBX: 00007f57d3795fa0 RCX: 00007f57d353f6c9 [ 1383.882537][T27560] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000005 [ 1383.882552][T27560] RBP: 00007f57d179e090 R08: 000000000000001c R09: 0000000000000000 [ 1383.882567][T27560] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1383.882582][T27560] R13: 00007f57d3796038 R14: 00007f57d3795fa0 R15: 00007ffc4f10a0c8 [ 1383.882621][T27560] [ 1384.153620][T27564] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8868'. [ 1384.498191][T27577] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1384.510541][T27577] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1387.209253][ T61] Bluetooth: hci3: unexpected subevent 0x0a length: 5 < 30 [ 1387.220997][T27601] binder: 27600:27601 ioctl c0306201 200000000280 returned -14 [ 1387.458322][T27610] FAULT_INJECTION: forcing a failure. [ 1387.458322][T27610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1387.458364][T27610] CPU: 1 UID: 0 PID: 27610 Comm: syz.0.8882 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1387.458391][T27610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1387.458405][T27610] Call Trace: [ 1387.458415][T27610] [ 1387.458425][T27610] dump_stack_lvl+0x189/0x250 [ 1387.458467][T27610] ? __pfx____ratelimit+0x10/0x10 [ 1387.458497][T27610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.458540][T27610] ? __pfx__printk+0x10/0x10 [ 1387.458570][T27610] ? fs_reclaim_acquire+0x7d/0x100 [ 1387.458613][T27610] should_fail_ex+0x46c/0x600 [ 1387.458651][T27610] prepare_alloc_pages+0x213/0x670 [ 1387.458694][T27610] __alloc_frozen_pages_noprof+0x123/0x370 [ 1387.458734][T27610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1387.458790][T27610] alloc_pages_mpol+0xd1/0x380 [ 1387.458829][T27610] alloc_pages_noprof+0xcf/0x1e0 [ 1387.458865][T27610] __pud_alloc+0x3f/0x450 [ 1387.458904][T27610] handle_mm_fault+0x2149/0x3400 [ 1387.458936][T27610] ? mt_find+0x15c/0x5e0 [ 1387.458967][T27610] ? __pfx_mt_find+0x10/0x10 [ 1387.459001][T27610] ? handle_mm_fault+0xdb/0x3400 [ 1387.459041][T27610] ? __pfx_handle_mm_fault+0x10/0x10 [ 1387.459097][T27610] ? lock_mm_and_find_vma+0x9c/0x300 [ 1387.459136][T27610] do_user_addr_fault+0x764/0x1380 [ 1387.459184][T27610] exc_page_fault+0x82/0x100 [ 1387.459216][T27610] asm_exc_page_fault+0x26/0x30 [ 1387.459238][T27610] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1387.459262][T27610] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1387.459283][T27610] RSP: 0018:ffffc9000c8dfdd8 EFLAGS: 00050206 [ 1387.459304][T27610] RAX: 00007ffffffff001 RBX: 000000000000001c RCX: 000000000000001c [ 1387.459321][T27610] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffff88802cc97080 [ 1387.459337][T27610] RBP: 0000000000000064 R08: 0000000000000003 R09: 0000000000000004 [ 1387.459350][T27610] R10: dffffc0000000000 R11: ffffed1005992e13 R12: 0000200000000040 [ 1387.459367][T27610] R13: ffff88806d834500 R14: ffff88802cc97080 R15: 0000200000000040 [ 1387.459406][T27610] _copy_from_user+0x7a/0xb0 [ 1387.459434][T27610] sctp_setsockopt+0x19f/0x1200 [ 1387.459478][T27610] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1387.459528][T27610] do_sock_setsockopt+0x17c/0x1b0 [ 1387.459560][T27610] __x64_sys_setsockopt+0x145/0x1b0 [ 1387.459594][T27610] do_syscall_64+0xfa/0xfa0 [ 1387.459623][T27610] ? lockdep_hardirqs_on+0x9c/0x150 [ 1387.459653][T27610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.459676][T27610] ? clear_bhb_loop+0x60/0xb0 [ 1387.459704][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.459726][T27610] RIP: 0033:0x7fd5fb7bf6c9 [ 1387.459745][T27610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1387.459764][T27610] RSP: 002b:00007fd5f9a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1387.459785][T27610] RAX: ffffffffffffffda RBX: 00007fd5fba15fa0 RCX: 00007fd5fb7bf6c9 [ 1387.459801][T27610] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000005 [ 1387.459815][T27610] RBP: 00007fd5f9a1e090 R08: 000000000000001c R09: 0000000000000000 [ 1387.459830][T27610] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1387.459844][T27610] R13: 00007fd5fba16038 R14: 00007fd5fba15fa0 R15: 00007ffe18bc1118 [ 1387.459884][T27610] [ 1387.643280][T27609] netlink: 'syz.9.8883': attribute type 4 has an invalid length. [ 1387.643305][T27609] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.8883'. [ 1388.557170][ T5889] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1388.700255][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 1388.702857][ T5889] usb 5-1: config index 0 descriptor too short (expected 47, got 45) [ 1388.702924][ T5889] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1388.702948][ T5889] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1388.702966][ T5889] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 40750, setting to 64 [ 1388.705655][ T5889] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1388.705682][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.705694][ T5889] usb 5-1: Product: syz [ 1388.705704][ T5889] usb 5-1: Manufacturer: syz [ 1388.705713][ T5889] usb 5-1: SerialNumber: syz [ 1388.732499][ T5889] usbtouchscreen 5-1:17.0: probe with driver usbtouchscreen failed with error -8 [ 1388.937217][ T5889] usb 5-1: USB disconnect, device number 42 [ 1389.649759][T27675] bond1: entered promiscuous mode [ 1389.649792][T27675] bond1: entered allmulticast mode [ 1389.650400][T27675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1389.665861][T27679] netlink: 'syz.9.8911': attribute type 39 has an invalid length. [ 1389.841022][T27689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8914'. [ 1389.938846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.948283][ T5814] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1390.026158][T27697] trusted_key: encrypted_key: insufficient parameters specified [ 1390.165659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.182379][ T5814] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1390.182411][ T5814] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1390.182432][ T5814] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1390.182455][ T5814] usb 10-1: config 1 has no interface number 1 [ 1390.182510][ T5814] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1390.235310][ T5814] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1390.235346][ T5814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.235368][ T5814] usb 10-1: Product: syz [ 1390.235385][ T5814] usb 10-1: Manufacturer: syz [ 1390.235401][ T5814] usb 10-1: SerialNumber: syz [ 1390.383888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.467681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.701504][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.891181][ T5814] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1390.891250][ T5814] usb 10-1: MIDIStreaming interface descriptor not found [ 1390.972505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.992874][ T5814] usb 10-1: USB disconnect, device number 11 [ 1391.564492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.706999][T27732] erofs (device nbd3): cannot find valid erofs superblock [ 1392.133459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.136087][ T61] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1392.299956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.549510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.924820][T27748] ieee802154 phy0 wpan0: encryption failed: -22 [ 1392.925945][T27748] ieee802154 phy0 wpan0: encryption failed: -22 [ 1393.053382][T17417] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1393.197256][T17417] usb 4-1: Using ep0 maxpacket: 16 [ 1393.205926][ T5814] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1393.219308][T17417] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1393.225648][T17417] usb 4-1: config 102 has an invalid interface number: 21 but max is 0 [ 1393.225679][T17417] usb 4-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.225700][T17417] usb 4-1: config 102 has no interface number 0 [ 1393.225738][T17417] usb 4-1: config 102 interface 21 has no altsetting 0 [ 1393.230087][T17417] usb 4-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=e8.e7 [ 1393.230118][T17417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.230141][T17417] usb 4-1: Product: syz [ 1393.230157][T17417] usb 4-1: Manufacturer: syz [ 1393.230175][T17417] usb 4-1: SerialNumber: syz [ 1393.370236][ T5814] usb 10-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.370277][ T5814] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1393.370316][ T5814] usb 10-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 1393.370344][ T5814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.384319][ T5814] usb 10-1: config 0 descriptor?? [ 1393.522440][T17417] rndis_host 4-1:102.21: More than one union descriptor, skipping ... [ 1393.522470][T17417] usb 4-1: bad CDC descriptors [ 1393.523732][T17417] cdc_acm 4-1:102.21: More than one union descriptor, skipping ... [ 1393.559129][T17417] usb 4-1: USB disconnect, device number 22 [ 1393.728792][T27790] Bluetooth: hci0: unsupported parameter 255 [ 1393.728820][T27790] Bluetooth: hci0: unsupported parameter 255 [ 1394.061961][T27797] FAULT_INJECTION: forcing a failure. [ 1394.061961][T27797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.062001][T27797] CPU: 1 UID: 0 PID: 27797 Comm: syz.4.8956 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1394.062027][T27797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1394.062041][T27797] Call Trace: [ 1394.062051][T27797] [ 1394.062061][T27797] dump_stack_lvl+0x189/0x250 [ 1394.062098][T27797] ? __pfx____ratelimit+0x10/0x10 [ 1394.062127][T27797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1394.062160][T27797] ? __pfx__printk+0x10/0x10 [ 1394.062203][T27797] should_fail_ex+0x46c/0x600 [ 1394.062237][T27797] _copy_to_user+0x31/0xb0 [ 1394.062262][T27797] simple_read_from_buffer+0xe1/0x170 [ 1394.062297][T27797] proc_fail_nth_read+0x1b6/0x220 [ 1394.062327][T27797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.062355][T27797] ? rw_verify_area+0x2ac/0x4e0 [ 1394.062382][T27797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.062408][T27797] vfs_read+0x206/0xa30 [ 1394.062444][T27797] ? __pfx_vfs_read+0x10/0x10 [ 1394.062477][T27797] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1394.062515][T27797] ? mutex_lock_nested+0x154/0x1d0 [ 1394.062537][T27797] ? fdget_pos+0x253/0x320 [ 1394.062580][T27797] ksys_read+0x14b/0x260 [ 1394.062608][T27797] ? __pfx_ksys_read+0x10/0x10 [ 1394.062640][T27797] ? do_syscall_64+0xbe/0xfa0 [ 1394.062675][T27797] do_syscall_64+0xfa/0xfa0 [ 1394.062702][T27797] ? lockdep_hardirqs_on+0x9c/0x150 [ 1394.062729][T27797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.062750][T27797] ? clear_bhb_loop+0x60/0xb0 [ 1394.062777][T27797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.062799][T27797] RIP: 0033:0x7fd09582e0dc [ 1394.062819][T27797] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1394.062840][T27797] RSP: 002b:00007fd093a96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1394.062864][T27797] RAX: ffffffffffffffda RBX: 00007fd095a85fa0 RCX: 00007fd09582e0dc [ 1394.062881][T27797] RDX: 000000000000000f RSI: 00007fd093a960a0 RDI: 0000000000000004 [ 1394.062895][T27797] RBP: 00007fd093a96090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.062909][T27797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.062923][T27797] R13: 00007fd095a86038 R14: 00007fd095a85fa0 R15: 00007ffdda1d6de8 [ 1394.062961][T27797] [ 1394.192978][ T5814] wacom 0003:056A:0020.003B: unknown main item tag 0x2 [ 1394.520337][ T5814] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1394.703296][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 1394.706869][ T5814] usb 9-1: config 4 has an invalid interface number: 164 but max is 0 [ 1394.706902][ T5814] usb 9-1: config 4 has no interface number 0 [ 1394.706960][ T5814] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=d3.1d [ 1394.706997][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.730238][T17417] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1394.873517][T17417] usb 4-1: Using ep0 maxpacket: 8 [ 1394.888277][T17417] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1394.888314][T17417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.888337][T17417] usb 4-1: Product: syz [ 1394.888354][T17417] usb 4-1: Manufacturer: syz [ 1394.888371][T17417] usb 4-1: SerialNumber: syz [ 1394.927982][T17417] usb 4-1: config 0 descriptor?? [ 1394.939372][T17417] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1394.939429][T17417] pctv452e: pctv452e_power_ctrl: 1 [ 1394.939429][T17417] [ 1394.939482][T17417] usb 4-1: selecting invalid altsetting 3 [ 1394.939500][T17417] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1394.939500][T17417] [ 1394.939518][T17417] dvb-usb: bulk message failed: -22 (5/0) [ 1394.954149][ T5814] usb 9-1: string descriptor 0 read error: -71 [ 1394.985875][ T5814] usb 9-1: USB disconnect, device number 17 [ 1395.096562][T17417] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1395.097482][T17417] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1395.097551][T17417] usb 4-1: media controller created [ 1395.129268][T17417] dvb-usb: bulk message failed: -22 (8/0) [ 1395.129295][T17417] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1395.129427][T17417] dvb-usb: MAC address reading failed. [ 1395.184680][T17417] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1395.391097][T17417] DVB: Unable to find symbol stb0899_attach() [ 1395.391111][T17417] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1395.539559][T17417] rc_core: IR keymap rc-tt-1500 not found [ 1395.539587][T17417] Registered IR keymap rc-empty [ 1395.541471][T17417] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1395.545077][T17417] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input49 [ 1395.591271][T17417] dvb-usb: schedule remote query interval to 100 msecs. [ 1395.591297][T17417] pctv452e: pctv452e_power_ctrl: 0 [ 1395.591297][T17417] [ 1395.591310][T17417] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1395.697764][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1395.697835][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1395.810068][ T5888] dvb-usb: bulk message failed: -22 (4/0) [ 1395.810106][ T5888] dvb-usb: error -22 while querying for an remote control event. [ 1395.830870][ T5814] usb 10-1: USB disconnect, device number 12 [ 1395.911137][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1395.911179][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.016246][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.016286][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.120526][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.120568][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.147864][T27834] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20003 [ 1396.225307][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.225350][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.348877][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.348920][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.467365][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.467407][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.568456][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.568723][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.701311][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.708878][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1396.869166][T17417] dvb-usb: bulk message failed: -22 (4/0) [ 1396.869297][T17417] dvb-usb: error -22 while querying for an remote control event. [ 1397.126514][ T980] dvb-usb: bulk message failed: -22 (4/0) [ 1397.126555][ T980] dvb-usb: error -22 while querying for an remote control event. [ 1397.225776][ T5888] dvb-usb: bulk message failed: -22 (4/0) [ 1397.225817][ T5888] dvb-usb: error -22 while querying for an remote control event. [ 1397.330688][ T5888] dvb-usb: bulk message failed: -22 (4/0) [ 1397.330728][ T5888] dvb-usb: error -22 while querying for an remote control event. [ 1397.382953][T17417] usb 4-1: USB disconnect, device number 23 [ 1397.577896][ T5814] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1397.708355][T17417] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1397.766056][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.766095][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.766141][ T5814] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1397.766167][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.784957][ T5814] usb 9-1: config 0 descriptor?? [ 1397.811144][ T5814] usbhid 9-1:0.0: can't add hid device: -22 [ 1397.811264][ T5814] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 1399.811902][ T5814] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1400.071995][ T5814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.072027][ T5814] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1400.098984][ T5814] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1400.099007][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1400.099021][ T5814] usb 5-1: SerialNumber: syz [ 1401.559255][T27878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.638276][T27878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.961905][ T5814] usb 5-1: 0:2 : does not exist [ 1403.064314][ T5814] usb 5-1: USB disconnect, device number 43 [ 1403.480482][ T980] usb 9-1: USB disconnect, device number 18 [ 1403.951123][T17417] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1404.322823][T17417] usb 4-1: Using ep0 maxpacket: 16 [ 1404.597209][T27918] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1404.597244][T27918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1404.597627][T27918] vhci_hcd vhci_hcd.0: Device attached [ 1404.639937][T17417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.639978][T17417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.640003][T17417] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1404.640054][T17417] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1404.640079][T17417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.760762][ T980] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1404.946784][T17417] usb 4-1: config 0 descriptor?? [ 1404.984085][T27934] vhci_hcd: connection closed [ 1405.007415][ T980] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1405.007465][ T980] usb 10-1: can't read configurations, error -61 [ 1405.013454][ T3723] vhci_hcd: stop threads [ 1405.013476][ T3723] vhci_hcd: release socket [ 1405.013574][ T3723] vhci_hcd: disconnect device [ 1405.066772][ T5814] vhci_hcd: vhci_device speed not set [ 1405.566677][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.566704][T17417] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 1405.567942][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.567961][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.567976][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.567992][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.568007][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.568023][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.568038][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x2 [ 1405.568054][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.568073][T17417] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1405.627589][ T980] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1405.783245][ T980] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1405.783275][ T980] usb 10-1: can't read configurations, error -61 [ 1405.783603][ T980] usb usb10-port1: attempt power cycle [ 1405.815106][T17417] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1405.815146][T17417] microsoft 0003:045E:07DA.003C: no inputs found [ 1405.815163][T17417] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 1405.829556][T17417] usb 4-1: USB disconnect, device number 24 [ 1406.122600][ T980] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1406.145568][ T980] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1406.145615][ T980] usb 10-1: can't read configurations, error -61 [ 1406.208596][ T5960] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1406.268733][ T980] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1406.294140][ T980] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1406.294187][ T980] usb 10-1: can't read configurations, error -61 [ 1406.294687][ T980] usb usb10-port1: unable to enumerate USB device [ 1406.366873][ T5960] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.366906][ T5960] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1406.368706][ T5960] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1406.368734][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1406.368755][ T5960] usb 5-1: SerialNumber: syz [ 1407.375125][T27944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.377625][T27944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.659972][T27983] binder: 27974:27983 ioctl 80045518 0 returned -22 [ 1407.665022][T27983] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20002 [ 1407.814802][ T5960] usb 5-1: 0:2 : does not exist [ 1407.832228][ T5960] usb 5-1: USB disconnect, device number 44 [ 1410.563382][T28032] netlink: 'syz.9.9044': attribute type 8 has an invalid length. [ 1410.564041][T28032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1412.951748][T28042] [U] [ 1413.289039][T28058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9054'. [ 1413.573124][T28064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9057'. [ 1413.573159][T28064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9057'. [ 1414.221246][T28080] erofs (device nbd4): cannot find valid erofs superblock [ 1414.959402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.355373][ T980] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1415.504471][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.504499][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1415.506999][ T980] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1415.507047][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1415.507068][ T980] usb 5-1: SerialNumber: syz [ 1415.771316][T28088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.772452][T28088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.786586][ T980] usb 5-1: 0:2 : does not exist [ 1415.809855][ T980] usb 5-1: USB disconnect, device number 45 [ 1416.270784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.398183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.554855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.711879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.302507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.938201][T28154] netlink: 'syz.8.9087': attribute type 39 has an invalid length. [ 1419.295591][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.354031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.416193][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.448753][T18606] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1419.918349][T18606] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1419.918381][T18606] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1419.918417][T18606] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1419.918441][T18606] usb 9-1: config 1 has no interface number 1 [ 1419.918497][T18606] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1419.978436][T18606] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1419.978472][T18606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.978496][T18606] usb 9-1: Product: syz [ 1419.978513][T18606] usb 9-1: Manufacturer: syz [ 1419.978531][T18606] usb 9-1: SerialNumber: syz [ 1420.505187][T18606] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1420.505259][T18606] usb 9-1: MIDIStreaming interface descriptor not found [ 1420.622521][T18606] usb 9-1: USB disconnect, device number 19 [ 1421.831311][ T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1421.978397][ T980] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1421.978421][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.978434][ T980] usb 1-1: Product: syz [ 1421.978443][ T980] usb 1-1: Manufacturer: syz [ 1421.978452][ T980] usb 1-1: SerialNumber: syz [ 1421.987257][ T980] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1422.101683][T28194] netlink: 'syz.9.9099': attribute type 39 has an invalid length. [ 1422.295780][T17417] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1422.350309][ T5888] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1422.633766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1422.661639][ T5888] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1422.661672][ T5888] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1422.661694][ T5888] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1422.661772][ T5888] usb 10-1: config 1 has no interface number 1 [ 1422.661805][ T5888] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1422.676273][ T5888] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1422.676379][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.676401][ T5888] usb 10-1: Product: syz [ 1422.676416][ T5888] usb 10-1: Manufacturer: syz [ 1422.676431][ T5888] usb 10-1: SerialNumber: syz [ 1423.243254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.249454][T28188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9097'. [ 1423.276054][T28188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1423.276619][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.462058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.659576][T17417] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1423.660451][T17417] ath9k_htc: Failed to initialize the device [ 1423.702737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.823689][T28205] 9pnet_fd: Insufficient options for proto=fd [ 1424.129608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.469396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.570263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.955454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.031892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.072449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.135276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.217597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.629200][ T980] usb 1-1: USB disconnect, device number 14 [ 1426.413140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.413204][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1426.453693][ T980] usb 1-1: ath9k_htc: USB layer deinitialized [ 1426.461831][ T5888] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1426.461889][ T5888] usb 10-1: MIDIStreaming interface descriptor not found [ 1426.525750][ T5888] usb 10-1: USB disconnect, device number 17 [ 1426.685937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.887988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.075105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.249978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.424651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.259768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.670379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.736404][ T5888] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1428.831764][T18606] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1428.842219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.984446][T18606] usb 10-1: Using ep0 maxpacket: 32 [ 1428.990548][T18606] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1428.990579][T18606] usb 10-1: config 0 has no interface number 0 [ 1428.990637][T18606] usb 10-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1428.990664][T18606] usb 10-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1428.996728][T18606] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1428.996761][T18606] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.996783][T18606] usb 10-1: Product: syz [ 1428.996800][T18606] usb 10-1: Manufacturer: syz [ 1428.996818][T18606] usb 10-1: SerialNumber: syz [ 1429.009076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.022101][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 1429.024984][T18606] usb 10-1: config 0 descriptor?? [ 1429.029377][T18606] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1429.096909][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1429.109920][ T5888] usb 4-1: config 8 has an invalid interface number: 34 but max is 0 [ 1429.109952][ T5888] usb 4-1: config 8 has an invalid interface association descriptor of length 2, skipping [ 1429.109975][ T5888] usb 4-1: config 8 has no interface number 0 [ 1429.110121][ T5888] usb 4-1: config 8 interface 34 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1429.110154][ T5888] usb 4-1: config 8 interface 34 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1429.110182][ T5888] usb 4-1: config 8 interface 34 has no altsetting 0 [ 1429.183349][ T5888] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 1429.183387][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.183410][ T5888] usb 4-1: Product: syz [ 1429.183426][ T5888] usb 4-1: Manufacturer: syz [ 1429.183443][ T5888] usb 4-1: SerialNumber: syz [ 1429.212755][ T5814] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1429.278720][T18606] usb 10-1: qt2_setup_urbs - submit read urb failed -90 [ 1429.279073][T18606] quatech2 10-1:0.51: probe with driver quatech2 failed with error -90 [ 1429.367036][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 1429.369820][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.369855][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.369899][ T5814] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1429.369925][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.378823][ T5814] usb 9-1: config 0 descriptor?? [ 1429.391111][ T5814] hub 9-1:0.0: USB hub found [ 1429.484135][T28239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.487498][T28239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.502139][T18606] usb 10-1: USB disconnect, device number 18 [ 1429.579825][ T5814] hub 9-1:0.0: 1 port detected [ 1429.611986][ T5888] usb 4-1: USB disconnect, device number 25 [ 1429.948067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.189361][T28280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9130'. [ 1430.489763][ T5814] hub 9-1:0.0: activate --> -90 [ 1430.764732][ T5814] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1430.785575][ T5960] usb 9-1: USB disconnect, device number 20 [ 1430.786334][ T5814] usb 9-1: Failed to suspend device, error -71 [ 1430.927636][T18606] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1431.065056][ T37] audit: type=1326 audit(2000001331.467:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.065120][ T37] audit: type=1326 audit(2000001331.467:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.065171][ T37] audit: type=1326 audit(2000001331.467:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.065836][ T37] audit: type=1326 audit(2000001331.467:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.065885][ T37] audit: type=1326 audit(2000001331.467:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.066219][ T37] audit: type=1326 audit(2000001331.467:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.067949][ T37] audit: type=1326 audit(2000001331.467:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.068005][ T37] audit: type=1326 audit(2000001331.467:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.069327][ T37] audit: type=1326 audit(2000001331.467:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.069978][ T37] audit: type=1326 audit(2000001331.467:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.4.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09582f6c9 code=0x7ffc0000 [ 1431.196664][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.197093][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.197514][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.197912][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.198344][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.198737][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.199158][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.199575][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.199941][T28295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1431.203735][T18606] usb 10-1: Using ep0 maxpacket: 32 [ 1431.299197][T18606] usb 10-1: config 4 has an invalid interface number: 196 but max is 0 [ 1431.299229][T18606] usb 10-1: config 4 has no interface number 0 [ 1431.299296][T18606] usb 10-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=21.39 [ 1431.299323][T18606] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.602396][T28307] netlink: 'syz.8.9144': attribute type 39 has an invalid length. [ 1432.191943][T18606] usb 10-1: string descriptor 0 read error: -71 [ 1432.212859][T18606] keyspan 10-1:4.196: Keyspan - (without firmware) converter detected [ 1432.224419][T18606] usb 10-1: USB disconnect, device number 19 [ 1432.225911][T18606] keyspan 10-1:4.196: device disconnected [ 1432.519006][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.519093][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.580473][T28317] 9pnet_fd: Insufficient options for proto=fd [ 1432.770518][T28321] PKCS8: Unsupported PKCS#8 version [ 1432.957395][T28201] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1434.681561][T28201] usb 9-1: device descriptor read/all, error -71 [ 1434.838766][T28336] ./cgroup: Can't lookup blockdev [ 1435.014076][T28341] 9pnet_fd: Insufficient options for proto=fd [ 1437.187372][T24984] Bluetooth: Unknown LE signaling command 0xf2 [ 1437.187395][T24984] Bluetooth: Wrong link type (-22) [ 1437.979303][T28382] FAULT_INJECTION: forcing a failure. [ 1437.979303][T28382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.979343][T28382] CPU: 1 UID: 0 PID: 28382 Comm: syz.0.9167 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1437.979370][T28382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1437.979383][T28382] Call Trace: [ 1437.979393][T28382] [ 1437.979403][T28382] dump_stack_lvl+0x189/0x250 [ 1437.979442][T28382] ? __pfx____ratelimit+0x10/0x10 [ 1437.979472][T28382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.979505][T28382] ? __pfx__printk+0x10/0x10 [ 1437.979548][T28382] should_fail_ex+0x46c/0x600 [ 1437.979585][T28382] _copy_to_user+0x31/0xb0 [ 1437.979613][T28382] sctp_getsockopt_context+0x1f6/0x2a0 [ 1437.979649][T28382] ? __pfx_sctp_getsockopt_context+0x10/0x10 [ 1437.979678][T28382] ? rt_spin_unlock+0x161/0x200 [ 1437.979703][T28382] ? lock_sock_nested+0x5f/0x130 [ 1437.979735][T28382] ? lock_sock_nested+0xdd/0x130 [ 1437.979770][T28382] sctp_getsockopt+0x4a0/0xb60 [ 1437.979800][T28382] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1437.979837][T28382] do_sock_getsockopt+0x372/0x450 [ 1437.979866][T28382] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1437.979891][T28382] ? do_syscall_64+0xa0/0xfa0 [ 1437.979919][T28382] ? __fget_files+0x2a/0x420 [ 1437.979956][T28382] ? __fget_files+0x3a6/0x420 [ 1437.979986][T28382] ? __fget_files+0x2a/0x420 [ 1437.980027][T28382] __x64_sys_getsockopt+0x1ab/0x250 [ 1437.980052][T28382] ? do_syscall_64+0xa0/0xfa0 [ 1437.980084][T28382] ? do_syscall_64+0xa0/0xfa0 [ 1437.980118][T28382] do_syscall_64+0xfa/0xfa0 [ 1437.980144][T28382] ? lockdep_hardirqs_on+0x9c/0x150 [ 1437.980174][T28382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.980197][T28382] ? clear_bhb_loop+0x60/0xb0 [ 1437.980224][T28382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.980253][T28382] RIP: 0033:0x7fd5fb7bf6c9 [ 1437.980274][T28382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.980295][T28382] RSP: 002b:00007fd5f9a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1437.980320][T28382] RAX: ffffffffffffffda RBX: 00007fd5fba15fa0 RCX: 00007fd5fb7bf6c9 [ 1437.980338][T28382] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 1437.980352][T28382] RBP: 00007fd5f9a1e090 R08: 00002000000003c0 R09: 0000000000000000 [ 1437.980368][T28382] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1437.980383][T28382] R13: 00007fd5fba16038 R14: 00007fd5fba15fa0 R15: 00007ffe18bc1118 [ 1437.980423][T28382] [ 1438.157098][T28384] 9pnet_fd: Insufficient options for proto=fd [ 1440.103569][T18606] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1440.256678][T18606] usb 10-1: Using ep0 maxpacket: 8 [ 1440.260976][T18606] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1440.261010][T18606] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.306953][T18606] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1440.306976][T18606] pvrusb2: ********** [ 1440.306984][T18606] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1440.306998][T18606] pvrusb2: Important functionality might not be entirely working. [ 1440.307009][T18606] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1440.307022][T18606] pvrusb2: ********** [ 1440.955164][ T5814] usb 10-1: USB disconnect, device number 20 [ 1440.956647][ T5814] pvrusb2: Device being rendered inoperable [ 1441.301864][T28412] FAULT_INJECTION: forcing a failure. [ 1441.301864][T28412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.301902][T28412] CPU: 0 UID: 0 PID: 28412 Comm: syz.0.9179 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1441.301928][T28412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1441.301943][T28412] Call Trace: [ 1441.301952][T28412] [ 1441.301963][T28412] dump_stack_lvl+0x189/0x250 [ 1441.302003][T28412] ? __pfx____ratelimit+0x10/0x10 [ 1441.302034][T28412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.302069][T28412] ? __pfx__printk+0x10/0x10 [ 1441.302116][T28412] should_fail_ex+0x46c/0x600 [ 1441.302163][T28412] _copy_to_user+0x31/0xb0 [ 1441.302192][T28412] simple_read_from_buffer+0xe1/0x170 [ 1441.302230][T28412] proc_fail_nth_read+0x1b6/0x220 [ 1441.302260][T28412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1441.302290][T28412] ? rw_verify_area+0x2ac/0x4e0 [ 1441.302317][T28412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1441.302344][T28412] vfs_read+0x206/0xa30 [ 1441.302384][T28412] ? __pfx_vfs_read+0x10/0x10 [ 1441.302407][T28412] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1441.302445][T28412] ? mutex_lock_nested+0x154/0x1d0 [ 1441.302478][T28412] ? fdget_pos+0x253/0x320 [ 1441.302522][T28412] ksys_read+0x14b/0x260 [ 1441.302553][T28412] ? __pfx_ksys_read+0x10/0x10 [ 1441.302587][T28412] ? do_syscall_64+0xbe/0xfa0 [ 1441.302629][T28412] do_syscall_64+0xfa/0xfa0 [ 1441.302658][T28412] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.302688][T28412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.302712][T28412] ? clear_bhb_loop+0x60/0xb0 [ 1441.302741][T28412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.302764][T28412] RIP: 0033:0x7fd5fb7be0dc [ 1441.302786][T28412] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1441.302807][T28412] RSP: 002b:00007fd5f9a1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1441.302833][T28412] RAX: ffffffffffffffda RBX: 00007fd5fba15fa0 RCX: 00007fd5fb7be0dc [ 1441.302850][T28412] RDX: 000000000000000f RSI: 00007fd5f9a1e0a0 RDI: 0000000000000004 [ 1441.302865][T28412] RBP: 00007fd5f9a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.302879][T28412] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1441.302894][T28412] R13: 00007fd5fba16038 R14: 00007fd5fba15fa0 R15: 00007ffe18bc1118 [ 1441.302935][T28412] [ 1441.800456][T28421] ptrace attach of "./syz-executor exec"[24353] was attempted by "./syz-executor exec"[28421] [ 1442.887211][T28434] erofs (device nbd4): cannot find valid erofs superblock [ 1442.907085][ T5814] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1443.799233][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 1443.801899][ T5814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.801927][ T5814] usb 9-1: config 0 has no interfaces? [ 1443.801962][ T5814] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1443.801989][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.855863][ T5814] usb 9-1: config 0 descriptor?? [ 1444.069897][T28451] tipc: Resetting bearer [ 1444.070355][T28451] tipc: Resetting bearer [ 1444.082671][ T5888] usb 9-1: USB disconnect, device number 23 [ 1444.090245][T28451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.100830][T28451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.190763][T28451] tipc: Resetting bearer [ 1444.225069][T28451] tipc: Resetting bearer [ 1444.243992][T17417] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1444.257179][T28451] tipc: Resetting bearer [ 1444.287648][T28451] tipc: Resetting bearer [ 1444.314768][T28451] tipc: Resetting bearer [ 1444.340352][T28451] tipc: Resetting bearer [ 1444.367119][T28451] tipc: Resetting bearer [ 1444.386920][T17417] usb 5-1: Using ep0 maxpacket: 16 [ 1444.391664][T17417] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1444.391703][T17417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1444.396257][T28451] tipc: Resetting bearer [ 1444.429143][T28451] tipc: Resetting bearer [ 1444.447002][T17417] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1444.447038][T17417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.447061][T17417] usb 5-1: Product: syz [ 1444.447078][T17417] usb 5-1: Manufacturer: syz [ 1444.447095][T17417] usb 5-1: SerialNumber: syz [ 1444.453550][T17417] usb 5-1: config 0 descriptor?? [ 1444.478201][T28451] tipc: Resetting bearer [ 1444.504973][T17417] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1444.505009][T17417] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1444.520279][T28451] tipc: Resetting bearer [ 1444.551307][T28451] tipc: Resetting bearer [ 1444.641292][T28451] tipc: Resetting bearer [ 1444.762383][T28451] tipc: Resetting bearer [ 1444.823352][T28451] tipc: Resetting bearer [ 1445.875236][T17417] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1445.876952][T17417] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1446.957138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.993072][T17417] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1446.993100][T17417] em28xx 5-1:0.0: No AC97 audio processor [ 1447.016936][T17417] usb 5-1: USB disconnect, device number 46 [ 1447.023942][T17417] em28xx 5-1:0.0: Disconnecting em28xx [ 1447.035545][T17417] em28xx 5-1:0.0: Freeing device [ 1447.225373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.617711][T28492] netlink: 'syz.9.9208': attribute type 1 has an invalid length. [ 1447.617739][T28492] __nla_validate_parse: 10 callbacks suppressed [ 1447.617754][T28492] netlink: 56 bytes leftover after parsing attributes in process `syz.9.9208'. [ 1448.112988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.825394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.018126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.159960][T28523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9220'. [ 1449.904260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.173381][T28532] 9pnet_fd: Insufficient options for proto=fd [ 1450.656306][T28534] netlink: 'syz.8.9224': attribute type 39 has an invalid length. [ 1450.903241][T18606] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1451.078843][T18606] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1451.078877][T18606] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1451.078898][T18606] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1451.078921][T18606] usb 9-1: config 1 has no interface number 1 [ 1451.078975][T18606] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1452.036645][T18606] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1452.036679][T18606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.036701][T18606] usb 9-1: Product: syz [ 1452.036716][T18606] usb 9-1: Manufacturer: syz [ 1452.036731][T18606] usb 9-1: SerialNumber: syz [ 1452.277606][T18606] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1452.277677][T18606] usb 9-1: MIDIStreaming interface descriptor not found [ 1452.381683][T18606] usb 9-1: USB disconnect, device number 24 [ 1453.265189][T18606] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1453.412956][T18606] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1453.412998][T18606] usb 9-1: config 179 has no interface number 0 [ 1453.413054][T18606] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1453.413085][T18606] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1453.413115][T18606] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1453.413144][T18606] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1453.413173][T18606] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1453.413222][T18606] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1453.413248][T18606] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.520242][T28554] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1453.520393][T28554] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1453.958169][T28573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.960695][T28573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.385924][T28579] 9pnet_fd: Insufficient options for proto=fd [ 1457.883272][ T980] usb 9-1: USB disconnect, device number 25 [ 1457.883285][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1457.883360][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1459.113586][T18606] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1459.275754][T18606] usb 9-1: Using ep0 maxpacket: 32 [ 1459.278495][T18606] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 1459.278527][T18606] usb 9-1: config 4 has no interface number 0 [ 1459.278583][T18606] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.278613][T18606] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.278658][T18606] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1459.278684][T18606] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.383926][T18606] hub 9-1:4.128: USB hub found [ 1459.573485][T18606] hub 9-1:4.128: 2 ports detected [ 1459.573554][T18606] hub 9-1:4.128: Using single TT (err -22) [ 1460.525426][T18606] hub 9-1:4.128: hub_hub_status failed (err = -71) [ 1460.525461][T18606] hub 9-1:4.128: config failed, can't get hub status (err -71) [ 1460.600809][T18606] usb 9-1: USB disconnect, device number 26 [ 1461.199458][T28637] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9259'. [ 1462.277092][T28653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9262'. [ 1462.461872][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.303551][T28667] 9pnet_fd: Insufficient options for proto=fd [ 1463.663173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1464.874053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.444142][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.481163][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.567415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.660680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.842911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.949544][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.200914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.586987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.935295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.966247][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966285][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966313][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966339][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966366][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966393][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966436][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966462][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966488][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1466.966514][ T5888] hid-generic 0008:0003:0006.003D: unknown main item tag 0x0 [ 1467.039647][ T5888] hid-generic 0008:0003:0006.003D: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1467.083153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.239558][T28704] comedi comedi0: dmm32at: I/O port conflict (0xfffffffffffffffa,16) [ 1467.364683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.558144][T28711] netlink: 'syz.8.9286': attribute type 10 has an invalid length. [ 1467.585457][T28711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.602105][T28711] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1467.643473][T28711] netlink: 'syz.8.9286': attribute type 10 has an invalid length. [ 1467.643499][T28711] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9286'. [ 1467.643537][T28711] batadv0: entered promiscuous mode [ 1467.643560][T28711] batadv0: entered allmulticast mode [ 1467.677923][T28711] bond0: (slave batadv0): Releasing backup interface [ 1467.722945][T28711] bridge0: port 3(batadv0) entered blocking state [ 1467.737259][T28711] bridge0: port 3(batadv0) entered disabled state [ 1467.978956][T25516] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1467.978981][T25516] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1468.603286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1468.968183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.242587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.064652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.120008][T28750] netlink: 'syz.3.9298': attribute type 10 has an invalid length. [ 1471.120036][T28750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1471.120098][T28750] team0: entered promiscuous mode [ 1471.120116][T28750] C: entered promiscuous mode [ 1471.120397][T28750] team_slave_1: entered promiscuous mode [ 1471.120668][T28750] team0: entered allmulticast mode [ 1471.120685][T28750] C: entered allmulticast mode [ 1471.120704][T28750] team_slave_1: entered allmulticast mode [ 1471.121712][T28750] bridge0: port 3(team0) entered blocking state [ 1471.121807][T28750] bridge0: port 3(team0) entered disabled state [ 1471.124762][T28750] bridge0: port 3(team0) entered blocking state [ 1471.125591][T28750] bridge0: port 3(team0) entered forwarding state [ 1471.826513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.046922][T28765] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9301'. [ 1476.411930][T28790] 9pnet_fd: Insufficient options for proto=fd [ 1476.852307][ T980] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1477.785594][T24984] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1479.292165][ T980] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1479.292199][ T980] usb 4-1: config 0 has no interface number 0 [ 1479.292257][ T980] usb 4-1: config 0 interface 117 has no altsetting 0 [ 1479.296457][ T980] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=e7.12 [ 1479.296496][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.296520][ T980] usb 4-1: Product: syz [ 1479.296536][ T980] usb 4-1: Manufacturer: syz [ 1479.296553][ T980] usb 4-1: SerialNumber: syz [ 1479.574996][ T980] usb 4-1: config 0 descriptor?? [ 1479.655213][ T980] usb 4-1: can't set config #0, error -71 [ 1479.676067][ T980] usb 4-1: USB disconnect, device number 26 [ 1479.860154][T28821] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9319'. [ 1480.163470][T28840] netlink: 204 bytes leftover after parsing attributes in process `syz.8.9326'. [ 1481.355894][T17417] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1481.501593][T17417] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1481.501628][T17417] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.531055][T17417] usb 9-1: config 0 descriptor?? [ 1481.547357][T17417] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1482.319394][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.321604][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.812509][T28950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9365'. [ 1485.525033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.585616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.714388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.762600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.842686][T17417] gspca_stv06xx: I2C: Read error writing address: -71 [ 1485.874593][T17417] usb 9-1: USB disconnect, device number 27 [ 1486.012025][T28962] 9pnet_fd: Insufficient options for proto=fd [ 1486.711825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.996757][T28977] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9374'. [ 1489.551187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1489.685293][T24984] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 1490.449810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1490.708035][T28999] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9380'. [ 1491.406373][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.406461][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.158497][T29024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9386'. [ 1494.744801][T29039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9395'. [ 1495.045540][T29045] FAULT_INJECTION: forcing a failure. [ 1495.045540][T29045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1495.045578][T29045] CPU: 0 UID: 0 PID: 29045 Comm: syz.9.9396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1495.045605][T29045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1495.045619][T29045] Call Trace: [ 1495.045628][T29045] [ 1495.045639][T29045] dump_stack_lvl+0x189/0x250 [ 1495.045680][T29045] ? __pfx____ratelimit+0x10/0x10 [ 1495.045710][T29045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1495.045745][T29045] ? __pfx__printk+0x10/0x10 [ 1495.045791][T29045] should_fail_ex+0x46c/0x600 [ 1495.045830][T29045] _copy_to_user+0x31/0xb0 [ 1495.045859][T29045] simple_read_from_buffer+0xe1/0x170 [ 1495.045896][T29045] proc_fail_nth_read+0x1b6/0x220 [ 1495.045925][T29045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1495.045954][T29045] ? rw_verify_area+0x2ac/0x4e0 [ 1495.045981][T29045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1495.046007][T29045] vfs_read+0x206/0xa30 [ 1495.046058][T29045] ? __pfx_vfs_read+0x10/0x10 [ 1495.046102][T29045] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1495.046139][T29045] ? mutex_lock_nested+0x154/0x1d0 [ 1495.046162][T29045] ? fdget_pos+0x253/0x320 [ 1495.046206][T29045] ksys_read+0x14b/0x260 [ 1495.046237][T29045] ? __pfx_ksys_read+0x10/0x10 [ 1495.046270][T29045] ? do_syscall_64+0xbe/0xfa0 [ 1495.046313][T29045] do_syscall_64+0xfa/0xfa0 [ 1495.046342][T29045] ? lockdep_hardirqs_on+0x9c/0x150 [ 1495.046371][T29045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.046394][T29045] ? clear_bhb_loop+0x60/0xb0 [ 1495.046423][T29045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.046446][T29045] RIP: 0033:0x7f4c408de0dc [ 1495.046467][T29045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1495.046488][T29045] RSP: 002b:00007f4c3eb46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1495.046514][T29045] RAX: ffffffffffffffda RBX: 00007f4c40b35fa0 RCX: 00007f4c408de0dc [ 1495.046531][T29045] RDX: 000000000000000f RSI: 00007f4c3eb460a0 RDI: 0000000000000006 [ 1495.046547][T29045] RBP: 00007f4c3eb46090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.046561][T29045] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1495.046576][T29045] R13: 00007f4c40b36038 R14: 00007f4c40b35fa0 R15: 00007fff2e07c438 [ 1495.046616][T29045] [ 1495.490958][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1495.496516][T29055] input: syz1 as /devices/virtual/input/input50 [ 1495.946084][ T980] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1496.103586][ T980] usb 10-1: Using ep0 maxpacket: 16 [ 1496.106137][T29068] FAULT_INJECTION: forcing a failure. [ 1496.106137][T29068] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.106174][T29068] CPU: 0 UID: 0 PID: 29068 Comm: syz.3.9408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1496.106203][T29068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1496.106218][T29068] Call Trace: [ 1496.106227][T29068] [ 1496.106237][T29068] dump_stack_lvl+0x189/0x250 [ 1496.106285][T29068] ? __pfx____ratelimit+0x10/0x10 [ 1496.106316][T29068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.106350][T29068] ? __pfx__printk+0x10/0x10 [ 1496.106386][T29068] ? __pfx___might_resched+0x10/0x10 [ 1496.106416][T29068] should_fail_ex+0x46c/0x600 [ 1496.106441][ T980] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1496.106454][T29068] should_failslab+0xa8/0x100 [ 1496.106476][ T980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1496.106491][T29068] __kmalloc_noprof+0xcc/0x7d0 [ 1496.106521][T29068] ? kfree+0x51/0x950 [ 1496.106541][T29068] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1496.106576][T29068] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1496.106606][T29068] ? tomoyo_domain+0xda/0x130 [ 1496.106639][T29068] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1496.106674][T29068] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1496.106712][T29068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1496.106751][T29068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1496.106782][T29068] ? lockdep_hardirqs_on+0x9c/0x150 [ 1496.106847][T29068] ? __fget_files+0x2a/0x420 [ 1496.106884][T29068] ? __fget_files+0x3a6/0x420 [ 1496.106914][T29068] ? __fget_files+0x2a/0x420 [ 1496.106949][T29068] security_file_ioctl+0xcb/0x2d0 [ 1496.106976][T29068] __se_sys_ioctl+0x47/0x170 [ 1496.107005][T29068] do_syscall_64+0xfa/0xfa0 [ 1496.107031][T29068] ? lockdep_hardirqs_on+0x9c/0x150 [ 1496.107060][T29068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.107083][T29068] ? clear_bhb_loop+0x60/0xb0 [ 1496.107111][T29068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.107133][T29068] RIP: 0033:0x7f57d353f6c9 [ 1496.107154][T29068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.107175][T29068] RSP: 002b:00007f57d179e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1496.107199][T29068] RAX: ffffffffffffffda RBX: 00007f57d3795fa0 RCX: 00007f57d353f6c9 [ 1496.107216][T29068] RDX: 0000200000000080 RSI: 0000000000004b52 RDI: 0000000000000006 [ 1496.107231][T29068] RBP: 00007f57d179e090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.107245][T29068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.107259][T29068] R13: 00007f57d3796038 R14: 00007f57d3795fa0 R15: 00007ffc4f10a0c8 [ 1496.107309][T29068] [ 1496.107328][T29068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1496.114011][ T980] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1496.114046][ T980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.114069][ T980] usb 10-1: Product: syz [ 1496.114084][ T980] usb 10-1: Manufacturer: syz [ 1496.114100][ T980] usb 10-1: SerialNumber: syz [ 1496.229381][ T980] usb 10-1: config 0 descriptor?? [ 1496.301980][T18606] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1496.434769][T18606] usb 9-1: device descriptor read/64, error -71 [ 1496.551502][ T980] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1496.551543][ T980] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1496.663666][T18606] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1496.797345][T18606] usb 9-1: device descriptor read/64, error -71 [ 1496.915425][T18606] usb usb9-port1: attempt power cycle [ 1496.936330][ T980] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1496.937255][ T980] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1497.244528][T18606] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1497.271524][T18606] usb 9-1: device descriptor read/8, error -71 [ 1497.502070][T18606] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1497.514355][ T980] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1497.515082][ T980] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1497.518253][ T980] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1497.522200][T18606] usb 9-1: device descriptor read/8, error -71 [ 1497.823952][T18606] usb usb9-port1: unable to enumerate USB device [ 1498.577833][T29090] 9pnet_fd: Insufficient options for proto=fd [ 1498.617314][ T980] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1498.617930][ T980] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1498.618407][ T980] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1498.623968][ T980] usb 10-1: USB disconnect, device number 21 [ 1499.260711][T29104] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1499.261118][T29104] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1499.261408][T29104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1500.583059][T29110] FAULT_INJECTION: forcing a failure. [ 1500.583059][T29110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.583097][T29110] CPU: 1 UID: 0 PID: 29110 Comm: syz.9.9426 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1500.583134][T29110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1500.583156][T29110] Call Trace: [ 1500.583165][T29110] [ 1500.583176][T29110] dump_stack_lvl+0x189/0x250 [ 1500.583215][T29110] ? __pfx____ratelimit+0x10/0x10 [ 1500.583244][T29110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1500.583278][T29110] ? __pfx__printk+0x10/0x10 [ 1500.583306][T29110] ? __might_fault+0xb0/0x130 [ 1500.583350][T29110] should_fail_ex+0x46c/0x600 [ 1500.583387][T29110] _copy_from_user+0x2d/0xb0 [ 1500.583412][T29110] get_itimerspec64+0xa1/0x2f0 [ 1500.583446][T29110] ? __pfx_get_itimerspec64+0x10/0x10 [ 1500.583474][T29110] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1500.583510][T29110] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1500.583543][T29110] __x64_sys_timer_settime+0x142/0x240 [ 1500.583577][T29110] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1500.583621][T29110] ? syscall_user_dispatch+0x4f/0x90 [ 1500.583661][T29110] do_syscall_64+0xfa/0xfa0 [ 1500.583689][T29110] ? lockdep_hardirqs_on+0x9c/0x150 [ 1500.583719][T29110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.583743][T29110] ? clear_bhb_loop+0x60/0xb0 [ 1500.583771][T29110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.583793][T29110] RIP: 0033:0x7f4c408df6c9 [ 1500.583814][T29110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1500.583834][T29110] RSP: 002b:00007f4c3eb46038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1500.583860][T29110] RAX: ffffffffffffffda RBX: 00007f4c40b35fa0 RCX: 00007f4c408df6c9 [ 1500.583878][T29110] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 1500.583893][T29110] RBP: 00007f4c3eb46090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.583908][T29110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.583922][T29110] R13: 00007f4c40b36038 R14: 00007f4c40b35fa0 R15: 00007fff2e07c438 [ 1500.583961][T29110] [ 1501.073803][ T980] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1501.250576][ T980] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1501.250611][ T980] usb 9-1: config 0 has no interface number 0 [ 1501.250675][ T980] usb 9-1: config 0 interface 117 has no altsetting 0 [ 1501.693454][T29120] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9428'. [ 1502.433519][ T980] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=e7.12 [ 1502.433554][ T980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.513357][ T980] usb 9-1: Product: syz [ 1502.513381][ T980] usb 9-1: Manufacturer: syz [ 1502.513399][ T980] usb 9-1: SerialNumber: syz [ 1502.547354][ T980] usb 9-1: config 0 descriptor?? [ 1502.559008][T29124] 9pnet_fd: Insufficient options for proto=fd [ 1502.851274][T29135] netlink: 'syz.4.9435': attribute type 10 has an invalid length. [ 1502.857091][T29135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.891406][ T980] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1502.932862][T29135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.932252][T29135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.932461][T29135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.939075][T29135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.939279][T29135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.972669][T29135] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1504.049449][ T5889] usb 9-1: USB disconnect, device number 32 [ 1504.131772][ T5888] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1504.408321][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 1504.413022][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1504.414649][ T5888] usb 5-1: config 6 has an invalid interface number: 4 but max is 0 [ 1504.414677][ T5888] usb 5-1: config 6 has no interface number 0 [ 1504.414714][ T5888] usb 5-1: config 6 interface 4 has no altsetting 0 [ 1504.452297][ T5888] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0296, bcdDevice=9e.58 [ 1504.452330][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.452353][ T5888] usb 5-1: Product: syz [ 1504.452370][ T5888] usb 5-1: Manufacturer: syz [ 1504.452387][ T5888] usb 5-1: SerialNumber: syz [ 1504.785911][ T5888] usb 5-1: USB disconnect, device number 47 [ 1505.027104][ T5889] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1505.150980][ T5889] usb 4-1: device descriptor read/64, error -71 [ 1505.408121][ T5889] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1505.629888][T29177] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9449'. [ 1505.751658][ T5889] usb 4-1: device descriptor read/64, error -71 [ 1505.900259][ T5889] usb usb4-port1: attempt power cycle [ 1506.418070][ T5889] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1506.438062][ T5889] usb 4-1: device descriptor read/8, error -71 [ 1506.812816][ T5889] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1506.828333][ T5889] usb 4-1: device descriptor read/8, error -71 [ 1506.886130][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9453'. [ 1506.933552][ T5889] usb usb4-port1: unable to enumerate USB device [ 1507.283781][T29207] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1507.437137][ T5889] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1507.582704][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1507.582741][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1507.582768][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 1507.582799][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1507.584758][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1507.584789][ T5889] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1507.584813][ T5889] usb 5-1: Manufacturer: syz [ 1507.672790][ T5889] usb 5-1: config 0 descriptor?? [ 1507.674733][T29203] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1507.698210][ T5889] smsusb:smsusb_probe: board id=9, interface number 0 [ 1507.713581][ T5889] smsusb:siano_media_device_register: media controller created [ 1507.737613][ T5889] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 1507.737633][ T5889] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 1507.737651][ T5889] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 1507.741781][ T5889] ------------[ cut here ]------------ [ 1507.741792][ T5889] WARNING: CPU: 1 PID: 5889 at mm/slub.c:6748 free_large_kmalloc+0x15c/0x1f0 [ 1507.741821][ T5889] Modules linked in: [ 1507.741893][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1507.741910][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1507.741919][ T5889] Workqueue: usb_hub_wq hub_event [ 1507.741937][ T5889] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 1507.741956][ T5889] Code: 44 89 f6 e8 06 bb fc ff 65 48 8b 05 0e dc 8c 0f 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 e9 db 8c 0f 48 3b 44 24 08 75 32 48 89 df 48 [ 1507.741968][ T5889] RSP: 0018:ffffc900050feae0 EFLAGS: 00010206 [ 1507.741979][ T5889] RAX: 00000000ff000000 RBX: ffffea0001e87880 RCX: 0000000000000000 [ 1507.741989][ T5889] RDX: ffffc90018000000 RSI: ffff88807a1e2000 RDI: ffffea0001e87880 [ 1507.741999][ T5889] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000000 [ 1507.742007][ T5889] R10: dffffc0000000000 R11: ffffed100ab79e01 R12: 1ffff110062c9a82 [ 1507.742017][ T5889] R13: 0000000000000000 R14: ffff888055bcf060 R15: dffffc0000000000 [ 1507.742026][ T5889] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 1507.742037][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1507.742047][ T5889] CR2: 00002000001f0030 CR3: 0000000050e72000 CR4: 00000000003526f0 [ 1507.742076][ T5889] Call Trace: [ 1507.742085][ T5889] [ 1507.742101][ T5889] usb_free_urb+0xd0/0x120 [ 1507.742135][ T5889] smsusb_term_device+0x1d6/0x3b0 [ 1507.742173][ T5889] smsusb_probe+0x1a04/0x2060 [ 1507.742219][ T5889] ? __pfx_smsusb_probe+0x10/0x10 [ 1507.742253][ T5889] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1507.742288][ T5889] ? rt_spin_unlock+0x150/0x200 [ 1507.742381][ T5889] ? __pm_runtime_set_status+0x743/0xa20 [ 1507.742424][ T5889] usb_probe_interface+0x668/0xc30 [ 1507.742464][ T5889] ? __pfx_usb_probe_interface+0x10/0x10 [ 1507.742483][ T5889] really_probe+0x26d/0x9e0 [ 1507.742507][ T5889] __driver_probe_device+0x18c/0x2f0 [ 1507.742527][ T5889] driver_probe_device+0x4f/0x430 [ 1507.742548][ T5889] __device_attach_driver+0x2ce/0x530 [ 1507.742569][ T5889] bus_for_each_drv+0x254/0x2e0 [ 1507.742584][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.742603][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.742617][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.742636][ T5889] __device_attach+0x2bb/0x400 [ 1507.742656][ T5889] ? __pfx___device_attach+0x10/0x10 [ 1507.742675][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.742691][ T5889] bus_probe_device+0x188/0x260 [ 1507.742708][ T5889] device_add+0x7b6/0xb50 [ 1507.742727][ T5889] usb_set_configuration+0x1a87/0x20e0 [ 1507.742760][ T5889] usb_generic_driver_probe+0x8d/0x150 [ 1507.742776][ T5889] usb_probe_device+0x1c4/0x390 [ 1507.742794][ T5889] ? __pfx_usb_probe_device+0x10/0x10 [ 1507.742808][ T5889] really_probe+0x26d/0x9e0 [ 1507.742831][ T5889] __driver_probe_device+0x18c/0x2f0 [ 1507.742851][ T5889] driver_probe_device+0x4f/0x430 [ 1507.742871][ T5889] __device_attach_driver+0x2ce/0x530 [ 1507.742892][ T5889] bus_for_each_drv+0x254/0x2e0 [ 1507.742907][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.742925][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.742940][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.742958][ T5889] __device_attach+0x2bb/0x400 [ 1507.742978][ T5889] ? __pfx___device_attach+0x10/0x10 [ 1507.742999][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.743015][ T5889] bus_probe_device+0x188/0x260 [ 1507.743031][ T5889] device_add+0x7b6/0xb50 [ 1507.743050][ T5889] usb_new_device+0xa29/0x16e0 [ 1507.743080][ T5889] ? __pfx_usb_new_device+0x10/0x10 [ 1507.743106][ T5889] hub_event+0x2958/0x4a20 [ 1507.743152][ T5889] ? __pfx_hub_event+0x10/0x10 [ 1507.743167][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.743187][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.743204][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.743218][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.743235][ T5889] process_scheduled_works+0xae1/0x17b0 [ 1507.743268][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 1507.743295][ T5889] worker_thread+0x8a0/0xda0 [ 1507.743327][ T5889] ? __kthread_parkme+0x7b/0x200 [ 1507.743350][ T5889] kthread+0x711/0x8a0 [ 1507.743371][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1507.743387][ T5889] ? __pfx_kthread+0x10/0x10 [ 1507.743403][ T5889] ? rt_spin_unlock+0x150/0x200 [ 1507.743420][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.743432][ T5889] ? __pfx_kthread+0x10/0x10 [ 1507.743462][ T5889] ret_from_fork+0x4bc/0x870 [ 1507.743493][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 1507.743529][ T5889] ? __switch_to_asm+0x39/0x70 [ 1507.743552][ T5889] ? __switch_to_asm+0x33/0x70 [ 1507.743574][ T5889] ? __pfx_kthread+0x10/0x10 [ 1507.743597][ T5889] ret_from_fork_asm+0x1a/0x30 [ 1507.743622][ T5889] [ 1507.743629][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1507.743642][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1507.743658][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1507.743667][ T5889] Workqueue: usb_hub_wq hub_event [ 1507.743681][ T5889] Call Trace: [ 1507.743687][ T5889] [ 1507.743693][ T5889] dump_stack_lvl+0x99/0x250 [ 1507.743714][ T5889] ? __asan_memcpy+0x40/0x70 [ 1507.743730][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1507.743749][ T5889] ? __pfx__printk+0x10/0x10 [ 1507.743773][ T5889] vpanic+0x237/0x6d0 [ 1507.743786][ T5889] ? __pfx_vpanic+0x10/0x10 [ 1507.743806][ T5889] panic+0xb9/0xc0 [ 1507.743818][ T5889] ? __pfx_panic+0x10/0x10 [ 1507.743841][ T5889] __warn+0x31b/0x4b0 [ 1507.743853][ T5889] ? free_large_kmalloc+0x15c/0x1f0 [ 1507.743872][ T5889] ? free_large_kmalloc+0x15c/0x1f0 [ 1507.743890][ T5889] report_bug+0x2be/0x4f0 [ 1507.743908][ T5889] ? free_large_kmalloc+0x15c/0x1f0 [ 1507.743926][ T5889] ? free_large_kmalloc+0x15c/0x1f0 [ 1507.743943][ T5889] ? free_large_kmalloc+0x15e/0x1f0 [ 1507.743961][ T5889] handle_bug+0x84/0x160 [ 1507.743980][ T5889] exc_invalid_op+0x1a/0x50 [ 1507.743999][ T5889] asm_exc_invalid_op+0x1a/0x20 [ 1507.744012][ T5889] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 1507.744030][ T5889] Code: 44 89 f6 e8 06 bb fc ff 65 48 8b 05 0e dc 8c 0f 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 e9 db 8c 0f 48 3b 44 24 08 75 32 48 89 df 48 [ 1507.744042][ T5889] RSP: 0018:ffffc900050feae0 EFLAGS: 00010206 [ 1507.744053][ T5889] RAX: 00000000ff000000 RBX: ffffea0001e87880 RCX: 0000000000000000 [ 1507.744062][ T5889] RDX: ffffc90018000000 RSI: ffff88807a1e2000 RDI: ffffea0001e87880 [ 1507.744076][ T5889] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000000 [ 1507.744084][ T5889] R10: dffffc0000000000 R11: ffffed100ab79e01 R12: 1ffff110062c9a82 [ 1507.744094][ T5889] R13: 0000000000000000 R14: ffff888055bcf060 R15: dffffc0000000000 [ 1507.744117][ T5889] usb_free_urb+0xd0/0x120 [ 1507.744137][ T5889] smsusb_term_device+0x1d6/0x3b0 [ 1507.744159][ T5889] smsusb_probe+0x1a04/0x2060 [ 1507.744193][ T5889] ? __pfx_smsusb_probe+0x10/0x10 [ 1507.744212][ T5889] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1507.744233][ T5889] ? rt_spin_unlock+0x150/0x200 [ 1507.744253][ T5889] ? __pm_runtime_set_status+0x743/0xa20 [ 1507.744283][ T5889] usb_probe_interface+0x668/0xc30 [ 1507.744306][ T5889] ? __pfx_usb_probe_interface+0x10/0x10 [ 1507.744328][ T5889] really_probe+0x26d/0x9e0 [ 1507.744355][ T5889] __driver_probe_device+0x18c/0x2f0 [ 1507.744375][ T5889] driver_probe_device+0x4f/0x430 [ 1507.744397][ T5889] __device_attach_driver+0x2ce/0x530 [ 1507.744418][ T5889] bus_for_each_drv+0x254/0x2e0 [ 1507.744433][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.744451][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.744466][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.744485][ T5889] __device_attach+0x2bb/0x400 [ 1507.744505][ T5889] ? __pfx___device_attach+0x10/0x10 [ 1507.744525][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.744541][ T5889] bus_probe_device+0x188/0x260 [ 1507.744558][ T5889] device_add+0x7b6/0xb50 [ 1507.744577][ T5889] usb_set_configuration+0x1a87/0x20e0 [ 1507.744618][ T5889] usb_generic_driver_probe+0x8d/0x150 [ 1507.744675][ T5889] usb_probe_device+0x1c4/0x390 [ 1507.744709][ T5889] ? __pfx_usb_probe_device+0x10/0x10 [ 1507.744732][ T5889] really_probe+0x26d/0x9e0 [ 1507.744765][ T5889] __driver_probe_device+0x18c/0x2f0 [ 1507.744785][ T5889] driver_probe_device+0x4f/0x430 [ 1507.744810][ T5889] __device_attach_driver+0x2ce/0x530 [ 1507.744831][ T5889] bus_for_each_drv+0x254/0x2e0 [ 1507.744846][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.744864][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.744879][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.744897][ T5889] __device_attach+0x2bb/0x400 [ 1507.744916][ T5889] ? __pfx___device_attach+0x10/0x10 [ 1507.744937][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.744953][ T5889] bus_probe_device+0x188/0x260 [ 1507.744969][ T5889] device_add+0x7b6/0xb50 [ 1507.744988][ T5889] usb_new_device+0xa29/0x16e0 [ 1507.745015][ T5889] ? __pfx_usb_new_device+0x10/0x10 [ 1507.745046][ T5889] hub_event+0x2958/0x4a20 [ 1507.745094][ T5889] ? __pfx_hub_event+0x10/0x10 [ 1507.745108][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.745128][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.745145][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.745159][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.745176][ T5889] process_scheduled_works+0xae1/0x17b0 [ 1507.745208][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 1507.745235][ T5889] worker_thread+0x8a0/0xda0 [ 1507.745270][ T5889] ? __kthread_parkme+0x7b/0x200 [ 1507.745294][ T5889] kthread+0x711/0x8a0 [ 1507.745322][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1507.745339][ T5889] ? __pfx_kthread+0x10/0x10 [ 1507.745356][ T5889] ? rt_spin_unlock+0x150/0x200 [ 1507.745373][ T5889] ? rt_spin_unlock+0x161/0x200 [ 1507.745386][ T5889] ? __pfx_kthread+0x10/0x10 [ 1507.745406][ T5889] ret_from_fork+0x4bc/0x870 [ 1507.745425][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 1507.745445][ T5889] ? __switch_to_asm+0x39/0x70 [ 1507.745458][ T5889] ? __switch_to_asm+0x33/0x70 [ 1507.745470][ T5889] ? __pfx_kthread+0x10/0x10 [ 1507.745493][ T5889] ret_from_fork_asm+0x1a/0x30 [ 1507.745517][ T5889] [ 1507.745911][ T5889] Kernel Offset: disabled